Canadian Pharmaceutical phish from comcast
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 07 Aug 2022 22:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oKuEI-0008Ka-PI
for dave@doctor.nl2k.ab.ca;
Sun, 07 Aug 2022 22:19:02 -0600
Resent-From: The Doctor
Resent-Date: Sun, 7 Aug 2022 22:19:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 162-17-31-137-static.hfc.comcastbusiness.net ([162.17.31.137]:11340 helo=162-17-31-139-static.hfc.comcastbusiness.net)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oKs2D-000OJo-2y
for doctor@nk.ca;
Sun, 07 Aug 2022 19:58:29 -0600
Message-ID: <583B9DA8.383775B9@comcastbusiness.net>
Date: Mon, 08 Aug 2022 00:58:16 +0300
From: "CanadaPharmacy"
X-Accept-Language: en-us
MIME-Version: 1.0
To:
Subject: Make your sexual fantasies true!
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your productivity is lifelong and wonderful with Cialis Daily!
If you really choose to feel females' fine figures, make the right choice:
buy in our online store! Shining moments as part of your sexua [...]
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[162.17.31.137 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.2 DRUGS_ERECTILE Refers to an erectile drug
3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP
addr 2)
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address
Subject: {SPAM?} Make your sexual fantasies true!
Your productivity is lifelong and wonderful with Cialis Daily! If you really
choose to feel females' fine figures, make the right choice: buy in our
online store! Shining moments as part of your sexual life should be
right from that fantastic second of purchase! Buy our stuff - switch on the
light of your sexual life just now!!!
http://asdscha.ru.net/hyqevtisx/
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 07 Aug 2022 22:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oKuEI-0008Ka-PI
for dave@doctor.nl2k.ab.ca;
Sun, 07 Aug 2022 22:19:02 -0600
Resent-From: The Doctor
Resent-Date: Sun, 7 Aug 2022 22:19:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 162-17-31-137-static.hfc.comcastbusiness.net ([162.17.31.137]:11340 helo=162-17-31-139-static.hfc.comcastbusiness.net)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1oKs2D-000OJo-2y
for doctor@nk.ca;
Sun, 07 Aug 2022 19:58:29 -0600
Message-ID: <583B9DA8.383775B9@comcastbusiness.net>
Date: Mon, 08 Aug 2022 00:58:16 +0300
From: "CanadaPharmacy"
X-Accept-Language: en-us
MIME-Version: 1.0
To:
Subject: Make your sexual fantasies true!
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your productivity is lifelong and wonderful with Cialis Daily!
If you really choose to feel females' fine figures, make the right choice:
buy in our online store! Shining moments as part of your sexua [...]
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[162.17.31.137 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.2 DRUGS_ERECTILE Refers to an erectile drug
3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP
addr 2)
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address
Subject: {SPAM?} Make your sexual fantasies true!
Your productivity is lifelong and wonderful with Cialis Daily! If you really
choose to feel females' fine figures, make the right choice: buy in our
online store! Shining moments as part of your sexual life should be
right from that fantastic second of purchase! Buy our stuff - switch on the
light of your sexual life just now!!!
http://asdscha.ru.net/hyqevtisx/
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments