link spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 16 Jun 2023 12:26:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qAE7g-000KM3-1j
for dave@doctor.nl2k.ab.ca;
Fri, 16 Jun 2023 12:24:36 -0600
Resent-From: The Doctor
Resent-Date: Fri, 16 Jun 2023 12:24:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f194.google.com ([209.85.208.194]:48356)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qABOl-0009nk-0b
for usenet@nl2k.ab.ca;
Fri, 16 Jun 2023 09:30:07 -0600
Received: by mail-lj1-f194.google.com with SMTP id 38308e7fff4ca-2b45bc83f26so8405721fa.0
for; Fri, 16 Jun 2023 08:28:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686929277; x=1689521277;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Q0i90rF1uccbp6kjvDvbM2WlPzkyntVu6IWDQ/xFFp8=;
b=FBtEWn+T09D8DnuFTqtOG3ma4UsTZUxVWxKXRooYr2kmeoocprekxr+S9J79rH6Esu
oZUhJ9mPBWve2dg3WnNEAFLzWjWTykSK0oMvpiAMlDnKYBm2LHyaqSzZ8Oecc44zFr9h
VepWlYxR9rgNISwfpQXZ2ppPbXZTPW05P5SoZDpxmxzvdF3cLKWS+dtLyYJ4tqlmJLNR
aMrxIhjiZqW9wmX0CT/gaJX5y1dfgz+72PCDBRNIIwukzj23fXF91opYmkM+vREO04mx
Rys7RZICqWbNhe6C1xm0mK33xmBtcWquZ2+EMZQQHiYAthnX7MKUPBY7yevgcPQGGobI
iDgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686929277; x=1689521277;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Q0i90rF1uccbp6kjvDvbM2WlPzkyntVu6IWDQ/xFFp8=;
b=dadO5B2WbkqOV0K2CBosRgUmG1klqzCu1lAoTq2Eh6P0QuQ/1rMpAsHoZUyxtCqNDe
JXnHB0uKI/Rs7EOLqg1ZU6zG3wLfLQGZOjG8YwpkVOC5yUdVjC4VLjuYhpa8RAXXabAS
dUZ6I08OcIxLmOGgXPz/C6dw2kwihblJIO5qHACJf7ROrhiGbBORR6xu79avE4v6IiK1
xzbQLuzTNU3zmhHipxoSPRk4f8CjeQHVjwMVlDtFME0yFrxYJO+fG1eOfx/av6sMwa6b
GaX8SQTSytCG6tDjMoDexoj0zHFhYYNgnCZCzExd7Na4ugpRCPO1cvZOimxLTWToxyNk
IWJQ==
X-Gm-Message-State: AC+VfDwNha7+rMGWgijNuJxhcJskMNiI5jropnn6XCzBXYGN2rExj4OW
QY7epF8+yJcpA+7xPZsKetiuB/YcpJOzAskBU2A=
X-Google-Smtp-Source: ACHHUZ57NDEtJm6P94f+kuiDYiNiJobl95RA6CqrKpJKsn7S8+HcBOS3jOISyEn4UVAKDCxfKJozNEhk2bZ/vBDerKc=
X-Received: by 2002:a2e:94c1:0:b0:2af:1817:26e1 with SMTP id
r1-20020a2e94c1000000b002af181726e1mr1988063ljh.30.1686929277382; Fri, 16 Jun
2023 08:27:57 -0700 (PDT)
MIME-Version: 1.0
From: Herr Gomez Rodrigo
Date: Fri, 16 Jun 2023 15:27:48 +0000
Message-ID:
Subject:
To: TonClass, totaram , treble ,
trenner11, tswildeman ,
tulsi1968, tvnews ,
uniscience, usenet
Content-Type: multipart/alternative; boundary="00000000000056f4e505fe40d43b"
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://qHy.drest.cc/34546de4235m342356 http://qHy.drest.cc/34546de4235m342356
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: drest.cc]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: drest.cc]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.194 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[syarifuddinmuhammad760(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[syarifuddinmuhammad760(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: qhy.drest.cc/194.50.153.18]
[URI: qhy.drest.cc/194.50.153.18]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.194 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?}
X-Antivirus: AVG (VPS 230616-4, 6/16/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000056f4e505fe40d43b
Content-Type: text/plain; charset="UTF-8"
http://qHy.drest.cc/34546de4235m342356
--00000000000056f4e505fe40d43b
Content-Type: text/html; charset="UTF-8"
http://qHy.drest.cc/34546de4235m342356
--00000000000056f4e505fe40d43b--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 16 Jun 2023 12:26:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qAE7g-000KM3-1j
for dave@doctor.nl2k.ab.ca;
Fri, 16 Jun 2023 12:24:36 -0600
Resent-From: The Doctor
Resent-Date: Fri, 16 Jun 2023 12:24:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f194.google.com ([209.85.208.194]:48356)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qABOl-0009nk-0b
for usenet@nl2k.ab.ca;
Fri, 16 Jun 2023 09:30:07 -0600
Received: by mail-lj1-f194.google.com with SMTP id 38308e7fff4ca-2b45bc83f26so8405721fa.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686929277; x=1689521277;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Q0i90rF1uccbp6kjvDvbM2WlPzkyntVu6IWDQ/xFFp8=;
b=FBtEWn+T09D8DnuFTqtOG3ma4UsTZUxVWxKXRooYr2kmeoocprekxr+S9J79rH6Esu
oZUhJ9mPBWve2dg3WnNEAFLzWjWTykSK0oMvpiAMlDnKYBm2LHyaqSzZ8Oecc44zFr9h
VepWlYxR9rgNISwfpQXZ2ppPbXZTPW05P5SoZDpxmxzvdF3cLKWS+dtLyYJ4tqlmJLNR
aMrxIhjiZqW9wmX0CT/gaJX5y1dfgz+72PCDBRNIIwukzj23fXF91opYmkM+vREO04mx
Rys7RZICqWbNhe6C1xm0mK33xmBtcWquZ2+EMZQQHiYAthnX7MKUPBY7yevgcPQGGobI
iDgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686929277; x=1689521277;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Q0i90rF1uccbp6kjvDvbM2WlPzkyntVu6IWDQ/xFFp8=;
b=dadO5B2WbkqOV0K2CBosRgUmG1klqzCu1lAoTq2Eh6P0QuQ/1rMpAsHoZUyxtCqNDe
JXnHB0uKI/Rs7EOLqg1ZU6zG3wLfLQGZOjG8YwpkVOC5yUdVjC4VLjuYhpa8RAXXabAS
dUZ6I08OcIxLmOGgXPz/C6dw2kwihblJIO5qHACJf7ROrhiGbBORR6xu79avE4v6IiK1
xzbQLuzTNU3zmhHipxoSPRk4f8CjeQHVjwMVlDtFME0yFrxYJO+fG1eOfx/av6sMwa6b
GaX8SQTSytCG6tDjMoDexoj0zHFhYYNgnCZCzExd7Na4ugpRCPO1cvZOimxLTWToxyNk
IWJQ==
X-Gm-Message-State: AC+VfDwNha7+rMGWgijNuJxhcJskMNiI5jropnn6XCzBXYGN2rExj4OW
QY7epF8+yJcpA+7xPZsKetiuB/YcpJOzAskBU2A=
X-Google-Smtp-Source: ACHHUZ57NDEtJm6P94f+kuiDYiNiJobl95RA6CqrKpJKsn7S8+HcBOS3jOISyEn4UVAKDCxfKJozNEhk2bZ/vBDerKc=
X-Received: by 2002:a2e:94c1:0:b0:2af:1817:26e1 with SMTP id
r1-20020a2e94c1000000b002af181726e1mr1988063ljh.30.1686929277382; Fri, 16 Jun
2023 08:27:57 -0700 (PDT)
MIME-Version: 1.0
From: Herr Gomez Rodrigo
Date: Fri, 16 Jun 2023 15:27:48 +0000
Message-ID:
Subject:
To: TonClass
trenner11
tulsi1968
uniscience
Content-Type: multipart/alternative; boundary="00000000000056f4e505fe40d43b"
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://qHy.drest.cc/34546de4235m342356 http://qHy.drest.cc/34546de4235m342356
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: drest.cc]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: drest.cc]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.194 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[syarifuddinmuhammad760(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[syarifuddinmuhammad760(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: qhy.drest.cc/194.50.153.18]
[URI: qhy.drest.cc/194.50.153.18]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.194 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?}
X-Antivirus: AVG (VPS 230616-4, 6/16/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000056f4e505fe40d43b
Content-Type: text/plain; charset="UTF-8"
http://qHy.drest.cc/34546de4235m342356
--00000000000056f4e505fe40d43b
Content-Type: text/html; charset="UTF-8"
http://qHy.drest.cc/34546de4235m342356
--00000000000056f4e505fe40d43b--