Chinese product gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 May 2023 00:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptj2g-00067u-I5

for dave@doctor.nl2k.ab.ca;

Mon, 01 May 2023 23:59:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 May 2023 23:59:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f193.google.com ([209.85.210.193]:58432)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pthaz-0000Bm-MP

for doctor@netknow.ca;

Mon, 01 May 2023 22:26:42 -0600

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-63b60365f53so3897911b3a.0

for ; Mon, 01 May 2023 21:24:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1683001469; x=1685593469;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=eaen5CGeOpTx2Zt86l0nqVbIOZ9Uya8PhBWEFyEpdgQ=;

b=cH+YsbqDcLGIO3LPf1xSp5v+z6bbnHpKFpvuLs8wKxopB/y0y8/ZksH28cYbXwOu52

RYk61DnkgR3MiOP/gizTn3/n+on8R+1gj/qaIhyBqW43QrGpckgqrXsNR4crNzbpkmzs

eTckm0ATafK72bnariMrfexAcw+zwKsiLAAt8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1683001469; x=1685593469;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=eaen5CGeOpTx2Zt86l0nqVbIOZ9Uya8PhBWEFyEpdgQ=;

b=EcSlxtT1B/qZc8cynFQWQK3XJZ6RD6deYm4hH4Vkrg4UpuFy/Wa81gJJIeC83ZKNGj

drXJbCG30oZMJfBsbWiqFcRFmDeShpOTKlklbvgmVYJSDef1LlckriRneTvvGE4Ofj8w

5b4uL0cdVv9WpJNa01tc7Z4CpqAKyY3rMLAXegHtv3r4G6d3mpNbUN790wlcxpu/AxET

h1UlviL2CW/S7n6TNya7KEZFWu1mlnRtkfMRLSQ4eyAAWdbYMtKJ6xHi3c7ota9b8nRK

rtol3TLHgYPRYKXq3DyaSJv0jOj2SR08T16wNkq9PSl0W/4ndgI71syENwl/wxsriUfl

eQqg==

X-Gm-Message-State: AC+VfDwVArpAczDrVIoLngMniY3e3tPzGhCAzjiTmx2VDS8OvgV7dGfw

TtDToshSx+zdm/51HNJ18DOIbcUvFPLGxqORPwMe7A==

X-Google-Smtp-Source: ACHHUZ5mljelhf9/tHRmSOOxo7dxVAAja9E/3HFwzGgmvBODFo6ynCW3pc273fw0Uqs4kTvtfK5fdA==

X-Received: by 2002:a05:6a00:2346:b0:637:c959:8ea1 with SMTP id j6-20020a056a00234600b00637c9598ea1mr22952730pfj.22.1683001469233;

Mon, 01 May 2023 21:24:29 -0700 (PDT)

Received: from isdwu ([161.81.106.187])

by smtp.gmail.com with ESMTPSA id g13-20020aa7874d000000b0063b8f17768dsm20720551pfo.129.2023.05.01.21.24.27

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Mon, 01 May 2023 21:24:28 -0700 (PDT)

Message-ID: <6450907c.a70a0220.fffc8.9b8f@mx.google.com>

X-Google-Original-Message-ID: 8DBADC557ECD4481BCAEDDCC4919079E@isdwu

From: "emma@blueskyalloy.com"

To:

Subject: First Choise for Precision Machining Parts

Date: Tue, 02 May 2023 12:24:27 +0800

Reply-To: emma@blueskyalloy.com

Disposition-Notification-To: emma@blueskyalloy.com

ReturnReceipt: 1

X-Priority: 3

X-MSMail-Priority: Normal

MIME-Version: 1.0

Content-type: multipart/alternative; boundary=d0375884e77342a70248dc0943126a5d

X-Mailer: Microsoft Outlook Express 6.00.3790.4657

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

Dear Manager,

Nice to meet you.

Please allow

me to introduce our factory------Shenzhen Blue Sky Precision Technology

Co.,Ltd  shortly.

Why can we become your first [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: goodbomold.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.193 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.193 listed in wl.mailspike.net]

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS No description available.

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} First Choise for Precision Machining Parts



This is a multi-part message in MIME format.



--d0375884e77342a70248dc0943126a5d

Content-type: text/plain;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg==

--d0375884e77342a70248dc0943126a5d

Content-type: text/html;

charset=gb2312

content-transfer-encoding:base64



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

--d0375884e77342a70248dc0943126a5d--



More link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 May 2023 21:36:00 -0600

Received: from mail-ed1-f49.google.com ([209.85.208.49]:57394)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptgnJ-0003Xx-MF

for dave@doctor.nl2k.ab.ca;

Mon, 01 May 2023 21:35:19 -0600

Received: by mail-ed1-f49.google.com with SMTP id 4fb4d7f45d1cf-50bc4bc2880so2843967a12.2

for ; Mon, 01 May 2023 20:33:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682998389; x=1685590389;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;

b=Julq9jZUz3ibKfJk6LGjykYk/aYKQiGxYuE1yrNuOQt304g160flQNnTDCF4PNlK4O

0lDsPFkZW3BByLWMT4L2j5fAa1hML6U1Xk598MGWznUfYWKRkqoJOGYcCuEHM3HyJIhB

gNfRwTO1vbThUyGMl6FI6mzBXm5QVUuqAc1jWx0cvwwcmjBwFikWd3nPT0Ql7NKwG17a

u2N5YW+ajsFrRr3IidbIHKKFISRp29pVQKEyXxYXM110wCOhjPot9o3ACYjjhL9q8ChC

zVweP+fIeon1w0Fy+d4gdc61A4AzPqw1we0rlp74D+bIfgH8sJwQ1N7xl6NlYkaRpXKp

X7Ig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682998389; x=1685590389;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;

b=Wx9+fXE9YhfDl9n9iIKCfLTVOtQ+3PikfBy7sWombcf9E2Mzq/cGXUAppYydmuyoTS

FKq6sIxdq2JqFnSu9HLyIQiCu8mXK2O67oG4h0eibCCQjph0BaIwshsuEKvtH+kQ83Ft

N6oaaNJxFzR+AsqtE+shSTcRLqQDoKsR/QyA4DSHWCmEJjsGD7CwaYclCce+ZAm3K4cC

ZJ3j+RIkjLf2Zgq6NJ6gq7NDdSN7gvO3a4F2f35e867+qPySnhR3Xy9wM+6E1PN+q7uQ

9QKLlq5TS+O+lGUaRbAWzK8eGIO168eMHEtQ8NpCkY35b0nSn56V+/k4duQivPN2DyJ0

EzxQ==

X-Gm-Message-State: AC+VfDx1BaMONQ+uqqlnX8omPfCTpHb4q57TMG0pkZkyDRm4pT3RSy9y

8l5PurFQ9Xm+Byunhm0y7a0tOo9wyN7zf2eOA2o=

X-Google-Smtp-Source: ACHHUZ4LicgwDX9QMlvfKjxBYQA1OgKpqtw7Fuw+U/I4Evz1t0U4wRrC0nkeZ0/96wQK7paQe9eQZo9f47woigkQS8U=

X-Received: by 2002:a05:6402:1614:b0:502:4862:d453 with SMTP id

f20-20020a056402161400b005024862d453mr7029018edv.3.1682998388803; Mon, 01 May

2023 20:33:08 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6f02:211:b0:4b:48ff:a5a0 with HTTP; Mon, 1 May 2023

20:33:08 -0700 (PDT)

From: Thomas Sam

Date: Tue, 2 May 2023 03:33:08 +0000

Message-ID:

Subject: Dr.Charles Edward

To: datok jp , datsit1968 ,

dave , davelongaphie5309 ,

david cameletti2 , david100 ,

david2divizio , davidbrunstein ,

davidpalmer23

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3NF3kjN



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aminenajiddofus2(at)gmail.com]

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[aminenajiddofus2(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.49 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.2 BODY_SINGLE_URI Message body is only a URI

Subject: {SPAM?} Dr.Charles Edward



https://bit.ly/3NF3kjN

More link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 May 2023 23:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptj2P-0005tl-Ud

for dave@doctor.nl2k.ab.ca;

Mon, 01 May 2023 23:58:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 May 2023 23:58:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f45.google.com ([209.85.160.45]:57436)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptgdu-000Lex-Cd

for doctor@nl2k.ab.ca;

Mon, 01 May 2023 21:25:34 -0600

Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-187c78c6657so2409643fac.2

for ; Mon, 01 May 2023 20:23:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682997806; x=1685589806;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;

b=htJ1+LtmEnj1UGGZXwETXdk4SGOQoD/PD3OKGMs3oRnabTjut4YSzysRi8QaooY2wO

PajbjHKzLAmp4DguksPRVKzIfsvl6gLKQPz8y/3mdG+Q8vnQv78g7q6urLKTXTc2l8Hb

b5Wd/y8Qc+eQgjVs9+LReLSkRhW8YpyUfolkt07zwuqfGcSCdxKGKiuWMJ9l37JVNq29

XyYNOPaarO7E0Z+8Xb2yYmMlHSixisAHCeLUrmENrxNyuKdM5PnX10NwixDC93pVsYqn

22f3PUwgYNDki3aNylJD5mmuzbk5JkLDH7HhJ8BZDnAT67/DUGKCwCPrploRWgFsRY5R

lF+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682997806; x=1685589806;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;

b=R508LNqQf1M3sBTATH6g2Ge5Pf2T8KXmk9I7/fpzP9XMLKeA+smvs/7Wg+pCi8rnVL

An5r1riPCMxHNhtjk+C39KUoeTegmAAA7ByjfThTYZECq4g2eKfe5NxeqTO3HPM7u/U8

sfo4KyUg1ktA8TPw3ZA0JMmu5Jlz9mdg+V3oowdZAAXURAFPyxHku5Dj+SMV519OVDkD

xzpDIHVQv8Oz6q0BM97/WIUYlR3tT5N8URT5myEEwIwyfKJj8wmdg+/q0B6vVubQGU5f

0xAYhbdQfWonirGFQhHH77k+tmdQHfiUxYjTdh7oh3h9D+dB9WTt+GBpQ2e6RQ6RS0B1

H5AA==

X-Gm-Message-State: AC+VfDzAx+NhVAAhnO6YeXt2F99BZD+yvs8vpjIRrl/h+LTfXuZBtFra

qbBLiaZy5NTZzXyKPf+epJxR9b1pxsgWFfOJYu0=

X-Google-Smtp-Source: ACHHUZ6275vq2tGe9hy054mtO2vL6X/jjaII+Du9VRUboq7FiBUddtk+MsPcgosv2BbBWWtCjJVepv8njNMrB7d9zWY=

X-Received: by 2002:a54:4090:0:b0:38e:87ed:e149 with SMTP id

i16-20020a544090000000b0038e87ede149mr7732197oii.45.1682997806035; Mon, 01

May 2023 20:23:26 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6358:6f01:b0:11e:7c45:cc9f with HTTP; Mon, 1 May 2023

20:23:25 -0700 (PDT)

From: =?UTF-8?Q?thomas_k=C3=BCchler?=

Date: Tue, 2 May 2023 03:23:25 +0000

Message-ID:

Subject: bola17

To: dmillar , doconnor ,

doctor , dolores32 ,

domenic rubino , donahued ,

dorlovic , dossantos , doug

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/422YRf7



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ajengkurniapramesti9(at)gmail.com]

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ajengkurniapramesti9(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

1.2 BODY_SINGLE_URI Message body is only a URI

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.45 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} bola17



https://bit.ly/422YRf7

More link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 May 2023 00:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptj1g-0005Mu-JT

for dave@doctor.nl2k.ab.ca;

Mon, 01 May 2023 23:58:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 May 2023 23:58:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f54.google.com ([209.85.216.54]:59658)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptfO8-000OSC-QS

for root@doctor.nl2k.ab.ca;

Mon, 01 May 2023 20:05:12 -0600

Received: by mail-pj1-f54.google.com with SMTP id 98e67ed59e1d1-24e2b2a27ebso119295a91.3

for ; Mon, 01 May 2023 19:03:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682992984; x=1685584984;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=r0tVgFyM6fwIVksZ8j3jkOyCLM0mtK3qflHRVGVZXp4=;

b=nwKUTHIwBgkrA9d+t0LkQDn3bTatAFX3FnAUb1i2RiNxOqaYnPgFhtoAsoACogTSVu

6ZnO5g7stUuw2Zd/XfUrWe4AYWFBu1Vp8fKbuM1N7p+KAm/KACAc09T/yPhTlHCQzww/

1WIwyKYBub75wdwlk56ODOC9Z4ARlGC0+V01KlbfglWTYuSbaD4/KHT/CLPz+uWcs/Yi

x0DiggiCC2HH6JmFKblqgXsm0PeQWFijxFCw6i0V4siyFoITR5C4oo5CGhGqkcNxWV3C

jxQgjChCSkqZbkz1GN//seOHrSWP8aP861uMAyC9R0NrrDMAvhQMw5DmMpANlhTydj4c

bFyg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682992984; x=1685584984;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=r0tVgFyM6fwIVksZ8j3jkOyCLM0mtK3qflHRVGVZXp4=;

b=KCPLz/sjsvVkTRAKmSav5MICfRWWKRNwO6fE23zYNpxPRFFm8laOoqT8dbuLzRkSFW

U3pTS8T9edn4mDax4wHGLWK9vUfpIgenFvahRZGxR1r4UQcZfQa7/L0RuEyUFLbWxxIM

PEqJfbARGrxGf6QuWIQK+WT5BNlwTFs8A496Ho7642wFWJov3wyBV0ocG98MFN2S9L7T

OT7vBvNu9dlFN4Qfn+Hzyro6sKKB8IY0KZ00jshD0vO0QMwzzBOBxMUH6I7Kx7OZ0JoR

+twAr8lIuvSLKxBt+NBdc0Otqvay+5SVnoueomMqOl3NAUS1vPEN7QG2KDr41ZnySCmZ

9OOA==

X-Gm-Message-State: AC+VfDwXuDbpfQ+KhcUwkNcipX5sMOucFih5R8NHq+XC6sAnKKJGiY2Y

PhPZAS0ers+wYQWDpuKd2XzIDy1xm+9JMEqXV0dc3Xsu

X-Google-Smtp-Source: ACHHUZ66FFymPeMQm5YOn7QetqHIVzPeRY1Qzq7RAjcWb8JdlNovDb2kllNEVXbxsiCk7R9AgovpkT3kAMbA9TmZqw8=

X-Received: by 2002:a17:90b:3883:b0:247:529f:92d7 with SMTP id

mu3-20020a17090b388300b00247529f92d7mr16476339pjb.8.1682992984631; Mon, 01

May 2023 19:03:04 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7300:6488:b0:c2:a87f:87ae with HTTP; Mon, 1 May 2023

19:03:04 -0700 (PDT)

From: "svarc.petr.jun@seznam.cz"

Date: Tue, 2 May 2023 02:03:04 +0000

Message-ID:

Subject: evs_idea@yahoo.com

To: root , sabby cattery ,

sfang , sissi chocolatier ,

slaszlo1 , ssad oci

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/40PaHYP



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.54 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[janistudio777(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[janistudio777(at)gmail.com]

0.0 TVD_SPACE_RATIO No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

0.7 PDS_FROM_2_EMAILS No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

2.8 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail

account

1.2 BODY_SINGLE_URI Message body is only a URI

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.54 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} evs_idea@yahoo.com



https://bit.ly/40PaHYP

link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 May 2023 18:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptdtX-000AAa-W0

for dave@doctor.nl2k.ab.ca;

Mon, 01 May 2023 18:29:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 1 May 2023 18:29:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f177.google.com ([209.85.160.177]:48286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ptdPy-000EFc-JA

for doctor@nl2k.ab.ca;

Mon, 01 May 2023 17:58:58 -0600

Received: by mail-qt1-f177.google.com with SMTP id d75a77b69052e-3ef31206cbdso14625981cf.0

for ; Mon, 01 May 2023 16:56:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682985409; x=1685577409;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=WXRlh6O8Xt02TwNBfmjsU3A+YdDL68rXMv5RP7AnxIw=;

b=nL1P053tEwH06S0kuBac8D5CsfGD8obmxHDcAmZq85cETfp/a9qA3eSyJWCXwIUN7r

I7PVFSbAi6iJTCoiniDCbOH99kdG3JTEoiu15bqx2w40swUKFmWgEsXjQLhawklS9kAC

rTfDEcjUqz6NPvTVwBwIB9WQBh3EFD+YXGJawUHjM3+2PjXVQnXTBFexn7hPMx7t9tFf

QGE6dUqX8IwQTqmQOu0SCdTDHJpggT5T4b8fMXsVfwdXp4nfFhK+NF9zaeBBn517Mu5h

HwKqgglQja045C0YSweIbgWzPO+BtU0bYjRaCZvFIQkrbWdYOKkatf7Ls8D8rlkgYijs

OR/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682985409; x=1685577409;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=WXRlh6O8Xt02TwNBfmjsU3A+YdDL68rXMv5RP7AnxIw=;

b=FphmIXYrVGuk2gjjL9+ML/Vy1liv3yTCl7IQOvMrE8VPBrM90JNbqW3NX/5jdfsJRR

2OsvKfe6Q1bbz0k3/92+5n4a+nyO0uDlSb3Aa80zR00McXr++o+qLFYKHbTSUbpJAelV

5pmHRi6s9KH7wI8Lrcv7gsSuXkI45QzTKwFKuMMBOEjSmWHt7idckByCx8r25YKezepM

UZHoR3OdSZ5NRMC4EH6oTKwnnZW180SdoO5LkhCef4C1FPhMUmAvDDThrbaE7LxNcN4e

KK0x6Xjj+HDHXvcZPIVbmSRhlJgkmilBvwE0Sp4zvTwo3pOp9eEO/NBomFjwZiwsXZa9

U3qw==

X-Gm-Message-State: AC+VfDzwdf7oP+QA1or7I6d4ls45c1zO2QxXIQrOK+F4fitltPVmG9ja

0qd9XI0XqBoYZdK6Iy6VgZ64tHH5uJpy8gnYBjA=

X-Google-Smtp-Source: ACHHUZ6YMYcOCUpn5dirpgomWc7Ycpufjx4nEU23bJsobRP1EGGE6ba5XKgj2Dsg5c50heHzgPyusCtBG1c1xU35IGo=

X-Received: by 2002:a05:622a:202:b0:3ef:3b04:b8f9 with SMTP id

b2-20020a05622a020200b003ef3b04b8f9mr22816818qtx.32.1682985408977; Mon, 01

May 2023 16:56:48 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:622a:394:b0:3ef:33ee:dd3d with HTTP; Mon, 1 May 2023

16:56:48 -0700 (PDT)

From: Jerome

Date: Mon, 1 May 2023 23:56:48 +0000

Message-ID:

Subject: dieudonnenzuzi07@yahoo.fr

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre , fmbuyi

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/41LX6Th