Knee spam from the Netherlands
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Mon, 06 Jun 2022 09:57:01 -0600
Received: from inviteis.ru.com ([195.133.39.105]:11790)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nyF5Q-0006r6-52
for dave@nk.ca;
Mon, 06 Jun 2022 09:56:16 -0600
Date: Mon, 06 Jun 2022 10:37:55 -0500
From: "CircaKnee"
MIME-Version: 1.0
Precedence: bulk
To:
Subject: Youthful Knees, once again!
Message-ID:
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
1.6 SCC_BODY_URI_ONLY No description available.
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: inviteis.ru.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: inviteis.ru.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: inviteis.ru.com]
Subject: {SPAM?} Youthful Knees, once again!
Envelope-to: dave@nk.ca
Delivery-date: Mon, 06 Jun 2022 09:57:01 -0600
Received: from inviteis.ru.com ([195.133.39.105]:11790)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1nyF5Q-0006r6-52
for dave@nk.ca;
Mon, 06 Jun 2022 09:56:16 -0600
Date: Mon, 06 Jun 2022 10:37:55 -0500
From: "CircaKnee"
MIME-Version: 1.0
Precedence: bulk
To:
Subject: Youthful Knees, once again!
Message-ID:
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
1.6 SCC_BODY_URI_ONLY No description available.
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: inviteis.ru.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: inviteis.ru.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: inviteis.ru.com]
Subject: {SPAM?} Youthful Knees, once again!
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments