X-rated spam from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 02 Nov 2022 18:04:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oqNhW-000FTr-2K
for dave@doctor.nl2k.ab.ca;
Wed, 02 Nov 2022 18:03:18 -0600
Resent-From: The Doctor
Resent-Date: Wed, 2 Nov 2022 18:03:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [209.59.190.12] (port=56184 helo=host2.meganetmedia.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oqLVy-000G5r-Hl
for doctor@doctor.nl2k.ab.ca;
Wed, 02 Nov 2022 15:43:18 -0600
Received: from ec2-35-91-131-48.us-west-2.compute.amazonaws.com ([35.91.131.48]:50134 helo=poczta.pl)
by host2.meganetmedia.com with esmtpa (Exim 4.93)
(envelope-from)
id 1oqLTB-0006uk-0a; Wed, 02 Nov 2022 17:40:21 -0400
Message-ID:
Reply-To: Adult Dating
From: Adult Dating
Subject: Hello! My name is Julia! I want to meet you!
Date: Wed, 2 Nov 2022 21:40:20 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_16F9_01D8EF03.B4D41D50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host2.meganetmedia.com
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - outleased.com
X-Get-Message-Sender-Via: host2.meganetmedia.com: authenticated_id: jay@outleased.com
X-Authenticated-Sender: host2.meganetmedia.com: jay@outleased.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Want a guaranteed hookup? Visit this online avenue to dating
for sex. On this sex site, local singles, couples, and swingers search for
hook ups in a safe interface. In just a few clicks, you will find yourself
a sex partner w [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[35.91.131.48 listed in zen.spamhaus.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: alcrininanbui.tk]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64
encoding
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[209.59.190.12 listed in ix.dnsbl.manitu.net]
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
Subject: {SPAM?} Hello! My name is Julia! I want to meet you!
This is a multi-part message in MIME format.
------=_NextPart_000_16F9_01D8EF03.B4D41D50
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: base64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------=_NextPart_000_16F9_01D8EF03.B4D41D50
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------=_NextPart_000_16F9_01D8EF03.B4D41D50--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 02 Nov 2022 18:04:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oqNhW-000FTr-2K
for dave@doctor.nl2k.ab.ca;
Wed, 02 Nov 2022 18:03:18 -0600
Resent-From: The Doctor
Resent-Date: Wed, 2 Nov 2022 18:03:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [209.59.190.12] (port=56184 helo=host2.meganetmedia.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oqLVy-000G5r-Hl
for doctor@doctor.nl2k.ab.ca;
Wed, 02 Nov 2022 15:43:18 -0600
Received: from ec2-35-91-131-48.us-west-2.compute.amazonaws.com ([35.91.131.48]:50134 helo=poczta.pl)
by host2.meganetmedia.com with esmtpa (Exim 4.93)
(envelope-from
id 1oqLTB-0006uk-0a; Wed, 02 Nov 2022 17:40:21 -0400
Message-ID:
Reply-To: Adult Dating
From: Adult Dating
Subject: Hello! My name is Julia! I want to meet you!
Date: Wed, 2 Nov 2022 21:40:20 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_16F9_01D8EF03.B4D41D50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host2.meganetmedia.com
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - outleased.com
X-Get-Message-Sender-Via: host2.meganetmedia.com: authenticated_id: jay@outleased.com
X-Authenticated-Sender: host2.meganetmedia.com: jay@outleased.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Want a guaranteed hookup? Visit this online avenue to dating
for sex. On this sex site, local singles, couples, and swingers search for
hook ups in a safe interface. In just a few clicks, you will find yourself
a sex partner w [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[35.91.131.48 listed in zen.spamhaus.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: alcrininanbui.tk]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64
encoding
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[209.59.190.12 listed in ix.dnsbl.manitu.net]
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
Subject: {SPAM?} Hello! My name is Julia! I want to meet you!
This is a multi-part message in MIME format.
------=_NextPart_000_16F9_01D8EF03.B4D41D50
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: base64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------=_NextPart_000_16F9_01D8EF03.B4D41D50
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------=_NextPart_000_16F9_01D8EF03.B4D41D50--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments