/home/arranoyd/mail/.spam/cur/1671294335.M868302P3471636.nl53.altushost.com,S=6456,W=6578:2,
Return-Path: <338-402-49579-75-excelsior=energyclinic.com@mail.citibanksurvey.life>
Delivered-To: arranoyd+spam@nl53.altushost.com
Received: from nl53.altushost.com
	by nl53.altushost.com with LMTP
	id IOUGM3/tnWMU+TQAmQ2V0w
	(envelope-from <338-402-49579-75-excelsior=energyclinic.com@mail.citibanksurvey.life>)
	for <arranoyd+spam@nl53.altushost.com>; Sat, 17 Dec 2022 17:25:35 +0100
Return-path: <338-402-49579-75-excelsior=energyclinic.com@mail.citibanksurvey.life>
Envelope-to: excelsior@energyclinic.com
Delivery-date: Sat, 17 Dec 2022 17:25:35 +0100
Received: from [185.225.74.82] (port=49382 helo=wayne.citibanksurvey.life)
	by nl53.altushost.com with esmtp (Exim 4.95)
	(envelope-from <338-402-49579-75-excelsior=energyclinic.com@mail.citibanksurvey.life>)
	id 1p6a0E-00EWvi-1Z
	for excelsior@energyclinic.com;
	Sat, 17 Dec 2022 17:25:35 +0100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=citibanksurvey.life;
 h=Mime-Version:Content-Type:Date:From:Reply-To:Subject:To:Message-ID; i=DeltaAirlinesShopperFeedback@citibanksurvey.life;
 bh=WZ58F9gnG6t3p8zwgrejI0h8OGE=;
 b=jsk7HllewrXcpUX8aS0bx3rCXhFrGmKBCFbDFnRyXRPOh1cCsicenFvmH4Hjoc7knCYdMINqBzqt
   ofDNxDcwFAXAMH2iKDA5D7yPrpAf5s1IOFFIq7MPU+Tz2EegxpIAGPofUTtxZCPVlwo5hFpPV2GD
   nRLNNylRJnAaVs/JF4U=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=citibanksurvey.life;
 b=IFN5IlabjecvoPl9alRxryNa47hDmE3mQlp4MC+np3UVD27yu1LfKmrx3KmqOUt3R3FbWhR00eiH
   +TrICVdzblWK+bbGI8rdxu2/R5EZmeMxQrXzKbIKBh+WQI+F3xGifdbyJAInZYjbKs2rgs7RXlma
   /J43cywYj5+pFzJC/Ys=;
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="bd022de12272a6a9428ea3d62fc5fc31"
Date: Sat, 17 Dec 2022 17:23:44 +0100
From: "Delta Airlines Shopper Feedback"<DeltaAirlinesShopperFeedback@citibanksurvey.life>
Reply-To: "Delta Airlines Shopper Gift Opportunity" <DeltaAirlinesShopperGiftOpportunity@citibanksurvey.life>
To: <excelsior@energyclinic.com>
Message-ID: <3abxy69efi0og2p2-zibghmmvhkle4vdg-c1ab@citibanksurvey.life>
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "nl53.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Leave your feedback and you could WIN! http://citibanksurvey.life/sbuG7g9h4FN0ZG63CGxcKLfudcHl2wAUriIay9Msj6gP
    http://citibanksurvey.life/-UXowoMGTre3JBPF0E1ECo48awHwPeAz21S-QZRcAeU 
 Content analysis details:   (13.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: citibanksurvey.life]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: citibanksurvey.life]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 T_PDS_OTHER_BAD_TLD    Untrustworthy TLDs
                             [URI: www.citibanksurvey.life (life)]
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  1.6 HTML_IMAGE_ONLY_12     BODY: HTML: images with 800-1200 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  0.3 HTML_SHORT_LINK_IMG_2  HTML is very short with a linked image
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  Leave your feedback and you could WIN!
X-From-Rewrite: unmodified, forwarded message

--bd022de12272a6a9428ea3d62fc5fc31
Content-Type: text/plain;
Content-Transfer-Encoding: 8bit

Leave your feedback and you could WIN!

http://citibanksurvey.life/sbuG7g9h4FN0ZG63CGxcKLfudcHl2wAUriIay9Msj6gP

http://citibanksurvey.life/-UXowoMGTre3JBPF0E1ECo48awHwPeAz21S-QZRcAeU

--bd022de12272a6a9428ea3d62fc5fc31
Content-Type: text/html;
Content-Transfer-Encoding: 8bit

<html>
<head>
	<title>Newsletter</title>
</head>
<body data-gr-ext-installed="" data-new-gr-c-s-check-loaded="14.1007.0"><a href="http://citibanksurvey.life/p1qMKy220PqbLvRJRW6QTdPEzkriB64ddvQObZ285UMd"><img src="http://citibanksurvey.life/7fa6b8178001d9d935.jpg" /><img height="1" src="http://www.citibanksurvey.life/jx6oNdVNlsqJgRa9XGlfMrofatk2DUnZkBdNoenM1CY9" width="1" /></a>
<div style="font-size:17px;font-family:Arial;width:600px;padding:10px;">
<div style="text-align:center;">If you&#39;r troubling viewing this, Please <a href="http://citibanksurvey.life/sbuG7g9h4FN0ZG63CGxcKLfudcHl2wAUriIay9Msj6gP" target="blank">Click Here</a><br />
&nbsp;</div>
<a href="http://citibanksurvey.life/sbuG7g9h4FN0ZG63CGxcKLfudcHl2wAUriIay9Msj6gP" target="blank"><img alt="Leave your feedback and you could WIN!" src="http://citibanksurvey.life/d26b48a7966c36302b.jpg" style="width:100%; max-width: 700px;" /></a><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
&nbsp;
<div class="footer">115 E 23rd St New York, NY, US 10010<br />
<a href="http://citibanksurvey.life/ZgrfNJ2HXh2PWhfcqStj0X5aK6xV4OookNygar_edN_9" target="blank">Unsubscribe here</a></div>
</div>
</body>
</html>

--bd022de12272a6a9428ea3d62fc5fc31--
Path: home/arranoyd/mail/.spam/cur