Cybersceurity spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 02 Jul 2025 14:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uX47a-00000000PpK-3T4C
for dave@doctor.nl2k.ab.ca;
Wed, 02 Jul 2025 14:31:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 2 Jul 2025 14:31:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:55512)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uX2w9-00000000DjV-1mZc
for sales@nk.ca;
Wed, 02 Jul 2025 13:16:12 -0600
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-71173646662so51524667b3.2
for; Wed, 02 Jul 2025 12:14:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sumologic.com; s=google; t=1751483645; x=1752088445; darn=nk.ca;
h=to:subject:message-id:date:mime-version:from:from:to:cc:subject
:date:message-id:reply-to;
bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;
b=kv0pahNvT6bcg541CVPulkWCxJeawOO/JiK78OXYXbYMXv+Dxzn0jxWwoLSx4CNL6x
nK4lUdExtxpVsIQ0D1/dVlEGRbrePh/kntqtHAtw9o26G63QphS5bv7Ih+vRKvPwxpi2
lomO5Vg3Wnz0ilvfCycySvtyi3phsnwnx3DvI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1751483645; x=1752088445;
h=to:subject:message-id:date:mime-version:from:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;
b=aXDlDjvpXeNB8uAOlYU/f82VdIGSba6VmhXBGM+4e5CYII5LztdKY6FVxoZDEnivh7
coVAXf9VDtj060HYmXfy9sXMcAIz6LztkS0xG8RiHK2YqQv7i07A6K6vWoyHpEIOsof+
EdwlHwTG3m0vOq+2cBNtnd9O2xfvTwivRDvCxZsw0yA9FboVcf2EW4dISfm7ILXRTo1U
5Fu7PdrIiGe/f+kF/m7n0xecogY8kb7Q4S8GHItViJkJpNGw51IaUOBBbuOscMVgiGid
7OK0G4PpDnrrOtc+P4LLBHv9+p0jg7RRLP+rU2pFQZgI12WNFmOxI9zzqKTr/vKgLhEN
0tUw==
X-Gm-Message-State: AOJu0YyXG0FRkQiEPbQ+UGmR28PcZDoCghnjjCLhC616wHpN/mfF15xe
sDiPPU3NjVSgbU2TSspU5Hbl0R2GXTTnaIJXC9nzOaqHr5U92ZakR472cXUyYvI91i0tnblu7WU
/ceacg6FJ6kPPNKkErhufCyTXOdFTy9qgEPYH+bOr5RAKNn/qCoDx
X-Gm-Gg: ASbGnctFu7sS2wJ5HIqF5WOb47S4hpFlQUqGEULsnuqr2ILYg8pPKaL2+Q6KvgktOhC
RujdTvQboC+9EBVyOxmIyCahEsx40DOfQBbx7bHeTVRatuJfiHS3pMTKdHNNZy1f7R0vYZdMRRU
0e7r9hkJeBDSmseXIXhJjPvTbwcFafT+23URFs+Wb2YfZa1fZO2/sLNw==
X-Google-Smtp-Source: AGHT+IGhbnhtL/3anv9Ttup2Rou1TAmR3eGB+6Aw3jzcI5YKdQZg5VhdYd7WcMaYbq41L+b+SXe9Mvuf3jCwsxmUIOU=
X-Received: by 2002:a05:690c:46c8:b0:70c:d322:8587 with SMTP id
00721157ae682-71658fdaddcmr13556677b3.6.1751483644605; Wed, 02 Jul 2025
12:14:04 -0700 (PDT)
Received: from 193155701165 named unknown by gmailapi.google.com with
HTTPREST; Wed, 2 Jul 2025 14:14:03 -0500
From: Jeremy Chang
Mime-Version: 1.0
X-OUTREACH-SENT: true
Date: Wed, 2 Jul 2025 14:14:03 -0500
X-Gm-Features: Ac12FXx3rgFcYqG5mcF5lzeHMjImumWTkcG3gIGZVR5sEC8Nuw3-RcphRIxCJEQ
Message-ID:
Subject: Sumo Logic Introduction
To: Dave Yadallee
Content-Type: multipart/alternative; boundary="000000000000778d690638f71022"
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey Dave, Teams don’t fail because they miss threats—they
fail because they can’t connect the dots fast enough. Even with automation,
analysts report that up to 70% of their time is wasted on false positives.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.6 MEGALONGWORD BODY: Uses really overlong words
0.3 LONGWORD BODY: Uses overlong words
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Sumo Logic Introduction
--000000000000778d690638f71022
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hey Dave,
Teams don=E2=80=99t fail because they miss threats=E2=80=94they fail becaus=
e they can=E2=80=99t
connect the dots fast enough.
Even with automation, analysts report that up to 70% of their time is
wasted on false positives.
How does this compare to what you're seeing?
Jeremy Chang (he/him/his)
Sales Development Representative
M (650) 385-8092
Sumo Logic
If you'd like me to stop sending you emails, please click here
3DALBCN5ZGOIR2EI4GMMJXHEZWEMJNGA2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCE=
LBCOZSXE43JN5XCEORCGQRCYITTNFTSEORCHFNDGNDQMZJES4CKOJBUM23UL5RU2SZWM5VXE4TV=
MZVUMWTMNVHG4WDSJFJDSMLBOJFDQPJCPU=3D=3D=3D=3D=3D=3D>
--000000000000778d690638f71022
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
font-size:13px">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 02 Jul 2025 14:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uX47a-00000000PpK-3T4C
for dave@doctor.nl2k.ab.ca;
Wed, 02 Jul 2025 14:31:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 2 Jul 2025 14:31:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:55512)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uX2w9-00000000DjV-1mZc
for sales@nk.ca;
Wed, 02 Jul 2025 13:16:12 -0600
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-71173646662so51524667b3.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sumologic.com; s=google; t=1751483645; x=1752088445; darn=nk.ca;
h=to:subject:message-id:date:mime-version:from:from:to:cc:subject
:date:message-id:reply-to;
bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;
b=kv0pahNvT6bcg541CVPulkWCxJeawOO/JiK78OXYXbYMXv+Dxzn0jxWwoLSx4CNL6x
nK4lUdExtxpVsIQ0D1/dVlEGRbrePh/kntqtHAtw9o26G63QphS5bv7Ih+vRKvPwxpi2
lomO5Vg3Wnz0ilvfCycySvtyi3phsnwnx3DvI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1751483645; x=1752088445;
h=to:subject:message-id:date:mime-version:from:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;
b=aXDlDjvpXeNB8uAOlYU/f82VdIGSba6VmhXBGM+4e5CYII5LztdKY6FVxoZDEnivh7
coVAXf9VDtj060HYmXfy9sXMcAIz6LztkS0xG8RiHK2YqQv7i07A6K6vWoyHpEIOsof+
EdwlHwTG3m0vOq+2cBNtnd9O2xfvTwivRDvCxZsw0yA9FboVcf2EW4dISfm7ILXRTo1U
5Fu7PdrIiGe/f+kF/m7n0xecogY8kb7Q4S8GHItViJkJpNGw51IaUOBBbuOscMVgiGid
7OK0G4PpDnrrOtc+P4LLBHv9+p0jg7RRLP+rU2pFQZgI12WNFmOxI9zzqKTr/vKgLhEN
0tUw==
X-Gm-Message-State: AOJu0YyXG0FRkQiEPbQ+UGmR28PcZDoCghnjjCLhC616wHpN/mfF15xe
sDiPPU3NjVSgbU2TSspU5Hbl0R2GXTTnaIJXC9nzOaqHr5U92ZakR472cXUyYvI91i0tnblu7WU
/ceacg6FJ6kPPNKkErhufCyTXOdFTy9qgEPYH+bOr5RAKNn/qCoDx
X-Gm-Gg: ASbGnctFu7sS2wJ5HIqF5WOb47S4hpFlQUqGEULsnuqr2ILYg8pPKaL2+Q6KvgktOhC
RujdTvQboC+9EBVyOxmIyCahEsx40DOfQBbx7bHeTVRatuJfiHS3pMTKdHNNZy1f7R0vYZdMRRU
0e7r9hkJeBDSmseXIXhJjPvTbwcFafT+23URFs+Wb2YfZa1fZO2/sLNw==
X-Google-Smtp-Source: AGHT+IGhbnhtL/3anv9Ttup2Rou1TAmR3eGB+6Aw3jzcI5YKdQZg5VhdYd7WcMaYbq41L+b+SXe9Mvuf3jCwsxmUIOU=
X-Received: by 2002:a05:690c:46c8:b0:70c:d322:8587 with SMTP id
00721157ae682-71658fdaddcmr13556677b3.6.1751483644605; Wed, 02 Jul 2025
12:14:04 -0700 (PDT)
Received: from 193155701165 named unknown by gmailapi.google.com with
HTTPREST; Wed, 2 Jul 2025 14:14:03 -0500
From: Jeremy Chang
Mime-Version: 1.0
X-OUTREACH-SENT: true
Date: Wed, 2 Jul 2025 14:14:03 -0500
X-Gm-Features: Ac12FXx3rgFcYqG5mcF5lzeHMjImumWTkcG3gIGZVR5sEC8Nuw3-RcphRIxCJEQ
Message-ID:
Subject: Sumo Logic Introduction
To: Dave Yadallee
Content-Type: multipart/alternative; boundary="000000000000778d690638f71022"
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey Dave, Teams don’t fail because they miss threats—they
fail because they can’t connect the dots fast enough. Even with automation,
analysts report that up to 70% of their time is wasted on false positives.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
[209.85.128.176 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.176 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
[209.85.128.176 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.6 MEGALONGWORD BODY: Uses really overlong words
0.3 LONGWORD BODY: Uses overlong words
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Sumo Logic Introduction
--000000000000778d690638f71022
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hey Dave,
Teams don=E2=80=99t fail because they miss threats=E2=80=94they fail becaus=
e they can=E2=80=99t
connect the dots fast enough.
Even with automation, analysts report that up to 70% of their time is
wasted on false positives.
How does this compare to what you're seeing?
Jeremy Chang (he/him/his)
Sales Development Representative
M (650) 385-8092
Sumo Logic
If you'd like me to stop sending you emails, please click here
3DALBCN5ZGOIR2EI4GMMJXHEZWEMJNGA2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCE=
LBCOZSXE43JN5XCEORCGQRCYITTNFTSEORCHFNDGNDQMZJES4CKOJBUM23UL5RU2SZWM5VXE4TV=
MZVUMWTMNVHG4WDSJFJDSMLBOJFDQPJCPU=3D=3D=3D=3D=3D=3D>
--000000000000778d690638f71022
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=
Hey Dave,
Hey Dave,
font-size:13px">
ans-serif;font-size:13px">Teams don=E2=80=99t fail because they miss threat=
s=E2=80=94they fail because they can=E2=80=99t connect the dots fast enough=
.
e:13px">
f;font-size:13px">Even with automation, analysts report that up to 70% of t=
heir time is wasted on false positives.
ly:Arial,Helvetica,sans-serif;font-size:13px">
"font-family:Arial,Helvetica,sans-serif;font-size:13px">How does this compa=
re to what you're seeing?
elvetica,sans-serif;font-size:13px">
outreach-signature">
zing:border-box;font-variant-ligatures:none;margin:16px 0px 0px;outline:non=
e;text-decoration-style:initial;text-decoration-color:initial;color:rgb(33,=
33,33);font-size:16px;font-family:Open Sans,sans-serif;line-height:1.5;font=
-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px=
;text-transform:none;word-spacing:0px">
sizing:border-box;color:rgb(0,0,0);font-family:Arial;font-size:10pt;font-va=
riant:normal">Jeremy Chang
;font-size:10pt">=C2=A0
" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;font-si=
ze:10pt;font-variant:normal">(
zing:border-box;color:rgb(0,0,0);font-family:Arial;font-size:9pt;font-varia=
nt:normal">he/him/his)
style=3D"box-sizing:border-box;font-variant-ligatures:none;margin:0pt 0px;o=
utline:none;text-decoration-style:initial;text-decoration-color:initial;col=
or:rgb(33,33,33);font-size:16px;font-family:Open Sans,sans-serif;line-heigh=
t:1.5;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-=
indent:0px;text-transform:none;word-spacing:0px;background-color:transparen=
t;border-width:initial;border-style:none;border-color:initial;padding:0pt">=
-family:Arial;font-size:10pt;font-variant:normal">Sales Development Represe=
ntative
zing:border-box;font-variant-ligatures:none;margin:0pt 0px;outline:none;tex=
t-decoration-style:initial;text-decoration-color:initial;color:rgb(33,33,33=
);font-size:16px;font-family:Open Sans,sans-serif;line-height:1.5;font-vari=
ant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text=
-transform:none;word-spacing:0px;background-color:transparent;border-width:=
initial;border-style:none;border-color:initial;padding:0pt">
C9DxTc" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;f=
ont-size:10pt;font-variant:normal">M
C9DxTc" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;f=
ont-size:10pt;font-variant:normal">
ze:10pt">=C2=A0(650) 385-8092
zfr3Q CDt4Ke" style=3D"box-sizing:border-box;font-variant-ligatures:none;ma=
rgin:0pt 0px;outline:none;text-decoration-style:initial;text-decoration-col=
or:initial;color:rgb(33,33,33);font-size:16px;font-family:Open Sans,sans-se=
rif;line-height:1.2;padding:0pt;font-variant-caps:normal;letter-spacing:nor=
mal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;b=
ackground-color:transparent;border-width:initial;border-style:none;border-c=
olor:initial">
gb(0,0,153);font-family:Arial;font-size:9pt;font-variant:normal">Su=
mo Logic
ch-unsubscribe" style=3D"font-size:10px;color:#999">If you'd like me to=
stop sending you emails, please
api/mailings/unsubscribe/PMRGSZBCHI2TSMRWGI3DALBCN5ZGOIR2EI4GMMJXHEZWEMJNGA=
2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCELBCOZSXE43JN5XCEORCGQRCYITTNFTSE=
ORCHFNDGNDQMZJES4CKOJBUM23UL5RU2SZWM5VXE4TVMZVUMWTMNVHG4WDSJFJDSMLBOJFDQPJC=
PU=3D=3D=3D=3D=3D=3D">click here
logic.com/api/mailings/opened/PMRGSZBCHI2TSMRWGI3DALBCN5ZGOIR2EI4GMMJXHEZWE=
MJNGA2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCELBCOZSXE43JN5XCEORCGQRCYITT=
NFTSEORCGRTGWYRQOI2S2ZCXKRWEYVZTIFCDCYLKJNXEQ3KSHBIE6WK7IN3VMUDZK5LHGRTGJFS=
DIPJCPU=3D=3D=3D=3D=3D=3D.gif" alt=3D"" width=3D"1" height=3D"1">
--000000000000778d690638f71022--