Urgency Spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 26 Aug 2022 18:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oRk9i-000NTr-5F
for dave@doctor.nl2k.ab.ca;
Fri, 26 Aug 2022 18:58:34 -0600
Resent-From: The Doctor
Resent-Date: Fri, 26 Aug 2022 18:58:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-tyzapc01hn2225.outbound.protection.outlook.com ([52.100.223.225]:26254 helo=APC01-TYZ-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oRjGH-000IVj-Py
for root@doctor.nl2k.ab.ca;
Fri, 26 Aug 2022 18:01:23 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=lopZBzwPElu2ZIP5p9Bii/IucbJPo/tV5iEuZzFHdUd3pIUoXTfowYQlGSjUk4+mvQa5wE5Zf2g04JBehtzrqNpCgWPPtFZazmzZPdaBStxJUNNtznq4c6rCJRKZXB2b/ailkEK4jEgzu/W0CsrLu5D3cm8sMDvjogv+mety2rrySsGne79n81oFYmcC+8J+sh2qWCE7pB5xZSBlTtlQoot6VcSQk6wcm9mcD2K2UhctxJy6AAfXWuRlsUYW0hPIq5P+3IblGLkgqvdoEpvDxbTj9UH9RmiTejiZIqn+hSnfj1BWdqRMsdVZrlQpM/QFHWdtAR+SpDqK+B8XqMmz+g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=8/EKDgDFlelzveFN4ZSvpNtzC3KZ4k5UxzwLD1haQU8=;
b=XvcMyNjOzyEKk8dGHdhs1zeTN0VkPLEqYZHd2VMhQprZWH6I+7R6Be8IMWoBrQQA6vrjurMY10g3RFUY/P0IMc9wPQYCtyouxjPDWZ4c8lV+/BHbjau7fOl1KUlK1c6F3wDC5qk+8vOZbiuisTw8+fsIIuFCnFf+9ozQOxAkHyqw4/SvVZjxLintLPCZGFXaOa+S5inrg6pWMDESFc5AUwJecswnjbufmB9DqXY9wmwTTY670w0KF3Dy337Ojo8XWJT3dd6S2WTULIISMH+JG34uAGoeWed3FA+p29hTYvLwTqxxM3kfn3+lJ2sq1sD30R/gmKKDJ0ZWn6T3SIypCQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
185.222.58.60) smtp.rcpttodomain=cpart.kz smtp.mailfrom=t4.cims.jp;
dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message
not signed); arc=none (0)
Received: from SGAP274CA0016.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b6::28) by
SG2PR04MB5429.apcprd04.prod.outlook.com (2603:1096:4:172::8) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5525.10; Sat, 27 Aug 2022 00:00:48 +0000
Received: from SG2APC01FT0031.eop-APC01.prod.protection.outlook.com
(2603:1096:4:b6:cafe::e1) by SGAP274CA0016.outlook.office365.com
(2603:1096:4:b6::28) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend
Transport; Sat, 27 Aug 2022 00:00:48 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 185.222.58.60)
smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;
Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates
185.222.58.60 as permitted sender) receiver=protection.outlook.com;
client-ip=185.222.58.60; helo=User; pr=M
Received: from mail.prasarana.com.my (58.26.8.159) by
SG2APC01FT0031.mail.protection.outlook.com (10.13.36.89) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.20.5566.15 via Frontend Transport; Sat, 27 Aug 2022 00:00:48 +0000
Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by
MRL-EXH-02.prasarana.com.my (10.128.66.101) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.2176.14; Sat, 27 Aug 2022 08:00:33 +0800
Received: from User (185.222.58.60) by MRL-EXH-02.prasarana.com.my
(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend
Transport; Sat, 27 Aug 2022 08:00:23 +0800
Reply-To:
From: "Mrs. Ann Zainab Abdullah"
Subject: Re: Did You Receive My last Email?
Date: Sat, 27 Aug 2022 02:00:33 +0200
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <655ffa6f-c65b-4aa1-84e0-3678a3a8aa3e@MRL-EXH-02.prasarana.com.my>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-Exchange-SkipListedInternetSender: ip=[185.222.58.60];domain=User
X-MS-Exchange-ExternalOriginalInternetSender: ip=[185.222.58.60];domain=User
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: e159c72a-67cc-41c6-87b4-08da87bf3278
X-MS-TrafficTypeDiagnostic: SG2PR04MB5429:EE_
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?2AoYbKIN9rN0MwmKq8rhynvjKeWQH1pHqLDuioOkFJywsBZ1l7QPSns2?=
=?windows-1251?Q?lj8NumZqwxEU5Q0kWSeT2uWekyLWqjDhMc0onnIZs/f255cRuOpX97M9?=
=?windows-1251?Q?MzlOjYIS7h3CZ42CC5F+/2+etRX1q5Yp1Pz8Mkm4IinG0L4lHChhCEhr?=
=?windows-1251?Q?bTaS2saQ1e1u7IhcxC6Ity1aICJdrDMEKjU5+ig9jYPVlg6tqYRf0S0q?=
=?windows-1251?Q?w9yADQuGM2DYyiyNdrBsVLPhGS0p3ESGkyH4aJ+WThZFnQGIXJWzAJXN?=
=?windows-1251?Q?7JIpnf56x5U0EWu6ZR1gvKKvNdsNZqDRvj9eUwBqBF5odqfIx1nte0cQ?=
=?windows-1251?Q?Lr369x43CESJw4mCC54IMa+Mgz8A0FT5eUmbBnKT6okbJdRdkC2ZJha6?=
=?windows-1251?Q?2gvewAPRRV69PKfRfe3oYqIOUsCF9KLoLO+xa7CJFDzJeAIQGM55VF/w?=
=?windows-1251?Q?oB5uuk/auxQJJj5jzmivMDW20meBrbnsqs+e6a7tM5fsHBDrAyMR0Q9m?=
=?windows-1251?Q?tAknM9dym8WAVNa2+bPrAvndxRZSwbYm2ZFWvEJp0kzKOHd4BW4rB7Al?=
=?windows-1251?Q?pYD2D14yoNxI4Ov+artjRfgfgotNEcQunFvkH0O9nztPEHOTwOK3anJB?=
=?windows-1251?Q?JGDxygNIfoDqHmhnbwemzuRzpmZhjZl4qAJEWKpgtYPCWjLs+1n8czHP?=
=?windows-1251?Q?GiwwGF1tFfxgf0zoA9nwPhzzT3b6OsNtAPkhTyITDY4e02sWBZTic9vl?=
=?windows-1251?Q?bEhbgMuxv7A+5c88dfX3R0+XziqNaB5kFCLL2A4YRESkHunrawpZvgtm?=
=?windows-1251?Q?vhctbCtyzqrgj82j3jUhuBzXDEXAt8jL7Zr0u7ENPCzidsu+RDLyyR41?=
=?windows-1251?Q?d3HEmitIR1F97elXPRbG5mKxQkR5KJYCs+bpVMqV1Lzo+MT64sBIjOj5?=
=?windows-1251?Q?0XzPMSb32WolkvM6ioceN4q2JQnZ7iEKWI2s48oZx3lWk8BKqQLf+/Wc?=
=?windows-1251?Q?DEvAdGMSYp8tVpkSL9g/tlBbJV3AAUKKI/oAy2s5aJF70FwBjCrdSL8Q?=
=?windows-1251?Q?IYVX3Hsh61fryKgn7sYqwoiqp46E61U/X81y4JEflisIzoQxLxKeHSbV?=
=?windows-1251?Q?YBrLtingwoPZDEzhwma/cQNcWlzUGj1XLCluveqa0PRS1Z5k8/wo1TGA?=
=?windows-1251?Q?ML45ioTL0HUQkOpMgp7AhLFZIjUUo0c6s0yLX/mA/O90CE708hhot1fy?=
=?windows-1251?Q?sKquhyFHiP9yoIxYejIbOyMmxR7JfQ1Z2OSOLK0q/yNCvDXxjbv4PiAU?=
=?windows-1251?Q?KqDho8IgR14VikjGtg3UouTW/Wc54q3wVNUePPDjB2V8KWezH010kowD?=
=?windows-1251?Q?62vcBsK0hlkYW5YUnjnFXQOKVNr+AB6EpDDwRiuFok8yeB/7p4l5PfDY?=
=?windows-1251?Q?7dd495qw6zm4tvrGKIrxcufll9oAKxcu2Q7a25JGlEfNNR/yF6BD06cg?=
=?windows-1251?Q?nElLbyArn0tl1m/SU3ceU0vVCMKPr5vwTDdenZSTLnjXXYmi/7hH96XI?=
=?windows-1251?Q?UF8OOBtp0jcFsheUOL7pbI8U/sHX2xB1Kv8jNQbL7ZxRzLkMJd5xuVxD?=
=?windows-1251?Q?NlrdZindHSMj/lnm/ZXcwBEoUp54Pkbody0Ucmwd+n2LR39gs/4KxI+g?=
=?windows-1251?Q?pti1Z+wWoUkK58S++yukNp89xuCQRM90Oe6m9MMYyNKdyXhZ2LWUNAv4?=
=?windows-1251?Q?skvCPnWpTRH2eCeF7KLTfX9clptSeIouaO3U7MqDmWNke7xHzm3RE/Ki?=
=?windows-1251?Q?rWgkcA=3D=3D?=
X-Forefront-Antispam-Report:
CIP:58.26.8.159;CTRY:NL;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:modularisation.naturescar.com;CAT:OSPM;SFS:(13230016)(39860400002)(376002)(396003)(136003)(346002)(46966006)(40470700004)(31696002)(109986005)(86362001)(70206006)(8936002)(70586007)(156005)(32850700003)(36906005)(82740400003)(2906002)(40460700003)(316002)(7416002)(7406005)(956004)(8676002)(41300700001)(336012)(47076005)(5660300002)(83380400001)(9686003)(81166007)(35950700001)(26005)(82310400005)(40480700001)(6666004)(558084003)(498600001)(31686004)(2700400008);DIR:OUT;SFP:1501;
X-OriginatorOrg: myprasarana.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Aug 2022 00:00:48.0672
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e159c72a-67cc-41c6-87b4-08da87bf3278
X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.159];Helo=[mail.prasarana.com.my]
X-MS-Exchange-CrossTenant-AuthSource:
SG2APC01FT0031.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR04MB5429
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I look forward to your response and cooperation toward this
great charity work. Truly Yours, Mrs. Ann Zainab
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.223.225 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 HK_NAME_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FAKE_REPLY_C No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 XPRIO Has X-Priority header
Subject: {SPAM?} Re: Did You Receive My last Email?
I look forward to your response and cooperation toward this great charity work.
Truly Yours,
Mrs. Ann Zainab
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 26 Aug 2022 18:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oRk9i-000NTr-5F
for dave@doctor.nl2k.ab.ca;
Fri, 26 Aug 2022 18:58:34 -0600
Resent-From: The Doctor
Resent-Date: Fri, 26 Aug 2022 18:58:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-tyzapc01hn2225.outbound.protection.outlook.com ([52.100.223.225]:26254 helo=APC01-TYZ-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oRjGH-000IVj-Py
for root@doctor.nl2k.ab.ca;
Fri, 26 Aug 2022 18:01:23 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=lopZBzwPElu2ZIP5p9Bii/IucbJPo/tV5iEuZzFHdUd3pIUoXTfowYQlGSjUk4+mvQa5wE5Zf2g04JBehtzrqNpCgWPPtFZazmzZPdaBStxJUNNtznq4c6rCJRKZXB2b/ailkEK4jEgzu/W0CsrLu5D3cm8sMDvjogv+mety2rrySsGne79n81oFYmcC+8J+sh2qWCE7pB5xZSBlTtlQoot6VcSQk6wcm9mcD2K2UhctxJy6AAfXWuRlsUYW0hPIq5P+3IblGLkgqvdoEpvDxbTj9UH9RmiTejiZIqn+hSnfj1BWdqRMsdVZrlQpM/QFHWdtAR+SpDqK+B8XqMmz+g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=8/EKDgDFlelzveFN4ZSvpNtzC3KZ4k5UxzwLD1haQU8=;
b=XvcMyNjOzyEKk8dGHdhs1zeTN0VkPLEqYZHd2VMhQprZWH6I+7R6Be8IMWoBrQQA6vrjurMY10g3RFUY/P0IMc9wPQYCtyouxjPDWZ4c8lV+/BHbjau7fOl1KUlK1c6F3wDC5qk+8vOZbiuisTw8+fsIIuFCnFf+9ozQOxAkHyqw4/SvVZjxLintLPCZGFXaOa+S5inrg6pWMDESFc5AUwJecswnjbufmB9DqXY9wmwTTY670w0KF3Dy337Ojo8XWJT3dd6S2WTULIISMH+JG34uAGoeWed3FA+p29hTYvLwTqxxM3kfn3+lJ2sq1sD30R/gmKKDJ0ZWn6T3SIypCQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
185.222.58.60) smtp.rcpttodomain=cpart.kz smtp.mailfrom=t4.cims.jp;
dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message
not signed); arc=none (0)
Received: from SGAP274CA0016.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b6::28) by
SG2PR04MB5429.apcprd04.prod.outlook.com (2603:1096:4:172::8) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5525.10; Sat, 27 Aug 2022 00:00:48 +0000
Received: from SG2APC01FT0031.eop-APC01.prod.protection.outlook.com
(2603:1096:4:b6:cafe::e1) by SGAP274CA0016.outlook.office365.com
(2603:1096:4:b6::28) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend
Transport; Sat, 27 Aug 2022 00:00:48 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 185.222.58.60)
smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;
Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates
185.222.58.60 as permitted sender) receiver=protection.outlook.com;
client-ip=185.222.58.60; helo=User; pr=M
Received: from mail.prasarana.com.my (58.26.8.159) by
SG2APC01FT0031.mail.protection.outlook.com (10.13.36.89) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.20.5566.15 via Frontend Transport; Sat, 27 Aug 2022 00:00:48 +0000
Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by
MRL-EXH-02.prasarana.com.my (10.128.66.101) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.2176.14; Sat, 27 Aug 2022 08:00:33 +0800
Received: from User (185.222.58.60) by MRL-EXH-02.prasarana.com.my
(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend
Transport; Sat, 27 Aug 2022 08:00:23 +0800
Reply-To:
From: "Mrs. Ann Zainab Abdullah"
Subject: Re: Did You Receive My last Email?
Date: Sat, 27 Aug 2022 02:00:33 +0200
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <655ffa6f-c65b-4aa1-84e0-3678a3a8aa3e@MRL-EXH-02.prasarana.com.my>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-Exchange-SkipListedInternetSender: ip=[185.222.58.60];domain=User
X-MS-Exchange-ExternalOriginalInternetSender: ip=[185.222.58.60];domain=User
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: e159c72a-67cc-41c6-87b4-08da87bf3278
X-MS-TrafficTypeDiagnostic: SG2PR04MB5429:EE_
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?2AoYbKIN9rN0MwmKq8rhynvjKeWQH1pHqLDuioOkFJywsBZ1l7QPSns2?=
=?windows-1251?Q?lj8NumZqwxEU5Q0kWSeT2uWekyLWqjDhMc0onnIZs/f255cRuOpX97M9?=
=?windows-1251?Q?MzlOjYIS7h3CZ42CC5F+/2+etRX1q5Yp1Pz8Mkm4IinG0L4lHChhCEhr?=
=?windows-1251?Q?bTaS2saQ1e1u7IhcxC6Ity1aICJdrDMEKjU5+ig9jYPVlg6tqYRf0S0q?=
=?windows-1251?Q?w9yADQuGM2DYyiyNdrBsVLPhGS0p3ESGkyH4aJ+WThZFnQGIXJWzAJXN?=
=?windows-1251?Q?7JIpnf56x5U0EWu6ZR1gvKKvNdsNZqDRvj9eUwBqBF5odqfIx1nte0cQ?=
=?windows-1251?Q?Lr369x43CESJw4mCC54IMa+Mgz8A0FT5eUmbBnKT6okbJdRdkC2ZJha6?=
=?windows-1251?Q?2gvewAPRRV69PKfRfe3oYqIOUsCF9KLoLO+xa7CJFDzJeAIQGM55VF/w?=
=?windows-1251?Q?oB5uuk/auxQJJj5jzmivMDW20meBrbnsqs+e6a7tM5fsHBDrAyMR0Q9m?=
=?windows-1251?Q?tAknM9dym8WAVNa2+bPrAvndxRZSwbYm2ZFWvEJp0kzKOHd4BW4rB7Al?=
=?windows-1251?Q?pYD2D14yoNxI4Ov+artjRfgfgotNEcQunFvkH0O9nztPEHOTwOK3anJB?=
=?windows-1251?Q?JGDxygNIfoDqHmhnbwemzuRzpmZhjZl4qAJEWKpgtYPCWjLs+1n8czHP?=
=?windows-1251?Q?GiwwGF1tFfxgf0zoA9nwPhzzT3b6OsNtAPkhTyITDY4e02sWBZTic9vl?=
=?windows-1251?Q?bEhbgMuxv7A+5c88dfX3R0+XziqNaB5kFCLL2A4YRESkHunrawpZvgtm?=
=?windows-1251?Q?vhctbCtyzqrgj82j3jUhuBzXDEXAt8jL7Zr0u7ENPCzidsu+RDLyyR41?=
=?windows-1251?Q?d3HEmitIR1F97elXPRbG5mKxQkR5KJYCs+bpVMqV1Lzo+MT64sBIjOj5?=
=?windows-1251?Q?0XzPMSb32WolkvM6ioceN4q2JQnZ7iEKWI2s48oZx3lWk8BKqQLf+/Wc?=
=?windows-1251?Q?DEvAdGMSYp8tVpkSL9g/tlBbJV3AAUKKI/oAy2s5aJF70FwBjCrdSL8Q?=
=?windows-1251?Q?IYVX3Hsh61fryKgn7sYqwoiqp46E61U/X81y4JEflisIzoQxLxKeHSbV?=
=?windows-1251?Q?YBrLtingwoPZDEzhwma/cQNcWlzUGj1XLCluveqa0PRS1Z5k8/wo1TGA?=
=?windows-1251?Q?ML45ioTL0HUQkOpMgp7AhLFZIjUUo0c6s0yLX/mA/O90CE708hhot1fy?=
=?windows-1251?Q?sKquhyFHiP9yoIxYejIbOyMmxR7JfQ1Z2OSOLK0q/yNCvDXxjbv4PiAU?=
=?windows-1251?Q?KqDho8IgR14VikjGtg3UouTW/Wc54q3wVNUePPDjB2V8KWezH010kowD?=
=?windows-1251?Q?62vcBsK0hlkYW5YUnjnFXQOKVNr+AB6EpDDwRiuFok8yeB/7p4l5PfDY?=
=?windows-1251?Q?7dd495qw6zm4tvrGKIrxcufll9oAKxcu2Q7a25JGlEfNNR/yF6BD06cg?=
=?windows-1251?Q?nElLbyArn0tl1m/SU3ceU0vVCMKPr5vwTDdenZSTLnjXXYmi/7hH96XI?=
=?windows-1251?Q?UF8OOBtp0jcFsheUOL7pbI8U/sHX2xB1Kv8jNQbL7ZxRzLkMJd5xuVxD?=
=?windows-1251?Q?NlrdZindHSMj/lnm/ZXcwBEoUp54Pkbody0Ucmwd+n2LR39gs/4KxI+g?=
=?windows-1251?Q?pti1Z+wWoUkK58S++yukNp89xuCQRM90Oe6m9MMYyNKdyXhZ2LWUNAv4?=
=?windows-1251?Q?skvCPnWpTRH2eCeF7KLTfX9clptSeIouaO3U7MqDmWNke7xHzm3RE/Ki?=
=?windows-1251?Q?rWgkcA=3D=3D?=
X-Forefront-Antispam-Report:
CIP:58.26.8.159;CTRY:NL;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:modularisation.naturescar.com;CAT:OSPM;SFS:(13230016)(39860400002)(376002)(396003)(136003)(346002)(46966006)(40470700004)(31696002)(109986005)(86362001)(70206006)(8936002)(70586007)(156005)(32850700003)(36906005)(82740400003)(2906002)(40460700003)(316002)(7416002)(7406005)(956004)(8676002)(41300700001)(336012)(47076005)(5660300002)(83380400001)(9686003)(81166007)(35950700001)(26005)(82310400005)(40480700001)(6666004)(558084003)(498600001)(31686004)(2700400008);DIR:OUT;SFP:1501;
X-OriginatorOrg: myprasarana.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Aug 2022 00:00:48.0672
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e159c72a-67cc-41c6-87b4-08da87bf3278
X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.159];Helo=[mail.prasarana.com.my]
X-MS-Exchange-CrossTenant-AuthSource:
SG2APC01FT0031.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR04MB5429
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I look forward to your response and cooperation toward this
great charity work. Truly Yours, Mrs. Ann Zainab
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.223.225 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 HK_NAME_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FAKE_REPLY_C No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 XPRIO Has X-Priority header
Subject: {SPAM?} Re: Did You Receive My last Email?
I look forward to your response and cooperation toward this great charity work.
Truly Yours,
Mrs. Ann Zainab
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments