Costco membership phish from charter.net
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 31 May 2025 08:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uLMw2-00000000OIP-0bPq
for dave@doctor.nl2k.ab.ca;
Sat, 31 May 2025 08:11:42 -0600
Resent-From: The Doctor
Resent-Date: Sat, 31 May 2025 08:11:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from syn-047-045-019-251.biz.spectrum.com ([47.45.19.251]:35779 helo=bestmeiunasolutions.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
id 1uLLqQ-00000000J04-2V4N
for doctor@doctor.nl2k.ab.ca;
Sat, 31 May 2025 07:01:58 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;
h=MIME-Version:To:From:Subject:Content-Type:Content-Transfer-Encoding; i=doctor@doctor.nl2k.ab.ca;
bh=e6cljvyVcPepM8ldjYSIWZQ/v38=;
b=gq/vN9LtNcGINMJa3FA0rdrYsYEfJcWX3K7oJvQtapJcL4SsVGpmHc/MVZwQfIqyCAZP5ZMDJCGv
IkfrbiTnfGSSl2eU2UoUgvqkmmIn2Tox0rC1/PQCjX6ih7lDXA905PUz+VsTcHUzdBbZafqFmFml
ohLDyme+i9FMJGh44Dk=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;
b=T0EC5batOcEFhc/tz3NfI+OrGMPgDuGnUlKA5aDoPAaokrJlJ+WgXPvM+uCL0ZXHK1u/imp0lc09
paikdGPu4ivXfH2BIRj0rwy5J8uZ11u9qsPXUzLTZx1vlcsbxVJYngYEihGuV1hlVpIb2yUGM/Ky
ARnKlfq7KAq8e4hLGE4=;
MIME-Version: 1.0
To: doctor@doctor.nl2k.ab.ca
From: =?UTF-8?B?8J2XlvCdl7zwnZiA8J2YgfCdl7DwnZe8LvCdl5jwnZiF8J2XvfCdl7bwnZe/8J2XrvCdmIHwnZe28J2XvPCdl7s=?=
Subject: =?UTF-8?B?8J2XrPCdl7zwnZiC8J2XvyDwnZeW8J2XvPCdmIDwnZiB8J2XsPCdl7wg8J2Xn/Cdl7zwnZiG8J2XrvCdl7nwnZiB8J2YhiDwnZeg8J2XsvCdl7rwnZev8J2XsvCdl7/wnZiA8J2XtfCdl7bwnZe9IPCdl5vwnZeu8J2YgC7wnZeY8J2YhfCdl73wnZe28J2Xv/Cdl7LwnZex?=
Content-Type: text/html
Content-Transfer-Encoding :BASE64
X-Spam_score: 31.1
X-Spam_score_int: 311
X-Spam_bar: +++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: doctor! Unsubscribe 115 E 23rd St New York, NY, US 10010
Content analysis details: (31.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.4 MISSING_DATE Missing Date: header
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[47.45.19.251 listed in dnsbl.ahbl.org]
[47.45.19.251 listed in dnsbl.ahbl.org]
[47.45.19.251 listed in dnsbl.ahbl.org]
[47.45.19.251 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[47.45.19.251 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[47.45.19.251 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[47.45.19.251 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[47.45.19.251 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
[47.45.19.251 listed in will-spam-for-food.eu.org]
4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URI: 185.174.30.244]
2.3 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist
[URI: 185.174.30.244]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: 185.174.30.244]
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length
greater than 79 characters
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8
characters
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8
characters
2.3 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +
other signs
3.6 DOS_BODY_HIGH_NO_MID High bit body and no message ID header
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} =?UTF-8?B?8J2XrPCdl7zwnZiC8J2XvyDwnZeW8J2XvPCdmIDwnZiB8J2XsPCdl7wg8J2Xn/Cdl7zwnZiG8J2XrvCdl7nwnZiB8J2YhiDwnZeg8J2XsvCdl7rwnZev8J2XsvCdl7/wnZiA8J2XtfCdl7bwnZe9IPCdl5vwnZeu8J2YgC7wnZeY8J2YhfCdl73wnZe28J2Xv/Cdl7LwnZex?=
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