link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 19 Dec 2022 10:26:08 -0700
Received: from mail-pf1-f175.google.com ([209.85.210.175]:44976)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1p7JsK-000EZt-1V
for dave@doctor.nl2k.ab.ca;
Mon, 19 Dec 2022 10:24:33 -0700
Received: by mail-pf1-f175.google.com with SMTP id d82so6720611pfd.11
for; Mon, 19 Dec 2022 09:22:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;
b=O976EQKaqD4JPFUFw9vVP+vaqKSyo7dUulaNR+MTOiSLoxVQP2LLS1tEc0Hs0YnnQ4
Ld/7Rj8V3WCDX6Sj2CoKHvJKnRliB0iMSPuC/Y4WuXKxNB14Kd7LglWbhawCuyVDKdVX
fC5rNfBCQj7k7gIZgzHy/BOiMu61Jhm2pzDXghKtYdMkNFZDvY4s5HoXxFCF7B0Ts1la
tp8VDGmqoPKng6WUS8Jk0+R1W5PMQwAWAx9cNGAw1TLc3hHt0D0Om6Lpio5aRpRta+V8
8Hg48aXAFizR3wVJfT6XlFKEhNnRH4KNallQPk1YweEWwA2UxwhriP8KBjf24tJ6nOMV
8YeQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;
b=zMlRTubOQ81oDgRhiBqMcGXbDl5I6Zgw35yZJIMaC+n3mVXWT1xQSawYg/MysToXgw
BUJV8hpJSowBt9wTgfAp+8KfMjp4laBBMkOpS7yh21qZyS/O6sEzxAFaK0ILLLCF9dSM
ocX67inEBs2d0WQKxpBrg1PmVLKvdr5hnRc/06l8RvwaNa37jXavzVi+t/vU4XuzGndx
EaNIpMUDvxAO9JeSOpNXneilHa40nEzsmOGh/zvhTmL7FMRlkCowwqQmVfZibpjm3zNc
FQtLZlmoQac4h+ALB1FlBJn5w9KwHC47mvButlUsXxh2Dv/kPm5rKoZG9li+Qc9WB06Z
aYIw==
X-Gm-Message-State: ANoB5plvTtNg08wT4/4ZA1RuElwhRhT+86JRg62ae463yRsPXtH4PV4V
dFaLWKk9zJRWN2LI9YtDxuOBsllsn0MnT6s6ags=
X-Google-Smtp-Source: AA0mqf5PvRCYOMby5iLD63MXBXy8cUocGQwN6NbC0Vh/ZdHpWSIeK1fzmPrvezdqnmtTFCg5zP27+p1KsWzdUwb8D2U=
X-Received: by 2002:a62:1981:0:b0:578:50b7:cb6f with SMTP id
123-20020a621981000000b0057850b7cb6fmr1976755pfz.3.1671470514467; Mon, 19 Dec
2022 09:21:54 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Mon, 19 Dec 2022 17:24:25 +0000
Message-ID:
Subject:
To: daria b55,
darnaque leschats2011, dave ,
davidramos333, david williams52000 ,
dayreynaud
Content-Type: multipart/alternative; boundary="00000000000044769e05f0318ee4"
X-Spam_score: 7.1
X-Spam_score_int: 71
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://ugjld.app.link/qTSaq6bUSvb https://ugjld.app.link/qTSaq6bUSvb
Content analysis details: (7.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[pandubramantyo3[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[pandubramantyo3[at]gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.175 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.210.175 listed in list.dnswl.org]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?}
--00000000000044769e05f0318ee4
Content-Type: text/plain; charset="UTF-8"
https://ugjld.app.link/qTSaq6bUSvb
--00000000000044769e05f0318ee4
Content-Type: text/html; charset="UTF-8"
https://ugjld.app.link/qTSaq6bUSvb
--00000000000044769e05f0318ee4--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 19 Dec 2022 10:26:08 -0700
Received: from mail-pf1-f175.google.com ([209.85.210.175]:44976)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1p7JsK-000EZt-1V
for dave@doctor.nl2k.ab.ca;
Mon, 19 Dec 2022 10:24:33 -0700
Received: by mail-pf1-f175.google.com with SMTP id d82so6720611pfd.11
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;
b=O976EQKaqD4JPFUFw9vVP+vaqKSyo7dUulaNR+MTOiSLoxVQP2LLS1tEc0Hs0YnnQ4
Ld/7Rj8V3WCDX6Sj2CoKHvJKnRliB0iMSPuC/Y4WuXKxNB14Kd7LglWbhawCuyVDKdVX
fC5rNfBCQj7k7gIZgzHy/BOiMu61Jhm2pzDXghKtYdMkNFZDvY4s5HoXxFCF7B0Ts1la
tp8VDGmqoPKng6WUS8Jk0+R1W5PMQwAWAx9cNGAw1TLc3hHt0D0Om6Lpio5aRpRta+V8
8Hg48aXAFizR3wVJfT6XlFKEhNnRH4KNallQPk1YweEWwA2UxwhriP8KBjf24tJ6nOMV
8YeQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=VlhfIP/4l9vye+FftpLy6uLMYbYhr/dX4b3+Rr5v0Tw=;
b=zMlRTubOQ81oDgRhiBqMcGXbDl5I6Zgw35yZJIMaC+n3mVXWT1xQSawYg/MysToXgw
BUJV8hpJSowBt9wTgfAp+8KfMjp4laBBMkOpS7yh21qZyS/O6sEzxAFaK0ILLLCF9dSM
ocX67inEBs2d0WQKxpBrg1PmVLKvdr5hnRc/06l8RvwaNa37jXavzVi+t/vU4XuzGndx
EaNIpMUDvxAO9JeSOpNXneilHa40nEzsmOGh/zvhTmL7FMRlkCowwqQmVfZibpjm3zNc
FQtLZlmoQac4h+ALB1FlBJn5w9KwHC47mvButlUsXxh2Dv/kPm5rKoZG9li+Qc9WB06Z
aYIw==
X-Gm-Message-State: ANoB5plvTtNg08wT4/4ZA1RuElwhRhT+86JRg62ae463yRsPXtH4PV4V
dFaLWKk9zJRWN2LI9YtDxuOBsllsn0MnT6s6ags=
X-Google-Smtp-Source: AA0mqf5PvRCYOMby5iLD63MXBXy8cUocGQwN6NbC0Vh/ZdHpWSIeK1fzmPrvezdqnmtTFCg5zP27+p1KsWzdUwb8D2U=
X-Received: by 2002:a62:1981:0:b0:578:50b7:cb6f with SMTP id
123-20020a621981000000b0057850b7cb6fmr1976755pfz.3.1671470514467; Mon, 19 Dec
2022 09:21:54 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Mon, 19 Dec 2022 17:24:25 +0000
Message-ID:
Subject:
To: daria b55
darnaque leschats2011
davidramos333
dayreynaud
Content-Type: multipart/alternative; boundary="00000000000044769e05f0318ee4"
X-Spam_score: 7.1
X-Spam_score_int: 71
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://ugjld.app.link/qTSaq6bUSvb https://ugjld.app.link/qTSaq6bUSvb
Content analysis details: (7.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[pandubramantyo3[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[pandubramantyo3[at]gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.175 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.210.175 listed in list.dnswl.org]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?}
--00000000000044769e05f0318ee4
Content-Type: text/plain; charset="UTF-8"
https://ugjld.app.link/qTSaq6bUSvb
--00000000000044769e05f0318ee4
Content-Type: text/html; charset="UTF-8"
https://ugjld.app.link/qTSaq6bUSvb
--00000000000044769e05f0318ee4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments