X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Dec 2024 14:22:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRHlh-000000002Ev-02dq
for dave@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 14:21:13 -0700
Resent-From: The Doctor
Resent-Date: Fri, 27 Dec 2024 14:21:12 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.optimails.info ([57.128.219.178]:33503 helo=vps-2096059c.vps.ovh.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRHX7-000000001ZX-2kFk
for root@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 14:06:15 -0700
Received: from optimails.info (vps-2096059c.vps.ovh.net [57.128.219.178])
by vps-2096059c.vps.ovh.net (Postfix) with ESMTPSA id AB46B3077303
for ; Fri, 27 Dec 2024 21:04:25 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimails.info;
s=default; t=1735333465;
bh=KeeRqQopjVPbaFWMnnCwVaCyGyi1u9GAcRkepH8Wl9I=; h=Subject:From:To;
b=VU8CuOdv6cxtQl7p5BnAeoqqCcHQLtQ4aMG4TezfdeN2EqurmW4ClCa+Kpgj/10ph
Qd7mC4X0EtFRhEI8fl0skWff+6HvIDlSQlnQACI7lvwj2QIwyX+MytrWeObTV2VQ6Y
4spQOO3blrlt8KoGiprES1reElOYM31PZ/NQsaYXLuDd2fCCE92ZmN8ixvxXLkaOAp
9jmK7TwchuL5w2cZ2/4MkGygsn8VYirQjbEUoeMR6hZe5ygdLgC2ET0aOvz3viGnhH
9D3fwAMXoNjC4iLwRckpf2l7Vk3VJfwugxDDeXA1ulrxrxIDbdEf9IwIeKrlGj9bRe
btlEP0BMmdKGQ==
Authentication-Results: vps-2096059c.vps.ovh.net;
spf=pass (sender IP is 57.128.219.178) smtp.mailfrom=vyutrhsdgsgsagf@optimails.info smtp.helo=optimails.info
Received-SPF: pass (vps-2096059c.vps.ovh.net: connection is authenticated)
Message-ID:
Date: Fri, 27 Dec 2024 21:04:25 +0000
Subject: 3,000 USDT Casino Cashback Bonus!
From: Ubet
Reply-To: Ubet
To: "root@doctor.nl2k.ab.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1735333465_da1a2345e73d148418d5c3b0bf552547_=_"
X-Report-Abuse: https://optimails.info/index.php/campaigns/bw421ghroj3ec/report-abuse/jf619wq2wrb51/nd4339wbn2fb7
x-job: bw421ghroj3ec
X-EBS: https://optimails.info/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe: ,
List-Id: jf619wq2wrb51
Feedback-ID: bw421ghroj3ec:nd4339wbn2fb7:jf619wq2wrb51:ks531ferkb96b
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: View online here Unsubscribe Here [https://optimails.info/index.php/campaigns/bw421ghroj3ec/track-url/nd4339wbn2fb7/0d683208b81c05f8c5399d8fdb421cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free spins on me. Let’s
have some fun! UBET | Casino & Sports Betting UBET | Casino & Sports Betting
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: optimails.info]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-trusted.bondedsender.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-accredit.habeas.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[57.128.219.178 listed in bl.score.senderscore.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: optimails.info]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.8 IMG_ONLY_FM_DOM_INFO HTML image-only message from .info domain
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} 3,000 USDT Casino Cashback Bonus!
--_=_swift_1735333465_da1a2345e73d148418d5c3b0bf552547_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
View online here
Unsubscribe Here
[https://optimails.info/index.php/=
campaigns/bw421ghroj3ec/track-url/nd4339wbn2fb7/0d683208b81c05f8c5399d8fdb4=
21cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free =
spins on me.
Let=E2=80=99s have some fun! UBET | Casino & Sports Betting =
UBET | Casino &
Sports Betting
--_=_swift_1735333465_da1a2345e73d148418d5c3b0bf552547_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=093,000 USDT Casino Cashback Bonus!
/bw421ghroj3ec/track-url/nd4339wbn2fb7/80427e51a125b8f180d24cc7d52fcc1ba78c=
78e6">View online here
![](3D"http://images.ctfassets.net/75kgw3le20bn/50OJNwIuyvmGCx83VuXRnn=<br)
/543778ec9918ac578e52525d2b59cbfb/WELCOME_OFFER_-1.jpg" style=3D"height: 11=
34px; width: 600px;" />
Unsubscribe
s.info/index.php/campaigns/bw421ghroj3ec/track-url/nd4339wbn2fb7/0d683208b8=
1c05f8c5399d8fdb421cbb0b123219">Here
or:transparent;">Hey! Claim my 100% deposit match bonus and get 50 free spi=
ns on me. Let=E2=80=99s have some fun! UBET | Casino & Sports Betting UBET =
| Casino & Sports Betting
![](3D"https://optimails.info/index.php/campa=<br)
igns/bw421ghroj3ec/track-opening/nd4339wbn2fb7" alt=3D"" />
--_=_swift_1735333465_da1a2345e73d148418d5c3b0bf552547_=_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Dec 2024 14:07:00 -0700
Received: from mail.optimails.info ([57.128.219.178]:40949 helo=vps-2096059c.vps.ovh.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRHX7-000000001ZS-2kD2
for dave@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 14:06:17 -0700
Received: from optimails.info (vps-2096059c.vps.ovh.net [57.128.219.178])
by vps-2096059c.vps.ovh.net (Postfix) with ESMTPSA id 5D7EC30772BA
for ; Fri, 27 Dec 2024 21:04:24 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimails.info;
s=default; t=1735333464;
bh=1cMUYHa32M56UZqCmi858Q5vyvjv8Gu7ahGWPXnsMOQ=; h=Subject:From:To;
b=CQOF09YlPUFlFkbADUFW+q4BdepTz7ir4LXv1ApvXwlyFLZO0jk+Gv1MrVAvqZm+m
exdLm1/+NaaFlCwJCToveXdKaWbXDrMJ5MO0o5WCd2SC4Lg9l2HzDNzdaCVF12EGBd
1Oc2TeVoNvN0FlADG5FBBLdM0uW+2Ovm3BZ5Tj8bLQ3+UXfLor0Ao5nLY35hVjz41Z
bjSIV81rRj3yNmCps67mxN2+eT3pD9Ug+hFn8KTAA7YNXeZymyREror9dHlTQiKfLd
ZtX4T+MRgR9XJlO80tTNMuGK+vVS7v0Jtjtk9FNzz5o+CQP8whSns0hpzo/0HbfY6X
wDmvV0qq5enxg==
Authentication-Results: vps-2096059c.vps.ovh.net;
spf=pass (sender IP is 57.128.219.178) smtp.mailfrom=vyutrhsdgsgsagf@optimails.info smtp.helo=optimails.info
Received-SPF: pass (vps-2096059c.vps.ovh.net: connection is authenticated)
Message-ID: <65753c9b3d6d4727f28a78ff18bd8edc6840ae2b@optimails.info>
Date: Fri, 27 Dec 2024 21:04:24 +0000
Subject: 3,000 USDT Casino Cashback Bonus!
From: Ubet
Reply-To: Ubet
To: "dave@doctor.nl2k.ab.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1735333464_f0e3f647cba4af6d8667a0628b4da257_=_"
X-Report-Abuse: https://optimails.info/index.php/campaigns/bw421ghroj3ec/report-abuse/jf619wq2wrb51/bg578zmdza9d0
x-job: bw421ghroj3ec
X-EBS: https://optimails.info/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe: ,
List-Id: jf619wq2wrb51
Feedback-ID: bw421ghroj3ec:bg578zmdza9d0:jf619wq2wrb51:ks531ferkb96b
X-Spam_score: 19.2
X-Spam_score_int: 192
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: View online here Unsubscribe Here [https://optimails.info/index.php/campaigns/bw421ghroj3ec/track-url/bg578zmdza9d0/0d683208b81c05f8c5399d8fdb421cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free spins on me. Let’s
have some fun! UBET | Casino & Sports Betting UBET | Casino & Sports Betting
Content analysis details: (19.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: optimails.info]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: optimails.info]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.8 IMG_ONLY_FM_DOM_INFO HTML image-only message from .info domain
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} 3,000 USDT Casino Cashback Bonus!
--_=_swift_1735333464_f0e3f647cba4af6d8667a0628b4da257_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
View online here
Unsubscribe Here
[https://optimails.info/index.php/=
campaigns/bw421ghroj3ec/track-url/bg578zmdza9d0/0d683208b81c05f8c5399d8fdb4=
21cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free =
spins on me.
Let=E2=80=99s have some fun! UBET | Casino & Sports Betting =
UBET | Casino &
Sports Betting
--_=_swift_1735333464_f0e3f647cba4af6d8667a0628b4da257_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=093,000 USDT Casino Cashback Bonus!
/bw421ghroj3ec/track-url/bg578zmdza9d0/80427e51a125b8f180d24cc7d52fcc1ba78c=
78e6">View online here
/543778ec9918ac578e52525d2b59cbfb/WELCOME_OFFER_-1.jpg" style=3D"height: 11=
34px; width: 600px;" />
Unsubscribe
s.info/index.php/campaigns/bw421ghroj3ec/track-url/bg578zmdza9d0/0d683208b8=
1c05f8c5399d8fdb421cbb0b123219">Here
or:transparent;">Hey! Claim my 100% deposit match bonus and get 50 free spi=
ns on me. Let=E2=80=99s have some fun! UBET | Casino & Sports Betting UBET =
| Casino & Sports Betting
igns/bw421ghroj3ec/track-opening/bg578zmdza9d0" alt=3D"" />
--_=_swift_1735333464_f0e3f647cba4af6d8667a0628b4da257_=_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Dec 2024 14:22:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRHlc-000000002El-3Z23
for dave@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 14:21:08 -0700
Resent-From: The Doctor
Resent-Date: Fri, 27 Dec 2024 14:21:08 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.optimails.info ([57.128.219.178]:49055 helo=vps-2096059c.vps.ovh.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRHX7-000000001Yx-2kIh
for doctor@nl2k.ab.ca;
Fri, 27 Dec 2024 14:06:15 -0700
Received: from optimails.info (vps-2096059c.vps.ovh.net [57.128.219.178])
by vps-2096059c.vps.ovh.net (Postfix) with ESMTPSA id 2D548307729C
for ; Fri, 27 Dec 2024 21:04:17 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimails.info;
s=default; t=1735333457;
bh=Givq+FJ1Patx1uErM76Pdvrw3Y0UHEbBHpdeeKOoOnI=; h=Subject:From:To;
b=eHibsdxvPj/7OhLCp3HneyufzUAL6OJq47wLoVAkM00fnjn5npASxrlm58Cg/N+G1
MH7Xvp28qZctOPz5VDWZI4hVMZPP72wvFKFLp7D0Y59N8HTxI3oNdEZVUho/QRCdIW
GVibE4jZCJDL8xqs/rjdaHxZpMuTz2OToJFO4TF9L8DiQO/tbtbAWaXYvKUcFf4nMc
6Q7nvLITsz0g/QOMYKbS1mGeJmBNXAb/8wmGX4g5bPNFhNU06H39hGJxk+hjBH3BTm
ZQ7SpYR4BTNNVYE3xSAKIzU2EXQ/5kn086UmTnyvYfLwtAQXNY6uLITJtirgOobOxk
8o8P8NGAyxoWw==
Authentication-Results: vps-2096059c.vps.ovh.net;
spf=pass (sender IP is 57.128.219.178) smtp.mailfrom=vyutrhsdgsgsagf@optimails.info smtp.helo=optimails.info
Received-SPF: pass (vps-2096059c.vps.ovh.net: connection is authenticated)
Message-ID:
Date: Fri, 27 Dec 2024 21:04:17 +0000
Subject: 3,000 USDT Casino Cashback Bonus!
From: Ubet
Reply-To: Ubet
To: "doctor@nl2k.ab.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1735333457_f3bdecb3235e4d77f61ea7b58b41eb7b_=_"
X-Report-Abuse: https://optimails.info/index.php/campaigns/bw421ghroj3ec/report-abuse/jf619wq2wrb51/or835c1tc5cec
x-job: bw421ghroj3ec
X-EBS: https://optimails.info/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe: ,
List-Id: jf619wq2wrb51
Feedback-ID: bw421ghroj3ec:or835c1tc5cec:jf619wq2wrb51:ks531ferkb96b
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: View online here Unsubscribe Here [https://optimails.info/index.php/campaigns/bw421ghroj3ec/track-url/or835c1tc5cec/0d683208b81c05f8c5399d8fdb421cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free spins on me. Let’s
have some fun! UBET | Casino & Sports Betting UBET | Casino & Sports Betting
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: optimails.info]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-trusted.bondedsender.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-accredit.habeas.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[57.128.219.178 listed in bl.score.senderscore.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: optimails.info]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.8 IMG_ONLY_FM_DOM_INFO HTML image-only message from .info domain
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} 3,000 USDT Casino Cashback Bonus!
--_=_swift_1735333457_f3bdecb3235e4d77f61ea7b58b41eb7b_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
View online here
Unsubscribe Here
[https://optimails.info/index.php/=
campaigns/bw421ghroj3ec/track-url/or835c1tc5cec/0d683208b81c05f8c5399d8fdb4=
21cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free =
spins on me.
Let=E2=80=99s have some fun! UBET | Casino & Sports Betting =
UBET | Casino &
Sports Betting
--_=_swift_1735333457_f3bdecb3235e4d77f61ea7b58b41eb7b_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=093,000 USDT Casino Cashback Bonus!
/bw421ghroj3ec/track-url/or835c1tc5cec/80427e51a125b8f180d24cc7d52fcc1ba78c=
78e6">View online here
/543778ec9918ac578e52525d2b59cbfb/WELCOME_OFFER_-1.jpg" style=3D"height: 11=
34px; width: 600px;" />
Unsubscribe
s.info/index.php/campaigns/bw421ghroj3ec/track-url/or835c1tc5cec/0d683208b8=
1c05f8c5399d8fdb421cbb0b123219">Here
or:transparent;">Hey! Claim my 100% deposit match bonus and get 50 free spi=
ns on me. Let=E2=80=99s have some fun! UBET | Casino & Sports Betting UBET =
| Casino & Sports Betting
igns/bw421ghroj3ec/track-opening/or835c1tc5cec" alt=3D"" />
--_=_swift_1735333457_f3bdecb3235e4d77f61ea7b58b41eb7b_=_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Dec 2024 08:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tRCJD-000000008CK-1m3w
for dave@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 08:31:27 -0700
Resent-From: The Doctor
Resent-Date: Fri, 27 Dec 2024 08:31:27 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.optimails.info ([57.128.219.178]:51733 helo=vps-2096059c.vps.ovh.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tR93c-0000000013l-38kw
for doctor@doctor.nl2k.ab.ca;
Fri, 27 Dec 2024 05:03:14 -0700
Received: from optimails.info (vps-2096059c.vps.ovh.net [57.128.219.178])
by vps-2096059c.vps.ovh.net (Postfix) with ESMTPSA id 64C653029EAD
for ; Fri, 27 Dec 2024 12:01:15 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=optimails.info;
s=default; t=1735300875;
bh=vs9yrQHnt4iHtIlK+l3kA5vQNheZiFVkGAcxwOcNAfI=; h=Subject:From:To;
b=KT2of8lyWxc14xta67aJv6IHEtH6pvq0cRCleBd0Hxmo9tJvDYyu7q9lxNAfrV8A/
kabFVOo5C/erarc6N265lWDuvFC5SDf3tTixvUtaTlnwPdNnciLp4k8L5LbsmNkeQv
z0LOERUp/h9RZPUhDrHqp8p/okMCmuNPnlUNLN6NBWC+bH6S53FvZctIQRpkGzNDEs
9csVNfDdfTxmBh/gdWpNafXRkDBPPwQ+PO0g1nplXQfIeJ9cY7EsCvzebXRsuyT9TS
LFpOSaCtFOIxJCYvqcOE/g1Iz2fRq7velVbKnuvc4WUzWmkiBKiv+GA0B2cWyX2v/v
yMkj/8cLSAWcg==
Authentication-Results: vps-2096059c.vps.ovh.net;
spf=pass (sender IP is 57.128.219.178) smtp.mailfrom=vyutrhsdgsgsagf@optimails.info smtp.helo=optimails.info
Received-SPF: pass (vps-2096059c.vps.ovh.net: connection is authenticated)
Message-ID: <9d42f151d0c90f911fc48092c4868adece0953cc@optimails.info>
Date: Fri, 27 Dec 2024 12:01:15 +0000
Subject: 3,000 USDT Casino Cashback Bonus!
From: Ubet
Reply-To: Ubet
To: "doctor@doctor.nl2k.ab.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1735300875_ee035b978ecb68381f49c99e56bc2de9_=_"
X-Report-Abuse: https://optimails.info/index.php/campaigns/bw421ghroj3ec/report-abuse/jf619wq2wrb51/hn119vndyva16
x-job: bw421ghroj3ec
X-EBS: https://optimails.info/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe: ,
List-Id: jf619wq2wrb51
Feedback-ID: bw421ghroj3ec:hn119vndyva16:jf619wq2wrb51:ks531ferkb96b
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: View online here Unsubscribe Here [https://optimails.info/index.php/campaigns/bw421ghroj3ec/track-url/hn119vndyva16/0d683208b81c05f8c5399d8fdb421cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free spins on me. Let’s
have some fun! UBET | Casino & Sports Betting UBET | Casino & Sports Betting
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
[57.128.219.178 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[57.128.219.178 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
[57.128.219.178 listed in will-spam-for-food.eu.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: optimails.info]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: optimails.info]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.219.178 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[57.128.219.178 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.8 IMG_ONLY_FM_DOM_INFO HTML image-only message from .info domain
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} 3,000 USDT Casino Cashback Bonus!
--_=_swift_1735300875_ee035b978ecb68381f49c99e56bc2de9_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
View online here
Unsubscribe Here
[https://optimails.info/index.php/=
campaigns/bw421ghroj3ec/track-url/hn119vndyva16/0d683208b81c05f8c5399d8fdb4=
21cbb0b123219]
Hey! Claim my 100% deposit match bonus and get 50 free =
spins on me.
Let=E2=80=99s have some fun! UBET | Casino & Sports Betting =
UBET | Casino &
Sports Betting
--_=_swift_1735300875_ee035b978ecb68381f49c99e56bc2de9_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=093,000 USDT Casino Cashback Bonus!
/bw421ghroj3ec/track-url/hn119vndyva16/80427e51a125b8f180d24cc7d52fcc1ba78c=
78e6">View online here
/543778ec9918ac578e52525d2b59cbfb/WELCOME_OFFER_-1.jpg" style=3D"height: 11=
34px; width: 600px;" />
Unsubscribe
s.info/index.php/campaigns/bw421ghroj3ec/track-url/hn119vndyva16/0d683208b8=
1c05f8c5399d8fdb421cbb0b123219">Here
or:transparent;">Hey! Claim my 100% deposit match bonus and get 50 free spi=
ns on me. Let=E2=80=99s have some fun! UBET | Casino & Sports Betting UBET =
| Casino & Sports Betting
igns/bw421ghroj3ec/track-opening/hn119vndyva16" alt=3D"" />
--_=_swift_1735300875_ee035b978ecb68381f49c99e56bc2de9_=_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 23 Dec 2024 12:04:00 -0700
Received: from vps-d5019d60.vps.ovh.us ([15.204.199.164]:48754)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tPniJ-00000000ADQ-1DH5
for dave@doctor.nl2k.ab.ca;
Mon, 23 Dec 2024 12:03:39 -0700
Received: from [15.204.199.164] (port=58584 helo=nsnrbb.icu)
by vps-d5019d60.vps.ovh.us with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from )
id 1tPnhi-00000009Pi3-1Gd9
for dave@doctor.nl2k.ab.ca;
Mon, 23 Dec 2024 19:02:57 +0000
To: dave@doctor.nl2k.ab.ca
Subject: MAKE $100,000 DOLLARS PER YEAR ONLINE AND START TODAY FOR FREE
Message-ID:
Date: Mon, 23 Dec 2024 18:58:47 +0000
From: "Jim Penn"
Reply-To: JimPennHere@gmail.com
MIME-Version: 1.0
X-Mailer-LID: 8
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Mailer-SID: 12
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_b628f76d0029777c14da2f37751a87b7"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps-d5019d60.vps.ovh.us
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nsnrbb.icu
X-Get-Message-Sender-Via: vps-d5019d60.vps.ovh.us: authenticated_id: info@nsnrbb.icu
X-Authenticated-Sender: vps-d5019d60.vps.ovh.us: info@nsnrbb.icu
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 32.2
X-Spam_score_int: 322
X-Spam_bar: ++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your email client cannot read this email. To view it online,
please go here: https://nsnrbb.icu/4/display.php?M=475288&C=d656dd819d38a7ea728284b960cc1d2d&S=12&L=8&N=12
To stop receiving these emails:https://nsnrbb.icu/4/unsubscribe.php?M=475288&C=d656dd819d38a7ea728284b960cc1d2d&L=8&N=12
Content analysis details: (32.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
[15.204.199.164 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[15.204.199.164 listed in dnsbl.ahbl.org]
[15.204.199.164 listed in dnsbl.ahbl.org]
[15.204.199.164 listed in dnsbl.ahbl.org]
[15.204.199.164 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[15.204.199.164 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[15.204.199.164 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[15.204.199.164 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[15.204.199.164 listed in dnsbl.ahbl.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
15 GR_DOMAIN_CAMN20 Spammer tool signature (camn)
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jimpennhere(at)gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.1 MD5_CONTENT BODY: Contains MD5 hash.
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
1.3 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 SPOOFED_FREEMAIL No description available.
1.5 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
Subject: {SPAM?} MAKE $100,000 DOLLARS PER YEAR ONLINE AND START TODAY FOR FREE
--b1_b628f76d0029777c14da2f37751a87b7
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Your email client cannot read this email.
To view it online, please go here: https://nsnrbb.icu/4/display.php?M=475288&C=d656dd819d38a7ea728284b960cc1d2d&S=12&L=8&N=12
To stop receiving these emails:https://nsnrbb.icu/4/unsubscribe.php?M=475288&C=d656dd819d38a7ea728284b960cc1d2d&L=8&N=12
Powered by Interspire
--b1_b628f76d0029777c14da2f37751a87b7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Join up to be in Great position to
Earn Thousands DAILY for FREE!
Please Note:
Every Day That Goes By,
Is A Day Of Lost Opportunity.
Everyone Who Understands, Joins.
Get Instant Results TODAY!
To your success,
Jim Penn
305-741-4129‬
JimPennHere@gmail.com
Unsubscribe me from this list
--b1_b628f76d0029777c14da2f37751a87b7--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Dec 2024 23:48:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tNRMi-00000000GSU-3YYA
for dave@doctor.nl2k.ab.ca;
Mon, 16 Dec 2024 23:47:32 -0700
Resent-From: The Doctor
Resent-Date: Mon, 16 Dec 2024 23:47:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-10f52eeb.vps.ovh.net ([51.75.71.7]:36302)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tNQS3-0000000093v-46uG
for doctor@doctor.nl2k.ab.ca;
Mon, 16 Dec 2024 22:49:04 -0700
Received: by vps-10f52eeb.vps.ovh.net (Postfix, from userid 0)
id A35D48C2FE; Tue, 17 Dec 2024 05:40:38 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
Subject: Importante: Accion requerida para desbloquear su cuenta (40117339)
X-Mailer: Outlook/91.8.0
From: Atencion al cliente ING
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="fa305e5eb305c56b2187438679c8d6b5"
Content-Transfer-Encoding: 7bit
Message-Id: <20241217054038.A35D48C2FE@vps-10f52eeb.vps.ovh.net>
Date: Tue, 17 Dec 2024 05:40:38 +0000 (UTC)
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bloqueo de cuentas y tarjetas Estimado Cliente(a), doctor@doctor.nl2k.ab.ca
Hoy 17/12/2024 Queremos comunicarte que tus tarjetas financieras han sido
bloqueadas y no podrás operar con normalidad con tus cuentas de ING.
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[51.75.71.7 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[51.75.71.7 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ing-acess.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: ing-acess.com/93.123.109.80]
[URI: ing-acess.com/93.123.109.80]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[51.75.71.7 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[51.75.71.7 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in bl.score.senderscore.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 241.143.167.72.host.secureserver.net]
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[51.75.71.7 listed in ix.dnsbl.manitu.net]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
3.1 MANY_SUBDOM Lots and lots of subdomain parts in a URI
Subject: {SPAM?} Importante: Accion requerida para desbloquear su cuenta (40117339)
This is a MIME encoded message.
X-Priority: 1
--fa305e5eb305c56b2187438679c8d6b5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Dec 2024 23:48:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tNRMi-00000000GSU-3YYA
for dave@doctor.nl2k.ab.ca;
Mon, 16 Dec 2024 23:47:32 -0700
Resent-From: The Doctor
Resent-Date: Mon, 16 Dec 2024 23:47:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-10f52eeb.vps.ovh.net ([51.75.71.7]:36302)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tNQS3-0000000093v-46uG
for doctor@doctor.nl2k.ab.ca;
Mon, 16 Dec 2024 22:49:04 -0700
Received: by vps-10f52eeb.vps.ovh.net (Postfix, from userid 0)
id A35D48C2FE; Tue, 17 Dec 2024 05:40:38 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
Subject: Importante: Accion requerida para desbloquear su cuenta (40117339)
X-Mailer: Outlook/91.8.0
From: Atencion al cliente ING
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="fa305e5eb305c56b2187438679c8d6b5"
Content-Transfer-Encoding: 7bit
Message-Id: <20241217054038.A35D48C2FE@vps-10f52eeb.vps.ovh.net>
Date: Tue, 17 Dec 2024 05:40:38 +0000 (UTC)
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bloqueo de cuentas y tarjetas Estimado Cliente(a), doctor@doctor.nl2k.ab.ca
Hoy 17/12/2024 Queremos comunicarte que tus tarjetas financieras han sido
bloqueadas y no podrás operar con normalidad con tus cuentas de ING.
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
[51.75.71.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
[51.75.71.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.75.71.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[51.75.71.7 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[51.75.71.7 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ing-acess.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: ing-acess.com/93.123.109.80]
[URI: ing-acess.com/93.123.109.80]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[51.75.71.7 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[51.75.71.7 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.75.71.7 listed in bl.score.senderscore.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 241.143.167.72.host.secureserver.net]
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[51.75.71.7 listed in ix.dnsbl.manitu.net]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
3.1 MANY_SUBDOM Lots and lots of subdomain parts in a URI
Subject: {SPAM?} Importante: Accion requerida para desbloquear su cuenta (40117339)
This is a MIME encoded message.
X-Priority: 1
--fa305e5eb305c56b2187438679c8d6b5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Dec 2024 04:36:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tLhTv-00000000AB3-0cxm
for dave@doctor.nl2k.ab.ca;
Thu, 12 Dec 2024 04:35:47 -0700
Resent-From: The Doctor
Resent-Date: Thu, 12 Dec 2024 04:35:47 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-9e10c064.vps.ovh.ca ([139.99.239.187]:38472)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tLbxC-000000003Jz-2Wcs
for doctor@nl2k.ab.ca;
Wed, 11 Dec 2024 22:41:53 -0700
Received: by vps-9e10c064.vps.ovh.ca (Postfix, from userid 0)
id 2A95887AE1; Thu, 12 Dec 2024 05:38:20 +0000 (UTC)
To: doctor@nl2k.ab.ca
Subject: Importante: Accion requerida para desbloquear su cuenta (67551955)
X-Mailer: Outlook/91.8.0
From: ING
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="dc28f079c889371cf7403eb277221289"
Content-Transfer-Encoding: 7bit
Message-Id: <20241212054041.2A95887AE1@vps-9e10c064.vps.ovh.ca>
Date: Thu, 12 Dec 2024 05:38:20 +0000 (UTC)
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bloqueo de cuentas y tarjetas Estimado Cliente(a), doctor@nl2k.ab.ca
Hoy 12/12/2024 Queremos comunicarte que tus tarjetas financieras han sido
bloqueadas y no podrás operar con normalidad con tus cuentas de ING.
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
[139.99.239.187 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.239.187 listed in dnsbl.ahbl.org]
[139.99.239.187 listed in dnsbl.ahbl.org]
[139.99.239.187 listed in dnsbl.ahbl.org]
[139.99.239.187 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.239.187 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.239.187 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.239.187 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.239.187 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[139.99.239.187 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[139.99.239.187 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: dirct-ing.com]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: dirct-ing.com]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: dirct-ing.com/93.123.109.80]
[URI: dirct-ing.com/93.123.109.80]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Importante: Accion requerida para desbloquear su cuenta (67551955)
This is a MIME encoded message.
X-Priority: 1\n
--dc28f079c889371cf7403eb277221289
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Dec 2024 04:36:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tLhTg-00000000A84-0LXp
for dave@doctor.nl2k.ab.ca;
Thu, 12 Dec 2024 04:35:32 -0700
Resent-From: The Doctor
Resent-Date: Thu, 12 Dec 2024 04:35:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-b50e5473.vps.ovh.net ([57.129.134.118]:46214)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tLbQL-00000000NHD-0XuS
for doctor@doctor.nl2k.ab.ca;
Wed, 11 Dec 2024 22:07:51 -0700
Received: by vps-b50e5473.vps.ovh.net (Postfix, from userid 0)
id 525C28116B; Thu, 12 Dec 2024 05:05:40 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
Subject: Importante: Accion requerida para desbloquear su cuenta (82081839)
X-Mailer: Outlook/91.8.0
From: Contacto - ING
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="90da5d9f4b5a1eb38a7826a7d6567917"
Content-Transfer-Encoding: 7bit
Message-Id: <20241212050542.525C28116B@vps-b50e5473.vps.ovh.net>
Date: Thu, 12 Dec 2024 05:05:40 +0000 (UTC)
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bloqueo de cuentas y tarjetas Estimado Cliente(a), doctor@doctor.nl2k.ab.ca
Hoy 12/12/2024 Queremos comunicarte que tus tarjetas financieras han sido
bloqueadas y no podrás operar con normalidad con tus cuentas de ING.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[57.129.134.118 listed in dnsbl.ahbl.org]
[57.129.134.118 listed in dnsbl.ahbl.org]
[57.129.134.118 listed in dnsbl.ahbl.org]
[57.129.134.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[57.129.134.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[57.129.134.118 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[57.129.134.118 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[57.129.134.118 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
[57.129.134.118 listed in will-spam-for-food.eu.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: dirct-ing.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.129.134.118 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: dirct-ing.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.129.134.118 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: dirct-ing.com/93.123.109.80]
[URI: dirct-ing.com/93.123.109.80]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[57.129.134.118 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.129.134.118 listed in bl.score.senderscore.com]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
Subject: {SPAM?} Importante: Accion requerida para desbloquear su cuenta (82081839)
This is a MIME encoded message.
X-Priority: 1\n
--90da5d9f4b5a1eb38a7826a7d6567917
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Dec 2024 08:11:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tIUXI-000000000F1-1zgw
for dave@doctor.nl2k.ab.ca;
Tue, 03 Dec 2024 08:10:00 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Dec 2024 08:10:00 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtp.ico-media-consult.com ([198.50.158.35]:47339)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tIU6s-00000000PAj-4509
for root@doctor.nl2k.ab.ca;
Tue, 03 Dec 2024 07:42:46 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ico-media-consult.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:Reply-To:From:Date:Subject:To:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=MusgBisTO1bPbdIhQq2NJFH5nztQcsGWsB+3/rDXfEk=; b=ZNv6FC4R0uW3QNFsG+fwExBu4C
xinlKbbI7H1Bx1uh0zWpVhvjMGlvj1YvtZtDtjtLIC3KvIIW4NqWq1ApKcWQNQFU2xnkhdBFviQYp
PrJ3OHn9meSDrUquCTLzKG2vvqjBCmOgIlYon7YOBVBTtTiRx9YOm67uO6bIu2gG9sWqfeB3q/m8E
STYEjo5SY/pr3zygA8GCdu38cl5EHqZAq7DljPipLjNPmLL+aOJSIQHguFfKD+TbZCifzxoOqhNBE
bM4Ijl1XflnRo0Nlj0yiyeeMxapvJDLIChHVNn+GQZRxo5WXeDBEYmohhsGotJLOA3+3a47zzb42G
JFLfmDrQ==;
Received: from icomedia by server.jambovt.com.br with local (Exim 4.98)
(envelope-from )
id 1tIU6g-0000000DzEt-0dZk
for root@doctor.nl2k.ab.ca;
Tue, 03 Dec 2024 11:42:30 -0300
To: root@doctor.nl2k.ab.ca
Subject: =?UTF-8?Q?=E2=80=9CTake_advantage_of_the_opportunity:_pre-IP?=
=?UTF-8?Q?O_investments_in_sustainable_energy_with_a_500%_re?=
=?UTF-8?Q?turn!=E2=80=9D?=
X-PHP-Originating-Script: 1245:PHPMailer.php
Date: Tue, 3 Dec 2024 11:42:30 -0300
From: Media Consult
Reply-To: Media Consult
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 6.8.1 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1=_iM8AhLZpDXjN8ZXGtbmwxXQtphPrV2v0M68UBhcV0"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.jambovt.com.br
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [1245 976] / [47 12]
X-AntiAbuse: Sender Address Domain - ico-media-consult.com
X-Get-Message-Sender-Via: server.jambovt.com.br: authenticated_id: icomedia/from_h
X-Authenticated-Sender: server.jambovt.com.br: contato@ico-media-consult.com
X-Source:
X-Source-Args: /opt/cpanel/ea-php80/root/usr/bin/php-cgi /home/icomedia/public_html/artisan schedule:run
X-Source-Dir: ico-media-consult.com:/public_html
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your email client cannot read this message. To view it online,
please visit this link: http://ico-media-consult.com/newsletters/web/show/5/526470
To stop receiving our content visit the link: http://ico-media-consult.com/contacts/unsubscribe/526470/6/5
width=" [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
[198.50.158.35 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[198.50.158.35 listed in dnsbl.ahbl.org]
[198.50.158.35 listed in dnsbl.ahbl.org]
[198.50.158.35 listed in dnsbl.ahbl.org]
[198.50.158.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[198.50.158.35 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[198.50.158.35 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[198.50.158.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[198.50.158.35 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[198.50.158.35 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[198.50.158.35 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: ico-media-consult.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URI: ico-media-consult.com/198.50.158.35]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: ico-media-consult.com/198.50.158.35]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: ico-media-consult.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
2.0 US_8BIT US-ASCII isn't an eight bit charset
Subject: {SPAM?} =?UTF-8?Q?=E2=80=9CTake_advantage_of_the_opportunity:_pre-IP?=
=?UTF-8?Q?O_investments_in_sustainable_energy_with_a_500%_re?=
=?UTF-8?Q?turn!=E2=80=9D?=
--b1=_iM8AhLZpDXjN8ZXGtbmwxXQtphPrV2v0M68UBhcV0
Content-Type: text/plain; charset=us-ascii
Your email client cannot read this message.
To view it online, please visit this link: http://ico-media-consult.com/newsletters/web/show/5/526470
To stop receiving our content visit the link: http://ico-media-consult.com/contacts/unsubscribe/526470/6/5
--b1=_iM8AhLZpDXjN8ZXGtbmwxXQtphPrV2v0M68UBhcV0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
inherit;">
align: inherit;">
rtical-align: inherit;">
e=3D"vertical-align: inherit;">=F0=9F=92=A1 Entdecken Sie eine Welt voller =
Innovation =F0=9F=92=A1
ont>
=
erit;">
gn: inherit;">
cal-align: inherit;">Wir stellen d=
en Luessen Token vor, den weltweit ersten Energie-Token, der durch echte Pr=
ojekte in den erneuerbaren Bereichen Energien und Nanotechnologie unterst&u=
uml;tzt wird. =F0=9F=8C=8D=E2=9A=A1=EF=B8=8F
ont>
=
erit;">
gn: inherit;">
cal-align: inherit;">Die Luessen T=
echnology Group ist mit großen Projekten im Bereich erneuerbare Energ=
ien geleitet in der Nanotechnologie und bei Energielösungen. Indem Sie=
in Luessen Token investieren, unterstützen Sie nicht nur nachhaltige =
Energie, sondern erhalten auch Zugang zu Spitzentechnologien, die die Zukun=
ft prägen werden. =F0=9F=9A=80
t>
=
erit;">
gn: inherit;">
cal-align: inherit;">Profitiere vo=
m aktuell verfügbaren 50% Rabatt auf den eigentlichen Token-Wert von 0=
,1 EUR und investiere noch heute in deine nachhaltige Zukunft! =F0=9F=8C=
=B1
=
erit;">
gn: inherit;">
cal-align: inherit;">Jetzt investi=
eren =E2=9E=A1=EF=B8=8F [ =
get=3D"_blank">
ical-align: inherit;">
=3D"vertical-align: inherit;">
t style=3D"vertical-align: inherit;">
;">Link zum Investieren
nt>
ign: inherit;">
ical-align: inherit;">
=3D"vertical-align: inherit;">
t style=3D"vertical-align: inherit;">
;"> ]
r>
sb-type=3D"unsubscribelink" style=3D"font-family:Arial, Helvetica, sans-ser=
if;color:#333333;font-size:11px;">Clique aqui para cancelar a assinatura
>
![](3D"http://ico-media-consult.com/tracker=<br)
/open/526470/5/he/image.png" width=3D"1" height=3D"1" alt=3D"Imagem" />
--b1=_iM8AhLZpDXjN8ZXGtbmwxXQtphPrV2v0M68UBhcV0--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 30 Nov 2024 07:42:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tHOf7-0000000071f-1wOT
for dave@doctor.nl2k.ab.ca;
Sat, 30 Nov 2024 07:41:33 -0700
Resent-From: The Doctor
Resent-Date: Sat, 30 Nov 2024 07:41:33 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip91.postal.corpustech.newsletter-verte.ovh ([139.99.186.91]:41441)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tHInQ-00000000I6q-0Ju0
for doctor@nl2k.ab.ca;
Sat, 30 Nov 2024 01:25:51 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=newsletter-verte.ovh;
s=postal-w8ELVY; t=1732955133;
bh=75kQf7Dv0qL2+7vvp0UPbMGPr3wASepSN0I1l/cbWoE=;
h=message-id:list-unsubscribe-post:content-transfer-encoding:content-type:to:subject:from:date:mime-version:list-unsubscribe;
b=ihqMUNO1Z4ROa28odcREEoc10Ldib8pEDgGPwdrweK+MDZxaDZCXSAyEGLyUg0mr9tKzp0Vq
gbl2QHYKrckzPxOIxLl91V27GbRRdZdc1RpV8i2WOOG37pj2FAZbZU+UYXIli+OP8N/PGean
JKsmQUjpw4i5QrDx9WT3q5aDEv4=
X-Postal-MsgID: 0bNs2hxckfrKY8OX
Received: from postal.corpustech.newsletter-verte.ovh (172.18.0.3 [172.18.0.3]) by postal.corpustech.newsletter-verte.ovh with SMTP; Sat, 30 Nov 2024 08:25:31 -0000
Message-Id: <1732955131720807657.1.4868545805469959994@108052d93cab>
X-Listmonk-Campaign: b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c
X-Listmonk-Subscriber: e1d09125-499f-4cec-94d8-e6eccce26bf4
List-Unsubscribe-Post: List-Unsubscribe=One-Click
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
To:
Subject: Rencontres Hard
From: "Rencontres Hard"
Date: Sat, 30 Nov 2024 08:25:31 +0000
Mime-Version: 1.0
List-Unsubscribe:
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Unsubscribe View in browser
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
[139.99.186.91 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[139.99.186.91 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[139.99.186.91 listed in zen.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.186.91 listed in dnsbl.ahbl.org]
[139.99.186.91 listed in dnsbl.ahbl.org]
[139.99.186.91 listed in dnsbl.ahbl.org]
[139.99.186.91 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.186.91 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.186.91 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.186.91 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.186.91 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Subject: {SPAM?} Rencontres Hard
859-1" />
width=3D"599"
border=3D"0"
cellspacing=3D"0"
cellpadding=3D"0"
align=3D"center"
>
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-txt1.gif"
alt=3D""
width=3D"405"
height=3D"121"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-pic01.jpg"
alt=3D""
width=3D"194"
height=3D"592"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img01.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img02.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img03.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-txt2.gif"
alt=3D""
width=3D"405"
height=3D"34"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img04.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img05.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-img06.jpg"
alt=3D""
width=3D"124"
height=3D"144"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-txt3.gif"
alt=3D""
width=3D"405"
height=3D"92"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/004-txt4.gif"
alt=3D""
width=3D"599"
height=3D"58"
border=3D"0"
/>
|
|
=20
: #888;">
ubscription/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c/e1d09125-499f-4cec-94d8-e6=
eccce26bf4" style=3D"color: #888;">Unsubscribe
ampaign/b4cac20c-c2f6-46c3-ab3e-fecea6ed3b5c/e1d09125-499f-4cec-94d8-e6eccc=
e26bf4" style=3D"color: #888;">View in browser
![](3D"https:=<br)
//www.postal.corpustech.newsletter-verte.ovh/campaign/b4cac20c-c2f6-46c3-ab=
3e-fecea6ed3b5c/e1d09125-499f-4cec-94d8-e6eccce26bf4/px.png" alt=3D"" />
iv>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 28 Nov 2024 04:35:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tGcmn-00000000201-2imf
for dave@doctor.nl2k.ab.ca;
Thu, 28 Nov 2024 04:34:17 -0700
Resent-From: The Doctor
Resent-Date: Thu, 28 Nov 2024 04:34:17 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip9.postal.corpustech.newsletter-verte.ovh ([139.99.235.9]:36473)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tGb73-00000000Nxz-1wYU
for root@nl2k.ab.ca;
Thu, 28 Nov 2024 02:47:10 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=newsletter-verte.ovh;
s=postal-w8ELVY; t=1732787214;
bh=iDaRfTl6D2mmwxvIFj+/Sua9ZR9ZuJkaaVQG1bZahdg=;
h=subject:message-id:date:mime-version:list-unsubscribe-post:list-unsubscribe:to:from:content-type:content-transfer-encoding;
b=bSwFQss9Hzq9ZEWVYIAtxf+hRcnp57zh3lWSUYnLkMewA4mP8eqDk45YM/jOAWTF8LQhd/wK
uVmjN3MtJ/cqZUw7EwRNeiqgHuSKnaT+tWolEmmUtEFfO1eIXWsdJ7w5lwcKGxaajnAO2yJg
thEDHOAO3YgJq7Iw8eayYagO1Is=
X-Postal-MsgID: tC8E92NqZIVaZALM
Received: from postal.corpustech.newsletter-verte.ovh (172.18.0.3 [172.18.0.3]) by postal.corpustech.newsletter-verte.ovh with SMTP; Thu, 28 Nov 2024 09:46:11 -0000
Subject: Rencontres Hard
Message-Id: <1732787171358188577.1.8673654137108386445@108052d93cab>
Date: Thu, 28 Nov 2024 09:46:11 +0000
Mime-Version: 1.0
X-Listmonk-Campaign: e0c701d5-aead-4696-a55c-e2bb72b4cd01
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
To:
From: "Rencontres Hard"
X-Listmonk-Subscriber: 395bb1d1-369c-4d21-af06-f870d1c10c9d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Rencontres Hard Unsubscribe View in browser
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
[139.99.235.9 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[139.99.235.9 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.235.9 listed in dnsbl.ahbl.org]
[139.99.235.9 listed in dnsbl.ahbl.org]
[139.99.235.9 listed in dnsbl.ahbl.org]
[139.99.235.9 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.235.9 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.235.9 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.235.9 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.235.9 listed in dnsbl.ahbl.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[139.99.235.9 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Subject: {SPAM?} Rencontres Hard
859-1" />
Rencontres Hard
width=3D"600"
border=3D"0"
align=3D"center"
cellpadding=3D"0"
cellspacing=3D"0"
>
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/e0c701d5-aead-4696-a55c-e2bb72b4cd01=
/395bb1d1-369c-4d21-af06-f870d1c10c9d"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-top.gif"
alt=3D""
width=3D"600"
height=3D"56"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/e0c701d5-aead-4696-a55c-e2bb72b4cd01=
/395bb1d1-369c-4d21-af06-f870d1c10c9d"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-rencontres.jpg"
alt=3D""
width=3D"600"
height=3D"215"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/e0c701d5-aead-4696-a55c-e2bb72b4cd01=
/395bb1d1-369c-4d21-af06-f870d1c10c9d"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-middle.gif"
alt=3D""
width=3D"600"
height=3D"80"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/e0c701d5-aead-4696-a55c-e2bb72b4cd01=
/395bb1d1-369c-4d21-af06-f870d1c10c9d"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-profils.jpg"
alt=3D""
width=3D"600"
height=3D"132"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/e0c701d5-aead-4696-a55c-e2bb72b4cd01=
/395bb1d1-369c-4d21-af06-f870d1c10c9d"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-bottom.gif"
alt=3D""
width=3D"600"
height=3D"302"
border=3D"0"
/>
|
|
=20
: #888;">
ubscription/e0c701d5-aead-4696-a55c-e2bb72b4cd01/395bb1d1-369c-4d21-af06-f8=
70d1c10c9d" style=3D"color: #888;">Unsubscribe
ampaign/e0c701d5-aead-4696-a55c-e2bb72b4cd01/395bb1d1-369c-4d21-af06-f870d1=
c10c9d" style=3D"color: #888;">View in browser
//www.postal.corpustech.newsletter-verte.ovh/campaign/e0c701d5-aead-4696-a5=
5c-e2bb72b4cd01/395bb1d1-369c-4d21-af06-f870d1c10c9d/px.png" alt=3D"" />
iv>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 27 Nov 2024 09:25:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tGKTg-00000000Cf0-2TJG
for dave@doctor.nl2k.ab.ca;
Wed, 27 Nov 2024 09:01:20 -0700
Resent-From: The Doctor
Resent-Date: Wed, 27 Nov 2024 09:01:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip15.postal.corpustech.newsletter-verte.ovh ([139.99.235.15]:41787)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tGJAd-00000000LfV-3UkS
for doctor@nl2k.ab.ca;
Wed, 27 Nov 2024 07:37:40 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=newsletter-verte.ovh;
s=postal-w8ELVY; t=1732718241;
bh=HizdL/4GAwBhTsTWZeUX4wonLEiOMPrzBGXSLnnsg/s=;
h=content-transfer-encoding:to:subject:message-id:mime-version:list-unsubscribe-post:list-unsubscribe:from:date:content-type;
b=g8kB6keXcx2d5CnpuPyKlIJ7GQygN2z61Qn6kyV09kdypybJVJfL55lui61G+jL5JEyNwVHh
0qihDsItrPLeJ0eBQwFkzc7nCWOi+JzV1LMz9PcyW2rX2/1YF7AtxvSPIlp/sUquZs03npgz
I9oW5y1qoE0cV2i5KgzK82i56l0=
X-Postal-MsgID: hszDcA9onNfrKXh8
Received: from postal.corpustech.newsletter-verte.ovh (172.18.0.3 [172.18.0.3]) by postal.corpustech.newsletter-verte.ovh with SMTP; Wed, 27 Nov 2024 14:37:19 -0000
Content-Transfer-Encoding: quoted-printable
To:
Subject: Rencontres Hard
Message-Id: <1732718240178017707.1.6288680989803507206@108052d93cab>
Mime-Version: 1.0
X-Listmonk-Subscriber: e1d09125-499f-4cec-94d8-e6eccce26bf4
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
From: "Rencontres Hard"
Date: Wed, 27 Nov 2024 14:37:20 +0000
X-Listmonk-Campaign: b5d1d110-44e4-4893-b180-77759aaf476f
Content-Type: text/html; charset=UTF-8
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Rencontres Hard Unsubscribe View in browser
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[139.99.235.15 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[139.99.235.15 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Subject: {SPAM?} Rencontres Hard
859-1" />
Rencontres Hard
width=3D"600"
border=3D"0"
align=3D"center"
cellpadding=3D"0"
cellspacing=3D"0"
>
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b5d1d110-44e4-4893-b180-77759aaf476f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-top.gif"
alt=3D""
width=3D"600"
height=3D"56"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b5d1d110-44e4-4893-b180-77759aaf476f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-rencontres.jpg"
alt=3D""
width=3D"600"
height=3D"215"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b5d1d110-44e4-4893-b180-77759aaf476f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-middle.gif"
alt=3D""
width=3D"600"
height=3D"80"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b5d1d110-44e4-4893-b180-77759aaf476f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-profils.jpg"
alt=3D""
width=3D"600"
height=3D"132"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/b5d1d110-44e4-4893-b180-77759aaf476f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/003-bottom.gif"
alt=3D""
width=3D"600"
height=3D"302"
border=3D"0"
/>
|
|
=20
: #888;">
ubscription/b5d1d110-44e4-4893-b180-77759aaf476f/e1d09125-499f-4cec-94d8-e6=
eccce26bf4" style=3D"color: #888;">Unsubscribe
ampaign/b5d1d110-44e4-4893-b180-77759aaf476f/e1d09125-499f-4cec-94d8-e6eccc=
e26bf4" style=3D"color: #888;">View in browser
//www.postal.corpustech.newsletter-verte.ovh/campaign/b5d1d110-44e4-4893-b1=
80-77759aaf476f/e1d09125-499f-4cec-94d8-e6eccce26bf4/px.png" alt=3D"" />
iv>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 22 Nov 2024 11:06:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from )
id 1tEY2E-00000000883-2THz
for dave@doctor.nl2k.ab.ca;
Fri, 22 Nov 2024 11:05:38 -0700
Resent-From: The Doctor
Resent-Date: Fri, 22 Nov 2024 11:05:38 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip15.postal.corpustech.newsletter-verte.ovh ([139.99.235.15]:39151)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from )
id 1tEWDd-000000002Ks-3uTH
for doctor@nl2k.ab.ca;
Fri, 22 Nov 2024 09:09:22 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=newsletter-verte.ovh;
s=postal-w8ELVY; t=1732291747;
bh=pbETHdbYNkXqQ2EzbgekOYsBj9U4EFDzv8yAMQsFm/M=;
h=list-unsubscribe-post:list-unsubscribe:to:subject:message-id:from:content-type:content-transfer-encoding:date:mime-version;
b=bUhGpAvbxA32lVA1pe4izKWHIS5EGUkeVWJhnN1jB62LT3oCw/rNzPZX6J1q/Avwq+WJEwo7
TTah8oQYdThXr0Mv2d11z8x2ZsImZyLqWRuLSpF5zv4vdeeES2RcABxHNbhSVwmsAtw6AEbc
hk4nC320+IfytZg9KVpKJmZpLsM=
X-Postal-MsgID: oGkaGkDDTsIk3g1Z
Received: from postal.corpustech.newsletter-verte.ovh (172.18.0.3 [172.18.0.3]) by postal.corpustech.newsletter-verte.ovh with SMTP; Fri, 22 Nov 2024 15:24:08 -0000
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
To:
Subject: Rencontres Hard
Message-Id: <1732289048775160961.1.882703484142389399@108052d93cab>
From: "Rencontres Hard"
X-Listmonk-Campaign: 3df42353-67cd-4381-addf-cf9b495d286f
X-Listmonk-Subscriber: e1d09125-499f-4cec-94d8-e6eccce26bf4
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Date: Fri, 22 Nov 2024 15:24:08 +0000
Mime-Version: 1.0
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Unsubscribe View in browser
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
[139.99.235.15 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[139.99.235.15 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[139.99.235.15 listed in zen.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
[139.99.235.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.235.15 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Subject: {SPAM?} Rencontres Hard
859-1" />
topmargin=3D"0"
bottommargin=3D"0"
leftmargin=3D"0"
rightmargin=3D"0"
bgcolor=3D"#7C0000"
>
width=3D"638"
border=3D"0"
cellspacing=3D"0"
cellpadding=3D"0"
align=3D"center"
>
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b495d286f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/005-txt1.gif"
alt=3D""
width=3D"382"
height=3D"154"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b495d286f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/005-img02.jpg"
alt=3D""
width=3D"256"
height=3D"484"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b495d286f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/005-img01.jpg"
alt=3D""
width=3D"382"
height=3D"231"
border=3D"0"
/>
|
k/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b495d286f=
/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.ovh/upl=
oads/005-txt2.gif"
alt=3D""
width=3D"382"
height=3D"99"
border=3D"0"
/>
|
width=3D"100%"
border=3D"0"
cellspacing=3D"0"
cellpadding=3D"0"
bgcolor=3D"#000000"
>
width=3D"638"
border=3D"0"
cellspacing=3D"0"
cellpadding=3D"0"
align=3D"center"
>
|
vh/link/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b49=
5d286f/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.o=
vh/uploads/005-img03.jpg"
alt=3D""
width=3D"638"
height=3D"144"
border=3D"0"
/>
|
vh/link/61f8f01f-b5a0-445e-9347-a903bf5b77d9/3df42353-67cd-4381-addf-cf9b49=
5d286f/e1d09125-499f-4cec-94d8-e6eccce26bf4" target=3D"_blank"
>
src=3D"https://www.postal.corpustech.newsletter-verte.o=
vh/uploads/005-txt3.gif"
alt=3D""
width=3D"638"
height=3D"104"
border=3D"0"
/>
|
width=3D"638"
border=3D"0"
cellspacing=3D"0"
cellpadding=3D"0"
align=3D"center"
>
|
=20
: #888;">
ubscription/3df42353-67cd-4381-addf-cf9b495d286f/e1d09125-499f-4cec-94d8-e6=
eccce26bf4" style=3D"color: #888;">Unsubscribe
ampaign/3df42353-67cd-4381-addf-cf9b495d286f/e1d09125-499f-4cec-94d8-e6eccc=
e26bf4" style=3D"color: #888;">View in browser
//www.postal.corpustech.newsletter-verte.ovh/campaign/3df42353-67cd-4381-ad=
df-cf9b495d286f/e1d09125-499f-4cec-94d8-e6eccce26bf4/px.png" alt=3D"" />
iv>
