Costco Phish from Kashflow

Posted by Dave Yadallee on Thursday, May 16. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 16 May 2024 15:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s7icc-0000000013k-012m

for dave@doctor.nl2k.ab.ca;

Thu, 16 May 2024 15:26:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 16 May 2024 15:26:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [78.135.89.167] (port=40028 helo=unicah.edu)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

id 1s7iYA-00000000NG6-2IuU

for root@doctor.nl2k.ab.ca;

Thu, 16 May 2024 15:22:13 -0600

Authentication-Results: gmx.net; dkim=pass header.i=@kashflow.com

Received: from o7.mail.kashflow.com ([167.89.31.18]) by mx-ha.gmx.net

(mxgmx009 [212.227.15.9]) with ESMTPS (Nemesis) id 1MKe0k-1rr7dT14oe-00L0O5

for ; Thu, 16 May 2024 20:42:08 +0200

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kashflow.com;

h=content-transfer-encoding:content-type:from:mime-version:subject:

reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=wXOntJrfPsgOvFpmpZWkYWsP2FyzVuWMQSaTou8Bgx8=;

b=UsXQlbbcpFylkAuXRdugl4mAJowUsACxphQd6tmTpQ+Q40E4fBB0BsyAsf+8P0a3VdTK

iZgxc7/yjD2PubPOCqFtL0lNqyS6TUaJHtzK0biTd++lrvp9+A5T496l/n+nerumAkWh+J

0emQvq2kD/aBmXxM/Q3yRjnPOQtZlN20c3kOI7gJbetiAtv33JkdY9UPEE3K2YHq6R6Be0

JnV83TwAHn4YVupA3D43Bl5N71IvlAG+QbuzBBcFe5vQ9knvvYZsvwu+OIpz3VnWrHNtMB

itJ0f+9It0FTSOWx/OlQofReflzwKx2uZmen/MMsTBhx8ngwO9ZlKMUr4wmQI6Ig==

Received: by filterdrecv-54c5df6599-55qk8 with SMTP id filterdrecv-54c5df6599-55qk8-1-6646537D-C6

2024-05-16 18:42:05.695600654 +0000 UTC m=+1454461.813750077

Received: from MjI5NDY5MQ (unknown)

by geopod-ismtpd-8 (SG) with HTTP

id j43azH2XTBC8rdv-G1ipKQ

Thu, 16 May 2024 18:42:05.560 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Thu, 16 May 2024 21:19:50 +0000

From: Message from Costco

Mime-Version: 1.0

Message-ID:

X-Mailer: Microsoft CDO for Windows 2000

X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.266210

X-MailerIO: 266210:8901385559

Subject: You have been selected for a Tupperware set

Reply-To: Message from Costco

X-SG-EID:

=?us-ascii?Q?u001=2E2dU4z=2FWtPTn3IAI+T2Wk4rvV3ZRgQiRb6uQtLjAeBz8I+62Z7902wcH7S?=

=?us-ascii?Q?8fD6XRA2e97MRDccekaCDMOwcl73OFS2iufs6FE?=

=?us-ascii?Q?7jfchMMOrffjJb3NkfU9CK6SC4hzPIFOrz718wf?=

=?us-ascii?Q?VPZ5pKo8oBXETymycrWV6f0dVLEIAk707PYfPNA?=

=?us-ascii?Q?xwNPK7KL0vu32aSlHXn56efRagG+6k2qstB31st?=

=?us-ascii?Q?x1zNTEjHCJPv9G625zNF6OiqKB7MkLDpSiPpdvG?=

=?us-ascii?Q?UIPnopwkOLU59PCJc6i7YU2EmA=3D=3D?=

To: anjiblidabidnilah@alphafrau.de

X-Entity-ID: u001.PG5NHUku19G2mCTQK1EQEw==

X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;

X-Spam-Flag: NO

UI-InboundReport: notjunk:1;M01:P0:dy+WYsO5TYg=;cPqAnCIPAqGQVru/sroMIXzdqAzo

5vz/vOrj6Biz5IXEtqhDAcQVlExgfOS96DFgLSCFdvXjKfi+cx1/84Kcs934p2ASA/mVzpN50

RdubqD16LUlnnLkOKpAqu6a3eg4h08snMnhdhiOQoV+a3BzMaZ1mBZIFeKw7YzQBNpukCiZtH

j3YvRcrTHY1/Mzk+r+h3O/fkkk7u1RW4IUKT3jV4r3tJADixt+82sIvQ9sSUz5802U2E4H+jM

jAtjNTPsvEr7/2tokhJrkT2L4PpHvLS19Xq/plRCh7RMGZtdmWdLQR1RiGtG7mZhd0QEypWZO

VxyuYKFHqF1DpF3pK47ZxgcViSsKhuJU1SrW2JwZOxHZn2yPm1+c5U7vci/iWKF1OyEOVp770

FdUfTMJ+n2a1TRBgsKuIyg6aOkfoQbRUgskyZnbje5Gjt3HCBUKIz3D28eMPaL2a9y2pGB5A1

IAn6rMs0y5GwAFvMUTCsgmjB1+DYqkL7YkKReQvRvC3bZU42q8vhpGE077nkflnHyEjPvoBcs

3wV1x66qdIvLkvGTRaKjaiLy32Pam3xXOai/1xP1LbHgVsCX6t1dJQmvcWy02XUBlKIk6Jq4x

L/cV6gHKKmrH/hCka0SWkz2XD8g3sWmPafExBQiAoAD+mSiFGnIepTMlQkf+p+TNhA9wstC7w

CaVuZjITAsls92y+0x862X79rLSNHoF8Ymt4kv1H6ux+bhp0KRQjBq5yW/75M57RPRv5qcT+j

goz56oYB0jSrVsrMduVaAYbJ4/CXGKmdjb7vYGR2vjr+dDldiBjYP1t0MnJ+5+qh4je9D5031

kSQktauzA8mdXn6BcgJXiVSsEnJRU0agPVkqWsM0+aYe9yVEnJ4DMoNtDsOqzIBj0euVl/Fx2

b3ovWQF8d6f9aIMK6RBP5jVEqtOZR7akEtCYmmNu3WAPTHsGCmS44K3MsS9H/5iLnJbM21Cyk

uTpMVp1rbZ6fvjLEUEzM2ZtSSi5rqXwIyfqHxSlQUq4aJo0djaK3171Sp2Jfj7AHvOhl74Vw1

n0QIfMRvsrubmI3RPwJP4SDlX6UUrcHViroomike3JAMuyqZuaWDG12uT+hNB4u32Y47sIfja

bD4kuSEQrOdbiyNhvYybyi83SMkSZ6IAWnrSf7KkGm7P6ApF+tjtR76xg5b45We85ux2auAg8

MYHw2gp5SMAmlBwXjetr8tRcTdUxi5Vohqj1JCyRdifIrwuSlKSAid7UN80XTpEBxSVViELYi

MLYgyjuEBvYijwHQQWCgud7191dyXKrHdvZbcWsWhI75XbjdUjKRfHzpSIOym38HJn2mjKEf8

snpnSUbmKB6eGDp8lWWKAQlDES3pMpNKPe6hVOZvVR8KIwnS+kvDi1+hsFV8zHTSkPQAxnsKN

dcxQBmCsATLk17qqeVxrKkWADmireke85tE8BxjKRzPn7OVf7vuwTe3xLC+DHFA7rz2yDz7yQ

0kRlxaoY0cD+Bcp0u5tUq6t9CqaGLNSTltgn5EIeOIQ87YRCi0KOtsfE5bQ2OD0GrHRzrBTAl

vmhOnXmppnB1gBay7B/QMPXVXYiBMWHqWDjDqSacQCzKSdmHK+sEftNKiTiRV2tV/G+UBIwSx

a2mSrypa+fC2iKBKqhnD3bIx3RHeM13mdo0hBaMV+S9LyGTZw3tSTtUeJZQS3+Ex9oB8mIgWf

e3arnKTLB+V8ZfGBqP2VBRNr3z35z95BdF9pxVdpqNkLRZKvqipBXTq/vou1UqNrJ3D3mb3kf

xwKN4E5CWJgoRRa/FlJcAQwsJbunb4jYQFK6Gmo8BToKtfkxwvje99z91S+3FkTdMg+PMHxLI

FTzHoGeEZLZ8sxK3V8PyAOCg5GRVE5VKSqeFuEpdjJ2qoQZhz1gdf5mzmPeG6HH52wGPIgaxa

XfpyO2zflDeTLPc8L5AYg9IeIgdrtJdjD3BeicVtRN+dgQXh1Y9FZKOlcV2cjADNTm+TIqpW8

3iwvdHI2jel2kLxHXiQBnYtNUQ1YRN0+An/uMRKjDwa8UzwNxeHv4VezSiy4vqSHO/WxG6Srs

JzzHB69odrfXaaUNMjfN0b0VR8usNVKv5ZWRRNqr8+uKimzI+9bVMO52l2j411MmDIXxen6tu

CdWJOrrEk0O02pq4e4dYEp8VG+J0gL6yZ06ZM3qU39pWsRMcAgv5SG/Pqe02qJoTdJWmEywKu

0DvS+c4eO0JkHPsugLZIXMfrjKITDQbK2jH60vOoZwlQEQ+XqOg5qFf99fLNE8hDxVf75sLJV

Jc9g1ss4lDzJ6lK2UgLyzzKBlWJHAGDO6Om0WmeUm2MPJ0bDxLuGQW0Y+PdzxJ15UcwW/HUUT

EUZlRda9TyDUshniV7crnkZIAOKkh3889s8j/QIs7aG6nwMA6xEbFehfYFndTr27QgD4KzDyw

92y95mdlnn2BAEFF2CfnvjBbgOyPI+jtM+sMnkjeQqMhspSLjyKKBlz25bJzpnpaXx4rakhTE

+E2ka6VtyB2K5ZCzjnHlOD2dJQwa9F2FAq1MX2/+8PEHV+MHv1iUgAlY7CZfUNEhR3N9wHUS6

izIHVsYpXfJrif8uOpg67LQX49lVwuYMm9RKW6Ev02yax3tZFlmm6q2z2SEibnzhwBuFL6+3N

GUFrsRJ5a+iOWV3YMy4pQKwLRQ6Kuekkgu9EtjaCVpce8tyu+PyBUBjJIzJpiawodxVxRtJQC

sbZHkVWU6suHNK15okZVHjFfayYNZTHmiRXXHYSZy27ZtoDfW8pyF4h+a8dNXFtXnr4RHZAqT

e7jaXhWXl/9B+OD0M1ELtRcaUd0E+MyK36mqksHIjM9egytpixJ5TKqTM1smRTXpGKmJaGJPh

EDevjAdf4E0gOGsCG6sPVIugwAYiaSUHYFj8IdhkqybLKSonykulIxYqaWEQi/uOi/Tiw+AOu

RhIdFUl1xY2jXiry8bCcHGLGfFjtZfWW4pNzrhDO8QaQNZ4qR7sRySqTSQ/24dCLB6eHUVKpX

EKKff5HXQuqSQOZEawaTo2L8bqUl0PvfyZQzVv0rl/BndWeDoC3SXLpSMM4ekTG3Tm9GNHPOe

Engi5WS3k1/LNzbF2v28Ji8opQjcn/Ra7Y8uhhEEMbvbWMshGSTR0l4hyzgTVF+QeI274lmk2

R/dDMJFf6Ulqs/AfsYea+xf8bwUfJYurR64j6i2eIEoZm0pVYpjI4n6bY1hDiSRPt1a4KGRgd

0Dd5XuTaK1oulEHxKS2ipQlLHrdkOHqoTdMuC8XyMn0mLW1I4AcyRtmCg+r0yAVJrnh5QJdXU

8ivckeK3QfH86RKWT/u00sateX73eV0pOFJC+gT/32MCPi+nS7V9OlU0Op88Gr4smZoSh1F4L

rmx5Bj+PEyEkXPpPzI9njTsYP6D6V3dKVqJxoiBJRC31FBvkRI0pGdiANBEebNEeCv6oUVQOa

9/IcIfyyHkIMmcI6+XbHHzoJUUMX9jebTzTFu9mxuoW7UyIhSG+yDGzus2j1ZPLd9CFS4rfE6

Aj+qvbbQ0NaE1IRR1ZlZnW++OfpxW7m3vb/dkNXK4h6dUeoN85T7D8/fJk9BTOxAehzIIa4TA

x7wgrS5gsRwuomUzz635SL+B39bQaDqxceBAxXuXJDUoTVbcz+HIra9OuY9recLszXWLjHIn1

O28R+A4954ANG2c0bcOtCHU8J7zpKjI8UhcyJfCWnjbP006SmVRyi67W04xqC4X/MjyugOPVs

UrG/mOCL+vnUOqr1QjxhQffnQu2euQQ+9N8PgiaSZ6pZlHZ0F6HCBePR4uO9W1rwkpMnadKP+

qCfk38Vyzk0/CXjaXwMv3087acaY3YQnC5iTKJd/lWUP5qW+jGrbbeG+5dFMPyfMwYcqUjra/

NT4FfLU0M3KX9TSqmvwMdn+HY9tkUPzDK+EV0yc/AvdWkxifiyWxc5UadgFO1IgUjAZw6T6LJ

w2gjbzgjnLRLfh6jrOteFVAeFcslpzs1R7mpyB7q+qEuQo5kC3DlLc5gIPi0VzdcHsNhXztIe

9RAxv/rAg2+BNIL41dV+aAt4cCAJYHOhCfxwAjXe2pfBdUlxmMTQ0ae0VlBieldFNrjJVFv62

Xm1xbj6xg7oFK5ybw/1D1hGVGs9LSZPNJbxuX6GbRQ7MAytUaRGenOHQOwbOgPqNQSXAuqCPe

7KZbm1ijQPepKXlDtoZijAk/5hsWpPORyB6dO6zYvTz3W6rSih+spOP/w7qCXUw7QnSy0q0n7

E8+XjSmRQeeoGwH62OCKVjPvFM9WESleZSaYVNSYPg5o884w+qK87vRlJ9abAOD+C/aCXPDe6

5ld3qaE76keEYpnaw2oKUZhrgxxbVNDGooCVGVlkFBIsPWPECbCBqWTr64/yEz8t5u+YKGKa+

7TjEy0Niot67cQDPFK6zClH2r46TMaaqpvnaWypnJpsiUij32ek9SxhRx5DRFl7JvP2UHCrFF

9tk+ePFasw97oEM0hqNxuQ0OzGjWhsuidVfAg33SeKWcW4qlPJCRha0GsvfSdFWFk8NpntB6E

38VCNoIXkzSX9lM0ucYK8NvjEl7h272xaF9F2tkxYH9aPKjzfLn1KzSMK8CVd4MlNCgqVbmKs

HSIYI0KSy6vVwKVVfOA1EiQXDPl2qagmifXq0NNyBoe/vE6y24KLgzgxQ+N0B+IDK0qLAC7SZ

Fev1k11uK6MDvUGJsNqkrDKkopRmpBwR8rHDZfz9acTY/45XNCdPRvnhzzknyW9PW4e8xGuq1

jdSc/8+83XjngjjOaEMI0EaVSPtMBqWftjWVY7VP8smZuRJSF2hfV6VTI2O2+1BD2NGDriRXK

jOUfYevrf5YjTE8XqEGDTLf5FT96bEC/y8rVB8+CO+ynP1Oxg+njnID0BJzSnHMFTCqbPXa6L

vYCrLj3fWB0JJ6LjiJdavl1Uc4qBweBzaMbe0HqXZesF7/lqX+azs/19T8lu+UYsA/YMyoAUF

Mnuw2IBgqyr63GAVuonCxx0HgQF/ppqu8pc5GX6LR4a6GDIP6iJkaNVH1kjf+1coDp75AiTiE

xvEAOZTJJxRnSIIdb2MKT1CU655z68EOTh/OL3Chrcj6Ac/rUUE70RuLwcqnhV6YmViLtoYS4

TxUdme2DLR5xzpZnR7MbicEAGq4Z+dyz2ZbQRkxNswfAHOv1YI0oq2Yay3UpW7zOxrINtCA7Q

3KtA8nRE2rUz6cc/wqtCDF+epJv3mGhuJUmjw/K+CzlYQnhyXZP4pYcbyWPKa86xMr/yN6u3q

5fvfHK0=

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: We are looking for new customers, let us reward you!

Content analysis details: (11.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[78.135.89.167 listed in dnsbl.ahbl.org]

[78.135.89.167 listed in dnsbl.ahbl.org]

[78.135.89.167 listed in dnsbl.ahbl.org]

[78.135.89.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

[78.135.89.167 listed in will-spam-for-food.eu.org]

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} You have been selected for a Tupperware set

t.com/o/Youtube%2FCashflow%2Fvalidation.html?alt=3Dmedia" rel=3D"noopener n=

oreferrer" target=3D"_blank">We are looking for new customers, let us rewar=

d you!

2FpDQvCe-2FJv-2BeZRPzDigtRGrqqMfqbkT-2FKHmai6awvLwopVeWdiD6axHdsgs3-2B-2B1P=

f3VyZhc-2BWFOnwUyjzKbLexy6-2BbiJCuJneIVeYflDhnR5lFQCp9cU-2BNhjyIWUAtb3OBCvK=

gmvYlAaAd6tAvKNtyQe6z-2BqWx6r1ODAgBjiQcVnNqYIzHofVGxFjmL-2BtTEwW-2Fk1j7m6uB=

WH5SBithu532rcWamz3yF0H9Ro2XM-3D" alt=3D"" width=3D"1" height=3D"1" border=

=3D"0" style=3D"height:1px !important;width:1px !important;border-width:0 !=

important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0=

!important;margin-left:0 !important;padding-top:0 !important;padding-botto=

m:0 !important;padding-right:0 !important;padding-left:0 !important;"/>

I1.13KL0LD37.6KI2.25KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Name

Homepage

In reply to

Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enter the string from the spam-prevention image above: