link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Feb 2023 04:55:49 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pVACM-00025h-2J
for dave@doctor.nl2k.ab.ca;
Thu, 23 Feb 2023 04:55:42 -0700
Resent-From: The Doctor
Resent-Date: Thu, 23 Feb 2023 04:55:42 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f66.google.com ([209.85.208.66]:34385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pV8jn-000GcG-0o
for doctor@doctor.nl2k.ab.ca;
Thu, 23 Feb 2023 03:22:34 -0700
Received: by mail-ed1-f66.google.com with SMTP id cq23so39991052edb.1
for; Thu, 23 Feb 2023 02:20:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;
b=LhnII4knM/tyRnoglzIjwYMerLUtQBEqEhMX1Lsa83jEd2WHBfZnca1QEoNRsTZKLJ
Ycw9xZOxZ8Ic54tHWC9bwQNWE7QW0P0qJULr5AvgS8iwiWcLVaVxwYoNH+KTP7nU+fjx
uODeaLdIcgY/qT2lbiY0N1CJ/3AsXfcpqBsNDPlbiyEc4kWda0q98sbbpkoyjMJdEFYq
iVOCvGsDtgldiw0dZiz+q/i3hul2SPZznRXIuGETgK4OQOd9DTmeF3dqa2NNt37J/5FP
RIWK2mHGvOsA/nGrFs58C88l4TW2PTrSB7r4p2Y3Hf/RXLYYs3snisxww1D14o6H+2hv
MxlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;
b=RqyVMp/eE/yXWCTyOLZvGnFyLQhyLepXNYNAItYQoKFFAzWthC/ve5eMu2JUCN6JVZ
Jp7DuAbkf358bhO6yJMwtn2vB7i7GNWhB0gFRdkSCcZDDWOIryIbcTEujxhE7V6f2KO6
BJQnwTdcXAoRUz+b0BAtuPlEfwhfOacgPzymIjlEb0p37Ggul1+0XrV67u7EXPmPqIT9
UzvYCCS4xt86+fbWUDekuNmknMrtrlaPjwYyCAYVdz+2F8QKsNqb7JtW1wA1aO2u+wN4
Upgq3IH1wIcRirCRt4PsYifYkpadiK0vMpD5gT/gNg1B95ymJlpWz2gG/Vvge1/eXcv/
623A==
X-Gm-Message-State: AO0yUKWUt87Qy0mo1iNz8En2CPF6r0flL0X3o3JjvKSJlXwpTLYBZtXt
NSblQoke8b6ZBiVu456Mzq+F8O9MvTccIKHiTbs=
X-Google-Smtp-Source: AK7set9wLXT2E45BQNPekwZbpFat49VFZS3Pu9QcnVCIYdYLgGDOa/V9tafEgEf00ud9tcMRDMMGFojzIhZx69VZ8fI=
X-Received: by 2002:a17:906:22db:b0:8ea:a647:ae5d with SMTP id
q27-20020a17090622db00b008eaa647ae5dmr1415774eja.13.1677147601523; Thu, 23
Feb 2023 02:20:01 -0800 (PST)
MIME-Version: 1.0
From: "Ms. Monica Rolland"
Date: Thu, 23 Feb 2023 10:19:57 +0000
Message-ID:
Subject:
To: david, david , david ,
deekoo, dkabura , dkg ,
doctor, dougm ,
dpchurch, dwegscheid
Content-Type: multipart/alternative; boundary="00000000000006594905f55b5b39"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://cf062.app.link/Gd3MreHYCxb https://cf062.app.link/Gd3MreHYCxb
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.66 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.208.66 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.66 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jeanbaran44(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jeanbaran44(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?}
--00000000000006594905f55b5b39
Content-Type: text/plain; charset="UTF-8"
https://cf062.app.link/Gd3MreHYCxb
--00000000000006594905f55b5b39
Content-Type: text/html; charset="UTF-8"
https://cf062.app.link/Gd3MreHYCxb
--00000000000006594905f55b5b39--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Feb 2023 04:55:49 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pVACM-00025h-2J
for dave@doctor.nl2k.ab.ca;
Thu, 23 Feb 2023 04:55:42 -0700
Resent-From: The Doctor
Resent-Date: Thu, 23 Feb 2023 04:55:42 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f66.google.com ([209.85.208.66]:34385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pV8jn-000GcG-0o
for doctor@doctor.nl2k.ab.ca;
Thu, 23 Feb 2023 03:22:34 -0700
Received: by mail-ed1-f66.google.com with SMTP id cq23so39991052edb.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;
b=LhnII4knM/tyRnoglzIjwYMerLUtQBEqEhMX1Lsa83jEd2WHBfZnca1QEoNRsTZKLJ
Ycw9xZOxZ8Ic54tHWC9bwQNWE7QW0P0qJULr5AvgS8iwiWcLVaVxwYoNH+KTP7nU+fjx
uODeaLdIcgY/qT2lbiY0N1CJ/3AsXfcpqBsNDPlbiyEc4kWda0q98sbbpkoyjMJdEFYq
iVOCvGsDtgldiw0dZiz+q/i3hul2SPZznRXIuGETgK4OQOd9DTmeF3dqa2NNt37J/5FP
RIWK2mHGvOsA/nGrFs58C88l4TW2PTrSB7r4p2Y3Hf/RXLYYs3snisxww1D14o6H+2hv
MxlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;
b=RqyVMp/eE/yXWCTyOLZvGnFyLQhyLepXNYNAItYQoKFFAzWthC/ve5eMu2JUCN6JVZ
Jp7DuAbkf358bhO6yJMwtn2vB7i7GNWhB0gFRdkSCcZDDWOIryIbcTEujxhE7V6f2KO6
BJQnwTdcXAoRUz+b0BAtuPlEfwhfOacgPzymIjlEb0p37Ggul1+0XrV67u7EXPmPqIT9
UzvYCCS4xt86+fbWUDekuNmknMrtrlaPjwYyCAYVdz+2F8QKsNqb7JtW1wA1aO2u+wN4
Upgq3IH1wIcRirCRt4PsYifYkpadiK0vMpD5gT/gNg1B95ymJlpWz2gG/Vvge1/eXcv/
623A==
X-Gm-Message-State: AO0yUKWUt87Qy0mo1iNz8En2CPF6r0flL0X3o3JjvKSJlXwpTLYBZtXt
NSblQoke8b6ZBiVu456Mzq+F8O9MvTccIKHiTbs=
X-Google-Smtp-Source: AK7set9wLXT2E45BQNPekwZbpFat49VFZS3Pu9QcnVCIYdYLgGDOa/V9tafEgEf00ud9tcMRDMMGFojzIhZx69VZ8fI=
X-Received: by 2002:a17:906:22db:b0:8ea:a647:ae5d with SMTP id
q27-20020a17090622db00b008eaa647ae5dmr1415774eja.13.1677147601523; Thu, 23
Feb 2023 02:20:01 -0800 (PST)
MIME-Version: 1.0
From: "Ms. Monica Rolland"
Date: Thu, 23 Feb 2023 10:19:57 +0000
Message-ID:
Subject:
To: david
deekoo
doctor
dpchurch
Content-Type: multipart/alternative; boundary="00000000000006594905f55b5b39"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://cf062.app.link/Gd3MreHYCxb https://cf062.app.link/Gd3MreHYCxb
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.66 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.208.66 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.66 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jeanbaran44(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jeanbaran44(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?}
--00000000000006594905f55b5b39
Content-Type: text/plain; charset="UTF-8"
https://cf062.app.link/Gd3MreHYCxb
--00000000000006594905f55b5b39
Content-Type: text/html; charset="UTF-8"
https://cf062.app.link/Gd3MreHYCxb
--00000000000006594905f55b5b39--