French language spam from Microsoft Outlook
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 Nov 2024 15:16:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tDszK-00000000MQo-0oyR
for dave@doctor.nl2k.ab.ca;
Wed, 20 Nov 2024 15:15:54 -0700
Resent-From: The Doctor
Resent-Date: Wed, 20 Nov 2024 15:15:54 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vi1eur03on2115.outbound.protection.outlook.com ([40.107.103.115]:13945 helo=EUR03-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tDqyR-00000000Azl-47Fj
for root@doctor.nl2k.ab.ca;
Wed, 20 Nov 2024 13:06:58 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=RejjkUHHZ8ifVzPLG/VDN1GwxFx6XnQMOgfkkRjgI4v17Zjo4rBbqTywhJWYCQOPkU1tPM5t9xL8laz0OsxsbxZf4W7VFSXMtqRutIe8yFXyJf3QypuB91nOV9S/rWihkBHq5lK+G97t11M2CMEDWMQmY7sPxHa4q96OWGVLZ6xF3d/1KcXWvG5GxSqtwAA3kqCfU58TE2DN48/0/0cl/cGJD6kMbOP4fmj3tcC2Y9a2nkEarmUpJWGM1cF+N9ItyW1T3hQYAuxTxNJUCvId3XWiAwUSXZhMIvz4XsauabaN1dNC82dkXY2Hrody1yhicqnrmGxby30VgAIt1WBfNw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=zW0ojsvINbfwLt/zIvtLyLmOjndDnwLHSF8WzAe3+bA=;
b=UoQOKiB5k2eWAxuG/oYFwMcwHI1KFo2urMp6MYaq3LFcJ4wdcil6/qXln4SNIHsVfEewtJ+AFpv1m0gIN7nTQWWGUX5441WDMsKf/e+mflWLvbghmr7QDjE5QnCCr2l7geKIABcJ2hucyHVbDk05TS8rkBFEmxtjoFhuS/dUoEaRQ6uCZMnyqDS26Q69KG2gnp1QYl3cK48FEJxQzQSM6b3TWAca1Ca54kaRCoCgPo+lO6VvtarM6zBN6FcMEimtkHGeU1CIAQPTaYr8y1eZ9Lu0VubeKmXc12+wqBbLb/FNY7m/EQB2PcvRQldZZdZzVrt3Prb69QJZIDIE668vxA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=lnfa.store; dmarc=pass action=none header.from=lnfa.store;
dkim=pass header.d=lnfa.store; arc=none
Authentication-Results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=lnfa.store;
Content-Type: text/html
To:
Subject: Essayez Essential Keto Gummies aujourd’hui – Garantie de remboursement de 60 jours !
From: "Équipe essentielle de Keto Gummies"
Date: Wed, 20 Nov 2024 18:20:38 +0000
X-ClientProxiedBy: AM0PR03CA0011.eurprd03.prod.outlook.com
(2603:10a6:208:14::24) To AS8PR06MB8411.eurprd06.prod.outlook.com
(2603:10a6:20b:44a::18)
Message-ID:
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AS8PR06MB8411:EE_|AM8PR06MB7779:EE_
X-MS-Office365-Filtering-Correlation-Id: 61f2e617-b1a6-42d4-589f-08dd099008e4
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|69100299015|1800799024|41320700013|376014|1032899013|8096899003|13112299009|4076899003|2066899003|37730700002;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?zmCZIl7zaAMcYo5xr+sy2ldWCroDx8O41vw+sWvJNmfBnE3XoiPTMcUpCx/6?=
=?us-ascii?Q?PVmTXyrbFMLWPwyvHDcy98N1XUBmKzJ5c9wR9ELa0e8OdEgmCLR4FY/ACCPV?=
=?us-ascii?Q?c4KAM2QXndKsBqvX2G82VHa7KxXIfEEDoVNJHxTohPxJGDJRkNXnN2EO5tpF?=
=?us-ascii?Q?gxmancc/67VePnmKeiiSRV8Fu+jIOtem6GbMxDaLUgoCuaftd8LZbH+3PLQ5?=
=?us-ascii?Q?nSWUamLqM893AZRSDlk4487jQudpjt36LGOHfSr4Ra4Nh6F6csonqxdbCM8M?=
=?us-ascii?Q?TyqjZqi/Y5ZpB95NUwQPvOgalKoqgtqLEzI0DxcS8g05ITSbAN7QQJBxdxkr?=
=?us-ascii?Q?k5lwxSDf3qa82Y+7bheKk5pXQ4lEAq5SGMvN/o/YBa+sy3TCORhibN4bCAW8?=
=?us-ascii?Q?1JrBKNmTQ5uzhw2EcKrW1xbx88jjJPD8AvTYJtlgbakqmvb43mmF75oZvyf+?=
=?us-ascii?Q?djWyWz+gY1NOUFDGjr86J61nYiKZ0r5st2gzp65pL0Avs1iYiC59V6Ph5xja?=
=?us-ascii?Q?VR77VZtAt2mPpTPygyzflNRZUy5yn2+3b/oyGSJSPPTe50cfACenPWyIcwhk?=
=?us-ascii?Q?oMQzatxGhTqfrBQYGCmTA8EcjbAzcIsHcK/+uiO+UHZnJVuBfQ1NN3/XMRT+?=
=?us-ascii?Q?yCRVPTS4Mm+rfS2g5BmMj+7nmW+tqHc82tkCOf/VEENbJoDF8qAt7yDWYzDq?=
=?us-ascii?Q?t1g3Fe85fx0dJFf+WERHM2GJuxjTOvjH6CXJKgr12HDv1aRoTcO5LQjZMR+e?=
=?us-ascii?Q?p2R5gkhTRP3bKttZSUSxFfuxyr0QxWtRTN9SP4RF7N6iI/5CQS/0HZH7+5e4?=
=?us-ascii?Q?zCvOAbZNxiPj9//IUy18jVaroBm7tbzwjNmSV2DcCAorg6hLe0RJ4kxlX2wB?=
=?us-ascii?Q?vrj4AqwFAo2nWsWeyDaPUs8f9U3mWRHDMWTBGqT+LYv75DWj0eJjoh7nYKrh?=
=?us-ascii?Q?ab0PtD4qOFLVFi/eoGHYp+JlUhy28NmgtRs1/i8EBZ0Wi2BRqcXtWoKrF04Y?=
=?us-ascii?Q?1rnZS2kXMr4V+Bwsbaj9NoHtylkW5QiIKSFKOSBTFhfQeMYhOPO1+5/nRpYh?=
=?us-ascii?Q?IwJ4UDHhClVj2gsuDIQH+8pG8H+kHg=3D=3D?=
X-Forefront-Antispam-Report:
CIP:255.255.255.255;CTRY:;LANG:fr;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS8PR06MB8411.eurprd06.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(69100299015)(1800799024)(41320700013)(376014)(1032899013)(8096899003)(13112299009)(4076899003)(2066899003)(37730700002);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?us-ascii?Q?vHCNzRLuUgy/I28P19bY0bCaeZaA0kimNRGuKVHyrhLyaQqEi/Vp3r+WDZlM?=
=?us-ascii?Q?esoxgS8s/CqKPCWVIWxKZM1QfUieerYQ8gA7iXyiqyIf12UFyemcjO4EnjPD?=
=?us-ascii?Q?8hi12jVW/Lz656GgkZ8qsXRYg06oNXh5wzMBjQ7TO7+xsnwguzgu7xw9zaVR?=
=?us-ascii?Q?4z4vWzLddK6aUpWYmjfvjRki1h7uz+1kplhqSEKjz9viQU5T5vDKC+jCGSQH?=
=?us-ascii?Q?ZmwFx8xqO3b9swkVmD4J7iMArdqUnr/XFrLHtUizUU6ctwOFp3KhI+8A1oFS?=
=?us-ascii?Q?/gJaMTnOiDIrL7MEh7ZYdTze/1NwLlXbieVRHRtHU6/sFviNlPLnlHcmGCY6?=
=?us-ascii?Q?mBfebsiSbusu5nwl+sIV+Mof6pk2CNdNDn4TrQ7r+XnkPSS1mBudU+KctXp9?=
=?us-ascii?Q?ZnCsVfWQNKoYruzVpbEYid4sT0ucHinQUq0b5N3MKb2PUqz4HBsBiSuGyVYH?=
=?us-ascii?Q?AXiMssPBp1b1lWF/ZIPHfD22IOxdKec3mCnUEhTeFjWxADKVsN1o1ngRvPIz?=
=?us-ascii?Q?1PvCkpfAXxc0tTf0zc7nYZEf096aPQi8Anv1kW3VaGRVOWHKbVvOthZ0wVLA?=
=?us-ascii?Q?RBV/ekKFLjfg+u2MIHBzPLb+gGs1HQ3w4YaDuxt79TOnqUFyyRx3STtlywNl?=
=?us-ascii?Q?kZiBromoe+9P7hOsVqe3xw/gs6bO7tHVtg4QCclw1KLkawWG12y9sstnZD+N?=
=?us-ascii?Q?YeYY7mCYb3kTDUXlNPUBz+iWmnUuW9kkmJez+Bg1tXns8a09I4nIdZTNL9rd?=
=?us-ascii?Q?tFPGac+Hxf95DnOLewGGWBELJnEQ+KEGnL8rfnZlXSLn4YMe7nAihW8s5sYd?=
=?us-ascii?Q?RTG4/3nBquZGlUjACPsGSHLkakKcc68xXR59jQ/Os+gDMN5pFvi1CKfObgn5?=
=?us-ascii?Q?OEoFyO4cV7L/MgDOHXbZSA8Q1iX8lvo/cJLiYtwqsCM02fXdQxpElYWEv86k?=
=?us-ascii?Q?DIQUI9Wi7W60l//G26SIyXcNLScelxtVrz87kRHxDqDE5cDTl4YtYwLei0JG?=
=?us-ascii?Q?r51gjLzgFRUTXWFXY5suynMDoDjL+lATbGLKwh5Ych/xNYSN3e/2yATUPykU?=
=?us-ascii?Q?j1zrW9ya0XS07JvA+qXQAQXDBO81ukv73GDjn3LYyQO8XqWAQEKkHKSsTA08?=
=?us-ascii?Q?FIlk+SG1N4vkBomYoMhYMebsvlmdFR1xRt5ecMz5BQ37cqPT7I8pjGqxUywm?=
=?us-ascii?Q?77unM9+DRaaJepgdEQBgdI2eVJxm8YHBRmm7aaYB29qx2CARyRHRU6uI8T6c?=
=?us-ascii?Q?5XyDdwHM1trbFklDE1nkMJNtuDsFwH7nS7QiSelfCR5ofPoMZb3msMimqDJG?=
=?us-ascii?Q?ToIavE4j1aMcsVRuQDtNKb+AU7X86OgDfNd5q8feb6TumdhNEDcB6rqmZnjO?=
=?us-ascii?Q?D4S9LfgFwNl8Dq4xrQ4WcQZoJYTlcnMvyqqDtxSPtr9wvn/6GCE+Mey8jsyQ?=
=?us-ascii?Q?MsIfCR7OZrj3Cc6D/lfc3lDlwOHkvHc/5+6PDCx9IqTuTSfpP68fCgt+8r50?=
=?us-ascii?Q?qYlYA+6KDnwVv6hYsP/Luz3nyg8DJE2J5Iklx4c5wIiqbh2+VDivnVJoCcUQ?=
=?us-ascii?Q?SBizGXYM0I0HKNbisbTpUHMwQ4mgh9+GfW4ML7x8kzg37Z9isnRCbn7Lcw01?=
=?us-ascii?Q?vH24MeSk1Qz0Cf05T1vVxFA=3D?=
X-OriginatorOrg: lnfa.store
X-MS-Exchange-CrossTenant-Network-Message-Id: 61f2e617-b1a6-42d4-589f-08dd099008e4
X-MS-Exchange-CrossTenant-AuthSource: AS8PR06MB8411.eurprd06.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Nov 2024 18:20:38.6367
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: e2406423-2f0d-4656-b20c-d8737fa55741
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 1KiCprVdJv0ix5RqxDRcGgG/Tin5xADPBSeKNB1UAuBZnmBTj02Os5LsNZhE0Cp66k/0N0/LStnpUqbAcvx6QrWBFrU/T+4HZnCVixivtmsv3OouAbvIzS96HhaFkb6s
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8PR06MB7779
X-Spam_score: 14.5
X-Spam_score_int: 145
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Clickable Image Email
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.107.103.115 listed in dnsbl.ahbl.org]
[40.107.103.115 listed in dnsbl.ahbl.org]
[40.107.103.115 listed in dnsbl.ahbl.org]
[40.107.103.115 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.107.103.115 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.107.103.115 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.107.103.115 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.107.103.115 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
[40.107.103.115 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: joshmuller.my]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.107.103.115 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_SIGNED Message has a ARC signature
0.0 ARC_VALID Message has a valid ARC signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.107.103.115 listed in list.dnswl.org]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
Subject: {SPAM?} Essayez Essential Keto Gummies aujourd’hui – Garantie de remboursement de 60 jours !