Link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Jan 2023 13:41:17 -0700
Received: from mail-ed1-f46.google.com ([209.85.208.46]:43646)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pEyxD-0004Gt-0Q
for dave@doctor.nl2k.ab.ca;
Mon, 09 Jan 2023 13:41:14 -0700
Received: by mail-ed1-f46.google.com with SMTP id x10so11503412edd.10
for; Mon, 09 Jan 2023 12:38:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;
b=SnaGJJquNCcMmu1Itak+pNjdfXE6vqKDVCDy3z0yQMo5jGvlFsjXaKIu2MT1i4YAYS
+84IVkCnnVPuI/9yvifQ4NLlbt2lMEt1soLCvLnWpIMPVHLJxKCBX6TsHooLqu1xvQP7
CeCQVxQEgP+ceRSvw13h41F2w7LEQy+U13LVBWQ16+kb4vCMz/5MM0Dq2+9qNkjB7+8P
cic1FwPdstFsJYaPo/IWm1SigqCPtlhfftpGpNijQDyVuF3Vam7kKoiW3ATittk1Y0c+
HIGRKU6jD1yhJYmuEVS4LUCYsutACCl+ETVYhuWBqDRAWXEu0wID/qWDY69alByFWnMl
OSrQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;
b=ZiL9h78tpQUQoXoSzcrLJdY3kywwkka4b+BsWIqe+lmP7am9wueAFX6kLh+nJ7sAdH
68HTz3OvGd4orga/aGVRgHtqDt85MUUO1HA/Y/gS1umqM5moeq6RlvghgNGuqPczIFdF
ecN2X9jvUwboNoiwK2RRTL8cSCDyKL9fBSxApazqKqvorc0jQdAJ5WMc5aKxSxayqo3C
Dxd3VvBo5J5RcIOVyMkvuk9dm8WZ7+1PpjPoHDcPEIYjoFETDORuLDi4dYIlMx+zry2I
x13ub88oHjv1eqp6/is3bB+3Vx5Xyd++Sm5I/Uowwo6oY75F5ynN4m5te3whQ8WjHB4f
Gqmg==
X-Gm-Message-State: AFqh2krou3shP7Ovz8HScGYs1WmNEjXv7fuUzb3NmPemEs4Gx6hgymLT
nkr2KvJRztua0A9JAU7sTQazwDhngUiQYqGr034=
X-Google-Smtp-Source: AMrXdXthrqa9WfWtQSKdeBqNqp2aQNOqP3+r9k2JzZU9xScjYcIPcW+BClr1ialzU+xJChQlu/EOAgiIwTlrenk+vDI=
X-Received: by 2002:a05:6402:3894:b0:485:2297:69b5 with SMTP id
fd20-20020a056402389400b00485229769b5mr4110001edb.102.1673296714691; Mon, 09
Jan 2023 12:38:34 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Mon, 9 Jan 2023 20:41:21 +0000
Message-ID:
Subject:
To: darcel260, daria b55 ,
darnaque leschats2011, dave ,
davidramos333, david williams52000 ,
dayreynaud
Content-Type: multipart/alternative; boundary="0000000000004877f205f1dac05e"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bbyjw.app.link/yNDvhExxjwb https://bbyjw.app.link/yNDvhExxjwb
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.46 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[amine.drablia(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000004877f205f1dac05e
Content-Type: text/plain; charset="UTF-8"
https://bbyjw.app.link/yNDvhExxjwb
--0000000000004877f205f1dac05e
Content-Type: text/html; charset="UTF-8"
https://bbyjw.app.link/yNDvhExxjwb
--0000000000004877f205f1dac05e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Jan 2023 13:41:17 -0700
Received: from mail-ed1-f46.google.com ([209.85.208.46]:43646)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pEyxD-0004Gt-0Q
for dave@doctor.nl2k.ab.ca;
Mon, 09 Jan 2023 13:41:14 -0700
Received: by mail-ed1-f46.google.com with SMTP id x10so11503412edd.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;
b=SnaGJJquNCcMmu1Itak+pNjdfXE6vqKDVCDy3z0yQMo5jGvlFsjXaKIu2MT1i4YAYS
+84IVkCnnVPuI/9yvifQ4NLlbt2lMEt1soLCvLnWpIMPVHLJxKCBX6TsHooLqu1xvQP7
CeCQVxQEgP+ceRSvw13h41F2w7LEQy+U13LVBWQ16+kb4vCMz/5MM0Dq2+9qNkjB7+8P
cic1FwPdstFsJYaPo/IWm1SigqCPtlhfftpGpNijQDyVuF3Vam7kKoiW3ATittk1Y0c+
HIGRKU6jD1yhJYmuEVS4LUCYsutACCl+ETVYhuWBqDRAWXEu0wID/qWDY69alByFWnMl
OSrQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=4/R480/bVlzUKmlm8XdzsXuwo7fA3B+JwIUoLN9G6JU=;
b=ZiL9h78tpQUQoXoSzcrLJdY3kywwkka4b+BsWIqe+lmP7am9wueAFX6kLh+nJ7sAdH
68HTz3OvGd4orga/aGVRgHtqDt85MUUO1HA/Y/gS1umqM5moeq6RlvghgNGuqPczIFdF
ecN2X9jvUwboNoiwK2RRTL8cSCDyKL9fBSxApazqKqvorc0jQdAJ5WMc5aKxSxayqo3C
Dxd3VvBo5J5RcIOVyMkvuk9dm8WZ7+1PpjPoHDcPEIYjoFETDORuLDi4dYIlMx+zry2I
x13ub88oHjv1eqp6/is3bB+3Vx5Xyd++Sm5I/Uowwo6oY75F5ynN4m5te3whQ8WjHB4f
Gqmg==
X-Gm-Message-State: AFqh2krou3shP7Ovz8HScGYs1WmNEjXv7fuUzb3NmPemEs4Gx6hgymLT
nkr2KvJRztua0A9JAU7sTQazwDhngUiQYqGr034=
X-Google-Smtp-Source: AMrXdXthrqa9WfWtQSKdeBqNqp2aQNOqP3+r9k2JzZU9xScjYcIPcW+BClr1ialzU+xJChQlu/EOAgiIwTlrenk+vDI=
X-Received: by 2002:a05:6402:3894:b0:485:2297:69b5 with SMTP id
fd20-20020a056402389400b00485229769b5mr4110001edb.102.1673296714691; Mon, 09
Jan 2023 12:38:34 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Mon, 9 Jan 2023 20:41:21 +0000
Message-ID:
Subject:
To: darcel260
darnaque leschats2011
davidramos333
dayreynaud
Content-Type: multipart/alternative; boundary="0000000000004877f205f1dac05e"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bbyjw.app.link/yNDvhExxjwb https://bbyjw.app.link/yNDvhExxjwb
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.46 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[amine.drablia(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000004877f205f1dac05e
Content-Type: text/plain; charset="UTF-8"
https://bbyjw.app.link/yNDvhExxjwb
--0000000000004877f205f1dac05e
Content-Type: text/html; charset="UTF-8"
https://bbyjw.app.link/yNDvhExxjwb
--0000000000004877f205f1dac05e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments