x-rated dating site spam from Hotmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Sep 2023 07:27:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1ql83z-000NZs-1y
for dave@doctor.nl2k.ab.ca;
Tue, 26 Sep 2023 07:25:19 -0600
Resent-From: The Doctor
Resent-Date: Tue, 26 Sep 2023 07:25:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01olkn2060.outbound.protection.outlook.com ([40.92.53.60]:55425 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from
id 1ql2ij-000Buz-1v
for doctor@doctor.nl2k.ab.ca;
Tue, 26 Sep 2023 01:43:06 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=WCjRnuGeA2SFEVZbv7XJru+C9tCINVH0ydKdyy+UFITEkJxiIJRYLvued576KOQ4q6WN6TyX0DwD4eYwJOcZxvCiS1c4rCGaSW5ru3T8517VjwbL6rpjY2rwYBYe8ehmfxrMtk/s+p5dPmMD4gR8C2JdcyaA3YV4sfqkUGbJ0zXPxnUSAMAsSR1vuGv9l1dU0Yjfq6CsCR7ttiN4NjZZMCpjENFpp2wserkyoU+yp2/LPftXmt9Rqok0xWLMrjxeWHXFeDkKvhRAsbGJSuNe7Wpo17RK3LNDYS+axjS7WvCyEwAIevb7ZAPeSDiNecuEUgHIxGT6eygIPLFKHdTKiA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=OGb+YrxiDDByjwlbrEUhdvMFV1JhuA1idbJ4A2nRnmE=;
b=Sm1GIH60G0iNasM2cFrLDtisPcSb0pCyTPTdcXfa73RSVDVZNwboylpEr9Xq/TdNWnJ2qsM0xHXmSuuUJ1UkrFt0+cxqYIQ/PJm1uVk9MMf6WVFQixqDEgV+p1sENxPcHO1iI6o8P87k+JLa+nvIOraHmJzvwDD1Rb4hOqyZYNSXLhrqwdELKQrVfYHPYtVefkWuJXabFgvw7091HFBy+ToWKR8EyfuooI/x7EXTcX706HVDV14kw0iAf54Hcvxydd0NIpawbyaAdyCdZKn/TVKP2s3WlU7lRmgfG0GWzD0/9Yk2d0ijfe4pcVxj/snm6DOs9rLHNf0yLEuNFcbkHA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=OGb+YrxiDDByjwlbrEUhdvMFV1JhuA1idbJ4A2nRnmE=;
b=hQv05eH9U7aP2n63rMt+4Q3PRONvaI2ugtZyTq6zeLMl6//1H+gmKpT32kLou2/4KjKFny//47o7652R/64RFz4iFS8O2voHSuBpap6ftfmLUf4BfxWPfnFHqhCzgabt4i7wMYhu5Ky6+yfZWVOxw74VqByCUAD2lh5nu6L9aHmbgVeeAlg7cR4rgU7DdSBNyXNrl7LE/p1u6qqu2ogisFU/ZnyzTbxBl8e29dOkPtXs3BFLAvI3I/n9g3AlNyilYNzf+CwzKf+WtvRamX9gDYVBaENZ9Nhjwj2VVZgVB276zt5C35rnaw3Ik67Ab3IvUn4AQqipFG6UdyZbV95PCA==
Received: from SEYPR01MB4224.apcprd01.prod.exchangelabs.com
(2603:1096:101:59::12) by TY2PR0101MB3710.apcprd01.prod.exchangelabs.com
(2603:1096:404:8009::11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6813.28; Tue, 26 Sep
2023 07:39:57 +0000
Received: from SEYPR01MB4224.apcprd01.prod.exchangelabs.com
([fe80::4eb2:ac24:4c07:242c]) by SEYPR01MB4224.apcprd01.prod.exchangelabs.com
([fe80::4eb2:ac24:4c07:242c%4]) with mapi id 15.20.6813.027; Tue, 26 Sep 2023
07:39:57 +0000
Content-Type: multipart/alternative; boundary="===============6342531304599912066=="
Subject: Hi, I'm all about positive vibes and meaningful connections. Let's bring some positivity into each other's lives.
From:
CC:
Date: Tue, 26 Sep 2023 07:38:16 +0000
X-TMN: [hESWfSVxZO5459DKbjBLECgOoWkUiuVG]
X-ClientProxiedBy: VI1PR08CA0262.eurprd08.prod.outlook.com
(2603:10a6:803:dc::35) To SEYPR01MB4224.apcprd01.prod.exchangelabs.com
(2603:1096:101:59::12)
Message-ID:
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SEYPR01MB4224:EE_|TY2PR0101MB3710:EE_
X-MS-Office365-Filtering-Correlation-Id: 5bf317b9-502a-4d22-464e-08dbbe63c69c
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?us-ascii?Q?G2BrNrNo24kNJRVEsxbOLgpB9zjrJY8KOs+WT2PkGvQ7pjUHP+FuJvzUBmUX?=
=?us-ascii?Q?Lwg8PNDAr6j+yKXN5f8C3Om3ojIrk17NccrRM1RTC6D/HbG0gv3N5ZY7UCso?=
=?us-ascii?Q?UdXy9KG+VKDZbUEW2Fx8H7CQhYMdUVlyRpsCMxOMQjX8GI/3uUNmocN/jwgC?=
=?us-ascii?Q?A0weC1nF7XLkW6HJ0iV9MzMfGsgPUtOkvb85br+Onnni+TcZo2+k73A45Jmp?=
=?us-ascii?Q?x3T88fiRD1rE1iL5u4JVDUwrWVfKul8AT6X9PN6fE4AepxcEtwCy9ExldlFX?=
=?us-ascii?Q?pmNVt4C9OklOqUVduAiA9O3q9lb+Wvb29dELjy/ooeervQjT+jHpWWk9JB06?=
=?us-ascii?Q?sS5V36zcSIhUzho+5DQlIgvpY22iEJG1uHc7XH3uEl8xUOHLcgEoKuoXwEzC?=
=?us-ascii?Q?Mf6XoioH7hoxQxgeWct8DrHc4sdX5fSqdwf/D1KisYaVUlyoaQnyhvYvqhnc?=
=?us-ascii?Q?24l7OtF3Cx0nyP1zdxr2Xd5VYE6ICGdF5By3y7yUx4PJjzL7prr4nb9uB5Oh?=
=?us-ascii?Q?c3VH/ePaT5kRDOhvuifNW/qc1vD98jIL6UDT2y3vq5j81irnUi5HBJU7vk01?=
=?us-ascii?Q?r/ekkqCh2AlPs/N7EOZFzy0K9H2rFlDj2W1moTb4eaMVdX2/GbBH9AYJuxkA?=
=?us-ascii?Q?9duIP4e1S38h5inKu5GOtww08U9XP/uJyyNXgrMNJUZPfQ8nysmV3yorWQUo?=
=?us-ascii?Q?+1Kkh2LI/Kef4B5VVIzGVbs+79wkIwAMpOt6HK2tedaq/i8kVsM1jBtSbzCb?=
=?us-ascii?Q?VVG6q9rEH5WP0dq7bzet9O2+fGAR596EYr7TpSNLQrKKWbaovyJl/j6eIui7?=
=?us-ascii?Q?VB8vX6J6alsYGuWcv3Wq3+iIcLRB61TKPefQn0woeTun6NUY7MIzQFXVlCIw?=
=?us-ascii?Q?ORvA8IwuGWAr+9pc2S3JiWW044IOKk1g5lp6BSmsLCIemGlpSyV2ROiMfu6P?=
=?us-ascii?Q?vN9+lG5Pw4KwXx7tRd21mmPkrvMjoV1BSJRdnLtrrbhCDnGw+V/e9sCXIOB2?=
=?us-ascii?Q?S9RY3B6oF8nEsKqDA8RTK98j5T54XDeQM5FBh14jd6+2M7oqGmPihOkueXOy?=
=?us-ascii?Q?B85oJwXsVf238pQZ+BF5ijeiKizRoqxDWoag5NZ8Daf8v6hGHU80YL4BS4iZ?=
=?us-ascii?Q?36ueRBlrURFoLDut7Zi8UZkYzm7z96rLQcrJFHo3+oM0v0PzLcYGS0eWaBQS?=
=?us-ascii?Q?1VTF/JhVKm/63f70lrEB/IUbpmmlq57IjK5N6y6g1naSF3TJtf2EzLxfR18?=
=?us-ascii?Q?=3D?=
X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-d8e84.templateTenant
X-MS-Exchange-CrossTenant-Network-Message-Id: 5bf317b9-502a-4d22-464e-08dbbe63c69c
X-MS-Exchange-CrossTenant-AuthSource: SEYPR01MB4224.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Sep 2023 07:39:56.1672
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PR0101MB3710
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Looking for love? Look no further than our dating site. Our
platform offers a safe and secure space to connect with like-minded people
who share your passions and interests.
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.53.60 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 ARC_SIGNED Message has a ARC signature
0.1 ARC_INVALID ARC signature exists, but is not valid
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[nubeeswffvtb(at)hotmail.com]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} Hi, I'm all about positive vibes and meaningful connections. Let's bring some positivity into each other's lives.
X-Antivirus: AVG (VPS 230925-4, 9/25/2023), Inbound message
X-Antivirus-Status: Clean
--===============6342531304599912066==
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Look no further than our dating site.
Our platform offers a safe and secure space to connect with like-minded people who share your passions and interests.
Whether you're looking for a romantic partner, a companion or just fun, our site has everything you need to make your search a success.
Join us now and start your journey towards a fulfilling and rewarding love life.
If you don't want to receive any more messages like this, click here to unsubscribe!
--===============6342531304599912066==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments