Docusign phish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 23 Sep 2026 14:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1x9ToU-00000000GNP-1dvl
for dave@doctor.nl2k.ab.ca;
Wed, 23 Sep 2026 14:43:34 -0600
Resent-From: The Doctor
Resent-Date: Wed, 23 Sep 2026 14:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f232.google.com ([209.85.210.232]:56488)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1x9Tnf-00000000GDq-1NE8
for doctor@doctor.nl2k.ab.ca;
Wed, 23 Sep 2026 14:42:52 -0600
Received: by mail-pf1-f232.google.com with SMTP id d2e1a72fcca58-86265451beeso256628b3a.0
for; Wed, 23 Sep 2026 13:41:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=olloum.com; s=google; t=1790196109; x=1790800909; darn=doctor.nl2k.ab.ca;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=9UZynUJpGvBnpNP20+R1ctV7nWm22a9gImGODQRWnQY=;
b=TqSab3m++qdxwvEd9HRmLI0J9YuOb4n1wZQm32X4ZWNGZ6FDKkTS0hrd9Tzh3yrGnG
9aoQbYIrwrTL5D86A2Uc1ODnunaiMj+ywmcyEddHjuU5m9JEIk2Gqc+SIjXB6MHwycfs
9NsA53m52o7HpbogHBcMsgmEmeZow54KvlOWKAJ9yedcz1D1ouEBaiiKaBWFS+CMRP15
W/O7VD9DN7sbxfjhrrpeng4hds0l5hQbMCVxkYHA8ljhPteX6u5wg8xoatkhowSaGfmR
aXthR8cZ0uR5bbn8/dEPBY4UmfScU3Kv4p2aG2FRE7Ic0T2gn7z+ADfTIUXMjHVdhknP
uVeA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790196109; x=1790800909;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=9UZynUJpGvBnpNP20+R1ctV7nWm22a9gImGODQRWnQY=;
b=mI90IzXET+ZMbUhe5wm2IWv4OIz1A3tQ31Hbq8Zi4sw+7GVzB6lEeKMmIbqbDoUMC9
s/zB8Lslw2P4wlPUZL0H404Y1vYVseDhVN/v8x97CZ2qtTUs16wEy7D3qjGqauORQJT3
wUdXzABekZjSpEewFJ/9KWy0PYnCa0J8HkWLtoVbNVmc6oGScjKv6CzvsYZZ0qd85yea
80U2pnmXII2Qcm5i2vyqi1LBn14GIs4iTiC0zXDz9HQVqGeSXIOy6/qrdUyj6/NminjG
P3EaK0/uUwwjLyNzHnWUDJSKUubGN1PZxJYA0mrI4jabHDKSkftNipwc9N0EjZBi9lQG
LUHQ==
X-Gm-Message-State: AFuF++m3frwWybOkYsjarAeKbApkSizU1ZmUidc/CjuWBFLVEeXy/yay
aERriYQAC6uN+7W7kyKS2IhfiVNAoqROVNXa+6W83pHrafdA+9sss+bkI9YmHwtKThzL12HnWFC
tsjkZ4Ad7tnI+XD2WKabAGDOJMYGgpWl5BTCF8JnuAZN1TlY=
X-Gm-Gg: AYBFou2WoWCFFGtXgo6tyGlMMfuyvqlXVI+e1nVk+ZpDfKogiKeNCnl5IXkHJRW+XGX
72eIb7TLkql4LT4zW+roLc41B9kMNKHzw+IA2fu8hzVPkzs/yj4HaaaTij81i3zO0Vzhm0Gb/A2
5LMQP+YkK4PQBM4qd5TN0jybIjjM14bATneNIoK3Ol0mF3DTRNog8wUqysr4JnlO4oxhhmFbDcb
etpAhGrBW8jBOV7+/AdK2clLbNKX048zPNwhOV6EjYNNpkzApYfAA3ow7Vbm8N1Nv4q52/z5RVO
TLaBV9MEI03DYvjIH9+S+6+pKfCfpAfUOwBBbB0Cavt7ShtpfHaL8JHWCoIReymuGFJ85cpZi+1
ivHV40Sf4hT4gCN4BqoSGI5ADZg==
X-Received: by 2002:a05:6a00:288c:b0:878:3705:2515 with SMTP id d2e1a72fcca58-87e9e77c32fmr252913b3a.53.1790196109197;
Wed, 23 Sep 2026 13:41:49 -0700 (PDT)
Received: from [146.19.49.220] ([146.19.49.220])
by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-87d20f5d865sm1794796b3a.8.2026.09.23.13.41.48
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Wed, 23 Sep 2026 13:41:49 -0700 (PDT)
X-Relaying-Domain: olloum.com
From: Docusign
To: doctor@doctor.nl2k.ab.ca
Subject: Contract via Docdrive: Your Review and Signature
Date: 23 Sep 2026 20:41:48 +0000
Message-ID: <20260923204148.4D2BDDFF684E3080@olloum.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Required: Document Awaiting Your Review A document
has been securely shared with you
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.232 listed in list.dnswl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: olloum.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.210.232 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.232 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing
Subject: {SPAM?} Contract via Docdrive: Your Review and Signature
tant; text-transform: none; line-height: normal; letter-spacing: normal; fo=
nt-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI",=
Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol=
"; font-size: 13px; font-style: normal; font-weight: normal; word-spacing: =
0px; white-space: normal; border-collapse: collapse; orphans: 2; widows: 2;=
font-size-adjust: inherit; font-stretch: inherit;=20
font-feature-settings: "liga" 0; background-color: rgb(255, 255, 255) !impo=
rtant; font-variant-ligatures: normal; font-variant-caps: normal; font-vari=
ant-numeric: inherit; font-variant-east-asian: inherit; font-variant-altern=
ates: inherit; font-variant-position: inherit; font-variant-emoji: inherit;=
font-optical-sizing: inherit; font-kerning: inherit; font-variation-settin=
gs: inherit; font-language-override: inherit; -webkit-text-stroke-width: 0p=
x; text-decoration-thickness: initial;=20
text-decoration-style: initial; text-decoration-color: initial;' cellspacin=
g=3D"0" cellpadding=3D"0">
255, 255) !important; white-space: normal !important; background-color: rg=
b(30, 76, 161) !important;">
ageBody">Action Required: Document Awaiting Your Review
!important; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neu=
e", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "=
Segoe UI Symbol"; font-size: 14px;'>A document has been securely shared wit=
h you
, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=
le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>Hello doctor ,<=
/p>
, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=
le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>You have received a =
document that requires your review and signature. Please take a moment to o=
pen the file and complete the requested action.
px; line-height: normal; font-family: -apple-system, BlinkMacSystemFont, "H=
elvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe =
UI Emoji", "Segoe UI Symbol"; font-size: 13px; font-style: inherit; font-va=
riant: inherit; font-weight: normal; border-left-color: rgb(30, 76, 161) !i=
mportant; border-left-width: 4px; border-left-style: solid; border-collapse=
: collapse; font-size-adjust: inherit; font-stretch:=20
inherit; font-feature-settings: "liga" 0; background-color: rgb(249, 249, 2=
49) !important; font-optical-sizing: inherit; font-kerning: inherit; font-v=
ariation-settings: inherit; font-language-override: inherit;' cellspacing=
=3D"0" cellpadding=3D"0">
!important;">Important:
y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =
sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>This=
document contains information intended only for the designated recipient.<=
/p>
; border: 0px currentColor; border-image: none; text-align: center; color: =
inherit; vertical-align: baseline; font-size-adjust: inherit; font-stretch:=
inherit;">
:sluff/setse/car.html#Hr.80@outlook.com" style=3D"margin: 0px; padding: 14p=
x 28px; border-radius: 4px; border: 0px currentColor; border-image: none; c=
olor: rgb(255, 255, 255) !important; line-height: inherit; font-family: inh=
erit; font-size: 16px; font-style: inherit; font-variant: inherit; font-wei=
ght: inherit; text-decoration: none; vertical-align: baseline; display: inl=
ine-block; font-size-adjust: inherit; font-stretch:=20
inherit; font-feature-settings: inherit; background-color: rgb(30, 76, 161)=
!important; font-optical-sizing: inherit; font-kerning: inherit; font-vari=
ation-settings: inherit; font-language-override: inherit;" href=3D"https://=
shorturl.at/9bts7#ZG9jdG9yQGRvY3Rvci5ubDJrLmFiLmNh" target=3D"_blank" rel=
=3D"noopener noreferrer" data-linkindex=3D"0" data-auth=3D"NotApplicable">R=
eview & Sign Document
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 23 Sep 2026 14:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1x9ToU-00000000GNP-1dvl
for dave@doctor.nl2k.ab.ca;
Wed, 23 Sep 2026 14:43:34 -0600
Resent-From: The Doctor
Resent-Date: Wed, 23 Sep 2026 14:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f232.google.com ([209.85.210.232]:56488)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1x9Tnf-00000000GDq-1NE8
for doctor@doctor.nl2k.ab.ca;
Wed, 23 Sep 2026 14:42:52 -0600
Received: by mail-pf1-f232.google.com with SMTP id d2e1a72fcca58-86265451beeso256628b3a.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=olloum.com; s=google; t=1790196109; x=1790800909; darn=doctor.nl2k.ab.ca;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=9UZynUJpGvBnpNP20+R1ctV7nWm22a9gImGODQRWnQY=;
b=TqSab3m++qdxwvEd9HRmLI0J9YuOb4n1wZQm32X4ZWNGZ6FDKkTS0hrd9Tzh3yrGnG
9aoQbYIrwrTL5D86A2Uc1ODnunaiMj+ywmcyEddHjuU5m9JEIk2Gqc+SIjXB6MHwycfs
9NsA53m52o7HpbogHBcMsgmEmeZow54KvlOWKAJ9yedcz1D1ouEBaiiKaBWFS+CMRP15
W/O7VD9DN7sbxfjhrrpeng4hds0l5hQbMCVxkYHA8ljhPteX6u5wg8xoatkhowSaGfmR
aXthR8cZ0uR5bbn8/dEPBY4UmfScU3Kv4p2aG2FRE7Ic0T2gn7z+ADfTIUXMjHVdhknP
uVeA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790196109; x=1790800909;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=9UZynUJpGvBnpNP20+R1ctV7nWm22a9gImGODQRWnQY=;
b=mI90IzXET+ZMbUhe5wm2IWv4OIz1A3tQ31Hbq8Zi4sw+7GVzB6lEeKMmIbqbDoUMC9
s/zB8Lslw2P4wlPUZL0H404Y1vYVseDhVN/v8x97CZ2qtTUs16wEy7D3qjGqauORQJT3
wUdXzABekZjSpEewFJ/9KWy0PYnCa0J8HkWLtoVbNVmc6oGScjKv6CzvsYZZ0qd85yea
80U2pnmXII2Qcm5i2vyqi1LBn14GIs4iTiC0zXDz9HQVqGeSXIOy6/qrdUyj6/NminjG
P3EaK0/uUwwjLyNzHnWUDJSKUubGN1PZxJYA0mrI4jabHDKSkftNipwc9N0EjZBi9lQG
LUHQ==
X-Gm-Message-State: AFuF++m3frwWybOkYsjarAeKbApkSizU1ZmUidc/CjuWBFLVEeXy/yay
aERriYQAC6uN+7W7kyKS2IhfiVNAoqROVNXa+6W83pHrafdA+9sss+bkI9YmHwtKThzL12HnWFC
tsjkZ4Ad7tnI+XD2WKabAGDOJMYGgpWl5BTCF8JnuAZN1TlY=
X-Gm-Gg: AYBFou2WoWCFFGtXgo6tyGlMMfuyvqlXVI+e1nVk+ZpDfKogiKeNCnl5IXkHJRW+XGX
72eIb7TLkql4LT4zW+roLc41B9kMNKHzw+IA2fu8hzVPkzs/yj4HaaaTij81i3zO0Vzhm0Gb/A2
5LMQP+YkK4PQBM4qd5TN0jybIjjM14bATneNIoK3Ol0mF3DTRNog8wUqysr4JnlO4oxhhmFbDcb
etpAhGrBW8jBOV7+/AdK2clLbNKX048zPNwhOV6EjYNNpkzApYfAA3ow7Vbm8N1Nv4q52/z5RVO
TLaBV9MEI03DYvjIH9+S+6+pKfCfpAfUOwBBbB0Cavt7ShtpfHaL8JHWCoIReymuGFJ85cpZi+1
ivHV40Sf4hT4gCN4BqoSGI5ADZg==
X-Received: by 2002:a05:6a00:288c:b0:878:3705:2515 with SMTP id d2e1a72fcca58-87e9e77c32fmr252913b3a.53.1790196109197;
Wed, 23 Sep 2026 13:41:49 -0700 (PDT)
Received: from [146.19.49.220] ([146.19.49.220])
by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-87d20f5d865sm1794796b3a.8.2026.09.23.13.41.48
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Wed, 23 Sep 2026 13:41:49 -0700 (PDT)
X-Relaying-Domain: olloum.com
From: Docusign
To: doctor@doctor.nl2k.ab.ca
Subject: Contract via Docdrive: Your Review and Signature
Date: 23 Sep 2026 20:41:48 +0000
Message-ID: <20260923204148.4D2BDDFF684E3080@olloum.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Action Required: Document Awaiting Your Review A document
has been securely shared with you
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[146.19.49.220 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
[209.85.210.232 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[209.85.210.232 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
[146.19.49.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.232 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.232 listed in list.dnswl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: olloum.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.210.232 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.232 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing
Subject: {SPAM?} Contract via Docdrive: Your Review and Signature
=20=20=20=20
tant; text-transform: none; line-height: normal; letter-spacing: normal; fo=
nt-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI",=
Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol=
"; font-size: 13px; font-style: normal; font-weight: normal; word-spacing: =
0px; white-space: normal; border-collapse: collapse; orphans: 2; widows: 2;=
font-size-adjust: inherit; font-stretch: inherit;=20
font-feature-settings: "liga" 0; background-color: rgb(255, 255, 255) !impo=
rtant; font-variant-ligatures: normal; font-variant-caps: normal; font-vari=
ant-numeric: inherit; font-variant-east-asian: inherit; font-variant-altern=
ates: inherit; font-variant-position: inherit; font-variant-emoji: inherit;=
font-optical-sizing: inherit; font-kerning: inherit; font-variation-settin=
gs: inherit; font-language-override: inherit; -webkit-text-stroke-width: 0p=
x; text-decoration-thickness: initial;=20
text-decoration-style: initial; text-decoration-color: initial;' cellspacin=
g=3D"0" cellpadding=3D"0">
255, 255) !important; white-space: normal !important; background-color: rg=
b(30, 76, 161) !important;">
ageBody">Action Required: Document Awaiting Your Review
!important; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neu=
e", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "=
Segoe UI Symbol"; font-size: 14px;'>A document has been securely shared wit=
h you
, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=
le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>Hello doctor ,<=
/p>
, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=
le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>You have received a =
document that requires your review and signature. Please take a moment to o=
pen the file and complete the requested action.
px; line-height: normal; font-family: -apple-system, BlinkMacSystemFont, "H=
elvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe =
UI Emoji", "Segoe UI Symbol"; font-size: 13px; font-style: inherit; font-va=
riant: inherit; font-weight: normal; border-left-color: rgb(30, 76, 161) !i=
mportant; border-left-width: 4px; border-left-style: solid; border-collapse=
: collapse; font-size-adjust: inherit; font-stretch:=20
inherit; font-feature-settings: "liga" 0; background-color: rgb(249, 249, 2=
49) !important; font-optical-sizing: inherit; font-kerning: inherit; font-v=
ariation-settings: inherit; font-language-override: inherit;' cellspacing=
=3D"0" cellpadding=3D"0">
!important;">Important:
y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =
sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>This=
document contains information intended only for the designated recipient.<=
/p>
; border: 0px currentColor; border-image: none; text-align: center; color: =
inherit; vertical-align: baseline; font-size-adjust: inherit; font-stretch:=
inherit;">
:sluff/setse/car.html#Hr.80@outlook.com" style=3D"margin: 0px; padding: 14p=
x 28px; border-radius: 4px; border: 0px currentColor; border-image: none; c=
olor: rgb(255, 255, 255) !important; line-height: inherit; font-family: inh=
erit; font-size: 16px; font-style: inherit; font-variant: inherit; font-wei=
ght: inherit; text-decoration: none; vertical-align: baseline; display: inl=
ine-block; font-size-adjust: inherit; font-stretch:=20
inherit; font-feature-settings: inherit; background-color: rgb(30, 76, 161)=
!important; font-optical-sizing: inherit; font-kerning: inherit; font-vari=
ation-settings: inherit; font-language-override: inherit;" href=3D"https://=
shorturl.at/9bts7#ZG9jdG9yQGRvY3Rvci5ubDJrLmFiLmNh" target=3D"_blank" rel=
=3D"noopener noreferrer" data-linkindex=3D"0" data-auth=3D"NotApplicable">R=
eview & Sign Document
portant; font-family: adobe, adobe-clean, "Sans -apple-system", BlinkMacSys=
temFont, Roboto, sans-serif; font-weight: 300;'>
image: none; color: inherit; line-height: inherit; font-family: inherit; fo=
nt-size: 12px; font-style: inherit; font-variant: inherit; font-weight: inh=
erit; vertical-align: baseline; font-size-adjust: inherit; font-stretch: in=
herit; font-feature-settings: inherit; font-optical-sizing: inherit; font-k=
erning: inherit; font-variation-settings: inherit; font-language-override: =
inherit;">
By proceeding, you agree that this agreement may be signed using electronic=
or handwritten signatures.
portant; font-family: adobe, adobe-clean, "Sans -apple-system", BlinkMacSys=
temFont, Roboto, sans-serif; font-size: 9px; font-weight: 300;'>
=3D"font: inherit; margin: 0px; padding: 0px; border: 0px currentColor; bor=
der-image: none; color: rgb(20, 115, 230) !important; vertical-align: basel=
ine; font-size-adjust: inherit; font-stretch: inherit;">
nt-weight: bolder;">
0px; padding: 0px; border: 0px currentColor; border-image: none; color: rg=
b(20, 115, 230) !important; text-decoration: underline; vertical-align: bas=
eline; font-size-adjust: inherit; font-stretch: inherit; background-color: =
transparent !important;" href=3D"https://www.adobe.com/go/terms" target=3D"=
_blank" rel=3D"noopener noreferrer" data-linkindex=3D"1" data-auth=3D"NotAp=
plicable">Terms of Use
tColor; border-image: none; color: inherit; vertical-align: baseline; font-=
size-adjust: inherit; font-stretch: inherit;"> |
"font: inherit; margin: 0px; padding: 0px; border: 0px currentColor; border=
-image: none; color: rgb(20, 115, 230) !important; vertical-align: baseline=
; font-size-adjust: inherit; font-stretch: inherit;">
weight: bolder;">
id=3DCBFCIBAACBSCTBABDUAAABACAABAAC4zNZMBw8Bc6v8QrCc1nfVYwC0O2EbG4kC6YsMv0f=
rrsyx3taeoYim30DsEWr1NLSWIgVRgBC_4bnVXlPn1olqnouzecVaD13XLh_EFvITf8gjlP3IB2=
L8QlAwK6sWn9&&reportAbuse=3Dtrue" style=3D"font: inherit; margin: 0=
px; padding: 0px; border: 0px currentColor; border-image: none; color: rgb(=
20, 115, 230) !important; text-decoration: underline; vertical-align: basel=
ine; font-size-adjust: inherit; font-stretch: inherit;=20
background-color: transparent !important;" href=3D"https://na1.documents.ad=
obe.com/public/reportAbuseForm?tsid=3DCBFCIBAACBSCTBABDUAAABACAABAAC4zNZMBw=
8Bc6v8QrCc1nfVYwC0O2EbG4kC6YsMv0frrsyx3taeoYim30DsEWr1NLSWIgVRgBC_4bnVXlPn1=
olqnouzecVaD13XLh_EFvITf8gjlP3IB2L8QlAwK6sWn9&&reportAbuse=3Dtrue" =
target=3D"_blank" rel=3D"noopener noreferrer" data-linkindex=3D"2" data-aut=
h=3D"NotApplicable">Report Abuse
portant; font-family: adobe, adobe-clean, "Sans -apple-system", BlinkMacSys=
temFont, Roboto, sans-serif; font-weight: 300;'>
image: none; color: inherit; line-height: inherit; font-family: inherit; fo=
nt-size: 12px; font-style: inherit; font-variant: inherit; font-weight: inh=
erit; vertical-align: baseline; font-size-adjust: inherit; font-stretch: in=
herit; font-feature-settings: inherit; font-optical-sizing: inherit; font-k=
erning: inherit; font-variation-settings: inherit; font-language-override: =
inherit;">
© 2026 Adobe. All rights reserved