Spanish language spam from ovh.net

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 16:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5CLs-00000000Pzf-2Qoz

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 16:35:00 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 16:35:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-7067bc54.vps.ovh.net ([51.195.222.159]:35832)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5AiT-0000000090R-2jud

for doctor@nl2k.ab.ca;

Thu, 09 May 2024 14:50:21 -0600

Received: by vps-7067bc54.vps.ovh.net (Postfix, from userid 33)

id D665C83589; Thu, 9 May 2024 20:48:16 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Factura Telecom 53782547014887164116097

Date: Thu, 9 May 2024 20:48:16 +0000

From: Personal

Message-ID:

X-Priority: 1

X-Mailer: ✖️1߷1.3.3.7߷߷

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ¡Hola! Hola doctor No necesitás clave Datos de factura

Total a pagar: 7.479,23 Vencimiento: 09/05/2024 Número de línea: 166683781592

Número de cliente: 166683781592 Los documentos se descargan e [...]

Content analysis details: (8.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 181.238.205.92.host.secureserver.net]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Factura Telecom 53782547014887164116097

¡Hola!


	Hola doctor

	No necesitás clave


	Datos de factura
	Total a pagar: 7.479,23
	Vencimiento: 09/05/2024
	Número de línea: 166683781592
	Número de cliente: 166683781592
	Los documentos se descargan en formato PDF, y es necesario Acrobat Reader para visualizarlos.

Online

• Mi cuenta

• Pago mis cuentas

• Links de pago

Con tu número de línea

• Rapipago

• Pago Fácil

Ver todas las formas de pago


	Si necesitas más información, contactate con nosotros haciendo click aquí.
	Para visualizar los términos y condiciones a la adhesión al servicio de Factura Online hace click aquí.

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5Rrq-00000000FiT-0mrR

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 09:09:02 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 09:09:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f193.google.com ([209.85.167.193]:47348)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5R42-00000000LSx-1xrc

for doctor@doctor.nl2k.ab.ca;

Fri, 10 May 2024 08:17:37 -0600

Received: by mail-oi1-f193.google.com with SMTP id 5614622812f47-3c9963a2205so689925b6e.2

for ; Fri, 10 May 2024 07:15:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715350532; x=1715955332; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=0DR+xLa2epT1q80pDBG+sMmcg/oPwneBkC1Su+tosKA=;

b=cfGKMIGpRRQu1/iJH5lWx9ijGb7AtaIBtm4vyYgUwKXMnN6dGQPdkD3eoBEUpeoZrA

akKGGaCx0DP1bOw16CKFCtaWAVBn/4ct23PL/xMp/Sx4UXpqDTaUOQXqyd4Vt5IWMWZb

BClpks3gqBlArU3ZWxFBPZ/c0MoXwOgpVtKsRNxDU7mVGmCaS+QAD4o6T4qZ0VLWekOh

B/YHVFArd76iDK/mKud0gEBSsWyW84vsKftj5pzVix/gt+PhcxENI+n5dCaBFEB6zH0G

o+swd53pffUIcOl4r87hgFKKcJ7LbMP3vCRu8PYUZXDWiKUp1dEKNc6YnS3YQsejKeB9

z37Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715350532; x=1715955332;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=0DR+xLa2epT1q80pDBG+sMmcg/oPwneBkC1Su+tosKA=;

b=RlCtlWzDp/+4xvNAPdGpuRee7W00Cf8vvivsMHItoZtMf/F8wSzpyuNlCenlJG9jZc

B/ulW57Q+3GVWf7kD/e7vjPZyh5QWBI1ehnn6fhlTc/KMSuKvymhH6es0E1lzhR0hcuQ

8kO/2hgR2q1Sjb1DI7uoJuwJ0WUTGI0Si692rwj0MTxmf3iva6D+5wuj4MDfUOB/MsiH

QD170Sa8HKoddbLKSF5JxRdGp3ICuX+/GM/Ng3E/l0cgSGBc7eEv39Zbl14SV0sBQ1PG

j65SjDOwVvbZypNVAfOphW4dSeqB9wslLvpIghFG0mHB4YjesypYy6oH8IQxutQmoOpu

nBeA==

X-Forwarded-Encrypted: i=1; AJvYcCXFkIcU5054MGmr57bfUVE3MOz7V/jpPpBuz1GlxwnZ1g836/e3q7OVVz7waPwxeWmCNH578Gn2ccaB1JzMOf/0r3X99EDiZIA=

X-Gm-Message-State: AOJu0Yy+7IdmHu6F3zf9gtKn5ssvhr2SpvwifEdYWpCeD1pZiiIoRnQh

qmML7MsJqR4peOEeFNsPLUAwkOuiokiaXwadlVWOosTTSQ2ZgHoruMWj2KyLw2UmQaLZWbag7VT

oY5cn7rKRQCX86mRMF0mxyyDM07g=

X-Google-Smtp-Source: AGHT+IHkdfKpqCwjOLlVFZtLrHwBv0EWX4PB8q9INosImRROqOIXJ5PFwvrETsI9qsKUFE24zzuyCWx1w20Nny8UEG8=

X-Received: by 2002:a05:6808:4e:b0:3c9:68fd:b0ae with SMTP id

5614622812f47-3c99706e128mr2904234b6e.35.1715350531774; Fri, 10 May 2024

07:15:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: zanaelian8@gmail.com

From: Mme Zana Elian

Date: Fri, 10 May 2024 16:15:18 +0200

Message-ID:

Subject: Are you ready?

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001cabbb06181a2b2f"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Are you ready? I am Mrs. Zana Elian, a Swiss citizen residing

in Cote D'Ivoire for over 25 years. I have been suffering from Breast Cancer

since the death of my husband. (widow) I have a donation fund [...]

Content analysis details: (19.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.193 listed in dnsbl.ahbl.org]

[209.85.167.193 listed in dnsbl.ahbl.org]

[209.85.167.193 listed in dnsbl.ahbl.org]

[209.85.167.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.193 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

[209.85.167.193 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.167.193 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.193 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.193 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[elianmmezana(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[zanaelian8(at)gmail.com]

1.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Are you ready?

--0000000000001cabbb06181a2b2f

Content-Type: text/plain; charset="UTF-8"

Are you ready?

I am Mrs. Zana Elian, a Swiss citizen residing in Cote D'Ivoire for over

25 years. I have been suffering from Breast Cancer since the death of my

husband. (widow) I have a donation fund worth Six Million Five Hundred

Thousand American Dollars (6,500,000.00 USD) that I want to donate through

your help to charitable foundations, schools, churches, mosques, widows,

and to propagate the work of God in her country. As soon as I receive your

response confirming your acceptance to support me. I will give you all the

relevant information that will authorize the release and transfer of money

to any bank account you will provide for onward investment as mentioned

above. Once I receive your answer, I will give you the contact of the Bank

to contact them directly. Thank you very much for your understanding. I am

anxiously waiting for your response.

Yours sincerely

Lady Zana Elian.

--0000000000001cabbb06181a2b2f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Are you ready?
I am =C2=A0Mrs. Zana Elian, a Swiss citi=

zen residing in Cote D'Ivoire for over 25 years. I have been suffering =

from Breast Cancer since the death of my husband. (widow) I have a donation=

fund worth Six Million Five Hundred Thousand American Dollars (6,500,000.0=

0 USD) =C2=A0that I want to donate through your help to charitable foundati=

ons, schools, churches, mosques, widows, and to propagate the work of God i=

n her country. As soon as I receive your response confirming your acceptanc=

e to support me. I will give you all the relevant information that will aut=

horize the release and transfer of money to any bank account you will provi=

de for onward investment as mentioned above. Once I receive your answer, I =

will give you the contact of the Bank to contact them directly. Thank you v=

ery much for your understanding. I am anxiously waiting for your response.<=

br>Yours sincerely
Lady Zana Elian.

--0000000000001cabbb06181a2b2f--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from sendgrid

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 07:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5QRp-00000000GSb-1KsL

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 07:38:05 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 07:38:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsv.outbound-mail.sendgrid.net ([159.183.224.104]:14416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5OF7-00000000P4w-1NX8

for cyrus@nl2k.ab.ca;

Fri, 10 May 2024 05:16:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cosmobots.io;

h=content-type:mime-version:content-transfer-encoding:

content-description:subject:from:reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=LdHLPM2sroAIbTJ3tG1WsDDGHnIQjD7A6zu0qm1QJAw=;

b=LmGy78MoQqQh2kMxrJdYs90KIJChOaCL9pPurktw+nV9ewf47TjkeK8b0Nk9SVVrVYe9

A5Jag1xTk2KcbduV/E+9JTvEEiNi/Fb27gu1yCMrc7h8JbVu+YC5e76DLR1QUCkit/pG/H

olPz1Khq5aaKnwBoeswnAEpEUv5vK7JZqISTOsOVtsi/ykTGhPqZQM7ok2naD8/IPSbkmx

PQnWNRQo7MKD1pYuVEQ6NxCL2THRD+SE10goSFOAR91VVw1+p6vAoEQlPtg4pAsWzWh8gZ

UpbPI3shDIwV1O6gc4sPwHoYFt6aHzfT6FCtybF8vgc+zpnvft1hK4IpWSJ/RBHg==

Received: by filterdrecv-7fbcd9c56-5djqj with SMTP id filterdrecv-7fbcd9c56-5djqj-1-663E01A6-75

2024-05-10 11:14:46.939976871 +0000 UTC m=+909254.270131436

Received: from [10.102.37.150] (unknown)

by geopod-ismtpd-9 (SG) with ESMTP

id g3alhTYLRwGVmRKd5Mw55Q

Fri, 10 May 2024 11:14:46.676 +0000 (UTC)

Content-Type: text/plain; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: -A Personal Invitation from a Dreamer

From: Jeff Rothschild

Date: Fri, 10 May 2024 11:14:48 +0000 (UTC)

Message-ID:

Reply-To: mygiveawayemail@naver.com

X-SG-EID:

=?us-ascii?Q?u001=2E6XgS+aMGExnB1bqZZrdrz9csChZfh9avhNnUZtsaNyv4c22oTiNspqweb?=

=?us-ascii?Q?5QsUd8bAxbLBWLnu6Ds87KBxVXwZsyQ9MDTVpR9?=

=?us-ascii?Q?XlhwlzLRBDfjjnDFQ8zCuK7W4nGxvDbYKGsAS7b?=

=?us-ascii?Q?v3UisT4x1lmKj5ql7wNl2OQiVzEqSAVh7kre3+R?=

=?us-ascii?Q?5lAqQmkKnONlMFGE=2FZHeDwgSX+qZcs164Agj7bE?=

=?us-ascii?Q?OEYXWsggIFmYKIwAbIpVrbOOjA=2FSDsN4CWHlIjg?= =?us-ascii?Q?h7iw?=

To: YOU

X-Entity-ID: u001.ceQ1uhDwNCx9nyj2YEgW3g==

X-Spam_score: 25.8

X-Spam_score_int: 258

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Friend, I hope this letter finds you well, surrounded

by the warmth of loved ones and the promise of a new day. My name is Jeff

Rothschild, and I am writing to you today with a heart full of excitement

and a [...]

Content analysis details: (25.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} -A Personal Invitation from a Dreamer

Dear Friend,

I hope this letter finds you well, surrounded by the warmth of loved ones a=

nd the promise of a new day. My name is Jeff Rothschild, and I am writing t=

o you today with a heart full of excitement and a vision for a different ki=

nd of philanthropy.

Below is a profile of me:

www.forbes.com/profile/jeff-rothschild/?sh=3D457d14d2c87a

For many years, I have dedicated myself to supporting various charities and=

causes that are dear to my heart. While I am proud of the impact we have m=

ade together, I have come to realize that there is more to giving than simp=

ly writing a check.

Recently, I had a dream=E2=80=94a vivid, inspiring dream that left me with =

a sense of clarity and purpose. In that dream, I saw the faces of ordinary =

people like you and me, each with their own hopes, dreams, and struggles. A=

nd in that moment, I knew that I needed to be more personal with my giving,=

to touch lives in a way that has never been done before.

That is why I am reaching out to you today, not as a distant benefactor, bu=

t as a fellow traveler on this journey we call life. I want to invite you t=

o be a part of something truly special, something that goes beyond traditio=

nal philanthropy and connects us on a deeper, more personal level.

Consider this letter your golden ticket to a brighter future. You've been s=

elected as the recipient of a generous donation from me., This is my apprec=

iation for your presence in this world. But this gift is more than just a m=

aterial offering; it is an invitation to join me in a shared mission of com=

passion, empathy, and human connection.

Together, we can make a difference in the lives of ordinary people in ways =

that are both meaningful and profound. Whether it's lending a listening ear=

to a friend in need, offering a helping hand to a neighbor facing adversit=

y, or simply sharing a smile with a stranger, every act of kindness has the=

power to create ripple effects of love and positivity.

So please, accept this gift with an open heart and know that it comes with =

no expectations or obligations. Consider it a gesture of friendship, a symb=

ol of our shared humanity, and a catalyst for the extraordinary things we c=

an achieve when we come together with purpose and passion.

Kindly provide your full name and address, and I will guide you on how to r=

eceive this donation..

Thank you for being a part of this journey with me. May our shared vision o=

f a kinder, more compassionate world inspire us to take bold action and spr=

ead love wherever we go.

With warmest regards,

Jeff Rothschild

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Costco Phish

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5QQz-00000000GMf-278P

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 07:37:13 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 07:37:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.scrachtech.shop ([69.48.183.151]:49187 helo=ammsdqsd.sdmm.Smtpauth.sddsq.sdzm)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

id 1s5Kag-00000000Mx9-1P5d

for root@nk.ca;

Fri, 10 May 2024 01:22:57 -0600

Authentication-Results: gmx.net; dkim=pass header.i=@kashflow.com

Received: from o7.mail.kashflow.com ([167.89.31.18]) by mx-ha.gmx.net

(mxgmx109 [212.227.17.5]) with ESMTPS (Nemesis) id 1MGOf7-1roTPo1PzR-00FosH

for ; Thu, 09 May 2024 23:30:18 +0200

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kashflow.com;

h=content-transfer-encoding:content-type:from:mime-version:subject:

reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=bMGte5OeznE0nK4o/G6ZnFJrgjIX/EYx8sJNcTtVIok=;

b=EA0mxwLfkvPp51ZqIWOSZM4vKsxj4YH2KSd6ZbKGsy16Ge4htNBIZJVpTjVjJLt9h1FL

rohjD4DVcjzP42kQv5mqsxQh5lw7P6FRWrkCwt8U18KjaP9aMjk1fsEiLIgcl+vDldy9mF

+4SJkLgTNgmHH4CU1ZlAHUjrS6iZbPOPMolenShdQT6e7r842mMRQL/tJlRegWDaZjz/Y8

HY9tS+Wsbcw4Tq0ulNu5DJUTvrLczteF1kVTErlZ/ueZ4cSFDTsDDGCjbnxH3f09GJcWRs

VAlYKzBDkxg7xmF05tIQwHkL9mQEWF8VHctdBZXOi5YMX6TTAlVbDjH7cRCGEpGg==

Received: by filterdrecv-canary-6977b856d4-b85bl with SMTP id filterdrecv-canary-6977b856d4-b85bl-1-663D4067-E9

2024-05-09 21:30:15.833052274 +0000 UTC m=+860798.750953213

Received: from MjI5NDY5MQ_899005_ (unknown)

by geopod-ismtpd-9 (SG) with HTTP

id pbDxy-wjRVOcQ_tllhshwg

Thu, 09 May 2024 21:30:15.476 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Fri, 10 May 2024 07:20:45 +0000

From: Message from Costco

Mime-Version: 1.0

Message-ID:

Subject: We are looking for new customers, let us reward you!

Reply-To: Message from Costco

X-SG-EID:

=?us-ascii?Q?u001=2E2dU4z=2FWtPTn3IAI+T2Wk4rvV3ZRgQiRb6uQtLjAeBz8I+62Z7902wcH7S?=

=?us-ascii?Q?8fD6XRA2e97MRDccekaCDMOwcl73OFS2iufs6FE?=

=?us-ascii?Q?7jfchMMOrfdCrE7BnR8Qq7+2xwX1NyOiVPRLv6L?=

=?us-ascii?Q?Xnmlk7XXasppPp4YkDnjGabcoe0Wrj80rgPW2Bp?=

=?us-ascii?Q?MtvtDgkTHTSihhU94N6RAJpaeVPOP5502QqctA3?=

=?us-ascii?Q?V5QdR=2Ful1WLCF6RMX9PtQB9nzPu1ROCk+MgJICW?=

=?us-ascii?Q?+kyC0ikUMEOfLUygZWsYxeX6wg=3D=3D?=

To: gutispukuin82@gmx.net

X-Entity-ID: u001.PG5NHUku19G2mCTQK1EQEw==

X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;

X-Spam-Flag: NO

UI-InboundReport: notjunk:1;M01:P0:xlmsrkMBebE=;j38lXzfifD7JZe3xIa+DO4G8xxV8

r7scYjgj5CyVsZXoDmDquvhihs5LryoNREbwBO6Ojv5+vH84t4KhNoyzCxYaZvx4K6wRwbII7

M5xZCHMVB8yXU1y89bH6DKbZR34JUuPxPbxzUF8AIDtjcqsd6suN1lSwwZC+wFPyUphtokB1X

xYDFFVna4SBCZlJuoUZ4/1RyFYJ/UfcALP6U02qx3wacD4RHmdZ6y99un2WiL+eqo7aVm9UzD

kUW5hCXM3NPgxBvhfKmOEdM3yJpSPtRC4Kups3qZZKr3fT0an+lo/DQEwjxw/0N4EDXQSLydF

zZMVi+6e8zqp+mPKOfI1Hkbzi1gfNgwq+GPFr//FIR7MbU9gNiu5DPXGmsiq9h3iQSdSu3YOm

AzNb1Cl1H3Syb5Mwdiuh0qVwg/EpONXqGM2K8golm8Nuf06342ycHsKgR0KqY1+2Koww2qDyM

1Bsf0vTfdSYjs1OarXBTJB7xSjzaOy1SkTOfSxVKcTDz4jmXcv1T24vE3i2mzfSljBjsq41x+

PVpWgZxa8RFhH2Rh6bkKo91P1+f/PfzwAQd0ZykWjtvsfq6gZ1vMwfC/Wf+3yGRPsbkiPGi40

nlphgRYWvZRfaKqFAbB3hhsDzZ38O23wPqoKiBLUCkKk8WkHeyI5nKr9wT97bJh/Ba9Zs192l

QxuLYAEIk0kjdidqQnGTfhP+Lb5WypIoHTpvkKLJJBBJxNyM8d5MqzD442YNyoJ5RhuVJ7/UU

Dy1Q8l/tA4PkEPAa85p3tTljAVQJX8biUb6b9xKtmL7WRusXdqgPa+UxxRG8kuzN77HnopLrU

kvsm37CVnQK4vtjV5ZUG9k4g7KUL6e969op+eQeJ3eb+ZUzjMG8YGVYYBILrV2ARttNbIa+rE

l+mfOkf4mLCVUicb0r5SYUskxClSP8noRHHp/+y/Rr0n/N80bn9ppk7FkxhfDSslPQ/idqIPX

n8zwMj5vi8z7dzwFpzj4wr6kcBoV6M6WGO+Xmf2vcBM407VhWmq7xbFhIo9coro0seD0ZgAhq

qWMFwn5VHB2jux3UCNFvbuYREygE0bgGAjFazoxo9g7EzDHCl5FwuA5QozCfk1UfKS9BErr7v

of/aCk0Oni91RED5vbEnR0adTG/NMy34aPtKHWoyEKMKeNjHSvtRVUoK+32seZJJZx/cXGOdi

BQAeJewBDEGvybUuoGX6n7SA6+cY+Yc77Pv4TtfuOW7fafuSjBcxMzX/zZ08aVoZ5giNNue+B

7lcYOGW/obOagelCDI++ZycKBJCbFXO4DSUonf9QLW4EbdEzQUOyApa2h2GRGgd12MfoCWjz9

ul07dDxnxFzSFyMQl22D2qe9nUsOzrhA/+JP3bahKGee+s+7JI2Zm6CZEvd8vaDJ5iFGjWO37

XKzoYhEBLgUAXP8/VYOr36lGZB3e3Dg0OvEb52hqCdV6ogvNr0yqw2j3fjW4LyTDlT2fWAimd

SGdpBmR0QgyU/0qjYxkLYEF2SaNs3HmLBdSHtKrCwryMAc0W5+AHl/qx31/5r8udFl/3D6fow

2/4fODtoTYqWVZjCT60C1cCg7G0bK1Pe9Nm67Umy6eh6iVnRhHFTPDvWVxoDfHjczNZU66aYV

kZ4GNCfi5FkC9b0S04EgVXlJobBu9NJbT3rWx6m53sDKfuOFpKXjJI++ZCjUMQKXoTWlxHYy7

Ik6b+BjrYLMRbvHsL7FjpR6UiqF+8PV12B6uK1Om7hi3/rGQ8VnVBcqcm4ZTyqtCthSoGuEYD

O+9YeVE9A0KI0IC3EHNdMirQQV8xm9J6lyJGfnUDtY9ZazoR8OR4MggfHEFnmZWMzkKPtAYhm

WWTn1TdSuQl3ZEEoHfo7lKNi8FyvmlsiKFCJZRUsyL5nudeI3ewT0RxzR0jNvZy9EQhRmwOoE

K13Vx1m4uG8lY2pYbNsa0PyON+YcC0pV4tObQoGSqxbjg/Lj1VmPHyUW4DE0RJariXYeuaXFN

SM8BXAt/JAt0nl0HWoYXrzedBdN1k/BT5fn4DRBTKX+5GhfBq7+X+joNYQuCxIbVujoCDyrmc

y/QN+Xs9jJiZEv3cYN/SqbuK06zaLjSSauoQvhsWUa6LresX3tI6nNIADCLdrh0ZQ8FHrL5sa

O7ETZI7HffNu3i06yBfOwE/i3ek3INPXCuVmLLuDprgVoL0QbsQBvdtTeFC8rZt0Ejjtl+hkS

YibmNkmyXB3f2dYF4FYdtev2dGOu9/2ENdQGYjIIggFVJdsBkS2s3X6G79x3Cl6f/vjGdItXY

EilZbYMavls52ILP6m9kJzD//ri7k0yqX7ZwtPlLwDGsO7Dwmxt6BWqRLqbnHn8x6E1etL8+b

ZmC+M2wPVqF8Xnm/HZVZxG/rc6FYchpwvik1x5rE+dDQyCJzgeIC6Sq60PQti4ORQTYvoTLHG

YLklmJmJRVubPf3e6CUnimql1DMmkZLg4RIuDxozLns+qwMOzaA43qPwedMsQ5g4lWo9hH26q

iJkY5GB7lHXLAOuDJN2hOW/AueGfmHswgrYtm+kPCkOCr4507DSu5LgaBGVhtcN8ElXbNx+6D

XqhDds1DcAEptqljOiGmNrsnMgT1kc0h7a5zL6J3MvG+2TDk5DMqDWq31PTHP9mrz5kMwzR74

nDWe+Dh+18pO5gSzu8zsgD8pDTEu6p9yBgZ0GbfhFniqQ9j1R9pu96m154AmBUcg+kQF3wrfe

c69WAECu5N7EzLEZsH926YE84pzawlyi650S0axNKb3UwFc4uoHZaofAldfre89i1Mu9ns1jV

n15xcwUGEmv67g8lDxlL+X9LjK2oK3SSXgZ3uP+wenudfWcyERzdoWxW+VL4ifUnSWGXdk2/p

Pt4d6YHz5cqSuUnUsOnZBdMAV9g76RaQlXQPqo7aZLbjEnoxJzr+chfGxleA4GaSCFmPpFlFD

FnfHEhNx3h1fkkJgWB28AR1dUf6lxnktjDFid67Y5SQeW5r9H+tbZ+O3zzVpEmhFraaCw0sYt

KhAZkbp/TIEvcksRLnOV58ZrKki2J9S3zXRJgMYnTrg3TIoUUkLVJIi+neCPjil8v8YHD8x9C

BzPE/fHRHMU80RsWeM94D6wuNy9yJ6kNg/OVRCoVyOfO/UyblfSIhzNWas87N9gRRdV5bjiq0

BX2A3GWUWrWdL3Cyt8zyzFoCdYrmEYZCOadH3U9R9Vo3WuTSyJtOGXWOnPBXzJYPp2v95Sn+r

pvyoCXz9zHpzD6eDUK8YFOEyPmKduff5IU9sjgs1vlLwjyGBw3HFOw2hBdPFMVEWr7DW5VIRz

t8l+JdMqGgZlwRsGPTx4M0/Jw7/i3RTP1ijKIZRWe0sV/Zr/1dRgay0wWu6wKmCCeeclM6iUc

aGjFJ663hs+q5fPoZHlV81PuRZ2ex+HXroDy+TtDQMN8TGy7gVzQrkAQPTZ6zn0Pt+boa+Vpp

hXrshxlA9usK5wtFJWUHDAoAVtq2dUeW7arkg3Id7ia7ScMDllCQKA/1+v47ZCUutdyY3TgDy

E6lPXVRJTeCO5/0T4Fy9Bk3KDeARJjk5BWQrtPFql4qqLDNHUFpF1tSiJYnGRWbBIPCTsSWej

7p1Er80bByuaFd46LrzcsagAQ7sAaOHrTSSo+x6pY1pRfqYcJgFT2vaLTkJzlqRhSNJ/4gj65

vB3K7ZeElTZaUS534fFd8Pz1LTOza/Xaa72qq6Wm7+a73SOhBfwl2ggs2JDfANXLlCpZ5Jifm

JfMMBwJ1mnzw8ker/+c4upuCkC/LZupMxLFGhO0xNEUkwjbTiXvZGjESIsYYeYNv0VoiJ9pT0

o3ZlgqwkS7fDI7vjmdjnjwPCGDlkV7Pnmjikhxmg9R30pyDpW461eSPM/WUY1cuypsj1wxTKW

Lkq/2KxqwgfX7a4caNvHiPPg+hzoqxM/OgO7yMK2sJY5zoriULRXKm2agoRW2eZFYEcbE/Hm5

Rcf/Wc4/J9APYjPgTBBKZ2v2SI25dpoED8jHZQSN16Z/ckO5ehXs6I9hzaleBufGVs30raTeS

XmsbfzLpRcu1blSgPY550JWRG0H7Tf/wilCu6n7BYUegnJwVZfyENEDJ561nNDrGvlcZzbw8P

EgRpNspkrLbwt8LPxPGd72qDBsnjp6ydacKKDVzhFTyd3CI2E6UHdzSolQiE5hc6rk6rMZICA

rqCXwg9BrLltgFYWCB3pvOoSTJNUEi7AwGr/obupqNIgkBtPqTYW0S82IUg2Gadhwpwvf3HVW

vlw/lqeVWJbLOyijZMkBkgyz6KTTYgsf9Zu++kkN2cqNL2utGGNXI/8bHbI5RhI2kF+7qnL84

AliADpQlmQCn0rEcLacJzI/kcgxPssuMyL27T0ZOqRrnG/d6SQ8/ICjqWXtt2qqYWoxth2/Hp

UOPw+AjoQ6+bM+LDZ8urCnkm1Ikst4gALOLq6irCpgfMa3UL1HyA+IH5lP7/G3z8qKAS+W4Pt

5WYUFfOLZM3B/2WR1Q9g5rzNTDc9FKFgtGczFDXVnObnQwBlFDq6QVy+KgFt/SYbEX9hvZXUS

v4KvP3oguvtyz39RYwrp333zyQdcUn+mgwAFXm6HwM6id2ZxdBAVd3uWTzkJ4dr+XReRxfiI1

fFFJM2IjA/I7cooLT9gxFOX6JnG2TXCOxTeCJlPaspqW//aYMHQApDTjGGOcwCEo7oyG+kWOW

3C2wYBcOsR4bpt1G9mXDHtPKf2kyQujo6CNd7SMogc9Bark5tRIRMgZ5uxbhvOp9dWLif52WW

VZkYdrGfxgI0n9FDJUXDwZIUZpkbUVDiiJtBd0DDSgWa2cvEH7wegsa/6hjcKSOzly/7OlEaL

1vB//HTMO61ZM/jQtySZ/EGj5/Cw4tKhOGnVGZ1urVHUEiA25oU0GTMZZ8L+JxPBrEYPrKzv6

p9wCp+RupHmrwjpaWVDSUwe2iBFbhheXOx8Vt1cyN2NFmvcBQSTnutmJCmP0BFqDh8XiYgKIm

eo2IN/Bhax3uDFv6U7P4ddEV8EOBY9y1i4S1wQAHhYYh4P732GCY1CRbPaXtIeP5UQhsDATIq

rIOd9Dq8xIl2NN2qksdiCKzrxj26g+qN5RYYN+MmiRg1dWENttj594uWz15u7XjGSdSW1fqtR

gv23fJ2stjqDrHtGlnzMpEAB1SajRm334olhJFKjB5ClH2ihhj31wtuHhtrKZ/Zp1KQA==

X-Antivirus: Avast (VPS 240509-4, 9/5/2024), Inbound message

X-Antivirus-Status: Clean

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: We have a surprise for Costco customers.

Content analysis details: (9.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} We are looking for new customers, let us reward you!

We have a surprise for Costco customers.

sexual blackmail phish from comprimised account

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 07:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5QQi-00000000GIc-3D1V

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 07:36:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 07:36:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from se22-yh.route25.eu ([185.223.33.24]:54489)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5JrI-00000000Gd2-3Db8

for doctor@mail.nl2k.ab.ca;

Fri, 10 May 2024 00:36:02 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meetberlage.com;

s=default; t=1715322830;

bh=QufX0C/9gduyzZKbOuOA5iJ4b9MC8qOh5LMCwCoSMNI=; h=To:Subject:From;

b=XFpoZhfX59Gj1CWbHSO+ujcGxXmJad3e1hxKWKJR1Ey671P+eGrAncPVJX1OufrnH

syDcHo3RcNvIMiPzoHHawammvKq8AdXa8AK9qM6YopuAXASp2mQETOp2WJJ7Sgx4ZO

3ayhcqy4Uky00RGvIncQll6hlxF0ud3JTc10r1qI=

To: doctor@mail.nl2k.ab.ca

Subject: =?UTF-8?B??=

From: =?UTF-8?B??=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--DIOBtSqpew"

Message-Id: <20240510063350.2D29617A0797@pepper.alphamega.nl>

Date: Fri, 10 May 2024 08:33:50 +0200 (CEST)

X-Virus-Scanned: clamav-milter 0.103.2 at pepper.alphamega.nl

X-Virus-Status: Clean

X-Originating-IP: 93.187.220.132

X-SpamExperts-Domain: filter.alphamega.nl

X-SpamExperts-Username: 93.187.220.0/24

Authentication-Results: route25.eu; auth=pass smtp.auth=93.187.220.0/24@filter.alphamega.nl

X-SpamExperts-Outgoing-Class: unsure

X-SpamExperts-Outgoing-Evidence: Combined (0.81)

X-Recommended-Action: accept

X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT+feEmjHegvC6FppwugTwz7PUtbdvnXkggZ

3YnVId/Y5jcf0yeVQAvfjHznO7+bT5wx7eUF7OdJizNIgVt045RnYzhx0UHrYGQo089/w2bIM4JL

M0i5ZAms0EHrvcCaVINKbGFKqYNiIRjC/oLfZKZNzIXV52OyeiH3YVVX92r9x5FXL0pcTjjLQxyL

wSSSt1/S8M46JPC5hqZSnm0ynAr3oXUPiop0AaE3t37OfHKId9n2sJscIK6p6z6OS06O+5DaPiuw

5Sj8WUw0KYM2ZhB9B6mHSb/tl+iz4DGx+nERWM3SJIkHBpFEKn3A4fhH655pXKProzXLPzllmGlS

uFNFsBJVicGF0pScaYF0cbsFSfZ0rpS1IR3CffIW1+TN/aDiJzuyA0NcjJ2sY7mLb96pc0KKvpXE

pG4JdcpV3ggmp/EsqttoyBAkLKpA1siELFWdSCGABwb9D8aK2Qif5uut31/E3ahF5MMcDI7KdpjQ

Kb1bCFfmwYQ8hiiFbXfB5xfuHkJkwkDYvVVz/IT10fLLm7RVhDC6rGajPOQMsilQygZImPb9UZXs

+o5qEZeRpTi3BT/xcase7lCw0EQdzS0QEu103BqaiETY9x6IBBUZAfLW+nikTaKLuBO+NjTrBmc0

4udozIoh38DOQxa5Boxqdu5jb/M316+qYxhRsU5ezi9JERZSSeCAItRZRQkPdqYOLBNNbPztTU2S

eoKqmBQ0LfYShKcHQpDoHfG3xQ/0im+hb+yWQlkWTDb+ayYp2eWPCxhw3NfQJ78iQKZTz2VX53O+

hEFJd7oFpC7drtvNVg5Vxm/bnhrVKymAutkEJf+pfAaw2nPSttmeL2iejNU5OF4w/GCEWyMjAg02

qRtcL2PrmlOaiNxsfLtpryPjZb+ZoetD1mdmQ0OUGoz++V7q2gzmacgbvXCXq3QGTcKcADDEK214

KWKrrm/QLLYsqk9Q4NwQDkN/+sz/TcyRf/3NbZOf2+LGlaCvxdwYqYvjha0JBw/CY0h+7UH5irkQ

wko=

X-Report-Abuse-To: spam@semaster01.route25.eu

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello As you may have noticed, I sent you an email from your

email address.

Content analysis details: (10.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.223.33.24 listed in dnsbl.ahbl.org]

[185.223.33.24 listed in dnsbl.ahbl.org]

[185.223.33.24 listed in dnsbl.ahbl.org]

[185.223.33.24 listed in dnsbl.ahbl.org]

[93.187.220.132 listed in dnsbl.ahbl.org]

[93.187.220.132 listed in dnsbl.ahbl.org]

[93.187.220.132 listed in dnsbl.ahbl.org]

[93.187.220.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.223.33.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.223.33.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.223.33.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.223.33.24 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[93.187.220.132 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

[185.223.33.24 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_NX BODY: Odd Letter Triples with NX

0.3 LONGWORD BODY: Uses overlong words

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.5 BOGUS_MIME_VERSION Mime version header is bogus

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?B??=

----DIOBtSqpew

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

PGRpdiBzdHlsZT0iIj48ZGl2PkhlbGxvPC9kaXY+PGRpdj5BcyB5b3UgbWF5IGhhdmUgbm90aWNl

ZCwgSSBzZW50IHlvdSBhbiBlbWFpbCBmcm9tIHlvdXIgZW1haWwgYWRkcmVzcy48L2Rpdj48ZGl2

PlRoaXMgbWVhbnMgSSBoYXZlIGZ1bGwgYWNjZXNzIHRvIHlvdXIgYWNjb3VudC48L2Rpdj48ZGl2

PkkndmUgYmVlbiB3YXRjaGluZyB5b3UgZm9yIG1vbnRoczwvZGl2PjxkaXY+VGhlIGZhY3QgaXMg

dGhhdCB5b3UgYmVjYW1lIGluZmVjdGVkIHdpdGggaW9zLXJhdCB0aHJvdWdoIGFuIGFkdWx0IHNp

dGUgdGhhdCB5b3UgdmlzaXRlZC48L2Rpdj48ZGl2PklmIHlvdSBkb24ndCBrbm93IGFib3V0IHRo

aXMsIGxldCBtZSBleHBsYWluPC9kaXY+PGRpdj5pb3MtcmF0IGdpdmVzIG1lIGZ1bGwgYWNjZXNz

IGFuZCBjb250cm9sIG92ZXIgeW91ciBkZXZpY2UuPC9kaXY+PGRpdj5UaGlzIG1lYW5zIHRoYXQg

SSBjYW4gc2VlIGV2ZXJ5dGhpbmcgb24geW91ciBzY3JlZW4sIHR1cm4gb24gdGhlIGNhbWVyYSBh

bmQgbWljcm9waG9uZSwgYnV0IHlvdSBkb24ndCBrbm93IGFib3V0IGl0LjwvZGl2PjxkaXY+SSBh

bHNvIGhhdmUgYWNjZXNzIHRvIGFsbCB5b3VyIGNvbnRhY3RzIGFuZCBhbGwgeW91ciBjb3JyZXNw

b25kZW5jZS48L2Rpdj48ZGl2Pk9uIHRoZSBsZWZ0IGhhbGYgb2YgdGhlIHNjcmVlbiBJIG1hZGUg

YSB2aWRlbyBzaG93aW5nIGhvdyB5b3Ugc2F0aXNmaWVkIHlvdXJzZWxmLCBvbiB0aGUgcmlnaHQg

aGFsZiB5b3Ugc2VlIHRoZSB2aWRlbyB5b3Ugd2F0Y2hlZC48L2Rpdj48ZGl2PldpdGggb25lIGNs

aWNrIEkgY2FuIHNlbmQgdGhpcyB2aWRlbyB0byBhbGwgeW91ciBlbWFpbHMgYW5kIHNvY2lhbCBt

ZWRpYSBjb250YWN0cy48L2Rpdj48ZGl2PkkgY2FuIGFsc28gc2VlIGFjY2VzcyB0byBhbGwgeW91

ciBjb21tdW5pY2F0aW9uIGFuZCBtZXNzYWdpbmcgcHJvZ3JhbXMgdGhhdCB5b3UgdXNlLjwvZGl2

PjxkaXY+SWYgeW91IHdhbnQgdG8gYXZvaWQgdGhpcyw8L2Rpdj48ZGl2PlRyYW5zZmVyIHRoZSBh

bW91bnQgb2YgOTAwIFVTRFQgdG8gbXkgdXNkdCBhZGRyZXNzIChzZWFyY2ggZm9yIGJhbnhhIG9y

IG1ldGEgbWFzayk8L2Rpdj48ZGl2Pk15IFVTRFQgYWRkcmVzczogMHg5OTM5RWYxQWM4M2Y4NkJj

NjZFNTc1MkRlZjQyNjc5ODk2MzJGQTM1PC9kaXY+PGRpdj5PbmNlIHBheW1lbnQgaXMgcmVjZWl2

ZWQgSSB3aWxsIGRlbGV0ZSB0aGUgdmlkZW8gYW5kIHlvdSB3aWxsIG5vdCBoZWFyIGZyb20gbWUg

YWdhaW4uPC9kaXY+PGRpdj5JIGdpdmUgeW91IDQ4IGhvdXJzIHRvIHBheTwvZGl2PjxkaXY+RG9u

J3QgZm9yZ2V0IHRoYXQgSSB3aWxsIHNlZSB5b3Ugd2hlbiB5b3Ugb3BlbiB0aGUgbWVzc2FnZSwg

dGhlIGNvdW50ZXIgd2lsbCBzdGFydDwvZGl2PjxkaXY+SWYgSSBzZWUgdGhhdCB5b3UgaGF2ZSBz

aGFyZWQgdGhpcyBwb3N0IHdpdGggc29tZW9uZSBlbHNlLCB0aGUgdmlkZW8gd2lsbCBiZSBwdWJs

aXNoZWQgaW1tZWRpYXRlbHkuPC9kaXY+PC9kaXY+

----DIOBtSqpew

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 05:27:00 -0600

Received: from mail-ot1-f41.google.com ([209.85.210.41]:45467)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5OO5-000000000KL-2kgu

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 05:26:10 -0600

Received: by mail-ot1-f41.google.com with SMTP id 46e09a7af769-6f0e4212d5aso982402a34.3

for ; Fri, 10 May 2024 04:24:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715340244; x=1715945044; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=rBuZeJ8eKtHKVv8HeFhma8+CGBzHZqZIzlye7EsWJOM=;

b=EnPSHtBh2ii1Fe6eRkJvfoBvhUOwlvJ38PoJFmqyT7UKMFVNAtiiX09kWzA4q0KNj1

jAgG4VyLev0oGswtdCscqIg+inMC+G3yQYHDoM9x/PRpg4xFXtPMHsnx5ItAMMceftxV

o7xfzlOFOH4yVoK0+Jmog6ua6qdWx7QFnFwwJQOHGWvOJfrLYLG12CZdb8pc7CoWEnVd

h//+Xy+pdC1emdp8dv8VQfahGniyHg7mJiyAv64a8S8M7XjqaHs+D1NituJ8SdEHrUuT

/+tF2dK6QQofp6DjnViR+t12mZ8bu0sztzN/wn99pFhDMWp/cK2quQWEvbpbg9YVpvO4

2AJw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715340244; x=1715945044;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=rBuZeJ8eKtHKVv8HeFhma8+CGBzHZqZIzlye7EsWJOM=;

b=F6cWMxPczGsE/X5uv1sbnZsTWvuhpGBrEHqZVvnpq5TgopTvfTITbxDj6wMlHacJbF

9fc0pUrdn13sJbjtBbhCG/vPwG3SoHtHl+6Q5B4WMQZUIKZiBZUAZD9WAfPj4/AOLmys

uLNZtDB2INV3OxsfCyVDCFY/XiuAq4xftqZRPQIuwEnePatQw9JxGvlnFsctX63SZq+4

e7w5IH9tnNW/O1CURfgosRQLqAxQ1HGFi+zj+U+1kx9X064fOHBInGqBG8q4Od7ZQMXD

2HJlMpPxkNGgWKDuKuCZqI1i5LAp+M6KxSAFkXOpo1qJ9Ii53AHYlSBk5P06Yy5QCfgq

Kejg==

X-Forwarded-Encrypted: i=1; AJvYcCW6+wP+rjvNqoCcj4FUE/a9AD//DTdKxNRezqfCczbk+v1qso0dadDlh1LSgS53mU/zL5qizcnK+LZ+qp41xC04Hc+B/pJA

X-Gm-Message-State: AOJu0Yzes6aC8H5UfSAkfgtIHkHQFiRYPnQM+Hq6bLHcrJP4+YmZJA7c

YasRvzrqWq8WaGicxi+8GOxcptQwPD1XOePySJvXLfieCJHALC6lrkbYpjrly+vWlfFOYffbpyt

Eb38CTI/PsbpEPd6m2kvBTfJr9zeoBE+Gpnk7Lznc

X-Google-Smtp-Source: AGHT+IEMYZoEhTYuSjDP/N7LaQJ5G9uV5xKJ9+SjEdc1IMtLF1jAku54peSDLIkSohyQOmwRbjHDCgXIw6Dkx8Q+9Wk=

X-Received: by 2002:a17:90a:348d:b0:2a2:8ed7:da34 with SMTP id

98e67ed59e1d1-2b6cc141d72mr2101506a91.1.1715339793345; Fri, 10 May 2024

04:16:33 -0700 (PDT)

MIME-Version: 1.0

From: Kim Yoon

Date: Fri, 10 May 2024 04:16:22 -0700

Message-ID:

Subject: Greetings,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000d3ea5061817ab31"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings, I wonder why you continue neglecting my emails.

Please, acknowledge the receipt of this message in reference to the subject

above as I intend to send to you the details of the mail. Sometimes, try

to [...]

Content analysis details: (6.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.41 listed in dnsbl.ahbl.org]

[209.85.210.41 listed in dnsbl.ahbl.org]

[209.85.210.41 listed in dnsbl.ahbl.org]

[209.85.210.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.41 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

[209.85.210.41 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.41 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yoonk6151(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Greetings,

--0000000000000d3ea5061817ab31

Content-Type: text/plain; charset="UTF-8"

Greetings,

I wonder why you continue neglecting my emails. Please, acknowledge the

receipt of this message in reference to the subject above as I intend to

send to you the details of the mail. Sometimes, try to check your spam box

because most of these correspondences fall out sometimes in SPAM folder.

Best regards,

--0000000000000d3ea5061817ab31

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Greetings,

I wonder why you continue neglecting=

my emails. Please, acknowledge the receipt of this message in reference to=

the subject above as I intend to send to you the details of the mail. Some=

times, try to check your spam box because most of these correspondences fal=

l out sometimes in SPAM folder.

Best regards,

--0000000000000d3ea5061817ab31--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Spanish language spam from ovh.net

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 16:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5CLm-00000000Pc1-3NQY

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 16:34:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 16:34:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-7067bc54.vps.ovh.net ([51.195.222.159]:51278)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5AQv-000000006k6-46rE

for doctor@nl2k.ab.ca;

Thu, 09 May 2024 14:32:14 -0600

Received: by vps-7067bc54.vps.ovh.net (Postfix, from userid 33)

id DCD0A8109A; Thu, 9 May 2024 20:30:09 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_72151162485231956555?=

Date: Thu, 9 May 2024 20:30:09 +0000

From: PERSONAL

Message-ID:

X-Priority: 1

X-Mailer: ✖️1߷1.3.3.7߷߷

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ¡Hola! Hola doctor No necesitás clave Datos de factura

Total a pagar: 7.479,23 Vencimiento: 09/05/2024 Número de línea: 4331958192956

Número de cliente: 4331958192956 Los documentos se descargan [...]

Content analysis details: (8.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_REMOTE_IMAGE Message contains an external image

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 181.238.205.92.host.secureserver.net]

Subject: {SPAM?} =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_72151162485231956555?=

¡Hola!


	Hola doctor

	No necesitás clave


	Datos de factura
	Total a pagar: 7.479,23
	Vencimiento: 09/05/2024
	Número de línea: 4331958192956
	Número de cliente: 4331958192956
	Los documentos se descargan en formato PDF, y es necesario Acrobat Reader para visualizarlos.

Online

• Mi cuenta

• Pago mis cuentas

• Links de pago

Con tu número de línea

• Rapipago

• Pago Fácil

Ver todas las formas de pago


	Si necesitas más información, contactate con nosotros haciendo click aquí.
	Para visualizar los términos y condiciones a la adhesión al servicio de Factura Online hace click aquí.

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

spanish language spam from ovh.net

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 16:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5CLg-00000000PDp-34Zn

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 16:34:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 16:34:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-7067bc54.vps.ovh.net ([51.195.222.159]:34388)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5AEi-000000005AC-185D

for doctor@nl2k.ab.ca;

Thu, 09 May 2024 14:19:36 -0600

Received: by vps-7067bc54.vps.ovh.net (Postfix, from userid 33)

id 694FD80229; Thu, 9 May 2024 20:17:30 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_8026915670976982?=

Date: Thu, 9 May 2024 20:17:30 +0000

From: PERSONAL

Message-ID:

X-Priority: 1

X-Mailer: ✖️1߷1.3.3.7߷߷

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ¡Hola! Hola doctor No necesitás clave Datos de factura

Total a pagar: 7.479,23 Vencimiento: 09/05/2024 Número de línea: 5496138488005850180

Número de cliente: 5496138488005850180 Los documentos [...]

Content analysis details: (6.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

[51.195.222.159 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.222.159 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

[51.195.222.159 listed in will-spam-for-food.eu.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_8026915670976982?=

¡Hola!


	Hola doctor

	No necesitás clave


	Datos de factura
	Total a pagar: 7.479,23
	Vencimiento: 09/05/2024
	Número de línea: 5496138488005850180
	Número de cliente: 5496138488005850180
	Los documentos se descargan en formato PDF, y es necesario Acrobat Reader para visualizarlos.

Online

• Mi cuenta

• Pago mis cuentas

• Links de pago

Con tu número de línea

• Rapipago

• Pago Fácil

Ver todas las formas de pago


	Si necesitas más información, contactate con nosotros haciendo click aquí.
	Para visualizar los términos y condiciones a la adhesión al servicio de Factura Online hace click aquí.

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50pT-00000000DNX-2sy4

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:47 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-am0eur02olkn2074.outbound.protection.outlook.com ([40.92.49.74]:40612 helo=EUR02-AM0-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4vyy-00000000KSO-3hek

for doctor@doctor.nl2k.ab.ca;

Wed, 08 May 2024 23:06:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=I/dFF0olXaFDfXeAZJGbb1i9LYG7oMVgnKA4o9J0M7uSdMEYtDhWQAl4Ue2rt48zUeTKhYFy6x6HHcOINeNth+EwNyyMiMb0mkZHbSzSJt3Zg67+xgFdyg96RwOAQZEch25HNR6FGw4qv0lqe6rOtLSsl7lMFC5sYdeK79OZlcHTfmat4FLkNJr+ylmqxmBpkvMoQXGhFy31pJACRe37jF6EJJo46mnvs6d/8rb5/7by5//mLjh85a1hm+GjVXbGWeWZnne2VVQNMyhA1Dw9UBZQI+MnltBJ2kZwlN9vEtVmcsor2HC82JUH9gzXtW2sVjfP1GFuSmRQlux/Q19A5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IOnYz5DEKAYOROFG+DS0ruskf3s9Sz54bh6pGy1hNr4=;

b=NWM/dEKUqUSlgZud/VjqE9+1Zfnr/Z0c9xGMZ4ZsnPrjDfalD3bC2klB4XAkB685tJ59Po5Y9cc0A/ZcZUdSBk9DUoZY5CB75y+ZuvrimiDHI2mWIf9ztqZVMBYoC2Llo4/5NHZKbwZwLX1fUGXk+iOYJQl1p6B6G+JcA6RMZLZGETPwHbmULBtGfRSbWkLnMrkdKsGZddIT9UV4Pq0nLqf7+LKOSYcXlQDWjxOoURqDl5luh6wxHmOuLJ1DKWyVGu+hBj07n3vPYiIBmBKvj+OdRZMrL1WVDSa6oHvQ151s5jCD8wYN5428q1kbC5ikUG5qxNEhHAJOkvK67Am2Rw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IOnYz5DEKAYOROFG+DS0ruskf3s9Sz54bh6pGy1hNr4=;

b=afBOd/Dx+f+iBSbCfMGa0V5cqda0TlGBChOdaycAeM15lB2eu4UhP2U+FNku/j2xsRb2xsd5Vy64ylyP43NG/tuqOS4tyfjPy9R0uoxJ9kEghB1ufDIO6WfRQcCc47fXPQU0EOBOZ6Yv6Vt4zXyo4V+8YGNtIWLT7jSmJ5Bh6jYnqMX5iuSyTOqauu7gpkwbSuTtY9NDV0ckV0OG7tnKs4Y9iLTZfLnBLwrTSWgA1mo4NC5UIKjWg71pT+hGoCGLLtogi3MdirRGBi9O+faRAjo5gbaRMQw8MLtMg+YWRmmW5onZksX16+JGJ4m9TJErbI5kprzjZGKZCh/6oTAsIg==

Received: from AS2PR02MB9319.eurprd02.prod.outlook.com (2603:10a6:20b:579::6)

by VI0PR02MB10684.eurprd02.prod.outlook.com (2603:10a6:800:20a::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.42; Thu, 9 May

2024 05:04:03 +0000

Received: from AS2PR02MB9319.eurprd02.prod.outlook.com

([fe80::972b:658a:1218:b8d6]) by AS2PR02MB9319.eurprd02.prod.outlook.com

([fe80::972b:658a:1218:b8d6%7]) with mapi id 15.20.7544.041; Thu, 9 May 2024

05:04:03 +0000

From: "joannekleven83@outlook.com"

Subject: =?UTF-8?Q?=F0=9F=92=9E_Embark_on_a_r?=

=?UTF-8?Q?omantic_adventure_?=

=?UTF-8?Q?with_Ukrainian_sin?=

=?UTF-8?Q?gles_=F0=9F=92=9E?=

Reply-To: "joannekleven83@outlook.com"

X-Mailer: Gmail

Date: Thu, 09 May 2024 07:04:01 +0200

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_A678_9E12685A.48301736"

To: Undisclosed recipients:;

X-TMN: [ILWaObtsfHTuwVtMAICSQuR82J8KqES2]

X-ClientProxiedBy: VI1PR06CA0195.eurprd06.prod.outlook.com

(2603:10a6:802:2c::16) To AS2PR02MB9319.eurprd02.prod.outlook.com

(2603:10a6:20b:579::6)

X-Microsoft-Original-Message-ID: <1.c3309c6d4f036ec2ad56@DESKTOP-9I3498I>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AS2PR02MB9319:EE_|VI0PR02MB10684:EE_

X-MS-Office365-Filtering-Correlation-Id: e587ed06-ecf1-4fa5-ab87-08dc6fe5722d

X-Microsoft-Antispam:

BCL:0;ARA:14566002|9400799015|9000799038|1680799042|461199019|3412199016|440099019|1602099003|56899024|6106899006|2406899030|2006899009;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dHgyU1dLSTh1VDVKblU0RCtGL1laelQ0QWo3cGh3ZjRBbERtbW10MHc5c2tK?=

=?utf-8?B?UlQvckgycGhMYitYN3R6RXhjVUR5Q0xFNmpsNE4rcW1IWlhxZ3AxTHdwalh1?=

=?utf-8?B?MkpuY0FJWE9tQkpwaWZtY1N0ZEZhSFg4S3RrMHc1aEVHTUdlSjRvYlNVS3ZR?=

=?utf-8?B?STZKb2g3REpHUWIwdmxSSCtQTE10dWhwOHdWZUw1SjJXMjhaN0xDc3prTXFs?=

=?utf-8?B?bzJvakZrU0hkU0JFY09Tcm5COVQ2VWYvSlU0T3V2eFVUeDdua3FiV2N2YVk0?=

=?utf-8?B?YVE3dWtaME1EK0xmVHc4YjJUQVVXc04rUjZRbFE0NzQvSG4xNzNlSGNaMXBR?=

=?utf-8?B?V2FMcDlLaUIvdDlwa3dYQ0kvT0FkZUxMY2VYajVCbTIzNHNrSmVFSzF6SEdB?=

=?utf-8?B?ODdZeHlCZ3VDank2ZFloK1Y0Q09mRmthNFc2S042bXBTREkrbi8zUHFWam5S?=

=?utf-8?B?R2xjeFArN2Z2VnBWOFVXdDliTCtTNUN2aHR2NWp6SzMvY2VWLytEdkhadXZz?=

=?utf-8?B?N3RiQzBZdXhaUVFKMVBEamJKWVhyczFxbUVWcmhzQmdTc0J2NDF3QTlzak5i?=

=?utf-8?B?cDIwNFFNMU1EWVJtd0JFd1VCRENsWVZTL3hsMHVPUHhnSEIwUGNvbUZyd1Fp?=

=?utf-8?B?eElSbndmLzNGbk9LYmp1ZkxDNWUzM3BIRXpRRUh4dmNLSFc0Q0pOdXVXVDZS?=

=?utf-8?B?L1pPR2Q5M2tvZko1d3JWTWU5Z1FheTRIRmhKU29oYitXZDlGb3NhRU80cy9Q?=

=?utf-8?B?bm4wQ21FelpJa2pTSHJKMFVla1ZUSkMzS0FUS2hvdjlnd1BnMS9qNTdaOGEx?=

=?utf-8?B?WXB2djBwVm9XNXV3Zk40aktuQmE1eUFwVlVJc1NQR1hSZFdGeDBUNzJva1Ni?=

=?utf-8?B?ZktMQ0JwcUhqTHVBQVBCRWpEdmJFRFY1Tk1FeXVweDNvaWtHK3lBUUVGeTRr?=

=?utf-8?B?Q2o4blh4Z040eHJXWDkxeUVNclB0OStPSVBMT1YyVjRaanVEYm9nQTV5c21J?=

=?utf-8?B?VlpJWS9sQW1ZZ3hsa1hHaFcwaU0yMGV4VGcyVTlIbGdHMWRTNm94c1V2Qi9C?=

=?utf-8?B?TlViU1BSZkhUZTREL2RzOHV3K2V3K05VQzh5eHBRdnJwT0tRbTd1N0tVV0h0?=

=?utf-8?B?ZEtIcjhiMHlQVlJjMWxWb092RDZaSFl0RzFpODc3b1ZPdDR0cVBodDc0cVZ4?=

=?utf-8?B?RlRGODg4eENwQUVjOWthNE9pejRKKysra3ZKK2dUMnV4RW0zdDRtbkFLY3lr?=

=?utf-8?B?WlZlVlMyMU9UQTRzelJncEFEODNjOTRBVXhiSjJiY3FuTkZqL2J6MDNyM1p3?=

=?utf-8?B?WDd1b05FcWt5Z3hSVjkrYmdSOU51ZXYveTh5SUNteU9Xb3RYcmZwSDBSbisw?=

=?utf-8?B?M3lGdXJDZVRwQzZZK1RpSWhFV05HSlhKQ1dORmlLenNweUFwdVNCRjdLbzhh?=

=?utf-8?B?R0prR0Y4MlRRK1JlRCtlc1hHdW8rU2FQTklKSnBCOVFWK2xzOFV1QldnbWxv?=

=?utf-8?B?VDYrZzMvb290MGp1ZnJlU3IrM3FDbmdiVGhvUzk5bkZXRUtvbFRuVUg5TVpS?=

=?utf-8?B?T0IxTUVueGhTNFlYWDh6OGpINlMyeU10L1c5VmdmT2xIaGtYemZucHNsRy9x?=

=?utf-8?B?bDRpQmZFNm9sQk5mMDlsek5uM2xwN0RDcWROQllWUlZlYnM1bEpUMERVME5u?=

=?utf-8?B?RmFqai9Tc3RnMDdYNUlsUTI2UEVxTVhwQnZ6VWtMWFhQRlRkMk5jUDVJV2RW?=

=?utf-8?B?K25OMys4eXVxRk80VkI3UlBWcTNmUHFEK2RVZXErR2tvK1RIMy9SaXcwOVlZ?=

=?utf-8?B?SS9PTlVQbU9PL3lYOGFRdm93OUs4VUxod2hMM3VXYXlzQlhhQUhzYTNvS3Nn?=

=?utf-8?B?dWtjbzJINDFDaFQ4RTF2TWJ0S1ZkSGl6Ri9tV1lmQWlDUzlMaGNUQ1NGTWR2?=

=?utf-8?B?cGl2T2lsVDFUemhBN1J0OG9kRk5yT3dkRHVZUHE5VXVHTldlOHNMSEU5NGI4?=

=?utf-8?B?TUloak1CZUM1TjJrU2NnZnpQVW5hREI3dXZYekE1RWNhOXAwRlpKNDN3UjVj?=

=?utf-8?B?N2VkR0xDdzFtWmUvc3pPUjcxbkJ4a1gvSWJScmdsRTAvUVJLYmJQUUMzYU9M?=

=?utf-8?B?UUxJVWE2cnhiLy9nRTUwUzUzL2F4TFBZNWQ3dUJhUm1rNFdpUm9kOGxyRnQ0?=

=?utf-8?B?TjVaREx6ZXlLNmNZUFJJdUZ2RW13Y2tuOExDM2dGU052TVdqS0RJaDY1bUpY?=

=?utf-8?B?VStKajVWOVhoR2JoY3lLVm12a0d5OFZucnRuOFNaNHVyeG1RdHZNNzZBMWhn?=

=?utf-8?B?MzVINVdsNHJUejJNcVFzam1EMzdoYmF3MU9XNVV4UmhyZHFjWndqZz09?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?d0NQa3N6Vit2Z1VoVjZFR01ZSkl6Y3A1eWtyOHMvd08zZXF2aExrbUlYcThz?=

=?utf-8?B?NzdvUE1Ub1o3cS85aVI1dUo2Qk42c3N1Nk5pdmZkTDNJcUNQZk1jbWNLZHNH?=

=?utf-8?B?V0I5cisxU2VQRmF4c1NueC9HQ2ZENlp1SjR5cEVxYVcrVklBRkZGYkFWQlRM?=

=?utf-8?B?VE5IR1JwandJeVBtcWdpdHNWUmdNYzVHOU9KSWNQZlhuS2liS3VvSUZSU3ds?=

=?utf-8?B?alUvR1drRjZmZXRhYzJCM2ZqVWdzM2RuMjFwSW12R1RtN3pyYkhvU2phZUVD?=

=?utf-8?B?aUovcjA5c1lJbkFBUDlPWDlkeXpJeThyNS9VMVJERHlORUdhL3ovV1FuTWd1?=

=?utf-8?B?YVJEb01zODNFeTVFQU4xaGpsOUR6K2xLR2lncVk3eWVVdk5lUkltOXVMaVJW?=

=?utf-8?B?NjB0UXZlY1NMSjI3alBYbWU1SnhSRlhmdUxIOG54VDZtdWtJdENoSFFPRS9C?=

=?utf-8?B?ZFNXSW93M0ZLVlcrcWdEU3NOS3EyY2tKOFhlZytLUmFiaURuMTRTWmx2MkQ0?=

=?utf-8?B?ZzQ3UHhsSDE2K0tjL25UYURsWHlETVd4UnMxK1lTcEtvazE4WXNkSHg2VEJv?=

=?utf-8?B?NnIrZVF2MUs4QzlJV0RzelZRZ1RaQ3kwSXZDZ1djczRBd2xHNkt2TmtkVEk3?=

=?utf-8?B?TlFaNy9hRFZGMlFDUlE0VjNqUFU5VWZ2TXYyK0NIT25TRHZ5cENodmsrRWQ4?=

=?utf-8?B?NE8wUU1VM1FLSVZxaWVneDJ2cUZyblV6dTRqZWV2VlJNaHlkNXRHeEcwejB6?=

=?utf-8?B?b0RRSEJXZFMrTFBFOG14SDRyOVhZVE55WEJMeXBPR09EZ3IrMzJ3Qkc3dldZ?=

=?utf-8?B?L3VNNVovWmlGQkhHMXQveXc3cWMzcGwzMUR6TTBhSkhXdnZTcHhFWEFCK2l4?=

=?utf-8?B?YkhJWGZWejJqRXhPMnF0Vk01QUtrQ2NKa1RiNnhxemdzcS9UQldvWWg4NUEr?=

=?utf-8?B?bGVOZzZ0L3l1WEw3dWpWQnZjZUZVejFMaUx2R05NTU8yZlRYeVg4dTQzUkM2?=

=?utf-8?B?VXNNZEJEVks3TlErTFNOQlRoZEpkdGt1VTBTQlIrQXY4dC9lTUc0ODV6dnor?=

=?utf-8?B?NXV0Q0JQbU9KMkFXMkFRcDdOemRTZHQ1RnBHUGdDTzJHZmlucXZURjIrQ0Js?=

=?utf-8?B?ZGc1Y3VBODg2UEVtK0FYTkJqWEJUUVFRWHVlTC9jT3Z0NVBQSUNBOUc4emV1?=

=?utf-8?B?cmlaYVlteSsrTFNPYk51L3VFVTk3UDZrYTlkeGpzcHp2RzNlNkhWUUtvUUxO?=

=?utf-8?B?amZQUzJ6WU1najlYdFV1c3F1Qlh3aUxNVnVCVjhrdUh0d3R0ZWdhNkRTTDZI?=

=?utf-8?B?ZElDVEd3aTNlUWRrVTNySnQ1SVlMamswVm1vQ3dRRk95YUVGcmNoTnRCbFY2?=

=?utf-8?B?Y3JwTzdZNWNIVGRqclR3bkFrWk1naEFOM3doN2ZQN1JFTXJDWnpDbXFiWGVi?=

=?utf-8?B?dVFlSFJ3TXZoc2loRVYzYklDS2Y0OTZoNERwTDRkcTFFRzhlaCs5eTRGbXc5?=

=?utf-8?B?SEZoblE2cGdVOW5BaUpqZ0gxQjN1dUQ3ckJhamxjOFdiNWtsZUVuTWd0VDRY?=

=?utf-8?B?WWFlQUVqY1NGLzN3NERoajFtaFlYUTFpaFY1V000VEhDREprY0twV2R3clRm?=

=?utf-8?B?UGtWYnNWTmdPWlh4b1JsaHBPYWRpNGM2L3hjTCtWbWJzY05LQ0UxSmZKZ0RS?=

=?utf-8?Q?INkv8anQGiqc/Iv3pXxK?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e587ed06-ecf1-4fa5-ab87-08dc6fe5722d

X-MS-Exchange-CrossTenant-AuthSource: AS2PR02MB9319.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2024 05:04:03.7059

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR02MB10684

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ðŸ’ž Embark on a romantic adventure with Ukrainian singles

ðŸ’ž Our dating website brings together people from all walks of life to

create meaningful connections and lasting memories. ðŸŒ…

Content analysis details: (7.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.49.74 listed in dnsbl.ahbl.org]

[40.92.49.74 listed in dnsbl.ahbl.org]

[40.92.49.74 listed in dnsbl.ahbl.org]

[40.92.49.74 listed in dnsbl.ahbl.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.49.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.49.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.49.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.49.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:579:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

[40.92.49.74 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.49.74 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[joannekleven83(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[joannekleven83(at)outlook.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[joannekleven83(at)outlook.com]

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=92=9E_Embark_on_a_r?=

=?UTF-8?Q?omantic_adventure_?=

=?UTF-8?Q?with_Ukrainian_sin?=

=?UTF-8?Q?gles_=F0=9F=92=9E?=

------=_NextPart_000_A678_9E12685A.48301736

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=F0=9F=92=9E Embark on a romantic adventure

with Ukrainian singles =F0=9F=92=9E

Our dating website brings together people from all walks of life to create =

meaningful connections and lasting memories. =F0=9F=8C=85

Whether you're looking for love, friendship, or simply someone to chat with=

, this site has something to offer for everyone.

Ready to start your journey?

Join this site today and discover the possibilities!

If you wish to stop receiving our emails, you can unsubscribe by clicking t=

he link below. We appreciate your past interest and hope you'll consider re=

joining our email list in the future.

=

------=_NextPart_000_A678_9E12685A.48301736

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

style=3D"font-weight:normal;" id=3D"docs-internal-guid-f503a849-7fff-6be3-=

dbb8-bf2f2331e515">=0A=

argin-bottom:0pt;">=0A=

;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">=F0=9F=92=9E
s-serif;color:#000000;background-color:transparent;font-weight:700;font-sty=

le:italic;font-variant:normal;text-decoration:none;vertical-align:baseline;=

white-space:pre-wrap;">Embark on a romantic adventure =0A=

=0A=

argin-bottom:0pt;">=0A=

;background-color:transparent;font-weight:700;font-style:italic;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">with Ukrainian singles
erdana,sans-serif;color:#000000;background-color:transparent;font-weight:70=

0;font-style:normal;font-variant:normal;text-decoration:none;vertical-align=

:baseline;white-space:pre-wrap;">=F0=9F=92=9E=0A=

=0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

;background-color:transparent;font-weight:400;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">Our dating website brings together people from all walks of life to creat=

e meaningful connections and lasting memories.
ize:13pt;font-family:Verdana,sans-serif;color:#000000;background-color:tran=

sparent;font-weight:700;font-style:normal;font-variant:normal;text-decorati=

on:none;vertical-align:baseline;white-space:pre-wrap;">=F0=9F=8C=85=

=0A=

=0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">Whether you're looking for love, friendship, or simply someone to chat wi=

th, this site has something to offer for everyone. =0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

"> Ready to start your journey? =0A=

=0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

=

background-color:transparent;font-weight:700;font-style:normal;font-variant=

:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-de=

coration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">Join =

this site today and discover the possibilities!
ont-size:16pt;font-family:Verdana,sans-serif;color:#000000;background-color=

:transparent;font-weight:700;font-style:normal;font-variant:normal;text-dec=

oration:none;vertical-align:baseline;white-space:pre-wrap;"> =

=0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

=

background-color:transparent;font-weight:700;font-style:normal;font-variant=

:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-de=

coration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
style=3D"border:none;display:inline-block;overflow:hidden;width:279px;heig=

ht:363px;">
dDOTruNsDQGzye05CgQGCUeFjlv3l3yH-Cl3WKT-LEDrrJLW4zenAZwueDERviCWnMAUg-Lqpy2=

jEap8U2PSSPpV0RVQUbsGgxpryR6QLkhH6iryJql8BVQgdwXTgb1WRxJZGji0" style=3D"mar=

gin-left:0px;margin-top:0px;" width=3D"279" height=3D"363">
pan style=3D"font-size:16pt;font-family:Verdana,sans-serif;color:#1155cc;ba=

ckground-color:transparent;font-weight:700;font-style:normal;font-variant:n=

ormal;text-decoration:underline;-webkit-text-decoration-skip:none;text-deco=

ration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
tyle=3D"border:none;display:inline-block;overflow:hidden;width:301px;height=

:364px;">
QuUmYr9p99pj02aVLb1PdPnEVpnY8mIh1Dp60inO022M3TPCfFXnZjv_aHh-Rj4F1NrlfedQaAJ=

W0TVoO07x_YRSUs6KpvbVG-ME7VXxELZuSkM5s-4e1mqN259jBJdHOgDbis" style=3D"margi=

n-left:0px;margin-top:0px;" width=3D"301" height=3D"364">
n style=3D"font-size:16pt;font-family:Verdana,sans-serif;color:#1155cc;back=

ground-color:transparent;font-weight:700;font-style:normal;font-variant:nor=

mal;text-decoration:underline;-webkit-text-decoration-skip:none;text-decora=

tion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
pan>=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

rgin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

If you wish to stop receiving our emails, you can
unsub.ladytoday.monster" style=3D"text-decoration:none;">
t-size:6pt;font-family:Roboto,sans-serif;color:#1155cc;background-color:tra=

nsparent;font-weight:400;font-style:normal;font-variant:normal;text-decorat=

ion:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:no=

ne;vertical-align:baseline;white-space:pre-wrap;">unsubscribe by clicking t=

he link below
s-serif;color:#000000;background-color:transparent;font-weight:400;font-sty=

le:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;=

white-space:pre-wrap;">. We appreciate your past interest and hope you'll c=

onsider rejoining our email list in the future.=0A=

=0A=

=0A=

=

------=_NextPart_000_A678_9E12685A.48301736--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Spanish language spam from ovh.net

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 11:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s57Am-000000002jE-3PmR

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 11:03:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 11:03:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-1c63181e.vps.ovh.net ([51.195.216.118]:35268)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s51WM-00000000Jrb-32Ue

for doctor@doctor.nl2k.ab.ca;

Thu, 09 May 2024 05:01:12 -0600

Received: by vps-1c63181e.vps.ovh.net (Postfix, from userid 0)

id 090498820A; Thu, 9 May 2024 10:58:06 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Plazo de pago excedido (93966074)

X-Mailer: Outlook/91.8.0

From: Roberto Carlos Castillo

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="a00ef359cc3158b2357596d453a72df0"

Content-Transfer-Encoding: 7bit

Message-Id: <20240509105820.090498820A@vps-1c63181e.vps.ovh.net>

Date: Thu, 9 May 2024 10:58:06 +0000 (UTC)

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: La Factura: doctor@doctor.nl2k.ab.ca Ei mensaje está listo

para enviarse.

Content analysis details: (10.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 217.230.109.208.host.secureserver.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.9 MANY_SUBDOM Lots and lots of subdomain parts in a URI

Subject: {SPAM?} Plazo de pago excedido (93966074)

This is a MIME encoded message.

X-Priority: 1

--a00ef359cc3158b2357596d453a72df0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit

La Factura: doctor@doctor.nl2k.ab.ca

Ei mensaje está listo para enviarse.

Com los seguinte archivos e vinculos adjunto.

Gracias por ser nuestro cliente.

Siempre estamos disponibles.

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Spanish language spam from ovh.net

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s55u3-00000000Afd-0EDS

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 09:41:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 09:41:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-1037ec02.vps.ovh.net ([51.195.222.48]:35110)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s54Tt-00000000FhI-1v06

for doctor@mail.nl2k.ab.ca;

Thu, 09 May 2024 08:10:49 -0600

Received: by vps-1037ec02.vps.ovh.net (Postfix, from userid 0)

id D0D578A692; Thu, 9 May 2024 13:59:24 +0000 (UTC)

To: doctor@mail.nl2k.ab.ca

Subject: Recordatorio de saldo pendiente (85798991)

X-Mailer: Outlook/91.8.0

From: Patricia Rodriguez

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="518f4c962a522085f50168fe0ef5dc3e"

Content-Transfer-Encoding: 7bit

Message-Id: <20240509140340.D0D578A692@vps-1037ec02.vps.ovh.net>

Date: Thu, 9 May 2024 13:59:24 +0000 (UTC)

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Descarga de Factura Estimado/a Cliente, doctor@mail.nl2k.ab.ca

Content analysis details: (10.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.222.48 listed in dnsbl.ahbl.org]

[51.195.222.48 listed in dnsbl.ahbl.org]

[51.195.222.48 listed in dnsbl.ahbl.org]

[51.195.222.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.222.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.222.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.222.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.222.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

[51.195.222.48 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 191.76.148.132.host.secureserver.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.9 MANY_SUBDOM Lots and lots of subdomain parts in a URI

Subject: {SPAM?} Recordatorio de saldo pendiente (85798991)

This is a MIME encoded message.

X-Priority: 1

--518f4c962a522085f50168fe0ef5dc3e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit

Descarga de Factura

Estimado/a Cliente, doctor@mail.nl2k.ab.ca

Hoy 09/05/2024

Le informamos que su factura ya está disponible para su descarga en formato PDF y XML. Por favor, haga clic en el botón a continuación para descargarla de manera segura.

Tienes hasta 09/05/2024, para el reconocimiento de cargo que se te generó,

(GUBZGfp7Qp5fL) por la cantidad de 4.939,09 Pesos.

Descargar Factura

Factura: FAC32947687

Data del archivo: 09/05/2024

Código de validad 44767856

I1.01KLLD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

spanish language spam from ovh.net

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s55tx-00000000A3h-3u5m

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 09:41:45 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 09:41:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-1c63181e.vps.ovh.net ([51.195.216.118]:47194)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s54GH-00000000DW1-2yr9

for doctor@doctor.nl2k.ab.ca;

Thu, 09 May 2024 07:56:46 -0600

Received: by vps-1c63181e.vps.ovh.net (Postfix, from userid 0)

id C478F80F08; Thu, 9 May 2024 13:54:06 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Notificacion de cuenta impagada (33300116)

X-Mailer: Outlook/91.8.0

From: Javier Garcia

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="606d95e46441571ad8dcda7b2203c267"

Content-Transfer-Encoding: 7bit

Message-Id: <20240509135433.C478F80F08@vps-1c63181e.vps.ovh.net>

Date: Thu, 9 May 2024 13:54:06 +0000 (UTC)

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Descarga de Factura Estimado/a Cliente, doctor@doctor.nl2k.ab.ca

Content analysis details: (10.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

[51.195.216.118 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.195.216.118 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 6.183.205.92.host.secureserver.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

[51.195.216.118 listed in will-spam-for-food.eu.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.9 MANY_SUBDOM Lots and lots of subdomain parts in a URI

Subject: {SPAM?} Notificacion de cuenta impagada (33300116)

This is a MIME encoded message.

X-Priority: 1

--606d95e46441571ad8dcda7b2203c267

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit

Descarga de Factura

Estimado/a Cliente, doctor@doctor.nl2k.ab.ca

Hoy 09/05/2024

Le informamos que su factura ya está disponible para su descarga en formato PDF y XML. Por favor, haga clic en el botón a continuación para descargarla de manera segura.

Tienes hasta 09/05/2024, para el reconocimiento de cargo que se te generó,

(GUBxkxDrbR5nB) por la cantidad de 7.545,83 Pesos.

Descargar Factura

Factura: FAC94499368

Data del archivo: 09/05/2024

Código de validad 22983829

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:49:54 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s56dL-00000000MRc-3eOT

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 10:28:39 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 10:28:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2072.outbound.protection.outlook.com ([40.92.64.72]:31717 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s564f-00000000EvE-1DMG

for doctor@doctor.nl2k.ab.ca;

Thu, 09 May 2024 09:52:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=i8HWJeS66CUSOBkiDQBfcBS4E60YHUnJltIickaGopwVdhZZ3mwSQRjsmChB2Tjlbsrd9/Xcy65rfd4ysul+ehqLATA6rUJmwoqZ7XXJZ02dTtivcC6+09dxmbO9WBjcyijT4M5xs6WjVoBIDSer8cQjlFVL2ch5gV8m1Ni5kWmIZghyh3jZKqZg0icqNJLbZ4mBgSS4EgbOqQ3o1O0fOdf4N+siVVH0zTUQKLw7DyBX1jGUQnL9INGaKYBHrBN1dhAjnX7kaY7NLrxWzcNDVqc8ivyjVTDm3kuSOhgyWXfkJYcjT1BLvH2sn0/+J0/9dwEMrtDVd4+Br1Q8ltjPqQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oSYpu7Hu9CJn8AvB8+9hKiiqX55gTsEQzPLtdqB9hVk=;

b=jH7nGnsdYNqp0b4iLfBZ+ghBaCQXDghCP6qMa3FFJt2qq4fq1DqOfVHOkWsOJ3V0t3YgiFYbekNuttUIkAptSyCGLFO5uyKHphQLTkNYGl+Q5zwlZAUqUSlMVc87qGmMxySQ/KJYyREKViauVPzVaMy0/xE2ehUemSHdTidxAzbyVZ8DbDEPMoOFqDkqCdIhKOEU/gKloMQ/rytG4zv0H+SwMCejzKvrcMmumIDxB6pwsmAzMNAfFOFv+lGd6Xg/2rmrt8xJkQNfIvgDel2KoUhJ1FMY71OJ0/gWeZD1lKYSpMrcIxrZyPy6YIsqDiu1cu+gvBsMDPN5Ji7l83BfqA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oSYpu7Hu9CJn8AvB8+9hKiiqX55gTsEQzPLtdqB9hVk=;

b=HAE0NDWDc0Tb0a8G42SzkuAm8LwvCIM+wLDVjySKAzWyiGlbdScCxVVU8hTzqu2ta5zf+6KkJR8qXzLXvHc/tIBo1maRfsSgZMfoQNFXjVR5k8RBt2TVGII4Iw3XBYN38THG5F8cRv1nCKa/K7S741oxNcRPh3nr5hRw+q6KOwm3yXNj3ojBYX5EsV2AAtDZDqjS29xKHCX9Jp35nSKLoxBtqCRcV/IHjJjGyFM0VEkAnZJaHijfu5vEZDC7O8PsG4FCEuZo7h+7UWx2mk31HjNIquIdgbn1gGMZfUZjl4clHc83MHyfEvdrX5hL+PZpvUM+IbxeOQ6pmUrdxpS8UQ==

Received: from PAWPR02MB9245.eurprd02.prod.outlook.com (2603:10a6:102:330::7)

by DBAPR02MB6198.eurprd02.prod.outlook.com (2603:10a6:10:178::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.47; Thu, 9 May

2024 15:50:38 +0000

Received: from PAWPR02MB9245.eurprd02.prod.outlook.com

([fe80::c2d:a6c2:28b3:502b]) by PAWPR02MB9245.eurprd02.prod.outlook.com

([fe80::c2d:a6c2:28b3:502b%5]) with mapi id 15.20.7544.041; Thu, 9 May 2024

15:50:38 +0000

From: "andtreasa81@outlook.com"

Subject: DateUkrainianBeauties in your area!

Reply-To: "andtreasa81@outlook.com"

X-Mailer: Postbox

Date: Thu, 09 May 2024 17:50:35 +0200

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_A90D_923E02A0.3F58B62C"

To: Undisclosed recipients:;

X-TMN: [1W5ibgQgV6JsconfCCcb5UT2p6LeSe0c]

X-ClientProxiedBy: VI1PR08CA0264.eurprd08.prod.outlook.com

(2603:10a6:803:dc::37) To PAWPR02MB9245.eurprd02.prod.outlook.com

(2603:10a6:102:330::7)

X-Microsoft-Original-Message-ID: <1.32f264101caca353f21f@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PAWPR02MB9245:EE_|DBAPR02MB6198:EE_

X-MS-Office365-Filtering-Correlation-Id: 0e07fc10-7dea-4137-71a4-08dc703fc4a6

X-Microsoft-Antispam:

BCL:0;ARA:14566002|9400799015|1680799042|9000799038|42300799006|461199019|3412199016|1602099003|440099019|56899024|4601999003;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?S0F0Tmt4UlBjNGZsQW9HeE5RQWhXN2dJZUoyQ09semZjT1ZhMlJYSUU3NXVR?=

=?utf-8?B?VnM3bldBT2tIUEdEWFd1aXArdzlvOUErekQ1R2FTZmRpL2YzRkxzVm11OHpS?=

=?utf-8?B?VERQbytBdkp4dzIwODJWTVlsTHpWRHpHVmRMQ21FcmI0VHJrdUJyU3BKWnZh?=

=?utf-8?B?NWFqTnpYRnJoSjM1YjRGWUtlTk9HWTdJNkhpOFA3Mnc0TnFwdkszcUpxYWUz?=

=?utf-8?B?dEwyallzdDQ4Z3JiVmFCR2w4emlVem1wYTMrSzRDcXhzUENyT09DckNROVE5?=

=?utf-8?B?T3loRlJmZkp6Q2VFRnF4dS9RaExrVkR1MlBwY0tBVDRQMTgyTi93QXczNXMz?=

=?utf-8?B?c3QwampSUGE4T0NGWlRzMkZlQnplaENQY0JLY0FtUnB3NldlRDZSclJGSFVm?=

=?utf-8?B?R3ptNVdwNFhOQjVTT1BBZ29NMUVKVHRLaXlPUHFvVDY1ZVp4cWxpaEcrUjdu?=

=?utf-8?B?ZkxKcmFESFFyQnBxUXFhUGFzUlVYZjFPd0xBSGYrQWtBZGZCZGtXVnpQS1RC?=

=?utf-8?B?dTZ4SCtjOE5LeWZLUFFpWmF0NklONk1YYVA0QWNTT1lMRVhoU3ZVaGV5NlNp?=

=?utf-8?B?L2p3aTFOUTFXYnNucWlhekJuZlo3MUM0aFNmd1k0dkpZdzkrM3IrdmRDZ0M4?=

=?utf-8?B?Y1B6MysxcHJ0bWtWTnU4V08xODU2ZStlUmdDaWozTXRCYmU1RXVnaUZDT01m?=

=?utf-8?B?MlVKMytlMkYwTnpCUFkwdDNkYXVTZDNpYnQxZzBDTVdlQTNER05WL3MvNFFW?=

=?utf-8?B?bk82UlFOd3ROT2ZyNG5wMDlHYzBMbTE3Ny9OTEhvL0JRTzJITHNMQ1lGNHFX?=

=?utf-8?B?V01Ka29wenhBSEcvMmtRbmR5SzFGNDF0dzl0UE9lVHMwNExyeHJwZGdzNGVI?=

=?utf-8?B?K2VhcS9zZzUzTTUvZXhwT2pVcloxWWZWd25uMGUvS3Vsd1h6SWZETUM2ejhO?=

=?utf-8?B?VFo3S1FpQlBOR3dmSEc3L3dxMUpNWUFQdVRxR1lTM2F1UWpiNW5UOXdIdmFx?=

=?utf-8?B?ZENlSWJoMnBLTnV1YVo4TFpTRXlhWHp2T2NBcHB3U0Znc0VTenVwbWNvY1dR?=

=?utf-8?B?Nk96WWphdkR1eW81YW42M1NTRTh4T1hrQmIxMnlHa1l2bzB1QTQrYWRuTTc2?=

=?utf-8?B?L0granFNZWhiUXFRTk9VcXlvNHBlcjI2TGU3WTNuVmZjUzZtMkdLbW10SUIz?=

=?utf-8?B?N1k0dlV1QVhPd0lIamhxRWcwcEVxN3hwTnZ3SnhXQ1IrVjB2Yk00dlltRGVE?=

=?utf-8?B?R1kvRFBZcEZnU212VXhnaktKU21oUUpzcEVpNStJazVmS2IzSGgvbURwTldw?=

=?utf-8?B?VHRiUEowT0l2RytOa3haaWR2aDM3bE1JaGU0L2p5ZVJqT0taOGxYZXI1QTNp?=

=?utf-8?B?SGM5MCtrZ3YycTdSbGJScFU2OGxSaC81eE4wVUJObTJSZkl1SGtrR2hheE52?=

=?utf-8?B?YTExWVI5Qy81NEt0Qll5ME1LQlpQV1o1WDNybnhVYmpSNXYraC9kem4yYVlZ?=

=?utf-8?B?NEdYYlN0ZnJ4SUNwSnlFZFpiLysxNy9qS2hvendJRFlsR3lUcXZjMjB1a3dY?=

=?utf-8?B?Tk8yZ0hrQzNBRWRnZ3J5UFdUWW9wY1E3WkYzSHF1YWlwR3IybWFGS09hRGhQ?=

=?utf-8?Q?xhc2mBuWRxVGNAcTgeEAWUE+y4NenhDHPxRglt61rNLc=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 0e07fc10-7dea-4137-71a4-08dc703fc4a6

X-MS-Exchange-CrossTenant-AuthSource: PAWPR02MB9245.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2024 15:50:38.1848

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR02MB6198

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Do you live in Canada and would you like to meet a Ukrainian

woman near you? I just launched a new website where you can meet and meet

Ukrainian women who have moved to all these countries because of [...]

Content analysis details: (12.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.72 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: clck.ru]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[andtreasa81(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[andtreasa81(at)outlook.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[andtreasa81(at)outlook.com]

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

Subject: {SPAM?} DateUkrainianBeauties in your area!

------=_NextPart_000_A90D_923E02A0.3F58B62C

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!

Our site has over 250,000 users, most of whom are women, we are only looki=

ng for male members!

DateUkrainianBeauties

DateUkrainianBeauties

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!

Sign up today to receive this exclusive free limited time offer

All users are verified and authentic. Sign up for free today

No further messages were received.

here

=

------=_NextPart_000_A90D_923E02A0.3F58B62C

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

style=3D"font-weight:normal;" id=3D"docs-internal-guid-a4fd75d8-7fff-402f-=

7049-483a49b10655">=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!
n>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site has over 250,000 users, most of whom are women, we are only lookin=

g for male members!=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

tyle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;backgroun=

d-color:transparent;font-weight:700;font-style:normal;font-variant:normal;t=

ext-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-=

skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianB=

eauties=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

ackground-color:#c9daf8;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:26=

1px;">
8Zuh4Sfz1-wE-Y435ucyRqpWGJyldofGOt2IwFBS7-qoTvG1qPu6vqlwffRPMOG_D8igx6Y8STE=

gQ1D10ijg5B4RKJPrmjq_NqPZsiUbOfauAXB8SdgTL0eGWtIG-AnnYbE" style=3D"margin-l=

eft:0px;margin-top:0px;" width=3D"624" height=3D"261">=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

tyle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;backgroun=

d-color:transparent;font-weight:700;font-style:normal;font-variant:normal;t=

ext-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-=

skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianB=

eauties=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F<=

/span>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Sign up today to receive this exclusive free limited time offer=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

All users are verified and authentic. Sign up for free today=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

No further messages were received.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

yle=3D"font-size:10pt;font-family:Arial,sans-serif;color:#1155cc;background=

-color:#ffffff;font-weight:700;font-style:normal;font-variant:normal;text-d=

ecoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-=

ink:none;vertical-align:baseline;white-space:pre-wrap;"> here
a>=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=

------=_NextPart_000_A90D_923E02A0.3F58B62C--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s56dU-00000000MSK-30dJ

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 10:28:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 10:28:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2101.outbound.protection.outlook.com ([40.92.53.101]:40416 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s56JN-00000000IM9-0asS

for doctor@nk.ca;

Thu, 09 May 2024 10:08:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=cWVHcR1GqXzjDmt5BxD2L2y2WlhDQ9SF6GO6DG8w5cEwQn418yalTO75BlQsvZfoatGKStd8bRRh3xPyYGXJv9PDURLTnl9L/6RBIQDozHBtuJeNVKGVE2Z4fHiWPIzsdLoRc9ahVV2uYinsfKgHlzP7s7GdyWYtlUQOwVv2tSwMHg+kVVmYATbfbSSql9M0y/oZI4kzwvimVy2G7MHGaBCvMdAXeqo2e4BPh/8GkrmiB+7Edh5P2NOeZ3EjvG1XEwq+4vytq99e9VJr6GnvWubG4Gj7wf1fNpihx0BWsu/eQ9FHOhn1zWv2kOd6Lc4d1lI5wrsfpgUwfgANBCLOgA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=F7BqtSU+iNCvjapck70JzRKK0Mx9uuAUn7bOgg1pNo4=;

b=hd6BatyInowxV7fGAjnwiQVU5uRncd9IuWOeepryl/HiJfLvJ0ExdJCgEWA2vn51JvaiYXyhWXXjXtJ+XJ0BJHQ/Zfbg2wX0Uqv8XHH9EKnOPa5V5OAaQU+dE6hWNf8C1AIqQJjT0y6qzPchIGo3QyPipiLBzP5fyvoG1U2TaNfzmVoZOZXKy9+EY3depgWo6jUquK9fPbOR8M8VCXYUS7r9BYZkG55G+IdjZcKu3sYCjMP4hp05xrsYJ3CFgsIIS/eyXVQm2r2izacYaKyCWRg8PGEwGTNreGGQ8WNm+fnZJj9QD8bvcYD9ydBowjQukw7scyC9C84Dujgq99sPZA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=F7BqtSU+iNCvjapck70JzRKK0Mx9uuAUn7bOgg1pNo4=;

b=bAn/9DkI/qKsmd8vpod6FyVNGoPm5mSNvYBDfQTdON1W/J+ABex4pzXipIFXfuOMYEsKDTAeJi5Q8CtSaUj09xEEX68i9DvFCETf0vSZ9bReW9l13ec/VgBVBYjCxUnLrzKCNrTfAGGw6e1/Rlp2ZFtVqMI9cxvuZ/RbSVpsOeDJ19DtAYWXqqcO6iFOlDHzTjioET2RbQ90msE8HIJVEkd/gfY68bw4pM+Ec1+tOZSDBk4jMfVjehdqOn3RRRMo6/eSAWg3KJ6SpdgXYTLtbzFYSi6sgV7WpH2HHuGoyZiMyozrl6wclWrrJ5KMov3M1YSMPDna/p+sQlcnSWxy3g==

Received: from TY0PR01MB5443.apcprd01.prod.exchangelabs.com

(2603:1096:400:32c::8) by SEZPR01MB4159.apcprd01.prod.exchangelabs.com

(2603:1096:101:3b::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.46; Thu, 9 May

2024 16:04:48 +0000

Received: from TY0PR01MB5443.apcprd01.prod.exchangelabs.com

([fe80::a16:bb36:a66e:46aa]) by TY0PR01MB5443.apcprd01.prod.exchangelabs.com

([fe80::a16:bb36:a66e:46aa%5]) with mapi id 15.20.7544.045; Thu, 9 May 2024

16:04:48 +0000

From: "teetaskiauaqnh@hotmail.com"

Subject: Date Ukrainian woman in Canada today!

Reply-To: "teetaskiauaqnh@hotmail.com"

X-Mailer: SquirrelMail

Date: Thu, 09 May 2024 18:04:42 +0200

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_9329_5F696EBF.EF79FD26"

To: Undisclosed recipients:;

X-TMN: [Xpa85yK81prC2G4wuGks+8vzkxjEUfL5]

X-ClientProxiedBy: VI1PR0102CA0017.eurprd01.prod.exchangelabs.com

(2603:10a6:802::30) To TY0PR01MB5443.apcprd01.prod.exchangelabs.com

(2603:1096:400:32c::8)

X-Microsoft-Original-Message-ID: <1.1e5587c884381990677c@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TY0PR01MB5443:EE_|SEZPR01MB4159:EE_

X-MS-Office365-Filtering-Correlation-Id: 37c217e1-fc9c-4cf2-1ec8-08dc7041bf75

X-Microsoft-Antispam:

BCL:0;ARA:14566002|1680799042|9400799015|9000799038|461199019|42300799006|440099019|3412199016|1602099003|56899024|4601999003;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?K25lZG52TkRta3gwcFJWelFyaE5HdExYaWV0R2xOUU1oOXppSkZUNWxCQTJU?=

=?utf-8?B?Q2U1b3BvVUpFZEtmYlVxMlloclphcGdzbnlUZnNMaTdmZnJ6c2s2cHVZNWgw?=

=?utf-8?B?OTdVOTNabXhjcWgrQnJvVG5hcHNaK1h0WTl5WFcyZEhqeU9sSWh6ZEpRUUNR?=

=?utf-8?B?b2U3dkNUb1BnZmZpaWlaRnZCdW15bDFxTERMeTVKdG1NaVNuV0YvRFBGVWRS?=

=?utf-8?B?WHJnbzZyOVVJUXRNdlRIUzVRMi84RENwY1EwMUJwVTlRVDlLeFhtTVJneTJV?=

=?utf-8?B?ZnkxMms0ZXBraTA2RXA1TkJLSkJXK3dBdmhUd2hjUldWUXBNRHJVSlY1Mk53?=

=?utf-8?B?Z0p1aDM1eHR6QUdFYzlyU2h3SSs4eTl3YWRpZjBVKzUrQldrRzIvcmdiQkNr?=

=?utf-8?B?ZEFwUnBqRTh5K09YMVBPdjduNTlJTmF3cVk3YVFqOHNEQmgxZC9jQUdhNTVr?=

=?utf-8?B?YVNBck0vcTNLejZ3YjhrY0NGYUk0dElUVjV6ZlY3cXJkbEM4T3NtbUZEMlB2?=

=?utf-8?B?Z0lLeXBINkpNM2pJNXhWNG93clBaTkJndWpuVmhIRVZmL1dxNjFxV1ArUk9D?=

=?utf-8?B?ekpZNkdFVENNZmNrQjhhY0w3NVFGbEE2N05Oc2lJdmt4eVlkUDlLdGU3Y0xu?=

=?utf-8?B?aHpyeEIzUGNGQlp6NlFJU3NLOWR1VUY3ZHZzQUp2NDJwanBFb0FEQ1U0c25K?=

=?utf-8?B?eDEvOUl0ZU9vWnZHTGNnUE8wSTNNQlpUWVlOb2RIM3BIbk9vUDl3S28xY1FY?=

=?utf-8?B?NlJtV0RGV1dnd1dXS3NISzVrY1h5d3ZxMVRwWXA0ZFR6YVNPMDAyV1g5Z1BY?=

=?utf-8?B?L3RJaXRsVjZFRXNDUUxMWUtRcXJOQmNrVGhoWFQ3M3NUbWZwTE52Rk8zekQv?=

=?utf-8?B?bTRVYTBWaGlqbDNGWnZLTklUTUdxTkFtdCt4Wk5NalZDQWtGVW13c05WR1dt?=

=?utf-8?B?bkZYeEZILzM5USs0ZllScUx3RXhTQ0VTNWVwS25STUhrOTZGWjlFRHRZQVdl?=

=?utf-8?B?a2x6WmhMSGE1UlRkUHJLTVZMcm8xODdXQ0YyeXpJZUdaNDl4TE5sdGZtcWRn?=

=?utf-8?B?cnJWaThXaTkzUlZqM1FtWW0zWDd3YUF2eTN2U0NVNmpjR3VXQXhUNXc0aGoy?=

=?utf-8?B?TzUraDYvSERjN3NPSERzZ3ljZlhZWjFrVHNhUDJiU1pHSHo5SWJLamtoTll0?=

=?utf-8?B?Mkl0eHlOSlhFL0ZPTmN0eXFGU2VpY2dGQ0pWWU1Qd2VuSWphTjNsZExIUHpi?=

=?utf-8?B?cHUzRm5PKzdzZVVDQm9tN2VWQjlTWlJRT2F2cndmZGI2cGU3QTliUG1NVGR5?=

=?utf-8?B?QTlYcTZXMGszQ2djZmMzVVFwN0dGTXRFRnNWRU01NVdWOFB4dWI4Vkg2VWVR?=

=?utf-8?B?cnFCWTQweVhwbDl1cGVlZWRuSmR2VkZlcXhORjNFUEd0R3Jpa0E2N3NZa08v?=

=?utf-8?B?SzRRKytFRXhVTnlvK3FZMlEzbm8wa1VBSjFTWk04YzZHU2xNQnNacmltUVpV?=

=?utf-8?B?SVlGZ3ltNTRyU1pZTXNTMEJlNWNnc282V3hKejk3dzJPWUxzcXNQaXpyejMr?=

=?utf-8?B?b2g3a1JKT0RIeTBkeVJ4NDVmS01xN2paYm4wTkZiM0dWRTlSL04wMlRGajR5?=

=?utf-8?B?OUFvKzZEMisycEVMR3lBbVZxQXFGdjVRcnhkWUt2QjEwT3g1RCtCOUMvUHB2?=

=?utf-8?Q?ahCcmC2HbwsApQG6jIs5?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-d8e84.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 37c217e1-fc9c-4cf2-1ec8-08dc7041bf75

X-MS-Exchange-CrossTenant-AuthSource: TY0PR01MB5443.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2024 16:04:48.1316

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4159

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Do you live in Canada and would you like to meet a Ukrainian

woman near you? I just launched a new website where you can meet and meet

Ukrainian women who have moved to all these countries because of [...]

Content analysis details: (12.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.53.101 listed in dnsbl.ahbl.org]

[40.92.53.101 listed in dnsbl.ahbl.org]

[40.92.53.101 listed in dnsbl.ahbl.org]

[40.92.53.101 listed in dnsbl.ahbl.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.53.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.53.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.53.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.53.101 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:32c:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

[40.92.53.101 listed in will-spam-for-food.eu.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: clck.ru]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.101 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[teetaskiauaqnh(at)hotmail.com]

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

Subject: {SPAM?} Date Ukrainian woman in Canada today!

------=_NextPart_000_9329_5F696EBF.EF79FD26

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!

Our site has over 250,000 users, most of whom are women, we are only looki=

ng for male members!

DateUkrainianBeauties

DateUkrainianBeauties

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!

Sign up today to receive this exclusive free limited time offer

All users are verified and authentic. Sign up for free today

No further messages were received.

here

=

------=_NextPart_000_9329_5F696EBF.EF79FD26

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

style=3D"font-weight:normal;" id=3D"docs-internal-guid-6ad2f39d-7fff-db4c-=

22d0-478f247ef258">=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!
n>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site has over 250,000 users, most of whom are women, we are only lookin=

g for male members!=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

yle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;background=

-color:transparent;font-weight:700;font-style:normal;font-variant:normal;te=

xt-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-s=

kip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianBe=

auties=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

ackground-color:#c9daf8;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:26=

1px;">
8Zuh4Sfz1-wE-Y435ucyRqpWGJyldofGOt2IwFBS7-qoTvG1qPu6vqlwffRPMOG_D8igx6Y8STE=

gQ1D10ijg5B4RKJPrmjq_NqPZsiUbOfauAXB8SdgTL0eGWtIG-AnnYbE" style=3D"margin-l=

eft:0px;margin-top:0px;" width=3D"624" height=3D"261">=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

yle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;background=

-color:transparent;font-weight:700;font-style:normal;font-variant:normal;te=

xt-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-s=

kip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianBe=

auties=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F<=

/span>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Sign up today to receive this exclusive free limited time offer=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

All users are verified and authentic. Sign up for free today=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

No further messages were received.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

yle=3D"font-size:10pt;font-family:Arial,sans-serif;color:#1155cc;background=

-color:#ffffff;font-weight:700;font-style:normal;font-variant:normal;text-d=

ecoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-=

ink:none;vertical-align:baseline;white-space:pre-wrap;"> here
a>=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=

------=_NextPart_000_9329_5F696EBF.EF79FD26--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, May 9. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 10:48:36 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s56uR-00000000PZT-1pIS

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 10:46:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 10:46:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2072.outbound.protection.outlook.com ([40.92.64.72]:31717 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s564f-00000000EvE-1DMG

for doctor@doctor.nl2k.ab.ca;

Thu, 09 May 2024 09:52:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=i8HWJeS66CUSOBkiDQBfcBS4E60YHUnJltIickaGopwVdhZZ3mwSQRjsmChB2Tjlbsrd9/Xcy65rfd4ysul+ehqLATA6rUJmwoqZ7XXJZ02dTtivcC6+09dxmbO9WBjcyijT4M5xs6WjVoBIDSer8cQjlFVL2ch5gV8m1Ni5kWmIZghyh3jZKqZg0icqNJLbZ4mBgSS4EgbOqQ3o1O0fOdf4N+siVVH0zTUQKLw7DyBX1jGUQnL9INGaKYBHrBN1dhAjnX7kaY7NLrxWzcNDVqc8ivyjVTDm3kuSOhgyWXfkJYcjT1BLvH2sn0/+J0/9dwEMrtDVd4+Br1Q8ltjPqQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oSYpu7Hu9CJn8AvB8+9hKiiqX55gTsEQzPLtdqB9hVk=;

b=jH7nGnsdYNqp0b4iLfBZ+ghBaCQXDghCP6qMa3FFJt2qq4fq1DqOfVHOkWsOJ3V0t3YgiFYbekNuttUIkAptSyCGLFO5uyKHphQLTkNYGl+Q5zwlZAUqUSlMVc87qGmMxySQ/KJYyREKViauVPzVaMy0/xE2ehUemSHdTidxAzbyVZ8DbDEPMoOFqDkqCdIhKOEU/gKloMQ/rytG4zv0H+SwMCejzKvrcMmumIDxB6pwsmAzMNAfFOFv+lGd6Xg/2rmrt8xJkQNfIvgDel2KoUhJ1FMY71OJ0/gWeZD1lKYSpMrcIxrZyPy6YIsqDiu1cu+gvBsMDPN5Ji7l83BfqA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oSYpu7Hu9CJn8AvB8+9hKiiqX55gTsEQzPLtdqB9hVk=;

b=HAE0NDWDc0Tb0a8G42SzkuAm8LwvCIM+wLDVjySKAzWyiGlbdScCxVVU8hTzqu2ta5zf+6KkJR8qXzLXvHc/tIBo1maRfsSgZMfoQNFXjVR5k8RBt2TVGII4Iw3XBYN38THG5F8cRv1nCKa/K7S741oxNcRPh3nr5hRw+q6KOwm3yXNj3ojBYX5EsV2AAtDZDqjS29xKHCX9Jp35nSKLoxBtqCRcV/IHjJjGyFM0VEkAnZJaHijfu5vEZDC7O8PsG4FCEuZo7h+7UWx2mk31HjNIquIdgbn1gGMZfUZjl4clHc83MHyfEvdrX5hL+PZpvUM+IbxeOQ6pmUrdxpS8UQ==

Received: from PAWPR02MB9245.eurprd02.prod.outlook.com (2603:10a6:102:330::7)

by DBAPR02MB6198.eurprd02.prod.outlook.com (2603:10a6:10:178::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.47; Thu, 9 May

2024 15:50:38 +0000

Received: from PAWPR02MB9245.eurprd02.prod.outlook.com

([fe80::c2d:a6c2:28b3:502b]) by PAWPR02MB9245.eurprd02.prod.outlook.com

([fe80::c2d:a6c2:28b3:502b%5]) with mapi id 15.20.7544.041; Thu, 9 May 2024

15:50:38 +0000

From: "andtreasa81@outlook.com"

Subject: DateUkrainianBeauties in your area!

Reply-To: "andtreasa81@outlook.com"

X-Mailer: Postbox

Date: Thu, 09 May 2024 17:50:35 +0200

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_A90D_923E02A0.3F58B62C"

To: Undisclosed recipients:;

X-TMN: [1W5ibgQgV6JsconfCCcb5UT2p6LeSe0c]

X-ClientProxiedBy: VI1PR08CA0264.eurprd08.prod.outlook.com

(2603:10a6:803:dc::37) To PAWPR02MB9245.eurprd02.prod.outlook.com

(2603:10a6:102:330::7)

X-Microsoft-Original-Message-ID: <1.32f264101caca353f21f@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PAWPR02MB9245:EE_|DBAPR02MB6198:EE_

X-MS-Office365-Filtering-Correlation-Id: 0e07fc10-7dea-4137-71a4-08dc703fc4a6

X-Microsoft-Antispam:

BCL:0;ARA:14566002|9400799015|1680799042|9000799038|42300799006|461199019|3412199016|1602099003|440099019|56899024|4601999003;

X-Microsoft-Antispam-Message-Info:

DyrEWG/0UNcUAlCmsfYMrFtjABMsYNrNCv/lQf9+GBTHcttxgbZGLMNEiqE3rUFRU2b3RNnG6FH4vtDLm/b8q2cR6Aa+BtuTB+eY+lACyoZ9fhvj3kKb/xi6oKIjvActDjGkYB4zmvLYq+q2t19xU+iie38/8YBG0Tn0yk7NXj6SuUIZKZ+dbtJ0FuKCKKUVpxzXMv+Om+cgzUVsEHtTToWa8IRuDM36u7bghvSR/0dn5ULzI+Ai3xQYD9rZLyQ5Gj7k9gychdzcDw4+PVCH2NjudUIkT4Rp/T49LlVU0lXSy02UZw/UUt5NYQmN3wVbT9IvuZajuTsm7ki+4+0IjDykfxowhjgO7/2RTI3bLLm1bLHXF5u93AEux0rHBWyXhnKS9NWn1JVFHLqFtBntefz4IUnNKcFbbpnxYviOmQpe0A3bR4d44/sPcCP4qV9a4P4mPTp4og7aPGWSMuQmFP/sMLFJMrD8CavfBH6wyFXl9SWajLuVGHAXRYz8S69M41r7xrPoa3iiO01a8AVT83xIUgkwfPTUlahSWZs7EK9xPPM6ctll7Clx1ERS8iqHed1EoahitLeKLxl1tgGRwGVS9MzTZVgT6rf1WSRKXO9Xrkh05Qu4+KtRYAUahkEEKa4qQLbCSMi5I6yXuP0QkfbfUcQ4dR8DtvJTy1u3FIAMg4pWHuoooPMOAd354xMJHBzQ7IZKHJexazPlSIfrmiK7vR9deO5sJCNOVL8kQp3K57KY8td2XpAeLCiEpVL6DCGWxW9ikhZTh9FwMTTr1LYUyrBy8k9MuAYuPkW+0scXBsSUPrPup4wWpbpKx7ol

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?S0F0Tmt4UlBjNGZsQW9HeE5RQWhXN2dJZUoyQ09semZjT1ZhMlJYSUU3NXVR?=

=?utf-8?B?VnM3bldBT2tIUEdEWFd1aXArdzlvOUErekQ1R2FTZmRpL2YzRkxzVm11OHpS?=

=?utf-8?B?VERQbytBdkp4dzIwODJWTVlsTHpWRHpHVmRMQ21FcmI0VHJrdUJyU3BKWnZh?=

=?utf-8?B?NWFqTnpYRnJoSjM1YjRGWUtlTk9HWTdJNkhpOFA3Mnc0TnFwdkszcUpxYWUz?=

=?utf-8?B?dEwyallzdDQ4Z3JiVmFCR2w4emlVem1wYTMrSzRDcXhzUENyT09DckNROVE5?=

=?utf-8?B?T3loRlJmZkp6Q2VFRnF4dS9RaExrVkR1MlBwY0tBVDRQMTgyTi93QXczNXMz?=

=?utf-8?B?c3QwampSUGE4T0NGWlRzMkZlQnplaENQY0JLY0FtUnB3NldlRDZSclJGSFVm?=

=?utf-8?B?R3ptNVdwNFhOQjVTT1BBZ29NMUVKVHRLaXlPUHFvVDY1ZVp4cWxpaEcrUjdu?=

=?utf-8?B?ZkxKcmFESFFyQnBxUXFhUGFzUlVYZjFPd0xBSGYrQWtBZGZCZGtXVnpQS1RC?=

=?utf-8?B?dTZ4SCtjOE5LeWZLUFFpWmF0NklONk1YYVA0QWNTT1lMRVhoU3ZVaGV5NlNp?=

=?utf-8?B?L2p3aTFOUTFXYnNucWlhekJuZlo3MUM0aFNmd1k0dkpZdzkrM3IrdmRDZ0M4?=

=?utf-8?B?Y1B6MysxcHJ0bWtWTnU4V08xODU2ZStlUmdDaWozTXRCYmU1RXVnaUZDT01m?=

=?utf-8?B?MlVKMytlMkYwTnpCUFkwdDNkYXVTZDNpYnQxZzBDTVdlQTNER05WL3MvNFFW?=

=?utf-8?B?bk82UlFOd3ROT2ZyNG5wMDlHYzBMbTE3Ny9OTEhvL0JRTzJITHNMQ1lGNHFX?=

=?utf-8?B?V01Ka29wenhBSEcvMmtRbmR5SzFGNDF0dzl0UE9lVHMwNExyeHJwZGdzNGVI?=

=?utf-8?B?K2VhcS9zZzUzTTUvZXhwT2pVcloxWWZWd25uMGUvS3Vsd1h6SWZETUM2ejhO?=

=?utf-8?B?VFo3S1FpQlBOR3dmSEc3L3dxMUpNWUFQdVRxR1lTM2F1UWpiNW5UOXdIdmFx?=

=?utf-8?B?ZENlSWJoMnBLTnV1YVo4TFpTRXlhWHp2T2NBcHB3U0Znc0VTenVwbWNvY1dR?=

=?utf-8?B?Nk96WWphdkR1eW81YW42M1NTRTh4T1hrQmIxMnlHa1l2bzB1QTQrYWRuTTc2?=

=?utf-8?B?L0granFNZWhiUXFRTk9VcXlvNHBlcjI2TGU3WTNuVmZjUzZtMkdLbW10SUIz?=

=?utf-8?B?N1k0dlV1QVhPd0lIamhxRWcwcEVxN3hwTnZ3SnhXQ1IrVjB2Yk00dlltRGVE?=

=?utf-8?B?R1kvRFBZcEZnU212VXhnaktKU21oUUpzcEVpNStJazVmS2IzSGgvbURwTldw?=

=?utf-8?B?VHRiUEowT0l2RytOa3haaWR2aDM3bE1JaGU0L2p5ZVJqT0taOGxYZXI1QTNp?=

=?utf-8?B?SGM5MCtrZ3YycTdSbGJScFU2OGxSaC81eE4wVUJObTJSZkl1SGtrR2hheE52?=

=?utf-8?B?YTExWVI5Qy81NEt0Qll5ME1LQlpQV1o1WDNybnhVYmpSNXYraC9kem4yYVlZ?=

=?utf-8?B?NEdYYlN0ZnJ4SUNwSnlFZFpiLysxNy9qS2hvendJRFlsR3lUcXZjMjB1a3dY?=

=?utf-8?B?Tk8yZ0hrQzNBRWRnZ3J5UFdUWW9wY1E3WkYzSHF1YWlwR3IybWFGS09hRGhQ?=

=?utf-8?Q?xhc2mBuWRxVGNAcTgeEAWUE+y4NenhDHPxRglt61rNLc=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 0e07fc10-7dea-4137-71a4-08dc703fc4a6

X-MS-Exchange-CrossTenant-AuthSource: PAWPR02MB9245.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2024 15:50:38.1848

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR02MB6198

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Do you live in Canada and would you like to meet a Ukrainian

woman near you? I just launched a new website where you can meet and meet

Ukrainian women who have moved to all these countries because of [...]

Content analysis details: (12.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[40.92.64.72 listed in dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.64.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:330:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

[40.92.64.72 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.72 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: clck.ru]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[andtreasa81(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[andtreasa81(at)outlook.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[andtreasa81(at)outlook.com]

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

Subject: {SPAM?} DateUkrainianBeauties in your area!

------=_NextPart_000_A90D_923E02A0.3F58B62C

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!

Our site has over 250,000 users, most of whom are women, we are only looki=

ng for male members!

DateUkrainianBeauties

DateUkrainianBeauties

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!

Sign up today to receive this exclusive free limited time offer

All users are verified and authentic. Sign up for free today

No further messages were received.

here

=

------=_NextPart_000_A90D_923E02A0.3F58B62C

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

style=3D"font-weight:normal;" id=3D"docs-internal-guid-a4fd75d8-7fff-402f-=

7049-483a49b10655">=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Do you live in Canada and would you like to meet a Ukrainian woman near you=

? I just launched a new website where you can meet and meet Ukrainian women=

who have moved to all these countries because of the situation there!
n>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site has over 250,000 users, most of whom are women, we are only lookin=

g for male members!=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

tyle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;backgroun=

d-color:transparent;font-weight:700;font-style:normal;font-variant:normal;t=

ext-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-=

skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianB=

eauties=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

ackground-color:#c9daf8;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:26=

1px;">
8Zuh4Sfz1-wE-Y435ucyRqpWGJyldofGOt2IwFBS7-qoTvG1qPu6vqlwffRPMOG_D8igx6Y8STE=

gQ1D10ijg5B4RKJPrmjq_NqPZsiUbOfauAXB8SdgTL0eGWtIG-AnnYbE" style=3D"margin-l=

eft:0px;margin-top:0px;" width=3D"624" height=3D"261">=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

tyle=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;backgroun=

d-color:transparent;font-weight:700;font-style:normal;font-variant:normal;t=

ext-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-=

skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrainianB=

eauties=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F<=

/span>=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

The site has many features, chat, camera, calls, stickers and many more opt=

ions that you can try today!=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Sign up today to receive this exclusive free limited time offer=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

All users are verified and authentic. Sign up for free today=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

margin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

No further messages were received.=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

yle=3D"font-size:10pt;font-family:Arial,sans-serif;color:#1155cc;background=

-color:#ffffff;font-weight:700;font-style:normal;font-variant:normal;text-d=

ecoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-=

ink:none;vertical-align:baseline;white-space:pre-wrap;"> here
a>=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=

------=_NextPart_000_A90D_923E02A0.3F58B62C--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '24					Forward →
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31