| Current File : /home/itiffy/mail/.spam/cur/1682511196.M206432P1242090.premium224.web-hosting.com,S=9760,W=9938:2, |
Return-Path: <bounces+14378637-d413-info=itiffy.com@gs.girnarfinserv.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id uKrcC1wVSWTq8xIA1L5CYA
(envelope-from <bounces+14378637-d413-info=itiffy.com@gs.girnarfinserv.com>)
for <itiffy+spam@premium224.web-hosting.com>; Wed, 26 Apr 2023 08:13:16 -0400
Return-path: <bounces+14378637-d413-info=itiffy.com@gs.girnarfinserv.com>
Envelope-to: info@itiffy.com
Delivery-date: Wed, 26 Apr 2023 08:13:16 -0400
Received: from o46.email.gpshp.in ([168.245.34.80]:40828)
by premium224.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.95)
(envelope-from <bounces+14378637-d413-info=itiffy.com@gs.girnarfinserv.com>)
id 1pre1H-005Ewr-M7
for info@itiffy.com;
Wed, 26 Apr 2023 08:13:16 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=girnarfinserv.com;
h=content-type:from:mime-version:subject:reply-to:to:cc:content-type:
from:subject:to;
s=s1; bh=6jlezUtPLV9OD3+Wy65IdKkKQrUYHFdCeQCXbrW7vEg=;
b=191bQ1KCg4DnxbYAK8qb49gx8aPlth7ml9uU8w9sI1Nmw10+zJKHpeboR9e0F4m2RYwW
m+2L2NRaO2Er0zXUzOxdyBAgnxKotniPLGQfUO9FOlqgivtjb38eYfvwyWm1EfzbFEhfon
Yfgt4K8X2JmOaVLlg4PkyrzaTDq6p2jSn71JaABJyWih5XP+oq1MjfcLg3Tz1kW4tHyKdM
DGLZRkumVVA1nA34yzd5QY4/6RylV8weGqATN7dHK5IGvcsYiEAg7sCP1TPtmDrFQTabsA
jxPu1SLD9+fSmisuYL+Injr3x5gjqXPAq9otgm8JSGpNSDrL0YWcuB4Y/TynCVig==
Received: by filterdrecv-77d45d7b48-qlb4k with SMTP id filterdrecv-77d45d7b48-qlb4k-1-6449152C-29
2023-04-26 12:12:28.596280386 +0000 UTC m=+5488679.428107176
Received: from MTQzNzg2Mzc (unknown)
by geopod-ismtpd-11 (SG) with HTTP
id eE29BBjjTyePx0CHLZ1V6w
Wed, 26 Apr 2023 12:12:28.234 +0000 (UTC)
Content-Type: multipart/alternative; boundary=e256e1d6cc15a45e4ebc17e4281e5bf40ded0d0b4b1116c0bad9407fcac3
Date: Wed, 26 Apr 2023 12:12:30 +0000 (UTC)
From: Girnar Finserv <no.reply1@girnarfinserv.com>
Mime-Version: 1.0
Message-ID: <eE29BBjjTyePx0CHLZ1V6w@geopod-ismtpd-11>
Reply-To: no.reply1@girnarfinserv.com
X-SG-EID:
=?us-ascii?Q?k9en2yPk9gkD9TDkMaEzPtd26ejcdf1kTlBHPbLyqjNEYBtkxiH2Zhm33NJph8?=
=?us-ascii?Q?pzydCk=2F3yyveRwmWJ4V0e0q+30mYwTwhwrb=2Fhjf?=
=?us-ascii?Q?hZL7zJxOdwjqKtTXmZMhZ1v9W1Pe+pkCDSSWrYQ?=
=?us-ascii?Q?6ck2BvzJywRh2FE6z4m4YLgv0hAAKTIRYBkbR5Z?=
=?us-ascii?Q?OfpH=2F8bEQUSG=2FqkURj5AmEyiE=2FHRapl00rEfBvh?=
=?us-ascii?Q?G26nKOZo3co0jeLFGyBg0E1GO++PrwoFidVTHj?=
X-SG-ID:
=?us-ascii?Q?N2C25iY2uzGMFz6rgvQsb8raWjw0ZPf1VmjsCkspi=2FIARr5ApfQLGQYXi0KvHQ?=
=?us-ascii?Q?0zvzYecsf2ksBiQJ8MloiZl03pbJmFDXKD0VUSo?=
=?us-ascii?Q?ZsPNwgPyLI3YfLyfyJLb2HrKuciwfXpdM91i6Vq?=
=?us-ascii?Q?dQuQyfwNgN+1Ebp8krusKFPm9oSmfW2NgMRP1=2FC?=
=?us-ascii?Q?yZJhu9kE5cKELSm0uZdK=2FZ7S+0Oupz7FlpJRbPL?=
=?us-ascii?Q?ex4Ifmw2yWYUuzpMrnnstCxQx21qfeX6h7e2joz?=
=?us-ascii?Q?XY=2FrkixyVInXZwRMqfAFjJlfesY=2Fm1fj+wlcEB2?=
=?us-ascii?Q?RKZ=2Fyc9PUdNwkqzQHoG+=2FljBa5bmKVG4VFgD7ns?=
=?us-ascii?Q?jRfwHZYwZBzSXiVmQkaAj6XzLz4NRuOULi7h57g?=
=?us-ascii?Q?UXaYewLuFP?=
To: info@itiffy.com
X-Entity-ID: lSllIhdncMFvTCHWgiwGzA==
X-Spam-Status: Yes, score=5.5
X-Spam-Score: 55
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: WE WORK FAST, SO YOU CAN RECOVER FASTER WITH NIVA BUPA To
unsubscribe, please click here. . . WE WORK FAST, SO YOU CAN RECOVER FASTER
WITH NIVA BUPA
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: webaroo.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: click2redirect.me]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?168.245.34.80>]
-0.0 SPF_PASS SPF: sender matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image
area
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously
huge http urls
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
X-Spam-Flag: YES
Subject: ***SPAM*** WE WORK FAST, SO YOU CAN RECOVER FASTER WITH NIVA BUPA
--e256e1d6cc15a45e4ebc17e4281e5bf40ded0d0b4b1116c0bad9407fcac3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0
WE WORK FAST, SO YOU CAN RECOVER FASTER WITH NIVA BUPA
To unsubscribe, please click here.
.
.
--e256e1d6cc15a45e4ebc17e4281e5bf40ded0d0b4b1116c0bad9407fcac3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=us-ascii
Mime-Version: 1.0
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META http-equiv=3DContent-Type content=3D"text/html"><TITLE>WE=
WORK FAST, SO YOU CAN RECOVER FASTER WITH NIVA BUPA</TITLE></HEAD>
<BODY><p style=3D"text-align:center"><img alt=3D"" src=3D"https://enterpris=
e.webaroo.com/emsImages/2000701246/image001.jpg" style=3D"display:block; he=
ight:615px; margin-left:auto; margin-right:auto; width:650px" align=3D"midd=
le" height=3D"615" width=3D"650"></p>
<P style=3D"background-color: white; color: #666666; font: normal normal x-=
small arial,helvetica,sans-serif; text-align: center">To unsubscribe, pleas=
e click <A HREF=3D"http://email.click2redirect.me/ls/click?upn=3Dy10vwtF9N6=
ZSkdTL8GBGiWFTSOpe9-2BbOg3iATBZT1XPz1G62TDM0-2BZ2pcyJH6TlHdNTemARdlEgT-2BwN=
ZvyQ-2BtOljTg8-2FZQEXHj33mNiVJFbwMDf-2FyBKC5nvpCl1LZpC5H5-2BgNX9so5BMXuDZSa=
fFdWwbrG8Kh30RyHaTxqEcPON-2FN-2FI63PTUNerSF5nvdtiNlPCtW9DWyu2-2BlfR0N0wCkRK=
FZJk58gKlVkImKfTUxQD1LmvnAvSjC1tbX9rEYm2VCghEMJ0Kapth0rcWBu7WZw26WDCp7-2FdM=
eAgORaUtBJ8xB6-2B0c41UoEcTVaq59ygqudaXNYC2qrtouwzCViApvYlDhrYoJ40j109PHuDnf=
81q-2BALZ1f69yLY6U-2FfDKAQwEz4f_UjA9ahbnrI6S9i-2F4Xk-2BlU47RIj8VhWOBw86fA5u=
Ec-2Bkf-2FnfPJhwDDyuhwGfi5EUUuxXqpaVWy-2BngA4oTTUGHy4PZ8CGXUocsryei4NjCtADF=
WzUaUZ0-2FruYCzrMz7q0EaHTh815plgni8NJc9AfLYgwRrnMWZ2KBq3oWBgJadtTjNsLYk8Aby=
zpHC-2BvpojI2WQ7Qbv4O3mzgGMdtBGAUOwE1XCw4oEInkiocVJY5tZJ6PJ6vN3s021CQ4WZdtQ=
22BO2CI0G9vZgaGGWDBJwFyJZtDdm8LYBaZ0Irtl-2FshbXf2npF2dcjGUXBK-2FbDL5ZHtavp4=
H4ZzHJG-2Fi8LF-2FENa7dCLgKrwrTMpnp-2FckX4D-2F1eqCgVCGcDzZ-2BJSXf1DfkSIn7jqG=
yH5rYU07zW-2B-2F6-2FU-2FXy3eTt7IarEDLbCRFSRt2uCzIYMhEpVGyveNp7iO2FR0RKdLDgq=
Iuvo33O7gGIzd3cbHMdzAvvNS-2BjzLgYQTISuB-2B2ivdtITw24Ojj6nSo-2BDoCqiZPyMI4q7=
vzvBHNYpon4wfXBRGdz805Znd1zac-3D">here</A>.</P>
<P style=3D"background-color: white; color: #666666; font: normal normal x-=
small arial,helvetica,sans-serif; text-align: center">.</P>
<P style=3D"background-color: white; color: #666666; font: normal normal x-=
small arial,helvetica,sans-serif; text-align: center">.</P>
<IMG height=3D2 width=3D2 src=3D"https://entlinksapp.webaroo.com/EMSLinkApp=
/API/rest?action=3DOpened&cid=3D4890496992117501957&sid=3D32556891906466080=
99&srno=3D145943&encParams=3De80ce54f6b93b05cce486d136fd89c4899fcd9a94d8c1c=
0e32716e67628018330450a9eb90b9b9b266dc9b2feb295a7419f40e1aed042c4481d87f18d=
47b84ed93271f371247cf" alt=3D"Image not available">
<img src=3D"http://email.click2redirect.me/wf/open?upn=3DwMh4bI5373KmuDXhWz=
-2FnpzUkMq4l-2BimOAean-2Bd6VFKpwC0SvBLXRgo14U7YQ7J9TNPp64ExEM-2FM7gFhOIvcou=
cQm4sV8F5ER8fZfHRfgM3BqA7IRGAVynS2kCjW4ssQLqwrT-2B7b5Py59ZT23UczYPb-2FTE-2F=
jQVn-2FjPU0FRiZYDn5Dv6gZJhopheSZuQl7TKlHgGlCahkcm8XnYQkFBwqN5EHdgbSOfYcMWzP=
gtggTojek9Y3LKRU9e52-2BUnwaiy0pD4ynkXxK8F1qY5c3Vy0LlCW8Zao1dAVsrOHxfXmVJrE6=
LSyK-2FxIAo6XoBSSznVsNp9QcT0pFWhzYAHo-2BBzK7X1eTOnSAhmicJSmmNqFZHQOQrTQPnkv=
lnYnAVypqFrGw3KSuiLi83lC3f3QJ9IgIXR9xiKfJHXPwYiJJOaAzlQF-2FL2Zb3ZG1T4Dg0nsV=
qEdFCtUX-2BrJuuE-2Bx3uN7HaTRP-2FuYcAB2UgzwsUm4ChG0USde8NZ2oSDHggNajdSuxmcP6=
S32-2BPOhLYd1W-2B7Nxf-2BkBg7cbcdFEyqN9AhvP5VxhV0-3D" alt=3D"" width=3D"1" h=
eight=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !importan=
t;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !import=
ant;margin-right:0 !important;margin-left:0 !important;padding-top:0 !impor=
tant;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 =
!important;"/></BODY>
</HTML>
--e256e1d6cc15a45e4ebc17e4281e5bf40ded0d0b4b1116c0bad9407fcac3--