More link spam from Gmail

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 19 Jun 2023 06:08:09 -0600

Received: from mail-oa1-f66.google.com ([209.85.160.66]:58872)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qBDeV-0001Xz-0h

for dave@nk.ca;

Mon, 19 Jun 2023 06:06:38 -0600

Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-1aa250e9cb3so801349fac.1

for ; Mon, 19 Jun 2023 05:04:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1687176271; x=1689768271;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;

b=eQzskGaRo2jeCXgDefwWkma5ahAjfY41OVlUqDj5E3WZm5s2dk3xcW4jNE4evwlqyZ

nxJXYP1JSZZvLb4ZaCH2c0ORYn/sbu9uAwmU2WWxInjCydaktYpRObogPhmY4Rv3A68U

Uf27AhkplJQQysGeL5Z0fG9YekE6aJlFX10n6jjOLEmIApsWv5ZXFmzs75QkbkmTQcfY

nzycTOSaNkEEAaq9wSuln4LnP3TKjYOXD+LnVIAkNDXQx0xwkirMVupzzKmvb7awUBH2

5YlNUHLGkKVZs3lNH9SFq92d0XvOvbxUcsk3Yf0oTujP7PRZGu/8ljGst0ne+Uxj1IcG

sK7A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1687176271; x=1689768271;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;

b=j6Wu+i+ViMPLCUp+R9QRsyKB10k6dyq0rrqOQEQKJ4Ofl2EkDFhBevQ+N5TavkNB3y

t17y8imnCb5h90nSYS+a5VAtxFAX9zvEa3xYLaZHjgltaSQfQZ928EGJh01df+ZxOleo

Tbs3hp79joKUvNAoMNJKTeHlYVhbwvB+A5DM6TQSyAOJtMkmAzLAwJR2w2++pPqh0xK1

OJmP9ud8C1yMMwapiHwWBrQp/kVY+NbL6BdbGTEXS3RiRW3CiooEr5iElnln499Ntu3U

SupZThkh+uZ+B8E318Q2MHhNz4Z+TQ5dPZGkpjE/j129PtQuqhzCqVhJo0+69b0mhfNr

k+wA==

X-Gm-Message-State: AC+VfDy/5UisyxuvDtDzuUvrS0oADMnQ3HgjyyQYaiBYMHxNKmg7czLS

cbq8F9W+lLb8H1GYC4+cqjL70r9C2WEBmCI1pw==

X-Google-Smtp-Source: ACHHUZ65d/zRdk19dYBDCYHNDmrVcjHwlEOUNU2j5dMU7931SsoYyruNGsbtYgq04r7PEUUvBPUUYcGKVZZnQzYdHzk=

X-Received: by 2002:a05:6870:a402:b0:1a9:bad4:838f with SMTP id

m2-20020a056870a40200b001a9bad4838fmr4053572oal.11.1687176270939; Mon, 19 Jun

2023 05:04:30 -0700 (PDT)

MIME-Version: 1.0

From: Herr Gomez Rodrigo

Date: Mon, 19 Jun 2023 12:04:24 +0000

Message-ID:

Subject:

To: dashwilson2003 , dave , dave ,

dave , David Hirtle ,

david rdt , davidjlalonde

Content-Type: multipart/alternative; boundary="0000000000004d8ce905fe7a56cf"

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356 http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356





Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: steadydrive.homes]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kyawsantun.er1(at)gmail.com]

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kyawsantun.er1(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.66 listed in list.dnswl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]

[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.66 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_SPACE_RATIO No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.2 BODY_SINGLE_URI Message body is only a URI

Subject: {SPAM?}



--0000000000004d8ce905fe7a56cf

Content-Type: text/plain; charset="UTF-8"



http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356



--0000000000004d8ce905fe7a56cf

Content-Type: text/html; charset="UTF-8"



http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356



--0000000000004d8ce905fe7a56cf--

link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 19 Jun 2023 07:34:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qBEyr-000EUB-2A

for dave@doctor.nl2k.ab.ca;

Mon, 19 Jun 2023 07:31:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 19 Jun 2023 07:31:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f45.google.com ([209.85.208.45]:61524)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qB9rD-000OUd-1j

for doctor@doctor.nl2k.ab.ca;

Mon, 19 Jun 2023 02:03:31 -0600

Received: by mail-ed1-f45.google.com with SMTP id 4fb4d7f45d1cf-5189f49c315so3139386a12.2

for ; Mon, 19 Jun 2023 01:01:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1687161682; x=1689753682;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=byZ0bhz8dI1OSEc7uK4bM85OxxVFevL84jhSd2tJUNg=;

b=devsVQWpOOWCWGui3rZX49Fn62cGBXfbRnvr7D+nSmR61GrXfq6C0gguRZLqh/6hzX

j+KXT/wKehFW19tFhxYKffxfdlB9AtbYUIONClaY4IizvqCC00Fho7r+F+tY5bHuaCWB

eCJsKNQiNLdgTfggsC+0pm8qccB1fodZC+HbspIlltuauGLYSzevj3s7Zxjva/UrWr2L

XztA2ByHm9CK4DrsQ73SzoAfWzitFoSlWh+VHmYCq8Aw2EWnM90NuK82gxd2TGDxxbgc

lmeBuo2IS4lMp7AmNNlRpiSDkBGw4DG5GYVDkzztAi2WWlV3N2T7xqL9TggHqgd/nano

OuIQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1687161682; x=1689753682;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=byZ0bhz8dI1OSEc7uK4bM85OxxVFevL84jhSd2tJUNg=;

b=PnjEusr8oSvgXsQqAKNACa4Wm1eK5L0Sz77tVlDFKhop2ZJn9EDDPhNUadMvm8s5kS

mtiGYGk7ngal9alNgsCl8JF/vwUe7ipkE8iATBLGm6mUFPH8kmdZPvYk8/NNfdxKVhxL

hRZm0HTY5DG+CZsmz4wTcanCk4WghvdDvMaANsrSpuDQZm6KdyUf6xd0MV8e27PjxHiG

9OXGM5gmf1DV89EUi2BrV0dZdv/87phi2Eq+nRCnjxmYuZyaXQITPGx5mfhb9h3aw9OR

dhfePze0Aj/2zGC5E6YWag5YWME1mIrB6DuF0uaE2cCyaxovr+Ul4+Gs+eg6TlyXRuGS

JbGw==

X-Gm-Message-State: AC+VfDzk9PACP5IKHv5DSiCSZL6FqitnPYYnCCV1oYg6/Zi5+7NsX7GZ

YfInYB47AIUh4lwzaQ6bLbgCHXO1pKyBpkMsVvc=

X-Google-Smtp-Source: ACHHUZ7R1E8wOuiX5H1NVNgobzSX9PJUKpW0qrEpOuJ1vZau0XvUWxOlxBdKl4sc/NFU5QT54MLLppzgZRW2lJ35GG8=

X-Received: by 2002:aa7:d419:0:b0:51a:2fa4:2d46 with SMTP id

z25-20020aa7d419000000b0051a2fa42d46mr5457822edq.23.1687161682187; Mon, 19

Jun 2023 01:01:22 -0700 (PDT)

MIME-Version: 1.0

From: "Ms. Monica Rolland"

Date: Mon, 19 Jun 2023 08:01:15 +0000

Message-ID:

Subject:

To: david , david , deekoo ,

dkabura , dkg ,

doctor

Content-Type: multipart/alternative; boundary="000000000000bed97605fe76f07c"



--000000000000bed97605fe76f07c

Content-Type: text/plain; charset="UTF-8"



http://UDEBxCK.hugeidentify.lat/34546de4235m342356



--000000000000bed97605fe76f07c

Content-Type: text/html; charset="UTF-8"



http://UDEBxCK.hugeidentify.lat/34546de4235m342356



--000000000000bed97605fe76f07c--