more link spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Mar 2023 08:40:03 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pZCvV-000ACL-32

for dave@doctor.nl2k.ab.ca;

Mon, 06 Mar 2023 08:39:01 -0700

Resent-From: The Doctor

Resent-Date: Mon, 6 Mar 2023 08:39:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f41.google.com ([209.85.167.41]:41906)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pZBlG-000IQ8-0e

for doctor@nl2k.ab.ca;

Mon, 06 Mar 2023 07:24:27 -0700

Received: by mail-lf1-f41.google.com with SMTP id d36so9780055lfv.8

for ; Mon, 06 Mar 2023 06:22:23 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678112537;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=gRuXIiLtloYOGiKXPwFrESrbTwb7QPtkpsfyPDsSVno=;

b=gLbND/iSClzc9G31APmy/yPbdOZZXqvR+0bvnGSuqeGgBaMTZD+via6Lutm+2Kvr+3

ACINUgfs/G+l6SdNmecaHkdBSaUDKoskRFXkMI1PTP7HCuWKMcaW5y5/Cl9NHN6DM984

37P/5I37uoWrxmrXpiA3rWUOoqalC3VLE6ru6VWxARg+ZZNJMTKM+egUkvzzsvLpLt74

Nxv+AHuV0pAIl1+1fTShFrBeEBlZhwhOze/z5htnz+pCWc1AwR+T4T6eJj466u64lwRX

7avmv+wdekSkcfYcOJGGJ1KksUjqDqpWfDILR/50LNzP0UlKTx7qqXF+ZLMlvDvf9Py0

IwFg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678112537;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=gRuXIiLtloYOGiKXPwFrESrbTwb7QPtkpsfyPDsSVno=;

b=lxKRHUvoUg+ZwWesAVjI7vTH+LhMWTJ1Zqvq/yBHwT2d9coefe9V44rlNy7l9XuMuX

0Goxy18Uey1zpB6GXC1uAEjbfhA/UoSohC2w7RpWNMIRQrf3fr6eRWsK0HjVi7nuNYj2

IDpAJW4EvPEBVVuDuCUjrYxd8zMIh3iONcBXM3dHwk1ICXYF+CZwIpTvGLBD9UHZ24Of

5kxTFdpl9CxHba6QNpCKpmRurGUk1bJV+dQiGM2EFRXg0DnDS2yNuF/OFp2eeZ4QYrvl

eaKWtjXYRdu5Uduc9J+ZQE5sGYGeFf8EELeq6UweZ4+1j7VHX+GTxKxYAeA61TWXpjTn

FJXA==

X-Gm-Message-State: AO0yUKV3UOHxYvsRF70BUKVXf5hUkSrSqShycV2fmo59hEodVCOCavGO

dQknCYfc6ylNpNc/rGS34aCoe/oBjgoaA59as8E=

X-Google-Smtp-Source: AK7set/6tr+XQnaGFyRMcC7mO23qcCj5nrhVrWQGD3JNbE8N6wE4en//758dlyNMLTccK66DpvczmkqZvUbd+TScx5A=

X-Received: by 2002:ac2:539c:0:b0:4d5:ca42:e43b with SMTP id

g28-20020ac2539c000000b004d5ca42e43bmr3359632lfh.4.1678112536745; Mon, 06 Mar

2023 06:22:16 -0800 (PST)

MIME-Version: 1.0

From: "dieudonnenzuzi07@yahoo.fr"

Date: Mon, 6 Mar 2023 14:22:19 +0000

Message-ID:

Subject:

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre , fmbuyi

Content-Type: multipart/alternative; boundary="000000000000a558e005f63c0570"

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://akki3.app.link/6ti0kIPNUxb https://akki3.app.link/6ti0kIPNUxb





Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[davidndolo354(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[davidndolo354(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_SPACE_RATIO No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.41 listed in wl.mailspike.net]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--000000000000a558e005f63c0570

Content-Type: text/plain; charset="UTF-8"



https://akki3.app.link/6ti0kIPNUxb



--000000000000a558e005f63c0570

Content-Type: text/html; charset="UTF-8"



https://akki3.app.link/6ti0kIPNUxb



--000000000000a558e005f63c0570--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Mar 2023 04:51:46 -0700

Received: from mail-yb1-f193.google.com ([209.85.219.193]:41964)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pZ9Mq-0007Xq-1u

for dave@doctor.nl2k.ab.ca;

Mon, 06 Mar 2023 04:51:04 -0700

Received: by mail-yb1-f193.google.com with SMTP id i6so7769074ybu.8

for ; Mon, 06 Mar 2023 03:49:01 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678103336;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;

b=AQVTyeCtoYW5qrdbO9FyCabAHwLMDMl9sDhNaxy6HUlOdTyRC9vOm1bk2zRv9gAIYd

q57khs7WxWpyIl6odw7hHuZTl6bB4k08IBH8yxCvT9jBCF7RGIaA7MHgYNrYZF5bI9ST

okC19+na6TgBWYo9lSmQcWbgnprhmQgwGDbe6Idjw2wXw7FijPP8JPZSwZ6KQpZkIeb/

6rpSZYnDVMC9pdIEeMIjDCsO/+d9EpWEXMXpZZQdo+mCaKZ14PXKncvZdQlOX6Yh8hB1

D8PoktktNiXLuo82hb7NTyiIhALaYSs1CpZnUqlSpSn0XtRNkhtEPuHQYMDLjllebfEQ

yDoA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678103336;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;

b=KO2f70eGljjTd0zMj8M5CEcAJWSy/lI00WjAVQZu8Oa8XZ33dL02teax6b3+YvanOr

no3afMIq1flcZdvIvqUWOtZeD66tAs6FkkySjfEIQXu+gOOqUL56m7xaS4lb8cB3UXeh

gWU0+DiMpzUggi4FLXo0G+fsYg1ZUXevd3BAUOD7l8MSY6ioMLO/O3o6zVJ0O7IFbqZB

u36B3f+jEooLvlR6jofiodhhU3SQ4DAuvqH2sNqYVVKfyuLz6e8kleBA/94lTuMLnRB8

XTbqMrLr6ZHFsRs+i6l7oBaOrY80pg56lN4g/Q067DkDhskRe+sFceCxr55Zvhu72fvf

PcMw==

X-Gm-Message-State: AO0yUKVibMQGFhqDL7ZYJA0t9+zgSdIoiJzxODdjTYj7cxqoZ2mokE2e

EnEYjKOMOHTbfggYS8xF0O8hX08fL2P/YvlN65k=

X-Google-Smtp-Source: AK7set+LbZ7/5hexvX0rIZQxdE9+pYY8nv+jK63hj+bjM2ZAdDsTbxSi11gfjK0mt5WaedxrMb9bkckWDyt5Uiw3/Og=

X-Received: by 2002:a05:6902:d2:b0:a8f:a6cc:9657 with SMTP id

i18-20020a05690200d200b00a8fa6cc9657mr4772195ybs.7.1678103335784; Mon, 06 Mar

2023 03:48:55 -0800 (PST)

MIME-Version: 1.0

Reply-To: davidmoonass@gmail.com

From: "Mr.David Moon"

Date: Mon, 6 Mar 2023 11:48:43 +0000

Message-ID:

Subject: Dear Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000039d6ad05f639e17d"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 19.2

X-Spam_score_int: 192

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I know this means of communication may not be

morally right to you as a person but I also have had a great thought about

it and I have come to this conclusion which I am about to share with you.





Content analysis details: (19.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ryanjonesemily(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.193 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.193 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_MONEY_PERCENT X% of a lot of money for you

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Dear Friend,



--00000000000039d6ad05f639e17d

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I know this means of communication may not be morally right to you as a

person but I also have had a great thought about it and I have come to this

conclusion which I am about to share with you.



I am Mr.David Moon, the auditing director of International Bank Burkina

Faso. I hope you will cooperate with me as a partner in a project of

transferring an abandoned fund of a late customer of the bank worth

$18,000,000 (Eighteen Million Dollars only).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if that is

alright for you so that we can enter into an agreement before we start

processing for the transfer of the funds. If you are satisfied with this

proposal, please provide the below details for the Mutual Confidentiality

Agreement



1. Full Name and Address

2. Occupation and Country of Origin

3. Telephone Number



I wait for your response so that we can commence on this project as soon as

possible.



Regards,

Mr. David Moon



--00000000000039d6ad05f639e17d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Dear Friend,

I know this means of communication may not be=20

morally right to you as a person but I also have had a great thought=20

about it and I have come to this conclusion which I am about to share=20

with you.

I am Mr.David Moon, the auditing director of=20

International Bank Burkina Faso. I hope you will cooperate with me as a=20

partner in a project of transferring an abandoned fund of a late=20

customer of the bank worth $18,000,000 (Eighteen Million Dollars only).
=


This

will be disbursed or shared between the both of us in these=20

percentages, 55% for me and 45% for you. Contact me immediately if that=20

is alright for you so that we can enter into an agreement before we=20

start processing for the transfer of the funds. If you are satisfied=20

with this proposal, please provide the below details for the Mutual=20

Confidentiality Agreement

1. Full Name and Address
2. Occupation =

and Country of Origin
3. Telephone Number

I wait for your respons=

e so that we can commence on this project as soon as possible.

Regar=

ds,
Mr. David Moon=C2=A0

gmail-adL">
















--00000000000039d6ad05f639e17d--

Yet another link spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Mar 2023 23:51:45 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pZ4h4-000Dkt-35

for dave@doctor.nl2k.ab.ca;

Sun, 05 Mar 2023 23:51:34 -0700

Resent-From: The Doctor

Resent-Date: Sun, 5 Mar 2023 23:51:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f194.google.com ([209.85.128.194]:47052)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pZ4aq-0006Kh-03

for doctor@nl2k.ab.ca;

Sun, 05 Mar 2023 23:45:12 -0700

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-536cb25982eso165356397b3.13

for ; Sun, 05 Mar 2023 22:43:09 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=esccbvr-pt.20210112.gappssmtp.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;

b=49TBAuITIbOBQUtMgsxOellt7y+YK38Sc+J/i3afYChv/pvcewHUI2KwhqbwchK1lQ

6NHiFK4EU4hMv1uUtCAW+m4S207GBDxFcObHu2VnT4M6XzIOdv3ywlX/VFUu+TckTjHL

mRM1LTjvluJgyNa/5SJPHfXRxBen92TDDtCcjYs1iPAWiNH5CcdfO8ONtRSTT6XS7N3v

mzltsXAHfX7wuq5cRCXLG9rNaHY8gm4N0jvf6voDkYJ/Q9ZJ/TeV8i6KDhzS2Gzg//2m

4XlP9GIlpZbz0pa63KcnX8F5FgVz6gTiZSapd+VhFzr52gn6cFeEwb9RXhGX2xsE9sQt

nX6w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;

b=prz1hKOghe+mIKSgk63a6U35E+qpZw1RJ+wGvZvLz5fjWX4ZbM4ioZ0ONo5nzosFPY

otfbgIKQhQodR9oyL0aRjMnDlUoynRwpARWILZvThgTQeJS4/eib50ztHr16h7HapN4d

xbkWGtELbQdn1A00zeVcM1Eg3TjTyfRgqaWV17P09vjQ7J2HFJU6pUiD17s8mlNHArI8

jcCN6FOAiQHAF/EyH8A2X9ZNXNHRDTx3SE5+W62WkTiycvxXLJ5Ue26azSSI08jWDtkP

AFbInxXIzq0oB7ZJXr/JoZuTMNfTRnDwODYvjKRM70mGWmab6xIbwLgp1MwYyj6YjewO

UujA==

X-Gm-Message-State: AO0yUKV/Z6NUbAz2w0puKJTY/ur1vtKa+Y5wOfFGtp/ukOyz66OL84rD

/QfkoOIivxKPPveG/MReScU9I2YFUqZNnzaia2A0yw==

X-Google-Smtp-Source: AK7set93JbFodc8ZMg8XyeYwgnTQb56dzNZs+fRLDKk9sGrhoRoV/h9Z0w5fTxr3ijDEihFmSA0ccggnwPpXN2ize40=

X-Received: by 2002:a81:4520:0:b0:534:515:e472 with SMTP id

s32-20020a814520000000b005340515e472mr6201312ywa.4.1678084983422; Sun, 05 Mar

2023 22:43:03 -0800 (PST)

MIME-Version: 1.0

From: MONICA DAN

Date: Mon, 6 Mar 2023 06:43:01 +0000

Message-ID:

Subject:

To: Deb Nobes , denis gougeon ,

derekbrady , dgasparotto , dgonor ,

discdrive , dleinbach , dnto ,

doctor , doug

Content-Type: multipart/alternative; boundary="0000000000005703a305f6359b3e"

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://eah45.app.link/ID7weblPUxb https://eah45.app.link/ID7weblPUxb





Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.194 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.194 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: eah45.app.link]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--0000000000005703a305f6359b3e

Content-Type: text/plain; charset="UTF-8"



https://eah45.app.link/ID7weblPUxb



--0000000000005703a305f6359b3e

Content-Type: text/html; charset="UTF-8"



https://eah45.app.link/ID7weblPUxb



--0000000000005703a305f6359b3e--

Link spam from Gmail;

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Mar 2023 23:44:45 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pZ4a3-0006sb-2e

for dave@doctor.nl2k.ab.ca;

Sun, 05 Mar 2023 23:44:19 -0700

Resent-From: The Doctor

Resent-Date: Sun, 5 Mar 2023 23:44:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f65.google.com ([209.85.217.65]:44760)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pZ4ZR-0005UT-0R

for usenet@nl2k.ab.ca;

Sun, 05 Mar 2023 23:43:44 -0700

Received: by mail-vs1-f65.google.com with SMTP id d20so8124784vsf.11

for ; Sun, 05 Mar 2023 22:41:42 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=student-kuptm-edu-my.20210112.gappssmtp.com; s=20210112; t=1678084896;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=28KCjIG+x+0Igqdnda0/9e+CB1rROnKBp9oG1ldMC7c=;

b=nFNfwuAnnBWKCN4gXpXZ1Y1Mo4zHD057Mr9cLLzeoSAFWsMgMGzGFwJTV9q8nTFUR6

DUv4QfjhBbvkY3LGBUjQZH+goWZVRu4xvGGomvLVBmOU2fCwkIafykjV8HhJjqMDk7oM

Xk7YhoNShhLRJ6+vBZoQ2KibVlU5u8vIp9yOM+2X7odNi9k6wpPL6GlfI262uxZ93U6W

mdS8K/7tGqjzv6+O+3P4NRqatPnchCbU9Qk2tT1vwnzHH9h2Io8Wev9gdg9o0SFZ1iXG

17qnub15j+NyWleAd6nmkSQEgyx4/v9ja0ekLNLTWjAFLA4W2WyxwcMugSeTog4es7XX

rtWw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678084896;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=28KCjIG+x+0Igqdnda0/9e+CB1rROnKBp9oG1ldMC7c=;

b=AW7dMpJQUuuf2bjfp9LMKsNb1yR16bHH0T3yTZYJyY67eALcc5h6JrE7clnNNpkZBK

FnKwVhEOU1wk++o6jmPl0zQbFW6Dso41V5K9h8fr/LB/o87RePI1oh/bdQhOXB+jkmmV

2kBDuNfkrK8UCAQETv875Z0KQtmwRLkaKEqpGhCK9Jblnib+uKQ61qJExbuYWhz9rC5M

VZSaTYUNlNt+/kdedCCmd20b9dEA5q6u8e4XhogRNETXIpoYXgb258VkrwxItQFvICDo

fCfd/p9pXuuyMdiIEXQ9AD9zvWy9TmaL1ukX/TrI2HZ4p+nPfKS+3vphqlcr4xrv2w+I

nStg==

X-Gm-Message-State: AO0yUKWEToHoel/syGIExGRi7CCjV9K8DQ40Z449Y8qDujxTnegia/+v

o1kPMQdYCZuwkHQwtVo6UqJDmA5kVrZwlscKaapMnA==

X-Google-Smtp-Source: AK7set8x9WIDSiW6aQr1NOPP2FUaABl/wMlm6FYdTdvHirS7ogG4FkLDRSbcneN/NsgBBuR7BF1JJo00yAESJMaf8iQ=

X-Received: by 2002:a67:ce0a:0:b0:416:e50f:8215 with SMTP id

s10-20020a67ce0a000000b00416e50f8215mr6443732vsl.4.1678084896723; Sun, 05 Mar

2023 22:41:36 -0800 (PST)

MIME-Version: 1.0

From: Herr Gomez Rodrigo

Date: Mon, 6 Mar 2023 06:41:37 +0000

Message-ID:

Subject:

To: tswildeman , tulsi1968 , tvnews ,

uniscience , usenet ,

valerie bailey , valhalla

Content-Type: multipart/alternative; boundary="0000000000002c283205f6359691"

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://jq80s.app.link/LyK53bOOUxb https://jq80s.app.link/LyK53bOOUxb





Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.65 listed in list.dnswl.org]

2.5 SORTED_RECIPS Recipient list is sorted by address

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: jq80s.app.link]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.65 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_SPACE_RATIO No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--0000000000002c283205f6359691

Content-Type: text/plain; charset="UTF-8"



https://jq80s.app.link/LyK53bOOUxb



--0000000000002c283205f6359691

Content-Type: text/html; charset="UTF-8"



https://jq80s.app.link/LyK53bOOUxb



--0000000000002c283205f6359691--