Desperation spam from Message Labs
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 21 Mar 2025 12:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))
(envelope-from
id 1tvhCs-00000000JRA-2MEY
for dave@doctor.nl2k.ab.ca;
Fri, 21 Mar 2025 12:34:58 -0600
Resent-From: The Doctor
Resent-Date: Fri, 21 Mar 2025 12:34:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail1.bemta40.messagelabs.com ([67.219.247.2]:45392)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1 (FreeBSD))
(envelope-from
id 1tvh3E-00000000HkG-3Ta1
for doctor@doctor.nl2k.ab.ca;
Fri, 21 Mar 2025 12:25:10 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=himalayawellness.com; s=Himalayawellness15Nov2019; t=1742581374;
i=@himalayawellness.com;
bh=l6wYihzJ3IVUZDIXOMJK8cKWBsZDgXnibAdJP9uah6w=;
h=From:Subject:Date:Message-ID:Content-Type:MIME-Version;
b=grFk9De9aO9qVZOUuk0yYF2EWmtSQvrudYUjFK/2mBmkZihF/6rf5wgnBvQ5gOvrs
Rl/NT6IahCY1uZFJ2kGILXoRe3m09E0qrNwjpt4uNKrQIW88SEl7UorM/FPfB6jPzA
Vf1gPexV5ooC1eIVoSgWgBxT0JSxlbLJYdG2ptB8ZMSt4PP5n5IQAr7/XlBVbj5bvo
Prt1nyI2AsoH3qP8CdS5lJvcqZtAERyyFYiMCvRdF+iRAjmYLLWp7Hy9OnOAailZSo
GTfkmMrWvzx8MMm9JADHRC0XBWepopP1wYJgKxs0W+NqgfNbtM4hhcn4x/Y4dsU2vN
6oEKL/n5yBjQg==
X-Brightmail-Tracker: H4sIAAAAAAAAA1WTa1CUZRTHed7riiy+go5vGKaLySSwgU3jaZz
QhqneYcyKabCwskVfd9dZFtx3KbQvi9wU22BxJIGQ3SAMJNDwwkXjIqNAjMKmgAhxF9hFwU3x
sgrtumn05cxvzv+c//P/8BwR7jVD+4j4BC2vUctUEsqdOBvetCLovfI+eXBulQQKsk8gKG+lo
CanGUHilSoMBtKGCbDX9lMw0ppMQPWRFAraCw0kWCeSSCjr8IfZXBOCtFuVFNT3jFJgnjNg8E
A3ScPxzlM0VOkPUVBaOUxC4imAbIOegtrDSTS0W0PA2HkMg6GMZgxSD6+A8dsGCmx1Qzh02z6
DAb2VgIpzLQTU7W+kwXqygIKOP/tI+D2lEMGQ/ggJSafzMLg7cRWH8jQ7DjNpZxBc6uKh6PJB
B9xz7P+cnE7CwbJzCI61TdFgG5rE4HLbIxJutETDQ/0FHJ7aRh0e3VMY5BcaachvCITax9Ukj
BnmEDy9NIrgzvfVGFhv3qCh6G4BAd9lIbDfz8GgRl9LwXiWgd6UgXPts+04Z7JXUFzTwBDJPe
o9SXLDxZ00N/NLHs61jRkQZyyqwLiM3hGKu9J3CON0djPJVeou4lz2+V7Epc5MYNx4VwnO5eU
X0x9NoyhSqY6OTfiKVPQbjFicKSLB0vIXpUOJW9LRAhHFvM92V1RRTvZm/NkH+WbSyUuYQHaw
IwV3sZS1dP9EO5lgXmXz824gJ4uZMNZS3+2YEYkQ48vmHX3WxpllbM9IAeZklmHYovNXcRcvZ
SeGZ0kXr2KvNx8gXLyB7Tft/3d3NztUZsJd9ovZlpwRIhN55s6zzZ03ljtvzNUPZI21NsrFAW
yxyYo/57b6YWx+34joUvSmwGu+5jVB64Kl0RqlXKGNkSlVUtm+oGhpvBDEywRtiFS+I07KC4J
U2BuzQ7VTqua1vyHHh3ef/vR8FerPTHq9Eb0kwiRLxdWqXrmXZ3Tszr0KmaDYrolX8UIjelkk
krBi97I+uddiDS/nE3YpVY6zeS6zIg/JEvFb6Q5ZLMTJYgSl3CW1oo2iAxevXcBFJc9q7bP6o
KSnHvci1LFq3meZuM3pyjjXFPHqF6bPz9GMfH28xcjNzc3LI47XxCi1/9ctaJkISbzF6351uH
go1doXb1scsTBHrMBtPc5YWtl/ko8Oi3K/tWYuMYBrQJbxqZVb+6X7NEeXC09krX46X9vgxxm
ZA83bQt/9vDmMWLN5Q/Dok9fs2eX7gmyFDeFdDaNzNzumrR4xe64n9/3oZy5dysw9DKAUR98g
Vwd+4q9ff7zzgz/ObK/Z0rx+3epXdltKrCmRyZcWjndtnsLa68bNgtcPaenG0W8WzKaYK+O2L
N9bGnvxw7AIi7j7dvvpSV57p95k2BUVqgk+kFVYafh75aIoHltAhOccC7s2dn+PnzjkaV0a7d
nj9tiu/XKwd+uJ0PpNKd+2VJWsQKu+2MRECk3+gp+b7uxGZrkkJrwms4mNtL0TumvhotidSjZ
i7dXUaveEe29LCEEhC1mLawTZPy4AF9sJBQAA
X-Env-Sender: store179@himalayawellness.com
X-Msg-Ref: server-13.tower-922.messagelabs.com!1742581306!350003!2
X-Originating-IP: [182.74.196.30]
X-SYMC-ESS-Client-Auth: outbound-route-from=pass
X-StarScan-Received:
X-StarScan-Version: 9.117.2; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 16279 invoked from network); 21 Mar 2025 18:21:58 -0000
Received: from unknown (HELO webmail.himalayawellness.com) (182.74.196.30)
by server-13.tower-922.messagelabs.com with ECDHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 21 Mar 2025 18:21:58 -0000
From: "Store179 [Charminar, Hyderabad]"
Subject: I've been trying to reach you.
Thread-Topic: I've been trying to reach you.
Thread-Index: Aduajbs9tMKI0kkbSYWt9UEVt0NOAQ==
Date: Fri, 21 Mar 2025 18:21:41 +0000
Message-ID:
Accept-Language: en-US, en-IN
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [62.197.147.52]
x-exclaimer-md-config: 89ba04b4-a29a-49a8-975d-57a3df7d6dc3
Content-Type: multipart/alternative;
boundary="_000_bfec2bf889744b20aecf12886d273445himalayawellnesscom_"
MIME-Version: 1.0
X-Spam_score: 6.2
X-Spam_score_int: 62
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I've been trying to reach you. I have something for you,
contact me directly@: sandeep.bakhshi@egodough.com
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[62.197.147.52 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[182.74.196.30 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
[67.219.247.2 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[62.197.147.52 listed in dnsbl.ahbl.org]
[62.197.147.52 listed in dnsbl.ahbl.org]
[62.197.147.52 listed in dnsbl.ahbl.org]
[62.197.147.52 listed in dnsbl.ahbl.org]
[182.74.196.30 listed in dnsbl.ahbl.org]
[182.74.196.30 listed in dnsbl.ahbl.org]
[182.74.196.30 listed in dnsbl.ahbl.org]
[182.74.196.30 listed in dnsbl.ahbl.org]
[67.219.247.2 listed in dnsbl.ahbl.org]
[67.219.247.2 listed in dnsbl.ahbl.org]
[67.219.247.2 listed in dnsbl.ahbl.org]
[67.219.247.2 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[62.197.147.52 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[62.197.147.52 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[62.197.147.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[62.197.147.52 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[67.219.247.2 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[67.219.247.2 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} I've been trying to reach you.
--_000_bfec2bf889744b20aecf12886d273445himalayawellnesscom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
I've been trying to reach you.
I have something for you, contact me directly@: sandeep.bakhshi@egodough.co=
m
--_000_bfec2bf889744b20aecf12886d273445himalayawellnesscom_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
>
break-word">
tos Display",sans-serif;mso-fareast-language:EN-ZA">I've been trying t=
o reach you.
tos Display",sans-serif;mso-fareast-language:EN-ZA">
/span>
tos Display",sans-serif;mso-fareast-language:EN-ZA">I have something f=
or you, contact me directly@:
1">sandeep.bakhshi@egodough.com
;Aptos Display",sans-serif;mso-fareast-language:EN-ZA">
p>
;Aptos Display",sans-serif;mso-fareast-language:EN-ZA">
p>
;Aptos Display",sans-serif;mso-fareast-language:EN-ZA">
p>
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
:EN-ZA">
--_000_bfec2bf889744b20aecf12886d273445himalayawellnesscom_--