office depot phish from Reliable Communications s.r.o. Moscow, Russia
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 Jun 2023 14:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q70EJ-000Q0o-2W
for dave@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 14:58:07 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 Jun 2023 14:58:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [195.133.46.244] (port=56162 helo=mailexcite.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q6v0n-0006m8-1W
for root@nk.ca;
Wed, 07 Jun 2023 09:23:53 -0600
MIME-Version: 1.0
Message-Id:
From: Office Depot
Subject: root -you've been chosen to receive a brand new Dell Inspiron 16
To: root@nk.ca
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Wed, 07 Jun 2023 17:21:34 +0200
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office Depot - If you want to unsubscribe, please click here.
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[195.133.46.244 listed in psbl.surriel.com]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.4 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[195.133.46.244 listed in wl.mailspike.net]
Subject: {SPAM?} root -you've been chosen to receive a brand new Dell Inspiron 16
X-Antivirus: AVG (VPS 230607-0, 6/6/2023), Inbound message
X-Antivirus-Status: Clean
Office Depot -
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 Jun 2023 14:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q70EJ-000Q0o-2W
for dave@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 14:58:07 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 Jun 2023 14:58:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [195.133.46.244] (port=56162 helo=mailexcite.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96 (FreeBSD))
(envelope-from
id 1q6v0n-0006m8-1W
for root@nk.ca;
Wed, 07 Jun 2023 09:23:53 -0600
MIME-Version: 1.0
Message-Id:
From: Office Depot
Subject: root -you've been chosen to receive a brand new Dell Inspiron 16
To: root@nk.ca
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Wed, 07 Jun 2023 17:21:34 +0200
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Office Depot - If you want to unsubscribe, please click here.
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[195.133.46.244 listed in psbl.surriel.com]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.4 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid
URIBL
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[195.133.46.244 listed in wl.mailspike.net]
Subject: {SPAM?} root -you've been chosen to receive a brand new Dell Inspiron 16
X-Antivirus: AVG (VPS 230607-0, 6/6/2023), Inbound message
X-Antivirus-Status: Clean
TrackbacksTrackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla. No Trackbacks Add Comment |
Comments
Display comments as Linear | ThreadedNo comments