Facebook Phish from Google Gmail Part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 06 Feb 2026 02:13:00 -0700
Received: from mail-lf1-f46.google.com ([209.85.167.46]:54608)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1voHsv-000000004LU-42dW
for dave@doctor.nl2k.ab.ca;
Fri, 06 Feb 2026 02:12:26 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-59dd3e979ceso610160e87.1
for; Fri, 06 Feb 2026 01:11:30 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1770369083; cv=none;
d=google.com; s=arc-20240605;
b=fK/+rxAXdvLK1eSZjpWM29jnkuvjLVcM9/N3Q9KyR1z1G6ladoJx7+JaUQW1grW8d7
NuZ+2LUuDMXI37JmgxtMdhXyO7nKmn7NMozHHTXbXfR0tMn94zvI75/V+CZxtkoMSpZD
RyW+k2h4Qj2dCAZFiMrak/o+MWkXadlUheuza+Y2q0wVZyCzVPSQX5x+4whQoPpeuyr8
YhPwJMBd2QM1cAr54z2HU6J0VX2Jpv2W7k+rb0GWefqzroQ0IBej5kKIn4NHXjwZnRcg
QlkjlZyDAusvYWWk9RJOksEiKgkCpgpfJW8U7wxoruE4Q/9rzmZmzT/JjUFPi0ngeZ89
WLgw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
fh=8FB2xBclpoMA/jMIhLT59zVSpzCJ8f1F3rM+mwC1rk8=;
b=inc970waTkIoyQ0rkwckn3kDaVOvt7ZjFdiAK7UWxBzb9CAhBlayr57nSJOV2NZgoz
z7wBxnnF9I4mp+0RMNoHwT+MpVyuAtWOI14OTyA4MNLbAK7YEMmgZkOZN6mkWRUFYtoz
GbPsK42+vUuo7HNAwq0D1hra3ZEcg7TA0Nv8ooqhNeKn87JCXGvQ55Om1jGC5/O5aPmi
UUt+0TCMzhsGtWt+tfxqsAsAg08O7UILDjquCa+v+eloCE7Tzg+Ol92N7JUKJpCXsNnf
FEpHKod9kCxQCescAsBD0fAjJGHtaBNFEOSPBll0Csdng6ZtxQrWtCeLv6r0nWC1Yp+g
vPZA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cgcc.edu; s=google; t=1770369083; x=1770973883; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
b=NzjO5aq9Fe77JrzWmFIu4AIX4mqv1MaTlufxplVsJxz7+hZ+LJFwd3hpEhjt3gVTOo
+3/egrEs+U8IH1ejg4Ml3QdV3sPHoAMqP+8yo70Ap645vWg3BPGi+d9+yJS1MR9CYkmq
1kOu14kOfM09LZEDNoqGlndyf5zo5HX4Os/OrhI9w8BiKPp15BPHDGB73youx9Wyk/30
MhzA1oHn43Gb79AyjvFZZji6q9TGLzHvEqIDcm5pfqmOcAWF9gXHM0y46knXQNMLGaEo
pX2MPm6+PqhlBRzpOd0vKf7LUPR36+hGAfZP1md75ShtN6fUtWEVp0ByvClZm++6LoFI
aTfw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1770369083; x=1770973883;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
b=gwFQ7FPt3+w+SxsOZUc5laDBEzwOAdtueL3OyrXziIsVakje1E/vbXSLBHstTWfQ2Y
/51+Mgb85tFYrb4SxrG6sk0sqk4lvB+/QoRkjNrupOOjh+XEB8ZpigIR7ahNf8sPIeAu
sqpjzZckxKsUbQA3Y5nul6ICLhPZGZue9mTYNZ7jxoWncRPbOwS09nHfmT1zZNkV6M2R
L2MB+NBqyeubwlJdwWHot2sNCKdZqhzCgwRVh8FCNm+2jOE5ql69r3hX+e/XsOvCWaft
QAtt5IzmfzQtBccGijRoIwgAxe6/PtO3njXuuCQsYGthLEf6s+LDo5VHQhd9wu/67kYo
gDtw==
X-Forwarded-Encrypted: i=1; AJvYcCV8M/x3OxIUiPViRp4bJmHuCtZxmm4Bq5nRH8EV//IdUdHMl9y9IODNpLBks9vNB4agviTo@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yw5kdzOFPlpVEQfoXJ90oNOaNQpWybIJnCpHo8Ctgd1H5TZXGTb
q7j0Z6Hm5jEd6P7LOzXUr7koS6aQzVAzOIFnanexIQPxnJRK//RVUnUeuS2VgY0wgn7JC8s21zz
xa2Op6RAXdeBcHw88EVgTuoq7eywnNH+EB6TxkvSD+A==
X-Gm-Gg: AZuq6aIrsFsMAT4uFPKjL+PHOEOSMP6l7mdypP1m5CJ8Tk2ActSxvcDKm3vT2fyDJML
Mqwj7Ea8cjc7Tl0GuYOHxTLEh1eSSt9xHwn3XMZDyLyv+XTWKRvxOI4NA2EaQ2wCADgLu5SR0Pj
+NTRG7I8z6Tj8nK33PBSXvJ9M64cxAi1hKNPkFIzT2jnYk2fMaLv23uBU7AMeQft2l86XI8Tq4H
cmqRboMxy9T11PXd7bS1KlMD0jxopniyADcDsjcpgJ+4ITaBurG3zW3gS4R9V81vtL49WnbvxES
g6/2VWDO7Ypi9A+ZZo2ya5HviSdKUulc+55sNCEsDRMRy9xDQTPapgcyfzdXGipETPN1E77XRWY
4LQQH9wTH2KeEWs817M2YZVCZvEsEejMa7rjN5exNO/7epglCXW8B7aXF0GaKR3cQc8mZPa3H//
HOCNWYPM2zyws/JYyNm/+9Db3pi/ZVyyjuVg==
X-Received: by 2002:a05:6512:1084:b0:59d:dffe:94b0 with SMTP id
2adb3069b0e04-59e45147fb3mr627361e87.10.1770369082952; Fri, 06 Feb 2026
01:11:22 -0800 (PST)
MIME-Version: 1.0
Reply-To: adimfbgrantpageagent@gmail.com
From: Commission European
Date: Fri, 6 Feb 2026 03:11:23 -0600
X-Gm-Features: AZwV_Qi9-t40FRR7fHlR9yKZ--8X978okYKs0ltaCA6s4PuTwvdFCwNlRd6iYcE
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004f97ce064a242c54"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FACEBOOK INC 1601 WILLOW ROAD MENLO PARK, CA 94025 www.facebook.com
Dear Facebook User: As part of Facebook Corporate social responsibility and
customer loyalty bonus for the Year 2026.
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in sa-accredit.habeas.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.46 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?}
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 06 Feb 2026 02:13:00 -0700
Received: from mail-lf1-f46.google.com ([209.85.167.46]:54608)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1voHsv-000000004LU-42dW
for dave@doctor.nl2k.ab.ca;
Fri, 06 Feb 2026 02:12:26 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-59dd3e979ceso610160e87.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1770369083; cv=none;
d=google.com; s=arc-20240605;
b=fK/+rxAXdvLK1eSZjpWM29jnkuvjLVcM9/N3Q9KyR1z1G6ladoJx7+JaUQW1grW8d7
NuZ+2LUuDMXI37JmgxtMdhXyO7nKmn7NMozHHTXbXfR0tMn94zvI75/V+CZxtkoMSpZD
RyW+k2h4Qj2dCAZFiMrak/o+MWkXadlUheuza+Y2q0wVZyCzVPSQX5x+4whQoPpeuyr8
YhPwJMBd2QM1cAr54z2HU6J0VX2Jpv2W7k+rb0GWefqzroQ0IBej5kKIn4NHXjwZnRcg
QlkjlZyDAusvYWWk9RJOksEiKgkCpgpfJW8U7wxoruE4Q/9rzmZmzT/JjUFPi0ngeZ89
WLgw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
fh=8FB2xBclpoMA/jMIhLT59zVSpzCJ8f1F3rM+mwC1rk8=;
b=inc970waTkIoyQ0rkwckn3kDaVOvt7ZjFdiAK7UWxBzb9CAhBlayr57nSJOV2NZgoz
z7wBxnnF9I4mp+0RMNoHwT+MpVyuAtWOI14OTyA4MNLbAK7YEMmgZkOZN6mkWRUFYtoz
GbPsK42+vUuo7HNAwq0D1hra3ZEcg7TA0Nv8ooqhNeKn87JCXGvQ55Om1jGC5/O5aPmi
UUt+0TCMzhsGtWt+tfxqsAsAg08O7UILDjquCa+v+eloCE7Tzg+Ol92N7JUKJpCXsNnf
FEpHKod9kCxQCescAsBD0fAjJGHtaBNFEOSPBll0Csdng6ZtxQrWtCeLv6r0nWC1Yp+g
vPZA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cgcc.edu; s=google; t=1770369083; x=1770973883; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
b=NzjO5aq9Fe77JrzWmFIu4AIX4mqv1MaTlufxplVsJxz7+hZ+LJFwd3hpEhjt3gVTOo
+3/egrEs+U8IH1ejg4Ml3QdV3sPHoAMqP+8yo70Ap645vWg3BPGi+d9+yJS1MR9CYkmq
1kOu14kOfM09LZEDNoqGlndyf5zo5HX4Os/OrhI9w8BiKPp15BPHDGB73youx9Wyk/30
MhzA1oHn43Gb79AyjvFZZji6q9TGLzHvEqIDcm5pfqmOcAWF9gXHM0y46knXQNMLGaEo
pX2MPm6+PqhlBRzpOd0vKf7LUPR36+hGAfZP1md75ShtN6fUtWEVp0ByvClZm++6LoFI
aTfw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1770369083; x=1770973883;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=HJcffCim6uI1xk5UzyDitE8/I+ORy4l89lwJMTv9du0=;
b=gwFQ7FPt3+w+SxsOZUc5laDBEzwOAdtueL3OyrXziIsVakje1E/vbXSLBHstTWfQ2Y
/51+Mgb85tFYrb4SxrG6sk0sqk4lvB+/QoRkjNrupOOjh+XEB8ZpigIR7ahNf8sPIeAu
sqpjzZckxKsUbQA3Y5nul6ICLhPZGZue9mTYNZ7jxoWncRPbOwS09nHfmT1zZNkV6M2R
L2MB+NBqyeubwlJdwWHot2sNCKdZqhzCgwRVh8FCNm+2jOE5ql69r3hX+e/XsOvCWaft
QAtt5IzmfzQtBccGijRoIwgAxe6/PtO3njXuuCQsYGthLEf6s+LDo5VHQhd9wu/67kYo
gDtw==
X-Forwarded-Encrypted: i=1; AJvYcCV8M/x3OxIUiPViRp4bJmHuCtZxmm4Bq5nRH8EV//IdUdHMl9y9IODNpLBks9vNB4agviTo@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yw5kdzOFPlpVEQfoXJ90oNOaNQpWybIJnCpHo8Ctgd1H5TZXGTb
q7j0Z6Hm5jEd6P7LOzXUr7koS6aQzVAzOIFnanexIQPxnJRK//RVUnUeuS2VgY0wgn7JC8s21zz
xa2Op6RAXdeBcHw88EVgTuoq7eywnNH+EB6TxkvSD+A==
X-Gm-Gg: AZuq6aIrsFsMAT4uFPKjL+PHOEOSMP6l7mdypP1m5CJ8Tk2ActSxvcDKm3vT2fyDJML
Mqwj7Ea8cjc7Tl0GuYOHxTLEh1eSSt9xHwn3XMZDyLyv+XTWKRvxOI4NA2EaQ2wCADgLu5SR0Pj
+NTRG7I8z6Tj8nK33PBSXvJ9M64cxAi1hKNPkFIzT2jnYk2fMaLv23uBU7AMeQft2l86XI8Tq4H
cmqRboMxy9T11PXd7bS1KlMD0jxopniyADcDsjcpgJ+4ITaBurG3zW3gS4R9V81vtL49WnbvxES
g6/2VWDO7Ypi9A+ZZo2ya5HviSdKUulc+55sNCEsDRMRy9xDQTPapgcyfzdXGipETPN1E77XRWY
4LQQH9wTH2KeEWs817M2YZVCZvEsEejMa7rjN5exNO/7epglCXW8B7aXF0GaKR3cQc8mZPa3H//
HOCNWYPM2zyws/JYyNm/+9Db3pi/ZVyyjuVg==
X-Received: by 2002:a05:6512:1084:b0:59d:dffe:94b0 with SMTP id
2adb3069b0e04-59e45147fb3mr627361e87.10.1770369082952; Fri, 06 Feb 2026
01:11:22 -0800 (PST)
MIME-Version: 1.0
Reply-To: adimfbgrantpageagent@gmail.com
From: Commission European
Date: Fri, 6 Feb 2026 03:11:23 -0600
X-Gm-Features: AZwV_Qi9-t40FRR7fHlR9yKZ--8X978okYKs0ltaCA6s4PuTwvdFCwNlRd6iYcE
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004f97ce064a242c54"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FACEBOOK INC 1601 WILLOW ROAD MENLO PARK, CA 94025 www.facebook.com
Dear Facebook User: As part of Facebook Corporate social responsibility and
customer loyalty bonus for the Year 2026.
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in sa-accredit.habeas.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.46 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.46 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?}