Gambling phish from OVH
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 18 Apr 2025 12:11:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1u5qAb-000000003zQ-0LGp
for dave@doctor.nl2k.ab.ca;
Fri, 18 Apr 2025 12:10:33 -0600
Resent-From: The Doctor
Resent-Date: Fri, 18 Apr 2025 12:10:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.edufrens.info ([139.99.158.3]:53097)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1u5pDD-00000000Gg0-2Dsr
for doctor@doctor.nl2k.ab.ca;
Fri, 18 Apr 2025 11:09:19 -0600
Received: from mail.edufrens.info (mail.edufrens.info [139.99.158.3])
by mail.edufrens.info (Postfix) with ESMTPSA id 139DC52FF1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mail.edufrens.info;
s=default; t=1744996034;
bh=tSfOZ/NVPVCgdLJ4CCObbnZi8jQsnQrdIEv3DhNb55E=; h=Subject:From:To;
b=QzJ6T3ZK8DVuOQckW3/yhHpkOMmavXFT1J8V015O1lmoFkn/jZRFM01cgMBxQIp5P
Mc8niw1xoe3VXqfWSo9EXQ3MLxMjUSfo8y1uHTQZFZjo4U6wovv1gL/tfGWj7Ws3IJ
EKekC3UDU60oEydG9PhPic7AE/UND86q1d1SxzRw3lhOpty/KhU+ERc+CSJN5PUgGJ
vyAtmrRx2vS1cfvqGVYBFJ4EbDI7uNnNw5JxHKPLHNvxnxpqhnBL/mSqrSBqE7fqrR
OLcqiE4NCLFkuBjF4snVnquwrolddFfYphXUMB1Nq8kU8TuOtUME9aghdnvkZdS0Kr
uDZI3WYBdb6FQ==
Authentication-Results: mail.edufrens.info;
spf=pass (sender IP is 139.99.158.3) smtp.mailfrom=fsafsagfasfsfs@mail.edufrens.info smtp.helo=mail.edufrens.info
Received-SPF: pass (mail.edufrens.info: connection is authenticated)
Message-ID:
Date: Fri, 18 Apr 2025 17:07:14 +0000
Subject: Something BIG just hit your =?utf-8?Q?inbox=E2=80=A6?=
From: Trust dice
Reply-To: Trust dice
To: "doctor@doctor.nl2k.ab.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1744996034_552f4d1a60f7290c885690a8e8ecdb14_=_"
X-Report-Abuse: https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/report-abuse/bf201sc6ltaf8/bt286cc5lm994
x-job: hq158h5vyn887
X-EBS: https://mail.edufrens.info/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
List-Id: bf201sc6ltaf8
Feedback-ID: hq158h5vyn887:bt286cc5lm994:bf201sc6ltaf8:cv022q3xqt895
X-Spam_score: 12.9
X-Spam_score_int: 129
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Register Now View online here [https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
Content analysis details: (12.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[139.99.158.3 listed in dnsbl.ahbl.org]
[139.99.158.3 listed in dnsbl.ahbl.org]
[139.99.158.3 listed in dnsbl.ahbl.org]
[139.99.158.3 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[139.99.158.3 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[139.99.158.3 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[139.99.158.3 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[139.99.158.3 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
[139.99.158.3 listed in will-spam-for-food.eu.org]
4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URI: edufrens.info]
2.3 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist
[URI: mail.edufrens.info]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: edufrens.info]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[139.99.158.3 listed in sa-trusted.bondedsender.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[139.99.158.3 listed in sa-accredit.habeas.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[139.99.158.3 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[139.99.158.3 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[139.99.158.3 listed in bl.score.senderscore.com]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
Subject: {SPAM?} Something BIG just hit your =?utf-8?Q?inbox=E2=80=A6?=
--_=_swift_1744996034_552f4d1a60f7290c885690a8e8ecdb14_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Register Now=20
View online here
[https://mail.edufrens.info/index.php/ca=
mpaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4=
b033bb68855]
=09=09
[https://mail.edufrens.info/index.php/campai=
gns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033=
bb68855]
=09=09
[https://mail.edufrens.info/index.php/campaigns/hq1=
58h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855=
]
=09=09Hey, have you heard?
=09=09We're giving the first 100 n=
ew players
access to our MOST GENEROUS
welcome package ever:
=09=
=09
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-u=
rl/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=09=09
[=
https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt28=
6cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=09=09
[https:/=
/mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm9=
94/230729c9f75bba867b68470f42be4b033bb68855]
=09=09
[https://mail.e=
dufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/2307=
29c9f75bba867b68470f42be4b033bb68855]
=09=09WHY 1.5 MILLION PLAYERS=
CHOSE TRUSTDICE
=09=09
[https://mail.edufrens.info/index.php/cam=
paigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b=
033bb68855]
=09=09
[https://mail.edufrens.info/index.php/campaigns/=
hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68=
855]
=09=09And remember, just TrustDice!
TrustDice Team
=09=
=09
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-u=
rl/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=09=09Term=
s & Conditions
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn=
887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=
=09=09
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/tra=
ck-url/bt286cc5lm994/ae31aab47680b30fc2fa9436a5eb633ab43d7734]
=09=09
=
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt2=
86cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=09=09
[https://m=
ail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994=
/230729c9f75bba867b68470f42be4b033bb68855]
=09=09
[https://mail.edufre=
ns.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f=
75bba867b68470f42be4b033bb68855]
=09=09
[https://mail.edufrens.info/in=
dex.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b6=
8470f42be4b033bb68855]
=09=09
[https://mail.edufrens.info/index.php=
/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42=
be4b033bb68855]
=09=09
[https://mail.edufrens.info/index.php/campaigns=
/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb6=
8855]
=09=09
[https://mail.edufrens.info/index.php/campaigns/hq158h5vy=
n887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=
=09=09
[https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/trac=
k-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855]
=09=09=
=C2=A9 Established in 2018. TrustDice is one of the premier,
leading onli=
ne Bitcoin casinos. All rights reserved.
Unsubscribe Here
[https://m=
ail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994=
/85d1c73fef3010c90af82c6a1bada2bf0dcf0c67]
--_=_swift_1744996034_552f4d1a60f7290c885690a8e8ecdb14_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=3D"IE=3Dedge">
tial-scale=3D1.0">
=09
=09
=09
ect" />
=09
0;400;500;600;700;800;900&display=3Dswap" rel=3D"stylesheet" />
l;">Register Now
dex.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b6=
8470f42be4b033bb68855">View online here
style=3D"border-spacing:0px;margin:auto;font-family: Arial, Helvetica, san=
s-serif" width=3D"600">
=09
=09=09
=09=09=09
18px;">
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
igns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b03=
3bb68855">
dice/logo.png" />
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
igns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b03=
3bb68855">
dice/banner.jpg" />
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
50px;">
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
700;font-size: 36px;text-align: center;">Hey, have you heard?
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
400;font-size: 24px;text-align: center;padding: 15px 0 30px;">We're giving=
the first 100 new players
=09=09=09=09=09=09access to our
.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b6847=
0f42be4b033bb68855" style=3D"text-decoration: none;font-weight: 700;color: =
#FFCF04;">MOST GENEROUS
=09=09=09=09=09=09welcome package ever:
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
o/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba8=
67b68470f42be4b033bb68855">
-templated/trust-dice/bonus-card.png" />
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
igns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470f42be4b03=
3bb68855">
dice/secure-bnx.jpg" />
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
o/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba8=
67b68470f42be4b033bb68855">
-templated/trust-dice/amount-section.png" />
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
o/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba8=
67b68470f42be4b033bb68855">
-templated/trust-dice/join-btn.png" />
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
60px;">
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
700;text-align: center;line-height: 46px;">WHY 1.5 MILLION PLAYERS
=09=09=09=09=09=09CHOSE TRUSTDICE
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
=3D"https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/=
bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855">
=3D"https://lynkme360.com/email-templated/trust-dice/trustdice.png" /> =
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
o/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba8=
67b68470f42be4b033bb68855">
-templated/trust-dice/secure-bonus.png" />
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
400;text-align: center;line-height: 35px;">And remember, just TrustDice!
/>
=09=09=09=09=09=09TrustDice Team
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
/email-templated/trust-dice/gradient-line.png" />
=09=09
=09=09
=09=09=09
20px;">
=09=09=09
order-spacing:0px;">
=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
il.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/=
230729c9f75bba867b68470f42be4b033bb68855">
me360.com/email-templated/trust-dice/footer.png" />
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
ref=3D"https://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-u=
rl/bt286cc5lm994/230729c9f75bba867b68470f42be4b033bb68855" style=3D"color: =
#FFFFFF;font-size: 18px;font-weight: 700;text-decoration: none;">Terms & Co=
nditions
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09=09
tyle=3D"border-spacing:0px;">
=09=09=09=09=09=09=09
=09=09=09=09=09=09=09=09
=09=09=09=09=09=09=09=09=09
php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/ae31aab47680b30fc2fa943=
6a5eb633ab43d7734">
ed/trust-dice/social-1.png" />
=09=09=09=09=09=09=09=09=09
//mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm=
994/230729c9f75bba867b68470f42be4b033bb68855">
lynkme360.com/email-templated/trust-dice/social-2.png" />
=09=09=09=09=09=09=09=09=09
php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470=
f42be4b033bb68855">
ed/trust-dice/social-3.png" />
=09=09=09=09=09=09=09=09=09
//mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm=
994/230729c9f75bba867b68470f42be4b033bb68855">
lynkme360.com/email-templated/trust-dice/social-4.png" />
=09=09=09=09=09=09=09=09=09
php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470=
f42be4b033bb68855">
ed/trust-dice/social-5.png" />
=09=09=09=09=09=09=09=09
=09=09=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09=09
tyle=3D"border-spacing:0px;">
=09=09=09=09=09=09=09
=09=09=09=09=09=09=09=09
=09=09=09=09=09=09=09=09=09
php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470=
f42be4b033bb68855">
ed/trust-dice/social-6.png" />
=09=09=09=09=09=09=09=09=09
//mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm=
994/230729c9f75bba867b68470f42be4b033bb68855">
lynkme360.com/email-templated/trust-dice/social-7.png" />
=09=09=09=09=09=09=09=09=09
php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/230729c9f75bba867b68470=
f42be4b033bb68855">
ed/trust-dice/social-8.png" />
=09=09=09=09=09=09=09=09=09
ps://mail.edufrens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc=
5lm994/230729c9f75bba867b68470f42be4b033bb68855">
://lynkme360.com/email-templated/trust-dice/social-9.png" />
=09=09=09=09=09=09=09=09
=09=09=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09=09
=09=09=09=09=09
=09=09=09=09
=09=09=09
=09=09=09
=09=09
=09=09
=09=09=09
x;color: #FFFFFF;font-weight: 400;line-height: 28px;border-top: 1px solid #=
FFCF04;padding: 20px 0;">=C2=A9 Established in 2018. TrustDice is one of th=
e premier,
=09=09=09leading online Bitcoin casinos. All rights reserved.
=09=09
=09
Unsubscribe
frens.info/index.php/campaigns/hq158h5vyn887/track-url/bt286cc5lm994/85d1c7=
3fef3010c90af82c6a1bada2bf0dcf0c67">Here
ampaigns/hq158h5vyn887/track-opening/bt286cc5lm994" alt=3D"" />
--_=_swift_1744996034_552f4d1a60f7290c885690a8e8ecdb14_=_--