Canadian Who's Who spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Nov 2024 13:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tGlYz-00000000EYB-1YP4

for dave@doctor.nl2k.ab.ca;

Thu, 28 Nov 2024 13:56:37 -0700

Resent-From: The Doctor

Resent-Date: Thu, 28 Nov 2024 13:56:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f206.google.com ([209.85.219.206]:41151)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tGhGU-00000000KTu-10Xv

for sales@nk.ca;

Thu, 28 Nov 2024 09:21:18 -0700

Received: by mail-yb1-f206.google.com with SMTP id 3f1490d57ef6-e396de93fd2so184561276.0

for ; Thu, 28 Nov 2024 08:19:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wcbrb.com; s=google; t=1732810753; x=1733415553; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=cynhIlOMvdPn14UwFAeiaHk74y44eQXVdW6YyoD96Yg=;

b=XwGF6HJc0AeMCl7zB2CNrYpdVFnDKPqpZmF5+ZVd8wbLXUeCP8X/r5oXRQ/XQz6L4i

f1nw47v5vxG+na/8mtPH0sOdTHh4Iq6os5tR4nUXd19iRq6v98N4syFUSmJiOMl5Pq0/

YfNJ3gcUQ6P2ukfkz4e0Pf6rS+B+u1A5CHscK6CnXrnfSUeJWhEtU7QbIg7Y01/bUR91

egKDRcYv64MqUH5P/TCCF60l3Nm5XSbdeWZbOkeFXLaJvU6lEbxm3BpbGqMBtR/VvgCO

/8QNEdhxjThi1P+rq/WQc5u/mbBtkUrhBibvJINrIRarqz0/RUieiEpshePoubT/msrz

xFZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1732810753; x=1733415553;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=cynhIlOMvdPn14UwFAeiaHk74y44eQXVdW6YyoD96Yg=;

b=bzeRpxeeaMQiL1S0GSYQA6x4ou5LOkDKy1Dzvk6wwPpuc5GnwkOijDcljdJGoq/bBM

dTtvuVmQANbMUisCLvzW4uBAIpuUJOVt40rxHBPodKjRzkKZz9C1/PYLPyY5TQhqDM1i

ELxA144jbr9WM57wBAHMdI6LwKU30zLgkIhWu69D6mlH9WZox6P0OwPgCgI8RBzfrRSr

MAH4vCWXulD9oUrx77dgKVWeyLZtDO0KauINxOUq8sMBMp3tf1tXU1x/QVHOcY/AXHyb

IfU6Nxaxz15zsn0me1D6HqH41AkzDUbhhHAB/NsEXnh+rMGKni/8Bq/URanU4xYKJUch

J5cw==

X-Gm-Message-State: AOJu0YzbvZ3nT1WLkdKkhoUmTXR4oZRFo15DDIobfevxvrIKLBmMBJ7t

qIJJ2AYdiIe/uw0EM8DZLaAaXMr6oFR97MtQ4bNG/AVfWubhNkkQ9OOXytMLDcX6yteoXM4h0ll

ZNkGcRajVw8/td6/23UVi

X-Google-Smtp-Source: AGHT+IEDBosIxiDo/PLFLR+6ja4VGqVDBBORk4x9bBhsyNQEqCf4ZYo4074hLHN1FRu5gWnC1q6adHA9Tw==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:470b:b0:6e7:32a5:6566 with SMTP id

00721157ae682-6ef372106b3mr22344447b3.4.1732810753426; Thu, 28 Nov 2024

08:19:13 -0800 (PST)

Message-ID:

Date: Thu, 28 Nov 2024 16:19:13 +0000

Subject: Synergy selected for CBRB Best Businesses In Canada 2024

From: canadareview@wcbrb.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses In Canada 2024. CBRB Canadian Business Review Board

assesses and evaluates all the businesses in Canada and verifies only the

top businesses for meeting the CBRB Canadian Business Review Standards.



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

[209.85.219.206 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.206 listed in dnsbl.ahbl.org]

[209.85.219.206 listed in dnsbl.ahbl.org]

[209.85.219.206 listed in dnsbl.ahbl.org]

[209.85.219.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.206 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.206 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.206 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Synergy selected for CBRB Best Businesses In Canada 2024



SGVsbG8sDQoNCkNvbmdyYXR1bGF0aW9ucyBvbiBiZWluZyBzZWxlY3RlZCBhbmQgYXBwcm92ZWQg

Zm9yIHRoZSBDQlJCIEJlc3QgQnVzaW5lc3NlcyAgDQpJbiBDYW5hZGEgMjAyNC4NCg0KQ0JSQiBD

YW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcgQm9hcmQgYXNzZXNzZXMgYW5kIGV2YWx1YXRlcyBhbGwg

dGhlICANCmJ1c2luZXNzZXMgaW4gQ2FuYWRhIGFuZCB2ZXJpZmllcyBvbmx5IHRoZSB0b3AgYnVz

aW5lc3NlcyBmb3IgbWVldGluZyB0aGUgIA0KQ0JSQiBDYW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcg

U3RhbmRhcmRzLg0KDQpSZXByZXNlbnRpbmcgdGhlIEJlc3QgQnVzaW5lc3NlcyBpbiBDYW5hZGEs

IHRoZSBDQlJCIENhbmFkaWFuIEJ1c2luZXNzICANClJldmlldyBCb2FyZCBoYXMgZm91bmQgdGhh

dCB5b3VyIGJ1c2luZXNzIG1lZXRzIHRoZSBDQlJCIENhbmFkaWFuIEJ1c2luZXNzICANClJldmll

dyBTdGFuZGFyZHMgYW5kIHdlIGxvb2sgZm9yd2FyZCB0byByZWNvbW1lbmRpbmcgeW91ciBzZXJ2

aWNlcy4NCg0KTWVtYmVyc2hpcCBpbiB0aGUgQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRh

IDIwMjQgaW5jbHVkZXMgbGlzdGluZyBpbiAgDQp0aGUgZXhjbHVzaXZlIEJlc3QgQnVzaW5lc3Nl

cyBJbiBDYW5hZGEgMjAyNCBEaXJlY3RvcnksIENCUkIgQmVzdCAgDQpCdXNpbmVzc2VzIEluIENh

bmFkYSAyMDI0IFZlcmlmaWNhdGlvbiBDZXJ0aWZpY2F0ZSAmICBCYWRnZSwgYW5kICANCnByb21v

dGlvbmFsIGNvbnRlbnQgdG8gcHJvbW90ZSBTeW5lcmd5IGNvbW1pdG1lbnQgdG8gdXBob2xkaW5n

Og0KDQotIFN0cm9uZyBWaXNpb24NCi0gQ3VzdG9tZXItY2VudHJpYyBBcHByb2FjaA0KLSBDdXN0

b21lciBTYXRpc2ZhY3Rpb24NCi0gQnVzaW5lc3MgTGVhZGVyc2hpcA0KDQpGb2xsb3dpbmcgcmVn

aXN0cmF0aW9uLCB5b3Ugd2lsbCByZWNlaXZlOg0KDQotQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4g

Q2FuYWRhIDIwMjQgVmVyaWZpY2F0aW9uIENlcnRpZmljYXRlDQoNCi1DQlJCIEJlc3QgQnVzaW5l

c3NlcyBJbiBDYW5hZGEgMjAyNCBWZXJpZmljYXRpb24gQmFkZ2UNCg0KLUNCUkIgQmVzdCBCdXNp

bmVzc2VzIEluIENhbmFkYSAyMDI0IERpcmVjdG9yeSBMaXN0aW5nICYgUHJvZmlsZSBQYWdlDQoN

CkNCUkIgQ2FuYWRpYW4gQnVzaW5lc3MgUmV2aWV3IEJvYXJkIHdpbGwgcHJvbW90ZSB5b3VyIGJ1

c2luZXNzIGV4Y2VsbGVuY2UgIA0Kb24gb2ZmaWNpYWwgQ0JSQiBzb2NpYWwgbWVkaWEuDQoNClRv

IGFjY2VwdCB5b3VyIENCUkIgQmVzdCBCdXNpbmVzc2VzIEluIENhbmFkYSBNZW1iZXJzaGlwICYg

VmVyaWZpY2F0aW9uLCAgDQpwbGVhc2Ugc3VibWl0IHRoZSBmb2xsb3dpbmcgZm9ybToNCmh0dHBz

Oi8vZm9ybXMuZ2xlL0U3bzFvQk5yaGloaEhzajY2DQoNCklmIHlvdSBoYXZlIGFueSBxdWVzdGlv

bnMsIGZlZWwgZnJlZSB0byBsZXQgdXMga25vdyENCg0KKEZvciBhbGwgZnV0dXJlIGVtYWlscywg

cGxlYXNlIHNlbmQgeW91ciByZXNwb25zZSB0byDigJxJbmZvQHRoZWNicmIuY29t4oCdKQ0KDQpD

b2xpbiBCYWlsZXkNCkNCUkIgQ2FuYWRpYW4gQnVzaW5lc3MgUmV2aWV3IEJvYXJkDQpNZW1iZXJz

aGlwIENvbW1pdHRlZQ0KQmVzdCBCdXNpbmVzc2VzIEluIENhbmFkYQ0Kd3d3LnRoZWNicmIuY29t

DQpAdGhlY2JyYg0KQHRoZWNicmJfY2FuYWRhDQoNCg0KDQoNCg0KSWYgeW91IHdvdWxkIGxpa2Ug

dG8gdW5zdWJzY3JpYmUgZnJvbSBmdXR1cmUgY29ycmVzcG9uZGVuY2UsIHBsZWFzZSBlbWFpbCAg

DQp5b3VyIHJlcXVlc3QgdG8gdW5zdWJzY3JpYmVAdGhlY2JyYi5jb20NCg==

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA