Boots pharmacy spam from sendgrid
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 10 Jun 2023 05:53:00 -0600
Received: from s.wrqvtzvf.outbound-mail.sendgrid.net ([149.72.126.143]:39896)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q7x8j-000IFA-0C
for dave@doctor.nl2k.ab.ca;
Sat, 10 Jun 2023 05:52:28 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ride4health.com;
h=from:subject:mime-version:reply-to:to:cc:content-type:
content-transfer-encoding:cc:content-type:from:subject:to;
s=s1; bh=8rEuUDBMDA0T7vITWMvS5wwiwS4ilMfxc2rCi3AH52M=;
b=US5nYj6S5sKW3fFcOF2QBQ4C8u1xiKPzEFaCYqHo4F1jB+lDFE08zp3+Nef3z5HmqGZ4
+Wrd3Iic0y0QZnzTeRIRhCr26QkS2K0jXs/Cl6y+9ITwjRGp3r3ObgeMmG+wXYItFLqKHq
9sWirdUyYiEl+a67VAzB6zIga2QF8TV++I2yfqv+PKus3sMtYhzTWPWHZMBwAeyDGxKlGa
JHTdaQHTEmSKkPQLGURzVdvQT/lCSi8WlDQYeapa6/ygJDOY0XdGd1Gf2ZjuYZTnZSEB5T
UcVGfbhqBcVXkWQLoX2bD73ehk0RToObD4zOaZ71Y3Ynpc1m2M+TquGTd8Bpxyow==
Received: by filterdrecv-ffcd6b849-qm74w with SMTP id filterdrecv-ffcd6b849-qm74w-1-64846373-4
2023-06-10 11:50:11.0623858 +0000 UTC m=+2635833.317945623
Received: from lavles.com (unknown)
by geopod-ismtpd-36 (SG) with ESMTP
id 8wnK4Ls5RhOBZGJyHXEJrg
for;
Sat, 10 Jun 2023 11:50:11.056 +0000 (UTC)
Received: from aesoponline.com (216.83.185.44) by altprdrgi11.altice.prod.msg.synchronoss.net (5.8.812)
id 63FDE95301008E71 for dave@optonline.net; Sat, 10 Jun 2023 07:50:11 -0400
Received: from aesoponline.com by aesoponline.com (via RAW) (MDaemon PRO v19.5.2) for; Sat, 10 Jun 2023 07:50:11 -0400
Date: Sat, 10 Jun 2023 11:50:11 +0000 (UTC)
From: Boots Department
Subject: Confirmation [#766772-11] - Oral B iO Series 9
X-MDaemon-Deliver-To: dave@optonline.net
Message-ID:
Mime-Version: 1.0
X-Actual-From: n783U73mIP@aesoponline.com
Reply-To: n783U73mIP@aesoponline.com
X-SG-EID:
=?us-ascii?Q?mTVir=2FouOmzV3JSIGBvKh7ZukaxD8zzDJdp0cMP6mE=2FYO1hvD1VJEspQK=2FL1+l?=
=?us-ascii?Q?FH3yjOxzj58IjB6z+k=2FiDBhPWfJ3G8eAN=2FCNX+n?=
=?us-ascii?Q?bHrMV8kUO4vX8=2FUgtYO71YQR8tYr8h1vFoJE1TQ?=
=?us-ascii?Q?AlQrYj0Ir3KLCg=2F8n8YWKNacRMVtjo3znA=2FP8bx?=
=?us-ascii?Q?L4PBUsiEJcoAGbtU37i3FNBErJO4iXFxWy5ciRB?=
=?us-ascii?Q?1T7SvbwKJ+ORlDS3ADFNkKBlboDuHlt+GZBPiU?=
To: dave@optonline.net
Cc: dave@doctor.nl2k.ab.ca
X-Entity-ID: nOTqAmqRaGnnhOGhXXSy3g==
Content-type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Welcome to Our Team Final notice for Oral B iO Series 9 customer
rewards dK+Pq1P780Gbr2GCJHGs1g== hMWcZJajGkCcIidADA8uMA== kKzSVNX4BU68SUr5XqTwFg==
2oLP8U2iKkeFJ/3ufHniHg== 1d2bEi0SgkmCFTANFkLvxA== qpgU67DvZE+DpAtB/cpbNQ==
LtP4pecHpkOU4w82VPrVzg== kFCmmxMsa0OJ4E5optqg9w== [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URI: mjt.lu]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[149.72.126.143 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Confirmation [#766772-11] - Oral B iO Series 9
X-Antivirus: AVG (VPS 230610-0, 6/9/2023), Inbound message
X-Antivirus-Status: Clean
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 10 Jun 2023 05:53:00 -0600
Received: from s.wrqvtzvf.outbound-mail.sendgrid.net ([149.72.126.143]:39896)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q7x8j-000IFA-0C
for dave@doctor.nl2k.ab.ca;
Sat, 10 Jun 2023 05:52:28 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ride4health.com;
h=from:subject:mime-version:reply-to:to:cc:content-type:
content-transfer-encoding:cc:content-type:from:subject:to;
s=s1; bh=8rEuUDBMDA0T7vITWMvS5wwiwS4ilMfxc2rCi3AH52M=;
b=US5nYj6S5sKW3fFcOF2QBQ4C8u1xiKPzEFaCYqHo4F1jB+lDFE08zp3+Nef3z5HmqGZ4
+Wrd3Iic0y0QZnzTeRIRhCr26QkS2K0jXs/Cl6y+9ITwjRGp3r3ObgeMmG+wXYItFLqKHq
9sWirdUyYiEl+a67VAzB6zIga2QF8TV++I2yfqv+PKus3sMtYhzTWPWHZMBwAeyDGxKlGa
JHTdaQHTEmSKkPQLGURzVdvQT/lCSi8WlDQYeapa6/ygJDOY0XdGd1Gf2ZjuYZTnZSEB5T
UcVGfbhqBcVXkWQLoX2bD73ehk0RToObD4zOaZ71Y3Ynpc1m2M+TquGTd8Bpxyow==
Received: by filterdrecv-ffcd6b849-qm74w with SMTP id filterdrecv-ffcd6b849-qm74w-1-64846373-4
2023-06-10 11:50:11.0623858 +0000 UTC m=+2635833.317945623
Received: from lavles.com (unknown)
by geopod-ismtpd-36 (SG) with ESMTP
id 8wnK4Ls5RhOBZGJyHXEJrg
for
Sat, 10 Jun 2023 11:50:11.056 +0000 (UTC)
Received: from aesoponline.com (216.83.185.44) by altprdrgi11.altice.prod.msg.synchronoss.net (5.8.812)
id 63FDE95301008E71 for dave@optonline.net; Sat, 10 Jun 2023 07:50:11 -0400
Received: from aesoponline.com by aesoponline.com (via RAW) (MDaemon PRO v19.5.2) for
Date: Sat, 10 Jun 2023 11:50:11 +0000 (UTC)
From: Boots Department
Subject: Confirmation [#766772-11] - Oral B iO Series 9
X-MDaemon-Deliver-To: dave@optonline.net
Message-ID:
Mime-Version: 1.0
X-Actual-From: n783U73mIP@aesoponline.com
Reply-To: n783U73mIP@aesoponline.com
X-SG-EID:
=?us-ascii?Q?mTVir=2FouOmzV3JSIGBvKh7ZukaxD8zzDJdp0cMP6mE=2FYO1hvD1VJEspQK=2FL1+l?=
=?us-ascii?Q?FH3yjOxzj58IjB6z+k=2FiDBhPWfJ3G8eAN=2FCNX+n?=
=?us-ascii?Q?bHrMV8kUO4vX8=2FUgtYO71YQR8tYr8h1vFoJE1TQ?=
=?us-ascii?Q?AlQrYj0Ir3KLCg=2F8n8YWKNacRMVtjo3znA=2FP8bx?=
=?us-ascii?Q?L4PBUsiEJcoAGbtU37i3FNBErJO4iXFxWy5ciRB?=
=?us-ascii?Q?1T7SvbwKJ+ORlDS3ADFNkKBlboDuHlt+GZBPiU?=
To: dave@optonline.net
Cc: dave@doctor.nl2k.ab.ca
X-Entity-ID: nOTqAmqRaGnnhOGhXXSy3g==
Content-type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Welcome to Our Team Final notice for Oral B iO Series 9 customer
rewards dK+Pq1P780Gbr2GCJHGs1g== hMWcZJajGkCcIidADA8uMA== kKzSVNX4BU68SUr5XqTwFg==
2oLP8U2iKkeFJ/3ufHniHg== 1d2bEi0SgkmCFTANFkLvxA== qpgU67DvZE+DpAtB/cpbNQ==
LtP4pecHpkOU4w82VPrVzg== kFCmmxMsa0OJ4E5optqg9w== [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URI: mjt.lu]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[149.72.126.143 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Confirmation [#766772-11] - Oral B iO Series 9
X-Antivirus: AVG (VPS 230610-0, 6/9/2023), Inbound message
X-Antivirus-Status: Clean
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments