Health spam from Russia
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 Oct 2025 15:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vBgSZ-00000000CN9-3J6T
for dave@doctor.nl2k.ab.ca;
Wed, 22 Oct 2025 15:33:31 -0600
Resent-From: The Doctor
Resent-Date: Wed, 22 Oct 2025 15:33:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [80.66.72.37] (port=56515 helo=live-sex-chat.club)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1vBeM5-00000000MAW-3Qx6
for sales@netknow.ca;
Wed, 22 Oct 2025 13:18:49 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version; i=sales@netknow.ca;
bh=dp77X0uU6LzrmkPSUEhw98FMhyI=;
b=Xcru4JCgzGALEEPKyCZEb1tJNupG0m9BBgZ5nGZ2PPNGsNAeR3GHoqH/1JgWkRRQNE3PVfDzlcej
KneDD9rk04dAJYyJ4EeK5QB2Ql/5HfLy35RwWDPlIaajhsaLnuBTnMn9kDyWzUhJcP9WzsbdDlcX
8PZQtOd8fyR9ohaBqM4Msc4EgKh9wZJH3C7gYqsSiSiuoHNd0Dj3XeoEiNktLnhoRGN7OGPuG3tf
7ryYnW6v0dZPeI+iDjZnCE8fu/b4yHTjvbbw6tTngEieuFTVpKswILT14Tgs6187RYzbWMMBu0dP
dce84y+gX0CkW5iZnC1V1nRRweKPpjXqnPZtbA==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;
b=0j8YjInvdF9Mc7g9uTWr+nmC8p9umUyY3g4YytRgUW5UGcICwXXHi4GMBp1PNwKX7d629eZM3djr
mMxOJZjHg4uMsd+w1kshqA7aD8WzelPxjI0sc1wrXXU0f6z50y2IQBiMv+W/97qXfLQvDCW0amxS
QzoEuvuc1/KKrDsVYWj7szgawDGt78G84K0joHe7aknGA0VTNjCv7kcB05xXcXpqs0ad/MHsNo3I
Ezn2oN3s6JjSgSt1QcvBXfrsBYyNyRTovyiBAMXoUTfbGKujoIMVYQqfkakjLuEkt1UJxGcbUjhu
z0+h+6BVPLOr2ww6SsMSV3dxT+Nl8+9RllB6/g==;
Date: Wed, 22 Oct 2025 19:16:41 +0000
To: sales@netknow.ca
From: UnitedHealthcare
Subject: =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?=
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
X-Spam_score: 17.1
X-Spam_score_int: 171
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: United Healthcare - Oral-B Dental Kit Hello! You've been
selected to claim a complimentary Oral-B Dental Kit from United Healthcare.
Complete a short survey and receive yours — limited stock available!
Content analysis details: (17.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.6 DOS_BODY_HIGH_NO_MID High bit body and no message ID header
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8
characters
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +
other signs
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?=
United Healthcare - Oral-B Dental Kit
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 Oct 2025 15:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vBgSZ-00000000CN9-3J6T
for dave@doctor.nl2k.ab.ca;
Wed, 22 Oct 2025 15:33:31 -0600
Resent-From: The Doctor
Resent-Date: Wed, 22 Oct 2025 15:33:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [80.66.72.37] (port=56515 helo=live-sex-chat.club)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1vBeM5-00000000MAW-3Qx6
for sales@netknow.ca;
Wed, 22 Oct 2025 13:18:49 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;
h=Date:To:From:Subject:Content-Type:Mime-Version; i=sales@netknow.ca;
bh=dp77X0uU6LzrmkPSUEhw98FMhyI=;
b=Xcru4JCgzGALEEPKyCZEb1tJNupG0m9BBgZ5nGZ2PPNGsNAeR3GHoqH/1JgWkRRQNE3PVfDzlcej
KneDD9rk04dAJYyJ4EeK5QB2Ql/5HfLy35RwWDPlIaajhsaLnuBTnMn9kDyWzUhJcP9WzsbdDlcX
8PZQtOd8fyR9ohaBqM4Msc4EgKh9wZJH3C7gYqsSiSiuoHNd0Dj3XeoEiNktLnhoRGN7OGPuG3tf
7ryYnW6v0dZPeI+iDjZnCE8fu/b4yHTjvbbw6tTngEieuFTVpKswILT14Tgs6187RYzbWMMBu0dP
dce84y+gX0CkW5iZnC1V1nRRweKPpjXqnPZtbA==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;
b=0j8YjInvdF9Mc7g9uTWr+nmC8p9umUyY3g4YytRgUW5UGcICwXXHi4GMBp1PNwKX7d629eZM3djr
mMxOJZjHg4uMsd+w1kshqA7aD8WzelPxjI0sc1wrXXU0f6z50y2IQBiMv+W/97qXfLQvDCW0amxS
QzoEuvuc1/KKrDsVYWj7szgawDGt78G84K0joHe7aknGA0VTNjCv7kcB05xXcXpqs0ad/MHsNo3I
Ezn2oN3s6JjSgSt1QcvBXfrsBYyNyRTovyiBAMXoUTfbGKujoIMVYQqfkakjLuEkt1UJxGcbUjhu
z0+h+6BVPLOr2ww6SsMSV3dxT+Nl8+9RllB6/g==;
Date: Wed, 22 Oct 2025 19:16:41 +0000
To: sales@netknow.ca
From: UnitedHealthcare
Subject: =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?=
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
X-Spam_score: 17.1
X-Spam_score_int: 171
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: United Healthcare - Oral-B Dental Kit Hello! You've been
selected to claim a complimentary Oral-B Dental Kit from United Healthcare.
Complete a short survey and receive yours — limited stock available!
Content analysis details: (17.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
[80.66.72.37 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
[80.66.72.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[80.66.72.37 listed in dnsbl.ahbl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.6 DOS_BODY_HIGH_NO_MID High bit body and no message ID header
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8
characters
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +
other signs
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?=
style="margin:20px auto; box-shadow:0 4px 12px rgba(0,0,0,0.1);"> |
|
If you no longer wish to receive these emails, you may unsubscribe by clicking here.Gift recommendation spam from Microsoft outlookPosted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Wed, 22 Oct 2025 15:34:01 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from id 1vBgSq-00000000CTN-3o3B for dave@doctor.nl2k.ab.ca; Wed, 22 Oct 2025 15:33:48 -0600 Resent-From: The Doctor Resent-Date: Wed, 22 Oct 2025 15:33:48 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-northcentralusazhn15010017.outbound.protection.outlook.com ([52.102.146.17]:2275 helo=CH1PR05CU001.outbound.protection.outlook.com) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2 (FreeBSD)) (envelope-from id 1vBfRm-000000003ph-3te1 for doctor@doctor.nl2k.ab.ca; Wed, 22 Oct 2025 14:28:47 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ChpucRim/JdyUy7UJktEQwZYQX1Pd0lxC8V95Gmeunzt2AtY7H3fS84PpI7G5/q49yRsxwQK9nArBknuwwC5cYrEct84lzypeEBikURIBCkTymDtTclUxwFPbFKunE5X6te+Qd2iVvZr6GHz6Gsn7IXKBaaMCCZ5+Hoi9qeXh8Zt+uMvkafez3yWZCT0u3vGV+G609tuzb6PrkM8Wm4TDhl/GtE328yVguQMfWw0+SuZ8ZS0r6Y5gQLSjKw3ogjc7+mR8L0i9RueDuUztU/RYnp6nyCXkbSN62Md7gWGU0bjY+f33kONxVnjg16sGEWjMrlIKpxM3T7o/oklbcv7IA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=14czNUvt+wolL9PKBhArTJwpL5z1zb/9GrLjGdNUza4=; b=FOWfqwQahKl5/u+WKrtrFgmKlWY041AR/vQ/3IXH8kf8xK3KSFXM/JOgl2ILbVm95b4jvdp3Tlq6gGeDnDyqlEGNxGdXqOkvXk6hbdvJn6zWhWtCrlBYuLYLCftoifSNpVEhhsQfPyO/4h1tOMNry9n7/gvhn6ycGdqQTYOKZJVmYAWqRZ0h2uzbL0kGDARkC6+1TMpbHYNWM+Z4uUiSAeOpUzFNt+g7ymOVsAQGrSuoTOYqLAV4HIDqYPk+TCtUh/DCHWB6LpGzNEHUBNKD0d2VbfgZjMCEgrvKFMAQw/d7gd4xUlCn9wreUOJBa7Y3uXH24Qf3yLhj4JgxTPN4Ig== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=storycookfavorites.com; dmarc=pass action=none header.from=storycookfavorites.com; dkim=pass header.d=storycookfavorites.com; arc=none Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=storycookfavorites.com; Received: from DM4PR17MB5874.namprd17.prod.outlook.com (2603:10b6:8:43::20) by PH7PR17MB6132.namprd17.prod.outlook.com (2603:10b6:510:1f3::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.12; Wed, 22 Oct 2025 20:27:35 +0000 Received: from DM4PR17MB5874.namprd17.prod.outlook.com ([fe80::68b7:38c3:b3b8:2aa0]) by DM4PR17MB5874.namprd17.prod.outlook.com ([fe80::68b7:38c3:b3b8:2aa0%4]) with mapi id 15.20.9253.011; Wed, 22 Oct 2025 20:27:35 +0000 From: =?UTF-8?Q?=44=65=61=6C=20=57=61=74=63=68=64=6F=67=73?=#1Qg To: "doctor@doctor.nl2k.ab.ca" Subject: =?UTF-8?Q?=4F=75=72=20=31=30=20=46=61=76=6F=72=69=74=65=20=47=69=66=74=73=20=6F=6E=20=41=6D=61=7A=6F=6E=20=54=68=61=74=20=57=65=6E=74=20=6F=6E=20=53=61=6C=65=20=54=6F=64=61=79?=_SU48 Date: Wed, 22 Oct 2025 19:47:35 +0000 Content-Type: multipart/alternative; boundary="_892_PH0PR10MB575626DDFECFD9938984F69EF0F5APH0PR10MB5756namp_" X-ClientProxiedBy: GV2PEPF000045B4.SWEP280.PROD.OUTLOOK.COM (2603:10a6:158:401::420) To DM4PR17MB5874.namprd17.prod.outlook.com (2603:10b6:8:43::20) Message-ID: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DM4PR17MB5874:EE_|PH7PR17MB6132:EE_ X-MS-Office365-Filtering-Correlation-Id: 9b072f79-063f-4f0f-119f-08de11a40c4d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1032899013|4022899009|69100299015|1800799024|52116014|586017|376014|38350700014|4076899003|2066899003|8096899003|13003099007; X-Microsoft-Antispam-Message-Info: =?utf-8?B?YndGeFU5cmFUYWp3bmFPSVdnZkl6Nmc4VXJLSmZRU1hzNGNyNUdxcWFLZ3pK?= =?utf-8?B?WERVTDJpMHZKSTVYcnlZSm1CdytWVW9FZGovVnAvaE1IVExpZ0hkRXczZVpS?= =?utf-8?B?eWpSWUpLbnJJaDdXSTJiTEh0bUQ3c242a3BTdmoxYytHc1hLaldBUVl4RTlM?= =?utf-8?B?d0h6U1ZLaU5ZcHl3bmZVTytGbzV5SG1zN3hUb3dycTduZHZrblJLQW9KQlht?= =?utf-8?B?cnc3NG9acG5sRGNPM3F0eS84VnhodjJYY0lXVm90VjYrRU9iQUd2T3BUMTBE?= =?utf-8?B?aklYaDZUVFJGZUdiWlZCZGx6T0lFM3ZoNU1oL3NoYlRpMGhpVGt1Q2h5SkRS?= =?utf-8?B?dm1uRWozRUVvcTN5Umk3N2UweFY0ekJ2Q2tWczU4ZzhjT2paeGh1T0FSUW9w?= =?utf-8?B?V2Z1RGhsaUpDRzZLYy9UTkIxM3psMVZJMzI3NGlJWmVnUE4yR0xsVlhMMlFX?= =?utf-8?B?OG5BMFc1QVZFSjd1N1JSRFkzZ2tmTGsySm5XMWFsY0U2WVhIeWxUbW8zazRE?= =?utf-8?B?T2RodmVsd3o3RUIvNHV3b0VYUVZUcG01Q3I1YU1OcjhVbkpnbzgyRDBpZGZB?= =?utf-8?B?bHhNbE4rUHpIdTRoZi9HRzgvVEszeXhESkcrcERWdkNXMU5EejZ6M3hhK1V2?= =?utf-8?B?TnczNmNrVjhVbThVSmxQVWE2emFpMitXZ2xuZ25BZVdqdU9kVllKTXdCcnBh?= =?utf-8?B?MWhvNGNzR0RpWFkzdmxzcklnYmRzYnpsS3dUd0V3TEgxYUpKOXJJSVpYbFNT?= =?utf-8?B?R3V4U0laVlZxcGlvVlYxdDE2WlQvYTI3dTFmQmhyU0d1UGhQdElEckxmUjh5?= =?utf-8?B?bll4Wmh3aElaUzZJWGhGNmpsbjJ0ZVhyQkRCZkhyRGI2N2hDdEw1SnJIeEVm?= =?utf-8?B?cDRTNjk1czhCcmNPT2RvRmx1NDRHOFI4Uy9JMmlwVjlYRTZTQnlZL0tMV0Rn?= =?utf-8?B?bHUzYVR0ZWo0eDdpMkxlVjZxWThCTmx5OEJEWVhmaGlNVnNYRGNVQ0I3ZWF0?= =?utf-8?B?MERxVkFnUUpFRGtWUkxGZGJnbUVNdHd6OFRLL2xueUM1UHVud2xVSmxVTEZX?= =?utf-8?B?ZnFFeFJpbkliNTRCT0s3aFBrZG16SnNVUThyOHY2bFcyTmg4Yi9BUW0zNkdm?= =?utf-8?B?Ump6c3J0TDZQV1BNZ0R4S1RLaWVnR1k1aW14MjJOZzd4SGl6T0lOQ3J6LzRh?= =?utf-8?B?QWJUNVZPQXNrWU1UVVB1eE5LRnZ0azJDSzc2OEtCeW9RTnZwbDZPbTFyblht?= =?utf-8?B?dmYrcVZFYUFMYTVIQzV6bkN0VExic2RsYjJLdUhMK2hsb3dJUVZ0cnUybHUv?= =?utf-8?B?eFhrb0NzTFJHY0xTbjllSXdJUHJmRks5KzNqRTVVcE9FOXZFNzNUcjZRSmsv?= =?utf-8?B?SWllempnaVVUTCtvU3lqRFlYK20vdmY3MVVFL3B0aWpiUnRXOGtveHYwSGFW?= =?utf-8?B?VlZZa1hVbjl4YmJDNXh5Z21hRjdJUmwyZVhrMDNrME52c3I3Q1V2YjNaa3ZV?= =?utf-8?B?cUpMWnY4NVFyY2xIUVlJWHhSaEhnZmVZTTduc0JYMzlyUzNGMkxVL3Nvbnh0?= =?utf-8?B?c2didnVHOTZYUDMwOGtDWFNqM2hlQ1VQWEwyNUhMUHJuYkpTeWFMRVBaRmxs?= =?utf-8?B?SEdINWVFMnRtdTRxaVJodjZNVVB2OHRSVGptOU5WclE3c0JZMjVpWlk4NEFE?= =?utf-8?B?RUh3MnBBVjFZQWJSKzYxN3F3a3k4VWZ1Y1RXOHplR3RJbC8xTU1CUmU4dU15?= =?utf-8?B?RG5kdC9MNEpUMHB2N1R1VnQ2bEVreDlROXE2WlhkSlNEVlZMbDZodWRwNjNi?= =?utf-8?B?bFZHekhLTHdtZGlDbngzdG8wd2hRMkQxUm9jTEdOSVlCejhGR1YyUHhKVEg5?= =?utf-8?B?R1ErQXZFdGVqVHQ3R2hYYWFkKytrRVZnY3p5ejdZSDJxMmRnbVdReDlHNUZS?= =?utf-8?B?S3pqdEJJZHdnQytyWm9GZktqTDd2ZEY1cnAzbTczYUhWOFpSMFNSdGRlMGN0?= =?utf-8?B?V3c0bWhVMVlxWlplZTZ3Lzl1azhDbTFFMzcrcFZXVlBNMWFSOXJnaWpMV0tm?= =?utf-8?B?OXpxMzM0bG9aeEJwMjFiT09rR2IvVzNnUVI4WDhrUklNMnQ0Z2ZuMlBXU3pE?= =?utf-8?B?NEh6a25jSmFyRCthUlZEdHhxR2tJNUQ2SnVEQVhCZ2l2dzFhamtZUm12Qi8y?= =?utf-8?B?QVE5M2hTb0pIeHZndjVVTENKR0pzd0Z3STkxZHFKQVJoMGFhUm1PTis2TDF2?= =?utf-8?B?SnlEZ01GcUx3OERqUFhuUTZFeDJtby9FdHIzeEZtTGczZXM4N2NwdmhHT0tu?= =?utf-8?B?UGdGT1NCZXpPSllzc1VpNzFTcXJ0RTJOMmtFbXJKaksyb0pGVDczcWdobktk?= =?utf-8?B?VjFud29JeENzN0RZdm02YlNpTXNtZ3E4Mm1kbGNxSUxHZWhhZkJyQVhMV3I2?= =?utf-8?B?MGJEVWVZbUtOWWdKcDhWZ3VSeEYvcXhVbFRkL01wUVhjVTZWUlRkcDRjRU9J?= =?utf-8?B?VUR2OGQwK0Z1VlhZOVlhb2N2eU8veEpjR3JpYUxKb0VUVUNPVVhSeFFoSm5R?= =?utf-8?B?OWRwR2V6OFYzc1V1UWRkZmhnMEtVMkhaME56bHo1N29ZZ28rWjlVYS9heGNW?= =?utf-8?B?bnZCcEp6ai9jSEwxekx3ZzRONlM3WUFtR3lYcTFqblQyamhKNzlNcGlxYXdD?= =?utf-8?B?dlZHcUhUSVdybWdYTkFwYTZjc2IyeDRBYzV5YnJLRld6RW1BTmJiZTVEMHNZ?= =?utf-8?B?Q1Z4RWtNV2M4NXJLWUVaVjU0Q3B4N0N1a2EwUWJzSnZmZitGVGwzc0lyVGdz?= =?utf-8?Q?t+hl9xKBq7g7nH8rEHYOc=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:DM4PR17MB5874.namprd17.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230040)(366016)(1032899013)(4022899009)(69100299015)(1800799024)(52116014)(586017)(376014)(38350700014)(4076899003)(2066899003)(8096899003)(13003099007);DIR:OUT;SFP:1501; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?dFFqdi9yT3Uzc1hOcnMyU2p1Y3hYbUNDcUs1eGl4NzlGYWhnOWlWdEtCNmJP?= =?utf-8?B?dWlveUxlaFJMbGtva2VBTlpUVzd4SGlER3Nhc25UdXZGNnBxWXVDTmNKOUVL?= =?utf-8?B?UGFVWjZWMnJQQ3d2Wm1zbU1HRW9hS2lGRmxaT3p2aXN5K213RFZjYjFveFpR?= =?utf-8?B?MHpEWmdpR2RLMy9HQ0VzbjJ6bmMxMTg0UlVlNEZyc2E1c0lkSytqTEIrTlFp?= =?utf-8?B?SWFoNnQ3ejVycXluRkpUcGVURXBzTzQvbjJ4WU5QaXprWFhZQzI0RlJZdW9v?= =?utf-8?B?d0JBcWlFWVVHdEFodnprUVNUb0UxcXdYRVpMUXd0UGttczVhcDh6NE11YjRV?= =?utf-8?B?NXhNMzM2cUpIeDdpNnJWOTJQUUpvL2djTG1DbHlKVFRzSmFLQUNjRmtSV3RW?= =?utf-8?B?ZnFrZ0NPNFFyOU5FZURSUE92dWhIMmdvemxFT1NsN2dTQTJ1bWQ0MVNIVHAr?= =?utf-8?B?MUlKNk0rN3p3ZUkyU2ZyVjdpeUhpUjBvZWFBR0poQlJMeko3eVlRMU5oL0g5?= =?utf-8?B?OU04VWhyanhWOXdHdnNoK1NidW92SC9MTmZZMmVXNVpjUmN1Zk84M2M2aTJC?= =?utf-8?B?NXpkcXc4R0hNQkVJY3dHckpuM2o4NXd1c1lmY2NOL3MzWEttemdXK0lGclRv?= =?utf-8?B?bFdhK3VET2ozUFJmV1hGcUxKbUFrWkVQU1FJek5sZW5vdUFuUm5NRVBGcmxC?= =?utf-8?B?SlhuSUk1K3RqM1lFcDI0dGpUbVAvNW9wTnZWUzhuU1lLVlg2ZldqUWlCWDV1?= =?utf-8?B?cEMyMERzVVJieXp2WFhtZzNiQWVYUXZhR1AwdzhvTE5lSDl3eWpsSXJzMlJW?= =?utf-8?B?cnU5WTV6K1RLdnFUaWFDT0NMOTRqRkNibFJuSnRuOE03S1dYb3V2RTVIdUhS?= =?utf-8?B?ZzZDUWUrWURrVXB0bXYranIwYmJIZldoSGFQZjFTZnk1QUZ2MXNUcHhaNjZT?= =?utf-8?B?SXE4V0pLUWV1d0Fxam12ZG9ZSGlSNnppTmpvZkdHa1Y4SWZCUTg3S2laZGZq?= =?utf-8?B?NDk4UGtpb0I2Rnp5bllrdkk4bWF1WFVoSGxRT1AzWVdFR0VuZnFhUEI0c0k2?= =?utf-8?B?S1JlcVZFMDBxTE96Q2EvaVI2QzJIM3pja1BIeWRwc1diMXZoSDJZS3ZlYXR2?= =?utf-8?B?cFFPeU9IYUtvMTlaaytsUmdIR3IweW5DcmdyanJoYWRNZXQyWUFiTVVoZTBr?= =?utf-8?B?UllnQ3B1VU1kazAzdnZsNmRzSE1IU0VmdXFPVEphVEswdnZsNGNHVW95blU5?= =?utf-8?B?SzYzS3BjcjRvNlhjd05xTjZPamY0QnA3bzhDUmJFV2dDZWlBZDR5OGF2SUpP?= =?utf-8?B?WFY4Y3BtNWhuTHEwTVVYUGlOYzJSMENZazFOUlFic3VaMHQwQlFFQ1pKb2RS?= =?utf-8?B?Ny9Jb0RReE5LYTdsZlpHUGo5MnFLc2F5U1JNQnVsRzdsbW43clU0UTY2OUFn?= =?utf-8?B?VVBWZUNiQzZmTGFDVDdLZzN0L1lvaWJYSGFhYWZXZUxSZFZ0bGpURnltSDBY?= =?utf-8?B?enpvNC9qcDd4U0dWRUMrblRId2Y3VFBHeWdrSEpLSEwzZFZHeVVnVXJhYTlh?= =?utf-8?B?NHVvd2NEYWgxdEh1aExibmRaTEVZQlVGV3hjYjFMOXFZY1RBaFNGOExHbWQ1?= =?utf-8?B?bjd3c1pOamtQTW9NQ2hkbGpoZ1I4OU83enorbzNjRkFKSGJQa0hBWjNwRzhl?= =?utf-8?B?bmpQM0x3SVFpTnd2MStxY0tQeGlwVSt3d1FsNlFtSUtaZm50Q1dPQnVLNXhO?= =?utf-8?B?SldCVmxORzk1ZDVKM0JadjZmYStEVlNIS2J4em05MnM4dkpSb00yaGNXMERi?= =?utf-8?B?MTlTK3puNWVuUXRlYXNrNEZ3VGNRT3ZpZlFvdzZQSVRIelBVMmZPUTM0azJu?= =?utf-8?B?b1VQWWQrbWllOFRYNDFIejgrQ2lxbEJ3TXo0aWI4KzhuS1Uya0hFeXdxRmZK?= =?utf-8?B?T0pQUWdsNVVlMUd1QjB2UytKN3hDTzFYMzg4VGUwdVQ0RUlMeXQ0eklTTUc2?= =?utf-8?B?VlJib01vTFdrSkxiWklEQXM0bGZWeWVOb3JaYU01WU1HU1BadDEzU0RqeTFI?= =?utf-8?B?bFpmMXJlUEhTUkhQdUVkR09IZnNkSDdheXhWRUZVdkpKU2tQSHBHZFQyUWlv?= =?utf-8?B?Z2NuNVFvRkdpVE1LT2N1NUdWdkRCNjNiL1ZWTkZhZHNKaUtJMHlqT1R6RlRE?= =?utf-8?Q?24EjeM5Q3dA3jG7inLhSGVRLSqpn5OqPgoz2Bc4yrEGa?= X-OriginatorOrg: storycookfavorites.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9b072f79-063f-4f0f-119f-08de11a40c4d X-MS-Exchange-CrossTenant-AuthSource: DM4PR17MB5874.namprd17.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Oct 2025 19:49:01.3209 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 0c9615c4-0215-4558-9228-9eaa7153535d X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 4zq7//NiwrJ1sy8c7NCr1xVKz+cmxNkaehQgl36oPeWtNci5q7lcrauB47MGIccSwE9u/uBDlMjV3IiFNdHHpHfFncnPnyKJGt8V8u68sLnJmFNoNiWGASKypxRKliICjrFocKDKDSk08f7Dd6IPew== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR17MB6132 X-Spam_score: 13.4 X-Spam_score_int: 134 X-Spam_bar: +++++++++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: This is one of the best of all time! View online: http://noukatroumzeor.uksouth.cloudapp.azure.com/K00yNGN1bzdFMTl5dW5MSjJ6L1ZHRDhteDl6WU1jbXpTanhnZnNtUUcrWWZndithNUJtNUl4cTZhaTFZUlg5MTE3YzVGeVJ1S0t4V1ZmdjZ2WFNYY3pDUmtqQktMZ1drRUpsbHR3T0 [...] Content analysis details: (13.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [2603:10b6:8:43:0:0:0:20 listed in] [will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] [52.102.146.17 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [52.102.146.17 listed in dnsbl.ahbl.org] [52.102.146.17 listed in dnsbl.ahbl.org] [52.102.146.17 listed in dnsbl.ahbl.org] [52.102.146.17 listed in dnsbl.ahbl.org] [2603:10b6:8:43:0:0:0:20 listed in] [dnsbl.ahbl.org] [2603:10b6:8:43:0:0:0:20 listed in] [dnsbl.ahbl.org] [2603:10b6:8:43:0:0:0:20 listed in] [dnsbl.ahbl.org] [2603:10b6:8:43:0:0:0:20 listed in] [dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [52.102.146.17 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [52.102.146.17 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [52.102.146.17 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [52.102.146.17 listed in dnsbl.ahbl.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [52.102.146.17 listed in list.dnswl.org] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: noukatroumzeor.uksouth.cloudapp.azure.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 ARC_SIGNED Message has a ARC signature 0.0 ARC_VALID Message has a valid ARC signature 0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in headers 0.0 AXB_X_FF_SEZ_S Forefront sez this is spam -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [52.102.146.17 listed in wl.mailspike.net] 0.6 MEGALONGWORD BODY: Uses really overlong words 0.3 LONGWORD BODY: Uses overlong words 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.8 SARE_FROM_SPAM_WORD3 I don't know people named this! 0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope 2.1 AC_FROM_MANY_DOTS Multiple periods in From user name Subject: {SPAM?} =?UTF-8?Q?=4F=75=72=20=31=30=20=46=61=76=6F=72=69=74=65=20=47=69=66=74=73=20=6F=6E=20=41=6D=61=7A=6F=6E=20=54=68=61=74=20=57=65=6E=74=20=6F=6E=20=53=61=6C=65=20=54=6F=64=61=79?=_SU48 --_892_PH0PR10MB575626DDFECFD9938984F69EF0F5APH0PR10MB5756namp_ Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit This is one of the best of all time! View online: http://noukatroumzeor.uksouth.cloudapp.azure.com/K00yNGN1bzdFMTl5dW5MSjJ6L1ZHRDhteDl6WU1jbXpTanhnZnNtUUcrWWZndithNUJtNUl4cTZhaTFZUlg5MTE3YzVGeVJ1S0t4V1ZmdjZ2WFNYY3pDUmtqQktMZ1drRUpsbHR3T09YVVk9 Unsubscribe: http://noukatroumzeor.uksouth.cloudapp.azure.com/WlpCWXNtK0xpNGhvWGZJbW04TjVNNzNxaVlxZSt0SVA0WkVuVUlyODBIR21peXhWNkp6QkZ0eTc2aE1ZdWxLM21zZmxiVk1NNHFrM0hTeml0QTJvQlpaTG9GVlloM0lwL0xzTkQySHpoNk09 --_892_PH0PR10MB575626DDFECFD9938984F69EF0F5APH0PR10MB5756namp_ Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 7bit   --_892_PH0PR10MB575626DDFECFD9938984F69EF0F5APH0PR10MB5756namp_-- Health spamPosted by Dave Yadallee on
Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Wed, 22 Oct 2025 15:34:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from id 1vBgSW-00000000CLn-0QFm for dave@doctor.nl2k.ab.ca; Wed, 22 Oct 2025 15:33:28 -0600 Resent-From: The Doctor Resent-Date: Wed, 22 Oct 2025 15:33:28 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from [80.66.72.37] (port=39115 helo=live-sex-chat.club) by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD)) id 1vBeL3-00000000M2b-2ODh for root@nk.ca; Wed, 22 Oct 2025 13:17:45 -0600 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca; h=Date:To:From:Subject:Content-Type:Mime-Version; i=root@nk.ca; bh=Izmb3+dj11+bkBch8FiSSNIlfjc=; b=v3kCElVXNVw1e7xH6KXfsqa21hy+gkA5ORTQc+HkH0xvu6yeRE+75FFhPWmZe/JTp48rEW4ZTZ52 V63GRC/kL/TlQL11q7r00qR7FnUUwLyWZxak8JkQLJWQ4SfBCPX0a7nfVT1dgmwVGef0EuF2/UZ2 z+csDzPWzdRUDUXRDsBIi680HhZXRPQwaxGygYFwFIP+lVvicxXeDQAfzu9MezGp7igkHStmIRVP Cxm6wGRUiH1m3GLEhxH3iZ9sornIHWtBC8Fd0Lz+SoDxbcZPuNgU587U+Y6J6lAIBcYca/Vukm3K VzzCzeAonMC8yOL2SLJ0orPGZPfVspqtIDzqTA== DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca; b=A0sj9aWYNJR94qIO2BPp6+fiAQ3IojU1tlaO2nAhhftvuC2WaMtWSnbtqOwwRf0nmpbdjFFQVQeX tXy/tVP0OzZMdb2lW3CcTp17FsEliCW1Ve65ffAoOZ186H602SdJX6mtT2wbdaC7QxjmM3w9gFTb 3cQGz/qp4li+2AQinA9UUP3DzSSQAG4NtVONv4rgOiBNMHKFEAvgp3EKfiCRQBrn+DZTj3GFKuEl 4eJw7SUOj7XA993kHxcBwXo+l/kFd+9VxjAR/s+ouTHeCvS/94RWJ0bONWgj2N4p/f2AEbyiWsf4 KXAAxH4VZiuJ8XMoaP6kxXKGTqlIlQjMjPUZ7Q==; Date: Wed, 22 Oct 2025 19:16:30 +0000 To: root@nk.ca From: UnitedHealthcare Subject: =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?= Content-Type: text/html; charset="UTF-8" Mime-Version: 1.0 X-Spam_score: 17.1 X-Spam_score_int: 171 X-Spam_bar: +++++++++++++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: United Healthcare - Oral-B Dental Kit Hello! You've been selected to claim a complimentary Oral-B Dental Kit from United Healthcare. Complete a short survey and receive yours — limited stock available! Content analysis details: (17.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 MISSING_MID Missing Message-Id: header 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] [80.66.72.37 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [80.66.72.37 listed in dnsbl.ahbl.org] [80.66.72.37 listed in dnsbl.ahbl.org] [80.66.72.37 listed in dnsbl.ahbl.org] [80.66.72.37 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [80.66.72.37 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [80.66.72.37 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [80.66.72.37 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [80.66.72.37 listed in dnsbl.ahbl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4 address 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 1.4 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8 characters 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 3.6 DOS_BODY_HIGH_NO_MID High bit body and no message ID header 0.8 SARE_FROM_SPAM_WORD3 I don't know people named this! 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters + other signs 0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX Subject: {SPAM?} =?UTF-8?B?8J2QmPCdkKjwnZCu8J2QqyDwnZCO8J2Qq/CdkJrwnZClLfCdkIEg8J2QivCdkKLwnZCtIPCdkIjwnZCsIPCdkIfwnZCe8J2Qq/CdkJ4=?=
--00000000000008bac20641c2fe92-- Jet Rewards spam from Google GmailPosted by Dave Yadallee on
Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Wed, 22 Oct 2025 15:32:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from id 1vBgQh-00000000Bby-2fDv for dave@doctor.nl2k.ab.ca; Wed, 22 Oct 2025 15:31:35 -0600 Resent-From: The Doctor Resent-Date: Wed, 22 Oct 2025 15:31:35 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-vk1-f199.google.com ([209.85.221.199]:55386) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98.2 (FreeBSD)) (envelope-from id 1vBe2u-00000000KB1-4AFR for doctor@nl2k.ab.ca; Wed, 22 Oct 2025 12:58:59 -0600 Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-54a87b8f9c6so3705126e0c.2 for DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=firebaseapp.com; s=20230601; t=1761159480; x=1761764280; darn=nl2k.ab.ca; h=to:from:subject:date:message-id:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=u0stviA8x8Sn7m4Wu9GQWuQbREXsXp/kAbtCuzC+JvY=; b=FmCv1sTLT/Jw4vXWf6UHyse6EgNaFFzyUwQV0GkTZiqoiDrILpZCqOcstywLEqNXq6 akTHKFQrvYZxGoXiEjVKyWSsDce3G9HPUl5DQnP+C49IXsH7LHW5YI5ANKO+KsVG7cNO S0Zreq7m7Z+9Av4tOxfCakUanwccRkyH96rK3mTVCfUarEsKQYNktBr9kcmTHT4eH8Gf 6k8cP5ihfzwauv4Zzyel61wTLRzyo0hw1da18ofM2j8ZbpofFF3ZwW/VVGZDDUMfOprP yPsmPa22Pkuek0S93IvN4atXm9zILGPGHO5BPHj6W16T77v6Nd9Mwj+Re4gLZVdHC6LM kKTg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761159480; x=1761764280; h=to:from:subject:date:message-id:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=u0stviA8x8Sn7m4Wu9GQWuQbREXsXp/kAbtCuzC+JvY=; b=n08Zdbk6pfg/FhRxagGOE/vjN+0M/ux5NjFtZB02H+rVO94qWsD9r4400j0JyNqWeF bLY3j1Fz6shSeFmWavHE7soeesTeBKhcC97aR607lMqF8iVobvYpWUs0AUIWyVwoFrlk LByfJBCRu7rO8v1i63VrMNvgkHiRQ9KkRJx3HDpNzW/Gfi7GJujzF5lA5YOkNBdS8YH9 i3HxDhnb0RInchyrPz9CneHvTxj12rxTFlo/mBKT8zXlCHzBqjr4I17CmI36BnaIuJVi /Bk8wy2S+ipBJXzeQf1SVrykJdGo/K0zERrzuKrVz1wS3N+BGUF/pR8HmmDLta7aHd/G Gd8Q== X-Gm-Message-State: AOJu0Ywex4NQw0gCtDh3kWYzH86cw2SueZTRnpFJPMv7lcY8EhX9FnHL +kQWfQbGCCuMtPYn5nCA820Dp9vyi4lgSiab8xPdESgT6fAJisoNqhdJO/eEaOfHBVS6nZR2Hgi cbIjKExNWzA== X-Google-Smtp-Source: AGHT+IEdvfcBBq34gAdQAOVdAcrQsFJy5KAMjtds3EOMwXKz7IjBygUhF4EMrIginP2Xxo3ZNfB03HcFSVk80sQ= MIME-Version: 1.0 X-Received: by 2002:a05:6122:2a47:b0:556:9cb9:65ce with SMTP id 71dfb90a1353d-5569cb97392mr1046068e0c.6.1761159480562; Wed, 22 Oct 2025 11:58:00 -0700 (PDT) Message-ID: <0000000000003b545a0641c3e545@google.com> Date: Wed, 22 Oct 2025 18:58:00 +0000 Subject: =?UTF-8?Q?=E2=9C=A8_Start_Winning_Today=E2=80=94Claim_Up_To_C=241=2C500_=2B_500_?= =?UTF-8?Q?Free_Spins?= From: =?UTF-8?B?SmV0IFJld2FyZHMg4pyI77iP?= To: doctor@nl2k.ab.ca Content-Type: multipart/alternative; boundary="0000000000003b54490641c3e542" X-Spam_score: 6.6 X-Spam_score_int: 66 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: APPLEMESTRYBOX You may unsubscribe at any time. unsubscribe Device Width Images Content analysis details: (6.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] [209.85.221.199 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [209.85.221.199 listed in dnsbl.ahbl.org] [209.85.221.199 listed in dnsbl.ahbl.org] [209.85.221.199 listed in dnsbl.ahbl.org] [209.85.221.199 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [209.85.221.199 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [209.85.221.199 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [209.85.221.199 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [209.85.221.199 listed in dnsbl.ahbl.org] -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.221.199 listed in wl.mailspike.net] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.8 SARE_FROM_SPAM_WORD3 I don't know people named this! 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image Subject: {SPAM?} =?UTF-8?Q?=E2=9C=A8_Start_Winning_Today=E2=80=94Claim_Up_To_C=241=2C500_=2B_500_?= =?UTF-8?Q?Free_Spins?= --0000000000003b54490641c3e542 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes APPLEMESTRYBOX You may unsubscribe at any time. unsubscribe --0000000000003b54490641c3e542 Content-Type: text/html; charset="UTF-8" |
--0000000000003b54490641c3e542--