Air Line loyalty spam from Yahoo!
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Dec 2022 05:53:00 -0700
Received: from sonic318-22.consmr.mail.ne1.yahoo.com ([66.163.186.84]:45693)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1p0j3B-000CYG-HE
for dave@doctor.nl2k.ab.ca;
Thu, 01 Dec 2022 05:52:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1669898990; bh=IdeCev6uTANEHOF626rbASBTjmYWHMAJKVp1o9spB/8=; h=Date:From:Reply-To:Subject:References:From:Subject:Reply-To; b=XXcmfxWjnBqUd56IgWP08+aL7Eshn8LTLieYfLsbOn41RXSOrBDzcoIrYVWPQ6crfHRkTBl4F8IGIo5iJFzbdXn0F4cWHilZd0dZ4V0KDF5rLJqCpfloM7Iemoia83iZIdo/03uFIDufkv2sgLf+00TFc5AGZldx7IyE40M8l6MeJkmYlc3ro17fINcPP2voy94+0yCtkGHC4JoxrKyc+Jzk7mUIEAFpf1udzdJsmI+DC78tnZysKxI6VhmAhY/QUIv3h2yFktgs86dYLrHrqmgY9nRYk6LeXb4zSFKuYqthh4YVWw3Dw2sf60+zNDXCHgptSEGv3doQHgNWKCRGrg==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1669898990; bh=pAFnj9u/TlXTUcPEdIJVKwqCU7N8m01oE6h5cIUAaid=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=Od98jWiqcRgR3Itx0UHurG3q/2PEyqPejNenAJciveluWI+1Vd+vNtKWvNe/qkPvCe4Akiuv3UoXbleJzP4l/7P7iBycn0yqLA9vZBroXKUbw87KwSlltvJlaTgAySLdUucgr5LdQbIPYHACD9dLXc4KyHAT56ojGlj/T20Uui98oG+tGmksq8fWIucrvG3QDCoRphhv69WBTG0ZzNsldNLUAVDDcoohf4Wi+UvfiPpCEMf2RfCjU9IjM5w0Zkh+KtgzIXGEUrRtLcJXPR+uHAFRGFtP/W56Q8sOb5JFdYBExqpBlIOWFvoRoFPjva5SeW3qp6kJv0fE4+sdquWcrw==
X-YMail-OSG: qs9ROy4VM1mhJ9tejf7jyOpnDIXfQfugxYHOBmw0se9wsbSBMYo2eULl1UTanOZ
a4fUehwbLbvgDi182EA4W.SOo3SF4jUZIXRWlLFRhxo46vzKQGbBNfBVNTh_JQ0VruiJsp4bFbIs
80oWOhRF1JjSSL_2lGZnuFlqiVSEDHdMphy0Qx.sZmoJyEF28wqEz4KfR38E3ZXYfxUuWK0U_T8w
U4zvIUDQ0E6yE0RAnh7KedmdB_EzccKvpJlUc3og8H0Mx8Rre0EwKkuDV1e1cxCot20g0Pnf86v_
l4dGP.rmhkdVaarDaujmmoZUOomScKZz5_EwcAG.BnczRq_cMfODDdOVhOldBSqvtxsj4h6irFGH
mmZctxa4gknxCR_0zSopRIBCmWTW_F8RfdG1_YEJFL77VFMQ8QS4wjiJPvPmJOno4N7FXZw86yq9
UGxkZLgtrE4J7mTJjxHGfBM1qx3uor0hwg8Roq_a0FzuqrU_VeEGGfg5AI2E0cwITP9MaOGLfOQW
SWebvCS608V6owW5XPm8WLyQ1aV_JPJZqlFz9Cdg5DjRsjcO.s9Oo4LhJ0HWPStuDDbv.WsSCpR0
nOoORx3sgi6UbIwkivGMVJDCBRYE9dhhhJwgz5uO7KGQ5pTTtK0CiIKjiXIkOEoxWNg6uL_t.DMx
uuPv_HwTvVjE3NYh4HEIqAQ4F0O_N63wBo2WrWICyoLRImd10iUrxJAuYBIY4H5WCjzL3VlAvGbx
NK.DOgr.SOJFtV2MeyK.FTOpO22kRPBmBDyIMUk3LqQlKVFAvrCOhNC1UYsBa7BwICo2tEf90zmu
lj.PWArjPW2MngxjSJDlbuzmQoOSFJLsnsKl0NAsONeSASTGWM3V82BakgSBRxvqQxd0czLkIze.
87XMGKzxJP1SEkWj9u98gjaoH0NcViZ2nFKpIw6Rs4Auk3.YrFdVnnevlfvpIfXhaFHnuEZyfkb2
Gvn4JtR7c4j0MQffKgxrBI5h7kotOyUY87DADZ.mN_VCXj._uzgX_XzoZ5l3SoszPG_pc2mXrvGm
CQk7Vv9mSc5d4NLNCPWI3khqO0yMlsW9y6JIA5jysNKUomudoRs.aNP9z7gk2lWNVgU9mnjbePPD
TCDEQ7rhGXXrklijrCVEynBUzwYRsJvMxWhVX7nh5EGxAwgGKmgmQugIa1oyZiS2n23Ha_kp0fne
lSRfgHFWh3nVaB6g2atb0v052Z4oCuf4_fiJFohdzcnBumBi0PFOc5QzrC64efR3w.2fhntFChyN
hIvrS7bust3JDP.kdaXQ3JXn.VWH8b4lkrmZ5rt9rxZPhis_zQUvvhfkJN_U5NjXCTbZokPDBtB.
alE8rJt6fqZeSzJDUkWL0bZJ2mGPepZTwbgb.x72Ucsr34QwM.Bm.nEF_kGi8ca45lzyli3NzJ7m
DSdlbzRUYI7umspOYbGt_66231zzbaztJnkfeCIwLb4YyVfDsL_sdDzuKtkZlpc9_RnhwCfxCFNM
83UCJzCWDhgFnTFUoU1hwD5scF_lydcA5TJiCJhjAClTJDCo0KRKiFm5Y_v1QBkuwdTeiqD6inZN
UrDTlX8Zad_c1lCemwN9lRb5MjURzCbmQLoQzQWNM9dPpLilo8kIQ7PyanN9G1kWfmX2FvuD7M.x
5CgAWje.JPB8PKySWJzRolVmDx0bYIbDbcsD5EbPdeoYVGVufgRxFXwpqGhuPqMDtkTHwU7LfSyL
OY9RbyaZrnZ4idzlPDBRUiyWh7tDxsRJiSqbXA44md9uJ3vB3ebtgbFAU0WgU4cmJ50PJ2UDGpNa
f0ZNuuY7KyXLG.NVGGd4TJabWqd9prhig.RiYU.1tnpnSfgBaG6QZOKPznTeJrRfw80OsgHGv0zH
UVLTtqb_MzIX7ZzxqJ97o1RfYv436UgCYqFzDgPk6iCL8pOETbW9DD2s.ebsjh.dTbpJW0Mldlce
w2Emt8rjR4EPo46n6mqPLfpcdaAmOS8VqtIR.gF_Xj_KwJL8ZJexOjYves.yiQ88GtKzvsdgo1sf
NwLWDhWT4_NO1FfcHlQ_ZCAZ.pG1hMw0cuVthDsF_Zaz4HUfciWwAV1YGB5ZK5StEP9uRMOF5az.
JkTqrKTtUC.PjEYUcclR8BVpYAkkkSLCTUOVzJdM96QH3Ykw3we9x99rhNrixqddSfnl1WroSNBl
UvPLW2U_5T_HseVnnvvoqiYmWnu1_3UkU1jc8L1fNbtXqE0yY1QQOyv9TvRMtwGORY.hEMVWRpZt
GvIetA.G2oQ--
X-Sonic-MF:
Received: from sonic.gate.mail.ne1.yahoo.com by sonic318.consmr.mail.ne1.yahoo.com with HTTP; Thu, 1 Dec 2022 12:49:50 +0000
Date: Thu, 1 Dec 2022 12:37:40 +0000 (UTC)
From: Delta Air Line
Reply-To: Delta Air Line
Message-ID: <27155116.7097305.1669898260998@mail.yahoo.com>
Subject: Skymiles Alerts.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_7097304_338555783.1669898260997"
References: <27155116.7097305.1669898260998.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.20863 aolwebmail
X-Spam_score: 5.7
X-Spam_score_int: 57
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Skymile Member, I hope wherever you are in the world
– that you are staying healthy and safe. You have to re-validate your Skymile
profile so we can continue to serve you better. UPDATE NOW  Thank you,Delta
Air Lines.
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URIs: 8bits.ga]
1.2 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[66.163.186.84 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Skymiles Alerts.
------=_Part_7097304_338555783.1669898260997
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Dear Skymile Member,=C2=A0I hope wherever you are in the world =E2=80=93 th=
at you are staying healthy and safe.
You have to re-validate your Skymile profile so we can continue to serve yo=
u better.=C2=A0UPDATE NOW=C2=A0=C2=A0Thank you,Delta Air Lines.
------=_Part_7097304_338555783.1669898260997
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
nderline;">
9e00009aecc3e" target=3D"_blank" rel=3D"nofollow noopener noreferrer" shape=
=3D"rect">UPDATE NOW
------=_Part_7097304_338555783.1669898260997--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Dec 2022 05:53:00 -0700
Received: from sonic318-22.consmr.mail.ne1.yahoo.com ([66.163.186.84]:45693)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1p0j3B-000CYG-HE
for dave@doctor.nl2k.ab.ca;
Thu, 01 Dec 2022 05:52:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1669898990; bh=IdeCev6uTANEHOF626rbASBTjmYWHMAJKVp1o9spB/8=; h=Date:From:Reply-To:Subject:References:From:Subject:Reply-To; b=XXcmfxWjnBqUd56IgWP08+aL7Eshn8LTLieYfLsbOn41RXSOrBDzcoIrYVWPQ6crfHRkTBl4F8IGIo5iJFzbdXn0F4cWHilZd0dZ4V0KDF5rLJqCpfloM7Iemoia83iZIdo/03uFIDufkv2sgLf+00TFc5AGZldx7IyE40M8l6MeJkmYlc3ro17fINcPP2voy94+0yCtkGHC4JoxrKyc+Jzk7mUIEAFpf1udzdJsmI+DC78tnZysKxI6VhmAhY/QUIv3h2yFktgs86dYLrHrqmgY9nRYk6LeXb4zSFKuYqthh4YVWw3Dw2sf60+zNDXCHgptSEGv3doQHgNWKCRGrg==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1669898990; bh=pAFnj9u/TlXTUcPEdIJVKwqCU7N8m01oE6h5cIUAaid=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=Od98jWiqcRgR3Itx0UHurG3q/2PEyqPejNenAJciveluWI+1Vd+vNtKWvNe/qkPvCe4Akiuv3UoXbleJzP4l/7P7iBycn0yqLA9vZBroXKUbw87KwSlltvJlaTgAySLdUucgr5LdQbIPYHACD9dLXc4KyHAT56ojGlj/T20Uui98oG+tGmksq8fWIucrvG3QDCoRphhv69WBTG0ZzNsldNLUAVDDcoohf4Wi+UvfiPpCEMf2RfCjU9IjM5w0Zkh+KtgzIXGEUrRtLcJXPR+uHAFRGFtP/W56Q8sOb5JFdYBExqpBlIOWFvoRoFPjva5SeW3qp6kJv0fE4+sdquWcrw==
X-YMail-OSG: qs9ROy4VM1mhJ9tejf7jyOpnDIXfQfugxYHOBmw0se9wsbSBMYo2eULl1UTanOZ
a4fUehwbLbvgDi182EA4W.SOo3SF4jUZIXRWlLFRhxo46vzKQGbBNfBVNTh_JQ0VruiJsp4bFbIs
80oWOhRF1JjSSL_2lGZnuFlqiVSEDHdMphy0Qx.sZmoJyEF28wqEz4KfR38E3ZXYfxUuWK0U_T8w
U4zvIUDQ0E6yE0RAnh7KedmdB_EzccKvpJlUc3og8H0Mx8Rre0EwKkuDV1e1cxCot20g0Pnf86v_
l4dGP.rmhkdVaarDaujmmoZUOomScKZz5_EwcAG.BnczRq_cMfODDdOVhOldBSqvtxsj4h6irFGH
mmZctxa4gknxCR_0zSopRIBCmWTW_F8RfdG1_YEJFL77VFMQ8QS4wjiJPvPmJOno4N7FXZw86yq9
UGxkZLgtrE4J7mTJjxHGfBM1qx3uor0hwg8Roq_a0FzuqrU_VeEGGfg5AI2E0cwITP9MaOGLfOQW
SWebvCS608V6owW5XPm8WLyQ1aV_JPJZqlFz9Cdg5DjRsjcO.s9Oo4LhJ0HWPStuDDbv.WsSCpR0
nOoORx3sgi6UbIwkivGMVJDCBRYE9dhhhJwgz5uO7KGQ5pTTtK0CiIKjiXIkOEoxWNg6uL_t.DMx
uuPv_HwTvVjE3NYh4HEIqAQ4F0O_N63wBo2WrWICyoLRImd10iUrxJAuYBIY4H5WCjzL3VlAvGbx
NK.DOgr.SOJFtV2MeyK.FTOpO22kRPBmBDyIMUk3LqQlKVFAvrCOhNC1UYsBa7BwICo2tEf90zmu
lj.PWArjPW2MngxjSJDlbuzmQoOSFJLsnsKl0NAsONeSASTGWM3V82BakgSBRxvqQxd0czLkIze.
87XMGKzxJP1SEkWj9u98gjaoH0NcViZ2nFKpIw6Rs4Auk3.YrFdVnnevlfvpIfXhaFHnuEZyfkb2
Gvn4JtR7c4j0MQffKgxrBI5h7kotOyUY87DADZ.mN_VCXj._uzgX_XzoZ5l3SoszPG_pc2mXrvGm
CQk7Vv9mSc5d4NLNCPWI3khqO0yMlsW9y6JIA5jysNKUomudoRs.aNP9z7gk2lWNVgU9mnjbePPD
TCDEQ7rhGXXrklijrCVEynBUzwYRsJvMxWhVX7nh5EGxAwgGKmgmQugIa1oyZiS2n23Ha_kp0fne
lSRfgHFWh3nVaB6g2atb0v052Z4oCuf4_fiJFohdzcnBumBi0PFOc5QzrC64efR3w.2fhntFChyN
hIvrS7bust3JDP.kdaXQ3JXn.VWH8b4lkrmZ5rt9rxZPhis_zQUvvhfkJN_U5NjXCTbZokPDBtB.
alE8rJt6fqZeSzJDUkWL0bZJ2mGPepZTwbgb.x72Ucsr34QwM.Bm.nEF_kGi8ca45lzyli3NzJ7m
DSdlbzRUYI7umspOYbGt_66231zzbaztJnkfeCIwLb4YyVfDsL_sdDzuKtkZlpc9_RnhwCfxCFNM
83UCJzCWDhgFnTFUoU1hwD5scF_lydcA5TJiCJhjAClTJDCo0KRKiFm5Y_v1QBkuwdTeiqD6inZN
UrDTlX8Zad_c1lCemwN9lRb5MjURzCbmQLoQzQWNM9dPpLilo8kIQ7PyanN9G1kWfmX2FvuD7M.x
5CgAWje.JPB8PKySWJzRolVmDx0bYIbDbcsD5EbPdeoYVGVufgRxFXwpqGhuPqMDtkTHwU7LfSyL
OY9RbyaZrnZ4idzlPDBRUiyWh7tDxsRJiSqbXA44md9uJ3vB3ebtgbFAU0WgU4cmJ50PJ2UDGpNa
f0ZNuuY7KyXLG.NVGGd4TJabWqd9prhig.RiYU.1tnpnSfgBaG6QZOKPznTeJrRfw80OsgHGv0zH
UVLTtqb_MzIX7ZzxqJ97o1RfYv436UgCYqFzDgPk6iCL8pOETbW9DD2s.ebsjh.dTbpJW0Mldlce
w2Emt8rjR4EPo46n6mqPLfpcdaAmOS8VqtIR.gF_Xj_KwJL8ZJexOjYves.yiQ88GtKzvsdgo1sf
NwLWDhWT4_NO1FfcHlQ_ZCAZ.pG1hMw0cuVthDsF_Zaz4HUfciWwAV1YGB5ZK5StEP9uRMOF5az.
JkTqrKTtUC.PjEYUcclR8BVpYAkkkSLCTUOVzJdM96QH3Ykw3we9x99rhNrixqddSfnl1WroSNBl
UvPLW2U_5T_HseVnnvvoqiYmWnu1_3UkU1jc8L1fNbtXqE0yY1QQOyv9TvRMtwGORY.hEMVWRpZt
GvIetA.G2oQ--
X-Sonic-MF:
Received: from sonic.gate.mail.ne1.yahoo.com by sonic318.consmr.mail.ne1.yahoo.com with HTTP; Thu, 1 Dec 2022 12:49:50 +0000
Date: Thu, 1 Dec 2022 12:37:40 +0000 (UTC)
From: Delta Air Line
Reply-To: Delta Air Line
Message-ID: <27155116.7097305.1669898260998@mail.yahoo.com>
Subject: Skymiles Alerts.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_7097304_338555783.1669898260997"
References: <27155116.7097305.1669898260998.ref@mail.yahoo.com>
X-Mailer: WebService/1.1.20863 aolwebmail
X-Spam_score: 5.7
X-Spam_score_int: 57
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Skymile Member, I hope wherever you are in the world
– that you are staying healthy and safe. You have to re-validate your Skymile
profile so we can continue to serve you better. UPDATE NOW  Thank you,Delta
Air Lines.
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URIs: 8bits.ga]
1.2 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[66.163.186.84 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Skymiles Alerts.
------=_Part_7097304_338555783.1669898260997
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Dear Skymile Member,=C2=A0I hope wherever you are in the world =E2=80=93 th=
at you are staying healthy and safe.
You have to re-validate your Skymile profile so we can continue to serve yo=
u better.=C2=A0UPDATE NOW=C2=A0=C2=A0Thank you,Delta Air Lines.
------=_Part_7097304_338555783.1669898260997
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Dear Skymile Member,
I hope wherever you are in the world =
=E2=80=93 that you are staying healthy and safe.
r=3D"none">You have to re-validate your Skymile profile so we can continue =
to serve you better.
=E2=80=93 that you are staying healthy and safe.
r=3D"none">You have to re-validate your Skymile profile so we can continue =
to serve you better.
nderline;">
9e00009aecc3e" target=3D"_blank" rel=3D"nofollow noopener noreferrer" shape=
=3D"rect">UPDATE NOW
Thank you,
Delta Air Lines.
------=_Part_7097304_338555783.1669898260997--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments