Charitable work spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Jul 2023 12:43:01 -0600

Received: from mail-ve1eur01olkn2068.outbound.protection.outlook.com ([40.92.66.68]:3844 helo=EUR01-VE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qMC8R-000EBl-30

for dave@doctor.nl2k.ab.ca;

Wed, 19 Jul 2023 12:42:55 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=TetewpJ9QRBwbcgTiPxobJSh91eQsyio4Mv591rrZrY8yRzegaogPpkQlhOeUK8KDRM6oXLN1yaQMs74IzDQcU2KDYwpnN/coy5JCP01KZYB/D9SxmlmUo9yp6E9yUvH+tex2B4JhIX7etxqCXz5SbqtWb4BJDDTjFF0yx0BLcjsfO9lfbmRaDLQLSmmmSvtiy8QZxJxjRJVpKpUeXj6okDOctmn/TTgZyqEhuHqiq/8PiOhtZGMszBZpjRRAspN7RRTs6BAG03n6PXxUX5KPHV9p8SpK4N3Yg/ACm09AJvXGiakbxQzaqr9NY/t1F9WYvMMIDKSUJ0BoTLILR7Alg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=x/6BzOnV/tgDXsA17J5RV//1BX6eCQ85lKhyW5q+jQc=;

b=NedNAFa56RbQ/h0bUHbm5fXxZX7vAps7NTPyNYJ+i2gO87OZPRHVH5DgqdcjjLxhEFu4jz7Md9hFe0fILVQGYSTtezu/xwm+n9o8GASwVCRcw6hrQGPjU9dqcrTbxWaySiIVhY77pq+bC8YYRFW8WcQhFo3r6cCJLew2rK7ZC8zWeWKBaK4S+mxz1QHQxlQtuUJ0YiGXTyRGFYBUKNuJc3DdN+on1EAQM7+KXFBbq+6uihFi3QqWXPCnkKGvHWfPacUR6GhR/MnfzrVSmd6XFO1qUxlMQAQ4w1Fmcoq//LzK2hBusYjmDcKY8uDxzsAKNJnjo1jM7qVuBdxY4Wi4dQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=x/6BzOnV/tgDXsA17J5RV//1BX6eCQ85lKhyW5q+jQc=;

b=OJ4ES0+X+7uct8RVDYey1ZhvgEeKe1qCbeDaAirK1QuqewW5VawndeKPNjKgk0ITXBLUOoFuiScl/RlAX7d0ZXJKjaz/vbyrz/1yadW5c4Df5NYOjMaSsR2pZpALvl3xB3NjTFlr20SMQN/9f3HEECSS/EH5HxPS1dtAngmeqQOhNFuOi4PVafY/io2TL7wTh+4kOPKyCbwHBbPqwa16zO/PIHlQGunTEfaQDWiZbRKSpvtDl0VCgx8IDr9h5RCdGQt4G9yRucUE7yLPs6b7bMBKhkiUd7EYDdjPbHq5tyK9PKOBNplWcBp9fHGY78cgG4M5IuDp4rSW23gvotrMeg==

Received: from AM7PR09MB3734.eurprd09.prod.outlook.com (2603:10a6:20b:10a::11)

by PAWPR09MB6740.eurprd09.prod.outlook.com (2603:10a6:102:385::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6609.23; Wed, 19 Jul

2023 18:41:06 +0000

Received: from AM7PR09MB3734.eurprd09.prod.outlook.com

([fe80::ce67:1779:2296:a9b8]) by AM7PR09MB3734.eurprd09.prod.outlook.com

([fe80::ce67:1779:2296:a9b8%6]) with mapi id 15.20.6609.024; Wed, 19 Jul 2023

18:41:06 +0000

From: Edmund Benedetti

Subject: I want you help me to carry out a charity work in your location, I

need your response

Thread-Topic: I want you help me to carry out a charity work in your location,

I need your response

Thread-Index: AQHZunCTwEJEYV+kPUyYnlkyEOt8Yw==

Date: Wed, 19 Jul 2023 18:41:06 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [A/M39bEAHRGeN94qzrqlSfo44thJ2Y1X]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: AM7PR09MB3734:EE_|PAWPR09MB6740:EE_

x-ms-office365-filtering-correlation-id: ce90a388-4441-4f9d-0f41-08db8887b63a

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

ZrLllSFlbA6h7HslEUwTUAq7moBfz21P7abPUw9/cUVYWJE5DW0xg1aNZ4bR5QCXL+YiRqjiM9Nnu7xk4n99WIH3pJF/NWXi516c6A7EnB5w90fdOp7hFnj6rC9bsyBIe/Zu0mJbHecVdtxPi8xj38jr4GUWUtY/Zy5DWShUCeezILiyQiIPGpQvWrnh2gMP65M5jvgaa5V3C6vnGOYxbaFd117Q7hQ7zhYDTl06uHiAudnxwqov02T//5Z473bpqjZr6YkcJdy9rKjCCznqUMWJ1spifsMv9r2oK/SU16A=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?/Hh/sTPjlCSn/KuWCPTUVBqxIs3MnUB1sQfEcuBJ0KO15coaCfLRupaz3I?=

=?iso-8859-1?Q?mtlmwJLQYBrKX4FfiRxLOykZFdHdfE+HGnaNjJKphPLaFFtjBvqk4j2WVj?=

=?iso-8859-1?Q?9UbqVRjZkWmdUxo41cW1ScsGedi3HgcUMjUaQ9GHziapC4CZvFm4ISQ9pe?=

=?iso-8859-1?Q?4Hxy76JyvVSz24F046d4gWe8JDv3rdYxuyC0xd1ColsdxDsf/s5pA4dHKz?=

=?iso-8859-1?Q?BG5ekql66m+/zt0iTVLLgFXYeCuBEPZ4qZGTEsW80q0dQv3cPlMZAOhWyQ?=

=?iso-8859-1?Q?7GHCQm03M+nQPlJxJ71bi93FZ0j952v59l786r4oi4FG3QKyrUH+JftSj/?=

=?iso-8859-1?Q?W9jn5HsUZa1gHfAOgsfN7zwO8Bqb1VpuEVCrbFDhhVSpa2Qas4s3YW2OPi?=

=?iso-8859-1?Q?+8Gx0u4ExzGuD8j7PhJsjeKklzZ8P+tYD75ITiRNECRaGVhVNVcfIYPIU3?=

=?iso-8859-1?Q?HHnzwZFo7srpe5fV5nF0QLaJIePDIDf4wIQXosF79FV2FBqKwwA/nRgDw6?=

=?iso-8859-1?Q?T+LwofgDGOrfSMAUbAUROm79ozKGsRkLWAVqO79zBD9XQOEEFO4uRBfhwV?=

=?iso-8859-1?Q?ZsfRUVB50tkufNDhN2xOueA73IG5herwQ4RV9khySw2ERW4/N2MGo+rCYM?=

=?iso-8859-1?Q?vCTuy//W4/rzo6yLUak8M4Doy6azsW7mVruvI0HEeTeyPXJrPPv1+N5iEt?=

=?iso-8859-1?Q?aagEQ8FMlNoDrmYKfE7oRZSdEiS2pNMyw1wECbHcy25X+YGAvaJWH7pQ4+?=

=?iso-8859-1?Q?+YfsY6wk/avHC1MBG3XcFK/vlDzXPWU273iwu+MpM4obJZG/bcEHaY+kcC?=

=?iso-8859-1?Q?xTiIF8egn9D+VOFsx8A7e6CjPQ0wG63TfeAgroSGJMup1l7Takqy4tokgp?=

=?iso-8859-1?Q?lmY6307tnq6MLADQBmIquS+qvfumRSahc5BrGrxvvoSqfx7j2h8SRqJiMY?=

=?iso-8859-1?Q?N3FD3zDfzq61w0GQizuGkw3Kcu2Xy39stz4mQK+OuV/xV7SkcW6lRRCMvZ?=

=?iso-8859-1?Q?BPHqvljcTRdHcJaFmAWsdW8NYVmOmbjSz+mKHe9pK+mRupXEqZGtLOwNq7?=

=?iso-8859-1?Q?7FrLEh+BtTdD0cLnxN5RLMYebC01zFJmz3CRvB6y0LMzGDYeu3EQUeH3FD?=

=?iso-8859-1?Q?MG6rTo0tcR3A+88vKl3vdl5d9zE/vZfBcL3Hr23Oz2qTnAaIAwnUWzjMFY?=

=?iso-8859-1?Q?gEiu5GpQrluDXruSBSoBLEM56s2czHAsuJaUQtdr7b9AXUar+FfaRNwVMU?=

=?iso-8859-1?Q?doHAhnetbgjDq3rCQ55sXn785HlB4oqRZBH/xdPes=3D?=

Content-Type: multipart/alternative;

boundary="_000_AM7PR09MB373462B2EACAE8477B09BA99AA39AAM7PR09MB3734eurp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: AM7PR09MB3734.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ce90a388-4441-4f9d-0f41-08db8887b63a

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jul 2023 18:41:06.1707

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR09MB6740

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.66.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[edmundbenedetti10(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[edmundbenedetti10(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.66.68 listed in wl.mailspike.net]

Subject: {SPAM?} I want you help me to carry out a charity work in your location, I

need your response



--_000_AM7PR09MB373462B2EACAE8477B09BA99AA39AAM7PR09MB3734eurp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable







--_000_AM7PR09MB373462B2EACAE8477B09BA99AA39AAM7PR09MB3734eurp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








color: rgb(0, 0, 0);" class=3D"elementToProof">












--_000_AM7PR09MB373462B2EACAE8477B09BA99AA39AAM7PR09MB3734eurp_--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA