Ukrainian daing spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Jun 2024 07:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sEUFZ-00000000MbI-0lo1
for dave@doctor.nl2k.ab.ca;
Tue, 04 Jun 2024 07:30:53 -0600
Resent-From: The Doctor
Resent-Date: Tue, 4 Jun 2024 07:30:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01olkn2101.outbound.protection.outlook.com ([40.92.53.101]:25984 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sETcL-00000000HMr-1Ipk
for doctor@nk.ca;
Tue, 04 Jun 2024 06:50:26 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=ZH174akvDfSbEuwxvvEL9v3js5H/LIxqx5UdsE9Y5ajFRDa1OQ+FaTCtKfwP7dXFWEyRIjhudI+HtXglG5ovW8AchTaRHaEUP7UbzQao68B3J41qzx4aYMQWVf/It4i/TlAV6VeDQfTeX/wePQd8zE9X+Uigk4K4LNMIz+qjK6bXmhaGYU3A2STG42uODgyNmWnhzxn8HCNZGjqjRrtm+dGC2hEGwCzDII7zKqCshcHFP8DEAWuD325u7IBX3tcohiyWJOejg/+gB9q7hxr+04PnhSb+Yn1VXUY8Ml0o88kL+5qi+A16Ksu3S8UT+Pcr1LzavQN3MgOzEEiyVxtSPw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=jZY7vljsK6wMKM42xHpF5YRboZ8KyE850xMiKt2nh/k=;
b=Q3GwPfeDJoPcVPBTIQ+cIn/iKUXW67piaeyQWGNnQRpn3p1wd+HO97Vwa6j1aCM//VtpysTJbEenhRZeZcU2fqqsUu5yvTq9gaMY/623nnhgpzFpYgdDDnc//33GnfrP4sY+SC3UcW33G0BdWc2ovd8569KPhqZkt649gdWdtjiqH5teNDjznmg7mIN6jepkr+GBydIfrQ6JvmDHLupHpt/Av/+qHwCw27l+cT8pwCe9p1DnGBplDHWR7TmDwrF7r733MhPiMU7bBs7nrBd7w+moIqEzXJ0cfOsghO+YgQFS366LDjBs5wERsu8LDDdt+1eiNafJ5QPsn742x9JWJw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=jZY7vljsK6wMKM42xHpF5YRboZ8KyE850xMiKt2nh/k=;
b=BIYwGwHUV14Aru/uPzqyNkPxjOaa0LbeVrNKP9qRA6RBDk56xGWAaSV1YiqBmmdjHCw+yglpcyY1bqCZyWlh2hLp47BXfVonhDvLguqAWWW0kBYtoAZ7S42qVjaqmuLPaPt9Q2qByURAFxycP+wAGtVC5CNfQWBsIu9UecT8/sb9g5AZTJ9Sn/cw9WpkSC7ACNXCxXPE5WiiaXtsP7RJ31KWt+PvWHCwEk4O1ZorB/BccQgw9qffrO0/FPK/PVJ5SoHh432eL0ke9nwdAHBuTpqGmINswrza5TxkQR7voWYM+jm22/odIvUzdFRQ8+DqFpA1UbBtfqoAqiEBDuAI5A==
Received: from JH0PR01MB6427.apcprd01.prod.exchangelabs.com
(2603:1096:990:97::5) by PUZPR01MB4659.apcprd01.prod.exchangelabs.com
(2603:1096:301:e8::7) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.27; Tue, 4 Jun
2024 12:47:05 +0000
Received: from JH0PR01MB6427.apcprd01.prod.exchangelabs.com
([fe80::73ba:11e0:76b0:84d]) by JH0PR01MB6427.apcprd01.prod.exchangelabs.com
([fe80::73ba:11e0:76b0:84d%5]) with mapi id 15.20.7633.021; Tue, 4 Jun 2024
12:47:05 +0000
From: "UkraineGirl"
Subject: You have a new group invitation.
Reply-To: "xhrpkmwv@outlook.com"
X-Mailer: Gmail
Date: Tue, 04 Jun 2024 14:47:00 +0200
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_B638_EB53F301.8EA99F0F"
To: Undisclosed recipients:;
X-TMN: [4tUGqrGThTAUr3oDSMvBirA0k2m3Nji7]
X-ClientProxiedBy: FR2P281CA0153.DEUP281.PROD.OUTLOOK.COM
(2603:10a6:d10:98::20) To JH0PR01MB6427.apcprd01.prod.exchangelabs.com
(2603:1096:990:97::5)
X-Microsoft-Original-Message-ID: <1.1165de4bf35392140487@DESKTOP-N0MTKOQ>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: JH0PR01MB6427:EE_|PUZPR01MB4659:EE_
X-MS-Office365-Filtering-Correlation-Id: fbf76cab-1777-4c20-326d-08dc84946f5d
X-Microsoft-Antispam:
BCL:0;ARA:14566002|9000799038|9400799015|42300799006|461199019|1680799042|3412199016|440099019|4601999003|1602099003|56899024|2406899030|6106899006|2006899009;
X-Microsoft-Antispam-Message-Info:
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
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?dW5XdnJ5M3lhVE1GcDBhdE9aRjd2RlJKcnV0TWFBa3ByLzhWaU5SWlRDNmtu?=
=?utf-8?B?em9wMGZlNFNnTHdGbkdSYVdVSWQvKzdBYlRqSDZZSXZuK1MwYXhHUHdXL2xH?=
=?utf-8?B?WUZzdzZycjI3cER0b0hkQ21HSWdwTzB2OXdOMGJUQ0Zpa3JCU0pScE9LMUMw?=
=?utf-8?B?T01Xa0E5S21ZY0tuMEF2TFp4MCtja01OZzdwYmpiQjF2ZWFiRXUvN25Ka2VB?=
=?utf-8?B?ZUx2V0pYd1d5U2NuYzhNZWNJYkIyS0t5QkpFNmpRNWtIRE5LQ0dCY2ptM2w3?=
=?utf-8?B?alR1U3dyRjB5NVJUMHp4akhPU2JMcDR3QTNlUENqRk5wRERlM1JFOGtPNFNS?=
=?utf-8?B?NWtkTFBzQzFnRS9rWVBDQ2tXWnVDelJDQjkxSWM4YjhPMkRLaWJyY29QbnA2?=
=?utf-8?B?c1pjdlBNZGxpTWprUUFFY1VaRFdHdS9ld0xaaUJjQnlNeEZFNmR2U0pTYkNM?=
=?utf-8?B?SXNnMGxnVTJETVpFbHhjRDcydW40S2JJRWVqdzNlUGFjanFqdHVPdy9mMk9J?=
=?utf-8?B?WVpCSHlWMVEvWVNuWURHZndKYVFtY1VJbEVSSEhHQmVwZTNlK3JRSGN0V0tG?=
=?utf-8?B?alQwd3UwckxTMGs4U1lvNzFsVmRFMkdyZ3JrL0NUVFAxOWF4bUx6M1ZCYWFL?=
=?utf-8?B?c29HQ2g5bUFGNS82NFMvd1ZzMG92Rkc4bG5aNXFwQnRvV3RlMm1ITGo4V1I3?=
=?utf-8?B?NEE5SEhxSXhhUFdNVDYzM1lKZmQxazQza2FwTmJOU01uRDBCaGoxVHBCTEda?=
=?utf-8?B?R1hQSWJ6dEJ4eWYrQTRJOWRnK1pZZ21UQmNaNzdGSi9GN1k1d3VFUTljSGFF?=
=?utf-8?B?clZXbmJHT1k0K0JUR3VhQmU4YVZzN0pIZm9HbkljNi8rWjJHY3RzK2hEMHJu?=
=?utf-8?B?SW9nWmlxc1lnV1JQR1ROL0lFWFdBcmIrY0hYaHk0KzYvRWF4ZjZabzhsa0ky?=
=?utf-8?B?aDYwR014RjhIQVpHTVFuRUJLNFl3T2lZbTUrcWUxalk0a0lpN1Fqb2pGUG9G?=
=?utf-8?B?UERpU2xOTWIxdjE1Nm5TUERnTXZxcDBSQkZwb2NUY0RSdW9mQ1Arb2oxMkw1?=
=?utf-8?B?NVJEQ3dKOFpWLzRYYUZCRXA4dXRmY1dPVzBIK0dXNjNpK0NsWWQ2NFRBTDNm?=
=?utf-8?B?TFRkOXRBM0p3alJjZWt2THhEK2tqN2dKSmdRKzMrczhubSsrVUhISHZPbEdo?=
=?utf-8?B?bS9Fc1lyMVlsK1hPOG5CSDJjOXhUYXA0R3Q5M0tkdUdvR01oaFpXczVCVEYv?=
=?utf-8?B?OGNtV2N0WHZMRHNoLzJBQ3k1eGZrU2N0VWhNUzhGd0NqTWJsMFNlcm9yTVJa?=
=?utf-8?B?YWxlMDREZktseG12SUZ2QmhJZ2tRZWZBa3hheXlPNmt2RUY0RkYxUTJMTFI2?=
=?utf-8?B?WnFjeUxBRS9IbThDbU5EckhWSTUrYTNtZmhTMEJJdG5ab1VOb1o3VW1zTld3?=
=?utf-8?B?QnVIRjlsWHBPaUVNeDBHRU51NWQ0WU43NUpQY2EzUE1CME5UNEw2Y0NxaU9Z?=
=?utf-8?B?b1YvbkV2TFdYaEJHbE1hR0JmZjJRQXZlWktzRlBhd0ZLQjBUbzNjaVdybkJj?=
=?utf-8?B?d09wY2JhZDY3SFJPRG5ma3VWQ1RYcE40THhMV0thRzdUS2VOc3o1c0lxU1hG?=
=?utf-8?Q?qA77Uz1lckTDr1pTYH8Qjzs+7WGJ5A7JZvCSJP8Vju8o=3D?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fbf76cab-1777-4c20-326d-08dc84946f5d
X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB6427.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Jun 2024 12:47:05.2377
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR01MB4659
X-Spam_score: 14.5
X-Spam_score_int: 145
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Connect with Elena on LoveLink 🌟 Meet Elena on LoveLink!
🌟 Hello, I'm Elena from Ukraine. I'm searching for that special someone,
and it might just be you! I'd love for you to join me on LoveLink, a fantastic
platform where real connections are made.
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.53.101 listed in list.dnswl.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: rebrand.ly]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.53.101 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.0 HK_RANDOM_FROM From username looks random
3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[xhrpkmwv(at)outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} You have a new group invitation.
------=_NextPart_000_B638_EB53F301.8EA99F0F
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Connect with Elena on LoveLink
=F0=9F=8C=9F Meet Elena on LoveLink! =F0=9F=8C=9F
Hello,
I'm Elena from Ukraine. I'm searching for that special someone, and it mig=
ht just be you! I'd love for you to join me on LoveLink, a fantastic platfo=
rm where real connections are made.
On LoveLink, you can connect with people who share your interests and value=
s. Here=E2=80=99s why you should join me:
Welcome
Personalized Matches: Our advanced matching system pairs you with individua=
ls who are perfect for you.
Meaningful Conversations: Enjoy engaging discussions with like-minded indiv=
iduals.
Verified Profiles: Feel secure knowing you're connecting with genuine peopl=
e.
Eager to meet you,
Elena
If you wish to stop receiving these emails from us, click here to unsubscr=
ibe.
=
------=_NextPart_000_B638_EB53F301.8EA99F0F
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=
=0A=
0">=0A=
=0A=<br /><br />
Connect with Elena on LoveLink=0A=<br /><br />
=0A=
"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=0A=
=0A=
=0A=
=0A=
zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
Hello,=0A=
=0A=
000;line-height:1.6;">=0A=
I'm Elena from Ukraine. I'm searching for that special someone, an=
d it might just be you! I'd love for you to join me on LoveLink, a fantasti=
c platform where real connections are made.=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
On LoveLink, you can connect with people who share your interests =
and values. Here=E2=80=99s why you should join me:
=0A=
=0A=
lor:#ff4081;color:#ffffff;text-decoration:none;padding:12px 24px;font-size:=
18px;border-radius:30px;">Welcome
>
=0A=
=0A=
![](3D"https://lh7-us.googleusercontent.com/cs8YFNsTyv8WQ1_zE5HcTLiOGE=<br)
rMDM769_xNsa_kFw6u20f8MjLbg6PP6BbjXoGtZsPhj51encowTHDGPp0Ao4fkqmFUMDTxTvIyz=
Rzu8AFjz1S7T-cf35Z2nG5C_Rp4kK8toZa48m7c5yHBN7dzMqE" alt=3D"" width=3D"624" =
height=3D"265"> =0A=
=0A=
family:Arial, sans-serif;color:#000000;line-height:1.6;text-align:left;">=
=0A=
=0A=
Personalized Matches: Our advanced matching syst=
em pairs you with individuals who are perfect for you.=0A=
=0A=
=0A=
=0A=
Meaningful Conversations: Enjoy engaging discuss=
ions with like-minded individuals.=0A=
=0A=
=0A=
=0A=
Verified Profiles: Feel secure knowing you're co=
nnecting with genuine people.=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
Eager to meet you,=0A=
=0A=
000;line-height:1.6;">=0A=
Elena=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
666;text-align:center;">=0A=
If you wish to stop receiving these emails from us,
p://rebrand.ly/inuuryw" style=3D"color:#666666;text-decoration:underline;fo=
nt-weight:bold;">click here to unsubscribe.=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=
------=_NextPart_000_B638_EB53F301.8EA99F0F--
I1.60KL0LD41.0KI2.24KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Jun 2024 07:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sEUFZ-00000000MbI-0lo1
for dave@doctor.nl2k.ab.ca;
Tue, 04 Jun 2024 07:30:53 -0600
Resent-From: The Doctor
Resent-Date: Tue, 4 Jun 2024 07:30:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01olkn2101.outbound.protection.outlook.com ([40.92.53.101]:25984 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sETcL-00000000HMr-1Ipk
for doctor@nk.ca;
Tue, 04 Jun 2024 06:50:26 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=ZH174akvDfSbEuwxvvEL9v3js5H/LIxqx5UdsE9Y5ajFRDa1OQ+FaTCtKfwP7dXFWEyRIjhudI+HtXglG5ovW8AchTaRHaEUP7UbzQao68B3J41qzx4aYMQWVf/It4i/TlAV6VeDQfTeX/wePQd8zE9X+Uigk4K4LNMIz+qjK6bXmhaGYU3A2STG42uODgyNmWnhzxn8HCNZGjqjRrtm+dGC2hEGwCzDII7zKqCshcHFP8DEAWuD325u7IBX3tcohiyWJOejg/+gB9q7hxr+04PnhSb+Yn1VXUY8Ml0o88kL+5qi+A16Ksu3S8UT+Pcr1LzavQN3MgOzEEiyVxtSPw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=jZY7vljsK6wMKM42xHpF5YRboZ8KyE850xMiKt2nh/k=;
b=Q3GwPfeDJoPcVPBTIQ+cIn/iKUXW67piaeyQWGNnQRpn3p1wd+HO97Vwa6j1aCM//VtpysTJbEenhRZeZcU2fqqsUu5yvTq9gaMY/623nnhgpzFpYgdDDnc//33GnfrP4sY+SC3UcW33G0BdWc2ovd8569KPhqZkt649gdWdtjiqH5teNDjznmg7mIN6jepkr+GBydIfrQ6JvmDHLupHpt/Av/+qHwCw27l+cT8pwCe9p1DnGBplDHWR7TmDwrF7r733MhPiMU7bBs7nrBd7w+moIqEzXJ0cfOsghO+YgQFS366LDjBs5wERsu8LDDdt+1eiNafJ5QPsn742x9JWJw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=jZY7vljsK6wMKM42xHpF5YRboZ8KyE850xMiKt2nh/k=;
b=BIYwGwHUV14Aru/uPzqyNkPxjOaa0LbeVrNKP9qRA6RBDk56xGWAaSV1YiqBmmdjHCw+yglpcyY1bqCZyWlh2hLp47BXfVonhDvLguqAWWW0kBYtoAZ7S42qVjaqmuLPaPt9Q2qByURAFxycP+wAGtVC5CNfQWBsIu9UecT8/sb9g5AZTJ9Sn/cw9WpkSC7ACNXCxXPE5WiiaXtsP7RJ31KWt+PvWHCwEk4O1ZorB/BccQgw9qffrO0/FPK/PVJ5SoHh432eL0ke9nwdAHBuTpqGmINswrza5TxkQR7voWYM+jm22/odIvUzdFRQ8+DqFpA1UbBtfqoAqiEBDuAI5A==
Received: from JH0PR01MB6427.apcprd01.prod.exchangelabs.com
(2603:1096:990:97::5) by PUZPR01MB4659.apcprd01.prod.exchangelabs.com
(2603:1096:301:e8::7) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.27; Tue, 4 Jun
2024 12:47:05 +0000
Received: from JH0PR01MB6427.apcprd01.prod.exchangelabs.com
([fe80::73ba:11e0:76b0:84d]) by JH0PR01MB6427.apcprd01.prod.exchangelabs.com
([fe80::73ba:11e0:76b0:84d%5]) with mapi id 15.20.7633.021; Tue, 4 Jun 2024
12:47:05 +0000
From: "UkraineGirl"
Subject: You have a new group invitation.
Reply-To: "xhrpkmwv@outlook.com"
X-Mailer: Gmail
Date: Tue, 04 Jun 2024 14:47:00 +0200
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_B638_EB53F301.8EA99F0F"
To: Undisclosed recipients:;
X-TMN: [4tUGqrGThTAUr3oDSMvBirA0k2m3Nji7]
X-ClientProxiedBy: FR2P281CA0153.DEUP281.PROD.OUTLOOK.COM
(2603:10a6:d10:98::20) To JH0PR01MB6427.apcprd01.prod.exchangelabs.com
(2603:1096:990:97::5)
X-Microsoft-Original-Message-ID: <1.1165de4bf35392140487@DESKTOP-N0MTKOQ>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: JH0PR01MB6427:EE_|PUZPR01MB4659:EE_
X-MS-Office365-Filtering-Correlation-Id: fbf76cab-1777-4c20-326d-08dc84946f5d
X-Microsoft-Antispam:
BCL:0;ARA:14566002|9000799038|9400799015|42300799006|461199019|1680799042|3412199016|440099019|4601999003|1602099003|56899024|2406899030|6106899006|2006899009;
X-Microsoft-Antispam-Message-Info:
zUEcwGjM/zm6V//Ypdu/QUKWwqQdj0+3vaJqqVRGCPAndh7CfNZkFdbf9ftcmR1Os35urlL8IijYN5Ufw0HlcXsR+kp+uBwLIxuEiplmPo4v83Z35rcjeVsraduaHfRLv2f5vorYWc5j2CZf9TGzvxMNr0zOiG+H4F9/A3QJJSso4ongJaJhskGE7Td5pdv9lgPnyg8p9YTu96u5tL041qM0EFOH2CMhTtZYSO5L5I3IJpOnTET3gzzjTY8ooqdOHlcCulpzssl3Mq8KJXFsd1VWBmChlcXS25i1thWLScOVoOGA0OtQfYGNn29jOXIFbgIAQZPzISHvjONaLBukz+SWg6azR4b+qsrdi6wpifPGmLl37nk5YKgI0NjXHvn7+XUqW7iRA5F0cKKCHLldqR8nr9HLHAyM6Fmxj4tIcAJO6c/Dowr2m5T4oIWuzGH+fkpZGawb4ayjxYgibknLW1YFV61kSKH/p//WDHozcmR/TLdiuECfKHrG7YtRID5L4OhONyvfO0RUjzhQvS5iL5CBMkVVBmgHFStqU3muzMbIpU/hgq6w2deJLXL8Wx7Vee9azXry/hxi/OHljdixoytKw5N1tg1Y3xjJQmtPcRH7va/gV4K9EJozw4FDqIlOjQSjgdDlBHlntk5dh3hlcLNjqB3+GS/JljYIwdPFOSNUrecZyui6RFo3SU2QtvHrUVPnQpoh8JSL1vMaPwxUJJ8IBv0aAEuVN5kdL5a1SLJP3g7baWkeoiJBLlyWTVVN9ouq/BAuBNRGl+y5qlhIN+YJZoVaGGREh00QxfgptW5+Qx9/4t3syV/V8995oBwu
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?dW5XdnJ5M3lhVE1GcDBhdE9aRjd2RlJKcnV0TWFBa3ByLzhWaU5SWlRDNmtu?=
=?utf-8?B?em9wMGZlNFNnTHdGbkdSYVdVSWQvKzdBYlRqSDZZSXZuK1MwYXhHUHdXL2xH?=
=?utf-8?B?WUZzdzZycjI3cER0b0hkQ21HSWdwTzB2OXdOMGJUQ0Zpa3JCU0pScE9LMUMw?=
=?utf-8?B?T01Xa0E5S21ZY0tuMEF2TFp4MCtja01OZzdwYmpiQjF2ZWFiRXUvN25Ka2VB?=
=?utf-8?B?ZUx2V0pYd1d5U2NuYzhNZWNJYkIyS0t5QkpFNmpRNWtIRE5LQ0dCY2ptM2w3?=
=?utf-8?B?alR1U3dyRjB5NVJUMHp4akhPU2JMcDR3QTNlUENqRk5wRERlM1JFOGtPNFNS?=
=?utf-8?B?NWtkTFBzQzFnRS9rWVBDQ2tXWnVDelJDQjkxSWM4YjhPMkRLaWJyY29QbnA2?=
=?utf-8?B?c1pjdlBNZGxpTWprUUFFY1VaRFdHdS9ld0xaaUJjQnlNeEZFNmR2U0pTYkNM?=
=?utf-8?B?SXNnMGxnVTJETVpFbHhjRDcydW40S2JJRWVqdzNlUGFjanFqdHVPdy9mMk9J?=
=?utf-8?B?WVpCSHlWMVEvWVNuWURHZndKYVFtY1VJbEVSSEhHQmVwZTNlK3JRSGN0V0tG?=
=?utf-8?B?alQwd3UwckxTMGs4U1lvNzFsVmRFMkdyZ3JrL0NUVFAxOWF4bUx6M1ZCYWFL?=
=?utf-8?B?c29HQ2g5bUFGNS82NFMvd1ZzMG92Rkc4bG5aNXFwQnRvV3RlMm1ITGo4V1I3?=
=?utf-8?B?NEE5SEhxSXhhUFdNVDYzM1lKZmQxazQza2FwTmJOU01uRDBCaGoxVHBCTEda?=
=?utf-8?B?R1hQSWJ6dEJ4eWYrQTRJOWRnK1pZZ21UQmNaNzdGSi9GN1k1d3VFUTljSGFF?=
=?utf-8?B?clZXbmJHT1k0K0JUR3VhQmU4YVZzN0pIZm9HbkljNi8rWjJHY3RzK2hEMHJu?=
=?utf-8?B?SW9nWmlxc1lnV1JQR1ROL0lFWFdBcmIrY0hYaHk0KzYvRWF4ZjZabzhsa0ky?=
=?utf-8?B?aDYwR014RjhIQVpHTVFuRUJLNFl3T2lZbTUrcWUxalk0a0lpN1Fqb2pGUG9G?=
=?utf-8?B?UERpU2xOTWIxdjE1Nm5TUERnTXZxcDBSQkZwb2NUY0RSdW9mQ1Arb2oxMkw1?=
=?utf-8?B?NVJEQ3dKOFpWLzRYYUZCRXA4dXRmY1dPVzBIK0dXNjNpK0NsWWQ2NFRBTDNm?=
=?utf-8?B?TFRkOXRBM0p3alJjZWt2THhEK2tqN2dKSmdRKzMrczhubSsrVUhISHZPbEdo?=
=?utf-8?B?bS9Fc1lyMVlsK1hPOG5CSDJjOXhUYXA0R3Q5M0tkdUdvR01oaFpXczVCVEYv?=
=?utf-8?B?OGNtV2N0WHZMRHNoLzJBQ3k1eGZrU2N0VWhNUzhGd0NqTWJsMFNlcm9yTVJa?=
=?utf-8?B?YWxlMDREZktseG12SUZ2QmhJZ2tRZWZBa3hheXlPNmt2RUY0RkYxUTJMTFI2?=
=?utf-8?B?WnFjeUxBRS9IbThDbU5EckhWSTUrYTNtZmhTMEJJdG5ab1VOb1o3VW1zTld3?=
=?utf-8?B?QnVIRjlsWHBPaUVNeDBHRU51NWQ0WU43NUpQY2EzUE1CME5UNEw2Y0NxaU9Z?=
=?utf-8?B?b1YvbkV2TFdYaEJHbE1hR0JmZjJRQXZlWktzRlBhd0ZLQjBUbzNjaVdybkJj?=
=?utf-8?B?d09wY2JhZDY3SFJPRG5ma3VWQ1RYcE40THhMV0thRzdUS2VOc3o1c0lxU1hG?=
=?utf-8?Q?qA77Uz1lckTDr1pTYH8Qjzs+7WGJ5A7JZvCSJP8Vju8o=3D?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fbf76cab-1777-4c20-326d-08dc84946f5d
X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB6427.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Jun 2024 12:47:05.2377
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR01MB4659
X-Spam_score: 14.5
X-Spam_score_int: 145
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Connect with Elena on LoveLink 🌟 Meet Elena on LoveLink!
🌟 Hello, I'm Elena from Ukraine. I'm searching for that special someone,
and it might just be you! I'd love for you to join me on LoveLink, a fantastic
platform where real connections are made.
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[40.92.53.101 listed in dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
[2603:1096:990:97:0:0:0:5 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.92.53.101 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[40.92.53.101 listed in will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:990:97:0:0:0:5 listed in]
[will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.53.101 listed in list.dnswl.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: rebrand.ly]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.53.101 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.0 HK_RANDOM_FROM From username looks random
3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[xhrpkmwv(at)outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} You have a new group invitation.
------=_NextPart_000_B638_EB53F301.8EA99F0F
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Connect with Elena on LoveLink
=F0=9F=8C=9F Meet Elena on LoveLink! =F0=9F=8C=9F
Hello,
I'm Elena from Ukraine. I'm searching for that special someone, and it mig=
ht just be you! I'd love for you to join me on LoveLink, a fantastic platfo=
rm where real connections are made.
On LoveLink, you can connect with people who share your interests and value=
s. Here=E2=80=99s why you should join me:
Welcome
Personalized Matches: Our advanced matching system pairs you with individua=
ls who are perfect for you.
Meaningful Conversations: Enjoy engaging discussions with like-minded indiv=
iduals.
Verified Profiles: Feel secure knowing you're connecting with genuine peopl=
e.
Eager to meet you,
Elena
If you wish to stop receiving these emails from us, click here to unsubscr=
ibe.
=
------=_NextPart_000_B638_EB53F301.8EA99F0F
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=
=0A=
0">=0A=
"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=0A=
=0A=
zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=
=0A=
=0A=
=F0=9F=8C=9F Meet Elena on LoveLink! =F0=9F=8C=9F=0A=
=0A=000;line-height:1.6;">=0A=
Hello,=0A=
=0A=
000;line-height:1.6;">=0A=
I'm Elena from Ukraine. I'm searching for that special someone, an=
d it might just be you! I'd love for you to join me on LoveLink, a fantasti=
c platform where real connections are made.=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
On LoveLink, you can connect with people who share your interests =
and values. Here=E2=80=99s why you should join me:
=0A=
=0A=
lor:#ff4081;color:#ffffff;text-decoration:none;padding:12px 24px;font-size:=
18px;border-radius:30px;">Welcome
>
=0A=
=0A=
rMDM769_xNsa_kFw6u20f8MjLbg6PP6BbjXoGtZsPhj51encowTHDGPp0Ao4fkqmFUMDTxTvIyz=
Rzu8AFjz1S7T-cf35Z2nG5C_Rp4kK8toZa48m7c5yHBN7dzMqE" alt=3D"" width=3D"624" =
height=3D"265"> =0A=
=0A=
family:Arial, sans-serif;color:#000000;line-height:1.6;text-align:left;">=
=0A=
Personalized Matches: Our advanced matching syst=
em pairs you with individuals who are perfect for you.=0A=
=0A=
Meaningful Conversations: Enjoy engaging discuss=
ions with like-minded individuals.=0A=
=0A=
Verified Profiles: Feel secure knowing you're co=
nnecting with genuine people.=0A=
=0A=
000;line-height:1.6;">=0A=
=0A=
=0A=
000;line-height:1.6;">=0A=
Eager to meet you,=0A=
=0A=
000;line-height:1.6;">=0A=
Elena=0A=
=0A=
666;text-align:center;">=0A=
If you wish to stop receiving these emails from us,
p://rebrand.ly/inuuryw" style=3D"color:#666666;text-decoration:underline;fo=
nt-weight:bold;">click here to unsubscribe.=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=
------=_NextPart_000_B638_EB53F301.8EA99F0F--
I1.60KL0LD41.0KI2.24KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments