Web/SEO/App spam from Microsoft outlook Part 2
Posted by Dave Yadallee onpts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.43.56 listed in dnsbl.ahbl.org]
[52.103.43.56 listed in dnsbl.ahbl.org]
[52.103.43.56 listed in dnsbl.ahbl.org]
[52.103.43.56 listed in dnsbl.ahbl.org]
[2603:1096:405:14:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:405:14:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:405:14:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:405:14:0:0:0:12 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.43.56 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.43.56 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.43.56 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.43.56 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:405:14:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
[52.103.43.56 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[madilynsmead(at)outlook.com]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.43.56 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Follow up...
--_000_TY0PR04MB740464E09714578D8620A068D88DATY0PR04MB7404apcp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi,
I was just wondering if you had a chance to review the previous email I sen=
t to you.
I understand the value of your time so I'd like to know what the best way t=
o reach you is and when we can discuss this in more detail.
Waiting,
...........................................................................=
...........................................................................=
..................
From: Madilyn [MadilynSmead@outlook.com]
Sent: Friday, June 30, 2023, 2:40 PM
To: root@nk.ca
Subject: SEO Service
Hi root@nk.ca,
I found your details on Google. Would you like your website to appear on Go=
ogle's 1st page to boost your business?
I'm an SEO expert and have helped over 5000 businesses rank on page one. Ou=
r rates are affordable. Can I send you a quote and price list?
Thanks!
--_000_TY0PR04MB740464E09714578D8620A068D88DATY0PR04MB7404apcp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
>