Ukrainian ladies spam from Microsoft Outlook Part 2
Posted by Dave Yadallee on
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[shellicejtaba(at)hotmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.35.77 listed in wl.mailspike.net]
2.6 FSL_HAS_TINYURL URI: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Your friend sent you a gift!
------=_NextPart_000_2B59_B3CADF36.C23C64FE
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Start Meaningful Conversations =E2=80=94 TrueLoveNow
=F0=9F=92=AC Start Meaningful Conversations on TrueLoveNow
Hello,
At TrueLoveNow we believe in quality over quantity. Meet members who are s=
erious about building connections =E2=80=94 not just collecting matches.
Detailed Profiles: See values and interests up front.
Smart Search: Filter by interests, location, and lifestyle.
Supportive Community: Moderated and respectful members.
Take the first step =E2=80=94 your next conversation could change everythi=
ng:
Join us
All the best,
The TrueLoveNow Team
To stop receiving these emails, unsubscribe.
=
------=_NextPart_000_2B59_B3CADF36.C23C64FE
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=
=0A=
0">=0A=
=0A=<br /><br />
Start Meaningful Conversations =E2=80=94 TrueLoveNow=0A=<br /><br />
=0A=
"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=0A=
=0A=
=0A=
=0A=
zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=
=0A=
=0A=
=0A=
=0A=
l;">=0A=
=F0=9F=92=AC Start Meaningful Conversations on TrueLoveNow=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
y:Arial;">=0A=
Hello,=0A=
=0A=
y:Arial;">=0A=
At TrueLoveNow we believe in quality over quantity. Meet members w=
ho are serious about building connections =E2=80=94 not just collecting mat=
ches.=0A=
=0A=
:#666666;line-height:1.6;text-align:left;font-family:Arial;">=0A=
=0A=
Detailed Profiles: See values and interests up f=
ront.=0A=
=0A=
=0A=
=0A=
Smart Search: Filter by interests, location, and=
lifestyle.=0A=
=0A=
=0A=
=0A=
Supportive Community: Moderated and respectful m=
embers.=0A=
=0A=
=0A=
y:Arial;">=0A=
Take the first step =E2=80=94 your next conversation could change =
everything:=0A=
=0A=
y:Arial;">=0A=
All the best,
=0A=
The TrueLoveNow Team=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=
------=_NextPart_000_2B59_B3CADF36.C23C64FE--
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[52.103.35.77 listed in dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.35.77 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10a6:102:4fb:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
[52.103.35.77 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[shellicejtaba(at)hotmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.35.77 listed in wl.mailspike.net]
2.6 FSL_HAS_TINYURL URI: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Your friend sent you a gift!
------=_NextPart_000_2B59_B3CADF36.C23C64FE
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Start Meaningful Conversations =E2=80=94 TrueLoveNow
=F0=9F=92=AC Start Meaningful Conversations on TrueLoveNow
Hello,
At TrueLoveNow we believe in quality over quantity. Meet members who are s=
erious about building connections =E2=80=94 not just collecting matches.
Detailed Profiles: See values and interests up front.
Smart Search: Filter by interests, location, and lifestyle.
Supportive Community: Moderated and respectful members.
Take the first step =E2=80=94 your next conversation could change everythi=
ng:
Join us
All the best,
The TrueLoveNow Team
To stop receiving these emails, unsubscribe.
=
------=_NextPart_000_2B59_B3CADF36.C23C64FE
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=
=0A=
0">=0A=
"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=0A=
=0A=
zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=
=0A=
l;">=0A=
=F0=9F=92=AC Start Meaningful Conversations on TrueLoveNow=0A=
=0A=
y:Arial;">=0A=
Hello,=0A=
=0A=
y:Arial;">=0A=
At TrueLoveNow we believe in quality over quantity. Meet members w=
ho are serious about building connections =E2=80=94 not just collecting mat=
ches.=0A=
=0A=
:#666666;line-height:1.6;text-align:left;font-family:Arial;">=0A=
Detailed Profiles: See values and interests up f=
ront.=0A=
=0A=
Smart Search: Filter by interests, location, and=
lifestyle.=0A=
=0A=
Supportive Community: Moderated and respectful m=
embers.=0A=
=0A=
y:Arial;">=0A=
Take the first step =E2=80=94 your next conversation could change =
everything:=0A=
=0A=
=0A=
;color:#ffffff;text-decoration:none;padding:12px 24px;font-size:18px;border=
-radius:30px;font-family:Arial;">Join us =0A=
y:Arial;">=0A=
All the best,
=0A=
The TrueLoveNow Team=0A=
=0A=
=0A=
To stop receiving these emails,
4ljc6" style=3D"color:#666666;text-decoration:underline;font-weight:bold;">=
unsubscribe.=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=
------=_NextPart_000_2B59_B3CADF36.C23C64FE--
