link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Dec 2022 15:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1p4VHN-0005WV-B5
for dave@doctor.nl2k.ab.ca;
Sun, 11 Dec 2022 15:58:41 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Dec 2022 15:58:41 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f44.google.com ([209.85.160.44]:36532)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1p4VBd-0003Uf-Ut
for root@doctor.nl2k.ab.ca;
Sun, 11 Dec 2022 15:52:50 -0700
Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-14449b7814bso6492330fac.3
for; Sun, 11 Dec 2022 14:50:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;
b=pYw4dg34ir06/NCWksoeq+cFqM9mN6JuGluJiuzRO7Ft8yjr0YzEboC6NZeUhJlgEZ
6AtLYaLRqMLipwhmzsJad9irmvXuHudyZfmUZqCq9StWH6dCieEFDgkNb2OcDfwwLeVX
YXBjCX3tSfop89FRXhBsaOJwqSXxewNi6OAaynJNdaVBLvQjEF6tOqiNR2oqUCkfUPIa
V4fYqdi9iCDElPDRXeC630qaXgy1rQqXaY7JZzY8QBBeN4KkdPxNjpsNpfSYIZWJSKYf
LWclKpKYUHl4OzNPX8OPx3SijVBXvBT1/dYhaS4RwOokXSlbxA5OW72jkGaGn13BKgeE
8CPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;
b=77d9V+RHcod5RfSZZ2KZbngVs0q/bIBzdpLigYGoOl1EofKoKyWq24QoKJpcne/axT
oHRvnzefd1IMdIs5Ij74SWYzB4nGhZmvmOHj2JVfMDWqaTbfFhU3pnHw51eqgzbiTE7f
4YWs9GM0uSwijiYws9kRnNPbvXtua5dkc44u6neRqQA7c2iW4iaTf92cY6Y+8ZxSuoLG
WMV8f+sBBLx01a5dPrTn8FLprsHJul1umkK/xxHt76Z0KWzUgsgE1Ss7vpNaSVjk6xUP
pXgiU7z2m+0BuFnLhmUSq37GRPeL+5wM/sQCZDZjlnUNzWO6Bx0kihAWVr78y1+5kyVG
+roA==
X-Gm-Message-State: ANoB5pkhLNC2LdYP6DcEUVxniJ0aRuvTnSJxQiIi9y4MtUyCOx4+8+JS
5l9xxKmkKkKIzDAwXGQ1hGa1nsmLjXs0rtodMRQ21UONwGb6FnAq
X-Google-Smtp-Source: AA0mqf7ZOZ1KGAQ1iEirvsHWanZudt04uozFu9HBlI8S/ciOIpqMINQ/h/oStcOuHJ4+dmoBELQqWO5mqc5N8c9a8B0=
X-Received: by 2002:a05:6871:4684:b0:141:c076:de4c with SMTP id
ni4-20020a056871468400b00141c076de4cmr57712904oab.248.1670799011861; Sun, 11
Dec 2022 14:50:11 -0800 (PST)
MIME-Version: 1.0
From: "evs_idea@yahoo.com"
Date: Sun, 11 Dec 2022 22:52:38 +0000
Message-ID:
Subject:
To: romtrade mtl, root ,
sabby cattery, sfang ,
sissi chocolatier, slaszlo1 ,
ssad oci, stella melo
Content-Type: multipart/alternative; boundary="00000000000097d88805ef9535d0"
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://g04zt.app.link/2KqdDmR3Fvb https://g04zt.app.link/2KqdDmR3Fvb
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.44 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.160.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[andiboy566[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[andiboy566[at]gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 HTML_MESSAGE BODY: HTML included in message
2.5 FROM_2_EMAILS_SHORT Short body and From looks like 2 different
emails
0.0 TVD_SPACE_RATIO No description available.
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
Subject: {SPAM?}
--00000000000097d88805ef9535d0
Content-Type: text/plain; charset="UTF-8"
https://g04zt.app.link/2KqdDmR3Fvb
--00000000000097d88805ef9535d0
Content-Type: text/html; charset="UTF-8"
https://g04zt.app.link/2KqdDmR3Fvb
--00000000000097d88805ef9535d0--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Dec 2022 15:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1p4VHN-0005WV-B5
for dave@doctor.nl2k.ab.ca;
Sun, 11 Dec 2022 15:58:41 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Dec 2022 15:58:41 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f44.google.com ([209.85.160.44]:36532)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1p4VBd-0003Uf-Ut
for root@doctor.nl2k.ab.ca;
Sun, 11 Dec 2022 15:52:50 -0700
Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-14449b7814bso6492330fac.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;
b=pYw4dg34ir06/NCWksoeq+cFqM9mN6JuGluJiuzRO7Ft8yjr0YzEboC6NZeUhJlgEZ
6AtLYaLRqMLipwhmzsJad9irmvXuHudyZfmUZqCq9StWH6dCieEFDgkNb2OcDfwwLeVX
YXBjCX3tSfop89FRXhBsaOJwqSXxewNi6OAaynJNdaVBLvQjEF6tOqiNR2oqUCkfUPIa
V4fYqdi9iCDElPDRXeC630qaXgy1rQqXaY7JZzY8QBBeN4KkdPxNjpsNpfSYIZWJSKYf
LWclKpKYUHl4OzNPX8OPx3SijVBXvBT1/dYhaS4RwOokXSlbxA5OW72jkGaGn13BKgeE
8CPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=6mEXnFK1ObAA2hB7ioChxnh00UxtfahEVJwChF5lmo8=;
b=77d9V+RHcod5RfSZZ2KZbngVs0q/bIBzdpLigYGoOl1EofKoKyWq24QoKJpcne/axT
oHRvnzefd1IMdIs5Ij74SWYzB4nGhZmvmOHj2JVfMDWqaTbfFhU3pnHw51eqgzbiTE7f
4YWs9GM0uSwijiYws9kRnNPbvXtua5dkc44u6neRqQA7c2iW4iaTf92cY6Y+8ZxSuoLG
WMV8f+sBBLx01a5dPrTn8FLprsHJul1umkK/xxHt76Z0KWzUgsgE1Ss7vpNaSVjk6xUP
pXgiU7z2m+0BuFnLhmUSq37GRPeL+5wM/sQCZDZjlnUNzWO6Bx0kihAWVr78y1+5kyVG
+roA==
X-Gm-Message-State: ANoB5pkhLNC2LdYP6DcEUVxniJ0aRuvTnSJxQiIi9y4MtUyCOx4+8+JS
5l9xxKmkKkKIzDAwXGQ1hGa1nsmLjXs0rtodMRQ21UONwGb6FnAq
X-Google-Smtp-Source: AA0mqf7ZOZ1KGAQ1iEirvsHWanZudt04uozFu9HBlI8S/ciOIpqMINQ/h/oStcOuHJ4+dmoBELQqWO5mqc5N8c9a8B0=
X-Received: by 2002:a05:6871:4684:b0:141:c076:de4c with SMTP id
ni4-20020a056871468400b00141c076de4cmr57712904oab.248.1670799011861; Sun, 11
Dec 2022 14:50:11 -0800 (PST)
MIME-Version: 1.0
From: "evs_idea@yahoo.com"
Date: Sun, 11 Dec 2022 22:52:38 +0000
Message-ID:
Subject:
To: romtrade mtl
sabby cattery
sissi chocolatier
ssad oci
Content-Type: multipart/alternative; boundary="00000000000097d88805ef9535d0"
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://g04zt.app.link/2KqdDmR3Fvb https://g04zt.app.link/2KqdDmR3Fvb
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.44 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.160.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[andiboy566[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[andiboy566[at]gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 HTML_MESSAGE BODY: HTML included in message
2.5 FROM_2_EMAILS_SHORT Short body and From looks like 2 different
emails
0.0 TVD_SPACE_RATIO No description available.
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
Subject: {SPAM?}
--00000000000097d88805ef9535d0
Content-Type: text/plain; charset="UTF-8"
https://g04zt.app.link/2KqdDmR3Fvb
--00000000000097d88805ef9535d0
Content-Type: text/html; charset="UTF-8"
https://g04zt.app.link/2KqdDmR3Fvb
--00000000000097d88805ef9535d0--