Link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Jan 2023 13:41:17 -0700

Received: from mail-ed1-f46.google.com ([209.85.208.46]:43646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pEyxD-0004Gt-0Q

for dave@doctor.nl2k.ab.ca;

Mon, 09 Jan 2023 13:41:14 -0700

Received: by mail-ed1-f46.google.com with SMTP id x10so11503412edd.10

for ; Mon, 09 Jan 2023 12:38:41 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;

b=SnaGJJquNCcMmu1Itak+pNjdfXE6vqKDVCDy3z0yQMo5jGvlFsjXaKIu2MT1i4YAYS

+84IVkCnnVPuI/9yvifQ4NLlbt2lMEt1soLCvLnWpIMPVHLJxKCBX6TsHooLqu1xvQP7

CeCQVxQEgP+ceRSvw13h41F2w7LEQy+U13LVBWQ16+kb4vCMz/5MM0Dq2+9qNkjB7+8P

cic1FwPdstFsJYaPo/IWm1SigqCPtlhfftpGpNijQDyVuF3Vam7kKoiW3ATittk1Y0c+

HIGRKU6jD1yhJYmuEVS4LUCYsutACCl+ETVYhuWBqDRAWXEu0wID/qWDY69alByFWnMl

OSrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;

b=ZiL9h78tpQUQoXoSzcrLJdY3kywwkka4b+BsWIqe+lmP7am9wueAFX6kLh+nJ7sAdH

68HTz3OvGd4orga/aGVRgHtqDt85MUUO1HA/Y/gS1umqM5moeq6RlvghgNGuqPczIFdF

ecN2X9jvUwboNoiwK2RRTL8cSCDyKL9fBSxApazqKqvorc0jQdAJ5WMc5aKxSxayqo3C

Dxd3VvBo5J5RcIOVyMkvuk9dm8WZ7+1PpjPoHDcPEIYjoFETDORuLDi4dYIlMx+zry2I

x13ub88oHjv1eqp6/is3bB+3Vx5Xyd++Sm5I/Uowwo6oY75F5ynN4m5te3whQ8WjHB4f

Gqmg==

X-Gm-Message-State: AFqh2krou3shP7Ovz8HScGYs1WmNEjXv7fuUzb3NmPemEs4Gx6hgymLT

nkr2KvJRztua0A9JAU7sTQazwDhngUiQYqGr034=

X-Google-Smtp-Source: AMrXdXthrqa9WfWtQSKdeBqNqp2aQNOqP3+r9k2JzZU9xScjYcIPcW+BClr1ialzU+xJChQlu/EOAgiIwTlrenk+vDI=

X-Received: by 2002:a05:6402:3894:b0:485:2297:69b5 with SMTP id

fd20-20020a056402389400b00485229769b5mr4110001edb.102.1673296714691; Mon, 09

Jan 2023 12:38:34 -0800 (PST)

MIME-Version: 1.0

From: "Dr.Charles Edward"

Date: Mon, 9 Jan 2023 20:41:21 +0000

Message-ID:

Subject:

To: darcel260 , daria b55 ,

darnaque leschats2011 , dave ,

davidramos333 , david williams52000 ,

dayreynaud

Content-Type: multipart/alternative; boundary="0000000000004877f205f1dac05e"

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bbyjw.app.link/yNDvhExxjwb https://bbyjw.app.link/yNDvhExxjwb





Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.46 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[amine.drablia(at)gmail.com]

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.46 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 TVD_SPACE_RATIO No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?}



--0000000000004877f205f1dac05e

Content-Type: text/plain; charset="UTF-8"



https://bbyjw.app.link/yNDvhExxjwb



--0000000000004877f205f1dac05e

Content-Type: text/html; charset="UTF-8"



https://bbyjw.app.link/yNDvhExxjwb



--0000000000004877f205f1dac05e--

Desperation spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Jan 2023 23:48:14 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pElub-0004ab-1u

for dave@doctor.nl2k.ab.ca;

Sun, 08 Jan 2023 23:45:37 -0700

Resent-From: The Doctor

Resent-Date: Sun, 8 Jan 2023 23:45:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f175.google.com ([209.85.167.175]:45895)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pElcs-000Jgt-0g

for doctor@doctor.nl2k.ab.ca;

Sun, 08 Jan 2023 23:27:27 -0700

Received: by mail-oi1-f175.google.com with SMTP id d127so6313711oif.12

for ; Sun, 08 Jan 2023 22:24:49 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rmuti.ac.th; s=dkim;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=BgnDQIPwo6RF1yxUJMXTyx1hl1fWIDpmMd/1SW5ycAQ=;

b=UxR8i/qHE+Rr/s4CPkcSKUNQwEgHyfPiNFwGlqvSB6EnNjq9f5ADjJxf8x8uh5l+oL

VXR+7tShFkWmujz57JOze+5Ri+7H+4ySNAa6P6R1lVGGdKMHoZDWO4YWgBNv3t4cFTYn

54NdcWz+HGftfK7c+3PTa0fd5OBTA+OTyj5QU=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BgnDQIPwo6RF1yxUJMXTyx1hl1fWIDpmMd/1SW5ycAQ=;

b=kciZ2RfyEcYxaW476CE9h9kxhao8ZYqltPViB2e/7imPWfBcmPspQ4SAugHw1TbfSD

nDvdAZw6F32lpdWHAbNGVXiPpJu46SIgExJcpjwGTr/NrVFgjK8YmEaCOlCXs7CaS0d/

DMwHaJGlExYO8oDwJV7s7oQ08BuaX3+x6rQwFLx88g0J94i4hlt2Z9LJnw8ECf5w2hWR

zOlj39lqYfGm4CT2CBBSv45eY3Awylbiq5qGBb/VHhophsfOZRQm2R8Fr4jCZ5FwPg+y

Nkycasl4JpFctxaqAiNM4dcOFFRS96tRfX0hpJt99cAQleRDOFNaVDeM+35b9jJnQtQa

qJhQ==

X-Gm-Message-State: AFqh2kq05ZZdE1R2MwPOHe4xGpUbYYdwTfcV7auaAMS1df+A5atlR/df

iIKVmK3PxFSrtF9OS/wA8kRjYU2V/D1Vfae3lf+Ing==

X-Google-Smtp-Source: AMrXdXtrwZsdqvS+xZim1Y504HAFEXhLUaMJEun/SpmdnIgU8kVpali+Mo/7zqhg5mnDJuW7Btv9x5QcHFdVNoGTLKA=

X-Received: by 2002:aca:d7c3:0:b0:35e:e2c3:d3e2 with SMTP id

o186-20020acad7c3000000b0035ee2c3d3e2mr4450655oig.28.1673245482891; Sun, 08

Jan 2023 22:24:42 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:6850:3f14:b0:39b:6cf1:648f with HTTP; Sun, 8 Jan 2023

22:24:42 -0800 (PST)

Reply-To: suniewendy5@gmail.com

From: Rerkanun Wirakharat

Date: Mon, 9 Jan 2023 06:24:42 +0000

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I sent a letter to your mail but got no reply from you.Did

you receive my previous mail



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: rmuti.ac.th]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.175 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.175 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[suniewendy5(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello



I sent a letter to your mail but got no reply from you.Did you receive

my previous mail

Link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Jan 2023 19:17:28 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pEhc4-000GZW-1c

for dave@doctor.nl2k.ab.ca;

Sun, 08 Jan 2023 19:10:12 -0700

Resent-From: The Doctor

Resent-Date: Sun, 8 Jan 2023 19:10:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f67.google.com ([209.85.166.67]:37769)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pEdeh-000KFN-2C

for doctor@nl2k.ab.ca;

Sun, 08 Jan 2023 14:56:43 -0700

Received: by mail-io1-f67.google.com with SMTP id v2so3721709ioe.4

for ; Sun, 08 Jan 2023 13:54:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7eTSB6Moa692z7aG3rn26dpTP+OqAPI1RFzSe1BIDt0=;

b=cQXgW99iHT/XC5lLfnVOHNbFYFRhpCOgj9wveLr0GdRo5jnfmi+PzebrngYB6LYMiz

FxJ50IRSekf47hIHuFYhr3kCjnnRAuCC9NE0T0ppa5muCLehWjLaCtYKUPUGjS06KA/p

pGqIZXM5vXyIFovcjIiKc7D4RDA3/+BQRgFrNIoNJPb4XnIcP5kyjHtPCcfEwjAWziGh

KHuK0593m5F9v48d3w7+kJtpMkIt1i26hRna7by74qasD89p0l9rZxOmTeIp+ArKegZf

/yMKq6hC6tDd+WOvbugPONhfikbONy0dSRwCVwcH26qmKKoXnDGtINOAwV4J+qdDIfe0

4+nw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=7eTSB6Moa692z7aG3rn26dpTP+OqAPI1RFzSe1BIDt0=;

b=qD33j/g7xJqiw5uZzRBdjLge5TTZnQ5KPQPBd/j1pfEzy9vb0HPbfjDUtuSy0UV3Q/

hUFKd9LpzelEhv6/O9bPTEV5NCsnTF3FuaBMZGeqEaQm8XzDloG+NW5mvlplTKEQUWp0

dn3lSPvDtP5CKWEmitjxkkQ/zbxZ1N4pvBGMrNsNj3b5HQ/5YbuffXA9P0MKmDurjOQX

tDVqTDM/mVkFC/qnaVpJ+8/UHS6fEMX+d4huogJ7FlhfxkcQsu3jb5yQGASyUSlhWDyC

r+JnpSyF25xvYn6WfkpLo3TzLHPEXu7bD8qKv+of0gc9udRfTa2B+6oVQNz5gM02ng7w

Eo2g==

X-Gm-Message-State: AFqh2kqa3AtWMnLiY84rx84rEpTdRgmpy5g1AqjnjKiwatkj5cEZ3Yq6

rHulfTOIX6HQfvEeD5IMFnq0xOIvPjfEq3O5+B4=

X-Google-Smtp-Source: AMrXdXvy6LOLslli0rzyULvR2jPMwmMTGnO2YgfTGSgXuanM/8m6LWNw8hxtozNwCEnKd5oDGm+/4hCPCFgA+ot8h1Y=

X-Received: by 2002:a02:a482:0:b0:38a:5b26:8cf8 with SMTP id

d2-20020a02a482000000b0038a5b268cf8mr5831241jam.82.1673214844869; Sun, 08 Jan

2023 13:54:04 -0800 (PST)

MIME-Version: 1.0

From: "Mr.Elias Ahoueke"

Date: Sun, 8 Jan 2023 21:56:51 +0000

Message-ID:

Subject:

To: dmarshall , doctor ,

domainreginter , Donna Jones ,

donnabrush , dossantos ,

drdexterhiggins

Content-Type: multipart/alternative; boundary="000000000000761f8f05f1c7b0cb"



--000000000000761f8f05f1c7b0cb

Content-Type: text/plain; charset="UTF-8"



https://zrv64.app.link/wPTMO2hzjwb



--000000000000761f8f05f1c7b0cb

Content-Type: text/html; charset="UTF-8"



https://zrv64.app.link/wPTMO2hzjwb



--000000000000761f8f05f1c7b0cb--