mass spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 20 Sep 2022 15:14:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oakYP-0004X2-Gc
for dave@doctor.nl2k.ab.ca;
Tue, 20 Sep 2022 15:13:17 -0600
Resent-From: The Doctor
Resent-Date: Tue, 20 Sep 2022 15:13:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ns2.nk.ca ([204.209.81.3]:48802 helo=gallifrey.nk.ca)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oahxN-000HUK-Cy
for news@nk.ca;
Tue, 20 Sep 2022 12:26:55 -0600
Received: from mail-pj1-f45.google.com ([209.85.216.45]:51042)
by gallifrey.nk.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oahx0-000IGj-Sf
for usenet@gallifrey.nk.ca;
Tue, 20 Sep 2022 12:26:32 -0600
Received: by mail-pj1-f45.google.com with SMTP id fv3so4029691pjb.0
for; Tue, 20 Sep 2022 11:26:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=IrTGq0dSugB/vmCKtuy1BTdJE0d35TW94dvoEKn8tgM=;
b=PFkl6CFEVT19HEYjkWe95rEyHdJ4PjVg4s1579HgnIMd9Zc0qEFl+nvQqzKXP86Qc6
dVRm506R3/3t3tZDn455Mqj5ef7Z9VMQ9je4XrfNitxEhf5kEge4pNOBO/ic5qhA1aF1
1CmsR3QXa5DZId44trZRC9TcVO5q8uzh8BllbtleS9HsJr9CBxKVdp5GuLuKpTkJxKkQ
YWim7iSjH2ljr7v3UTtUVvckJGxUR5TozDQhiGks0gJ8GSj4gb76vmV9sH+IZc7iWiY8
rN4alnNSnH8DLNkJogjX6Ul3c3unbdiH6oxLa2dIqFMQzXYpUfP59UDLAOUdf70Be68h
3TmQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=IrTGq0dSugB/vmCKtuy1BTdJE0d35TW94dvoEKn8tgM=;
b=tz5ENYOwne1iIeVWJE6bzig4l5zkZgbHoJ0+Y+KdX0cGG3Tg9/yoDblig/fyNc4Min
bO6wZePwRQi67UTgpLUxapl2vQNweAdbfGXCC4rQsHqSY+uCG11jwFJe+nYLFaw2SmAA
0yylEya2dixVPGoYGRWVgWW5nHFmpKuaprMLo1a+KvZ4kVWPz44E+lOX0htDHhEEGF9H
lwaFoGc7eq9dAP4dxuWnXAs3UFpjjlW9hv0lLsT2Pu29NBCCD2zsm4GqGYO5JeV7246p
phX5Rl0E4t9yeUnqZMiRjT1bTBB1RESMkcEu7/ChJyGS7RD3cCMeX7DyHdabJAu6GwLh
sbvA==
X-Gm-Message-State: ACrzQf1y0yXOJ7Di3JVhSlwZfujNT14mtebZZuiUP6r2/L4j+VYQ3mDN
vWm/dW85zoSAVHVW7pZPBExQ7iZtdBJydwilL+E=
X-Google-Smtp-Source: AMsMyM60hJNIUohn0F393675xXrcnBd/e7xr0AXsM20UMO0gsa2VjgXRIw30oojpe93y9kt5xhXxXd0eza82WPoFq50=
X-Received: by 2002:a17:90b:110a:b0:203:6f0c:9b66 with SMTP id
gi10-20020a17090b110a00b002036f0c9b66mr5286802pjb.104.1663698366233; Tue, 20
Sep 2022 11:26:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: barjames354@gmail.com
From: JAMES BARLOWE
Date: Tue, 20 Sep 2022 05:41:33 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000021ffe005e91ff670"
Bcc: usenet@gallifrey.nk.ca
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I just returned from vacation yesterday and received your
email, please respond back so we can proceed. JB.esq I just returned from
vacation yesterday and received your email, please respond back so we can
proceed.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: jb.esq]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[barjames354[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.45 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[esqglennhegar[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I just returned from vacation yesterday and received your
email, please respond back so we can proceed. JB.esq I just returned from
vacation yesterday and received your email, please respond back so we can
proceed.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.45 listed in wl.mailspike.net]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: jb.esq]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[barjames354[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[esqglennhegar[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
--00000000000021ffe005e91ff670
Content-Type: text/plain; charset="UTF-8"
I just returned from vacation yesterday and received your email, please
respond back so we can proceed.
JB.esq
--00000000000021ffe005e91ff670
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
">
">
=
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 20 Sep 2022 15:14:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oakYP-0004X2-Gc
for dave@doctor.nl2k.ab.ca;
Tue, 20 Sep 2022 15:13:17 -0600
Resent-From: The Doctor
Resent-Date: Tue, 20 Sep 2022 15:13:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ns2.nk.ca ([204.209.81.3]:48802 helo=gallifrey.nk.ca)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oahxN-000HUK-Cy
for news@nk.ca;
Tue, 20 Sep 2022 12:26:55 -0600
Received: from mail-pj1-f45.google.com ([209.85.216.45]:51042)
by gallifrey.nk.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oahx0-000IGj-Sf
for usenet@gallifrey.nk.ca;
Tue, 20 Sep 2022 12:26:32 -0600
Received: by mail-pj1-f45.google.com with SMTP id fv3so4029691pjb.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=IrTGq0dSugB/vmCKtuy1BTdJE0d35TW94dvoEKn8tgM=;
b=PFkl6CFEVT19HEYjkWe95rEyHdJ4PjVg4s1579HgnIMd9Zc0qEFl+nvQqzKXP86Qc6
dVRm506R3/3t3tZDn455Mqj5ef7Z9VMQ9je4XrfNitxEhf5kEge4pNOBO/ic5qhA1aF1
1CmsR3QXa5DZId44trZRC9TcVO5q8uzh8BllbtleS9HsJr9CBxKVdp5GuLuKpTkJxKkQ
YWim7iSjH2ljr7v3UTtUVvckJGxUR5TozDQhiGks0gJ8GSj4gb76vmV9sH+IZc7iWiY8
rN4alnNSnH8DLNkJogjX6Ul3c3unbdiH6oxLa2dIqFMQzXYpUfP59UDLAOUdf70Be68h
3TmQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=IrTGq0dSugB/vmCKtuy1BTdJE0d35TW94dvoEKn8tgM=;
b=tz5ENYOwne1iIeVWJE6bzig4l5zkZgbHoJ0+Y+KdX0cGG3Tg9/yoDblig/fyNc4Min
bO6wZePwRQi67UTgpLUxapl2vQNweAdbfGXCC4rQsHqSY+uCG11jwFJe+nYLFaw2SmAA
0yylEya2dixVPGoYGRWVgWW5nHFmpKuaprMLo1a+KvZ4kVWPz44E+lOX0htDHhEEGF9H
lwaFoGc7eq9dAP4dxuWnXAs3UFpjjlW9hv0lLsT2Pu29NBCCD2zsm4GqGYO5JeV7246p
phX5Rl0E4t9yeUnqZMiRjT1bTBB1RESMkcEu7/ChJyGS7RD3cCMeX7DyHdabJAu6GwLh
sbvA==
X-Gm-Message-State: ACrzQf1y0yXOJ7Di3JVhSlwZfujNT14mtebZZuiUP6r2/L4j+VYQ3mDN
vWm/dW85zoSAVHVW7pZPBExQ7iZtdBJydwilL+E=
X-Google-Smtp-Source: AMsMyM60hJNIUohn0F393675xXrcnBd/e7xr0AXsM20UMO0gsa2VjgXRIw30oojpe93y9kt5xhXxXd0eza82WPoFq50=
X-Received: by 2002:a17:90b:110a:b0:203:6f0c:9b66 with SMTP id
gi10-20020a17090b110a00b002036f0c9b66mr5286802pjb.104.1663698366233; Tue, 20
Sep 2022 11:26:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: barjames354@gmail.com
From: JAMES BARLOWE
Date: Tue, 20 Sep 2022 05:41:33 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000021ffe005e91ff670"
Bcc: usenet@gallifrey.nk.ca
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I just returned from vacation yesterday and received your
email, please respond back so we can proceed. JB.esq I just returned from
vacation yesterday and received your email, please respond back so we can
proceed.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: jb.esq]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[barjames354[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.45 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[esqglennhegar[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I just returned from vacation yesterday and received your
email, please respond back so we can proceed. JB.esq I just returned from
vacation yesterday and received your email, please respond back so we can
proceed.
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.45 listed in wl.mailspike.net]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: jb.esq]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[barjames354[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[esqglennhegar[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
--00000000000021ffe005e91ff670
Content-Type: text/plain; charset="UTF-8"
I just returned from vacation yesterday and received your email, please
respond back so we can proceed.
JB.esq
--00000000000021ffe005e91ff670
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
">
I just returned from=
vacation yesterday and received your email, please respond back so we can =
proceed.
vacation yesterday and received your email, please respond back so we can =
proceed.
">
JB.esq
--00000000000021ffe005e91ff670--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments