Web Link spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Feb 2023 04:02:00 -0700
Received: from mail-yw1-f195.google.com ([209.85.128.195]:42929)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pWxjj-000MzY-2A
for dave@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 04:01:39 -0700
Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-536bbef1c5eso259599907b3.9
for; Tue, 28 Feb 2023 02:59:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;
b=mM0IcTZYv4PlrTXXQIJOHpeNtgQ55eKzk5YCEfKVyPIpCwFkkphZAmrRTx6hn8DkZG
1SX6JX0ZbOCKbpfBj0bC0MfBnTtCsq9VN8xQ67X9K2BWSK0FcfmUtM+Czz3DTwEazpuM
ay5TuWHATMUVWumdIkm9Vlt8Q+np+2wmp4qJ8yRxjACVYTYIsm1TopCUw+bGQL+jXFe8
qV1Zo7SmvWyIL59veTxiO2Zha1zjUowqgjYOGFYNwg3OzhNAmwId4Jm/U9k7USBlWJ8A
F2Xs2kkwqCRRnqrq/R4S+B8AtTAmzGhRFtrhhn/tpG/pd3KGS0GZ7KMHLXrWd/Kd39uS
Zw4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;
b=FRcI0uXiiBEL5TKrwarjj8eyx0iNvOr601bjowZPMrH2sHj/+xlRp4b424lM7b9j58
aVZb5PK0Qw+zkG9z4uFz6/2rvdrkkxUC7LaS40GmbLwGzws6ipn1U679oIio+1bJiRGW
c6CYsMvVpmkSzEGK4DMXmDbVHkZ8MD7S3FxcbnXzEdwtN5y2slQLf3GQFKnFbtVH4LEc
2NwPol7gdVpJTcTOKqXZOL3tFw3lf212xuEn5bkow+jI8ftYto3hgS8u+Nt/+OJ68Fua
Nlw3xJYzvoSmA1PX8joLuXy85JgHLphNr7D5aGPD3TBtQV5JZTLEEJw1iMw1TCclVBV/
fmcw==
X-Gm-Message-State: AO0yUKXdUmS8e1r5DKNeSscPeu6kvbev3Y1KZbAAxKmYW41dGg2o0UsE
OFvvxEg9Uo4DzrglwuhUgB3PcmtL7BcWmB6xK54=
X-Google-Smtp-Source: AK7set/Yg5j0C1xPX0HdajFNdpBHsaNmcVc0XDtIhQMUmmRrBl3I/IibgCl+GdvlZZc7uqtlpMO9aUavxsLTGTE65t0=
X-Received: by 2002:a05:6902:1205:b0:a09:314f:9f09 with SMTP id
s5-20020a056902120500b00a09314f9f09mr2549426ybu.6.1677581971356; Tue, 28 Feb
2023 02:59:31 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Tue, 28 Feb 2023 10:59:31 +0000
Message-ID:
Subject:
To: datsit1968, dave ,
davelongaphie5309,
david cameletti2, david100 ,
david2divizio, davidbrunstein ,
davidpalmer23
Content-Type: multipart/alternative; boundary="0000000000007c003105f5c07db2"
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://ckcwb.app.link/32beRrduMxb https://ckcwb.app.link/32beRrduMxb
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[micael.rocha.silva(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.195 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
0.0 T_HK_NAME_FM_DR No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.195 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000007c003105f5c07db2
Content-Type: text/plain; charset="UTF-8"
https://ckcwb.app.link/32beRrduMxb
--0000000000007c003105f5c07db2
Content-Type: text/html; charset="UTF-8"
https://ckcwb.app.link/32beRrduMxb
--0000000000007c003105f5c07db2--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Feb 2023 04:02:00 -0700
Received: from mail-yw1-f195.google.com ([209.85.128.195]:42929)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pWxjj-000MzY-2A
for dave@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 04:01:39 -0700
Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-536bbef1c5eso259599907b3.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;
b=mM0IcTZYv4PlrTXXQIJOHpeNtgQ55eKzk5YCEfKVyPIpCwFkkphZAmrRTx6hn8DkZG
1SX6JX0ZbOCKbpfBj0bC0MfBnTtCsq9VN8xQ67X9K2BWSK0FcfmUtM+Czz3DTwEazpuM
ay5TuWHATMUVWumdIkm9Vlt8Q+np+2wmp4qJ8yRxjACVYTYIsm1TopCUw+bGQL+jXFe8
qV1Zo7SmvWyIL59veTxiO2Zha1zjUowqgjYOGFYNwg3OzhNAmwId4Jm/U9k7USBlWJ8A
F2Xs2kkwqCRRnqrq/R4S+B8AtTAmzGhRFtrhhn/tpG/pd3KGS0GZ7KMHLXrWd/Kd39uS
Zw4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;
b=FRcI0uXiiBEL5TKrwarjj8eyx0iNvOr601bjowZPMrH2sHj/+xlRp4b424lM7b9j58
aVZb5PK0Qw+zkG9z4uFz6/2rvdrkkxUC7LaS40GmbLwGzws6ipn1U679oIio+1bJiRGW
c6CYsMvVpmkSzEGK4DMXmDbVHkZ8MD7S3FxcbnXzEdwtN5y2slQLf3GQFKnFbtVH4LEc
2NwPol7gdVpJTcTOKqXZOL3tFw3lf212xuEn5bkow+jI8ftYto3hgS8u+Nt/+OJ68Fua
Nlw3xJYzvoSmA1PX8joLuXy85JgHLphNr7D5aGPD3TBtQV5JZTLEEJw1iMw1TCclVBV/
fmcw==
X-Gm-Message-State: AO0yUKXdUmS8e1r5DKNeSscPeu6kvbev3Y1KZbAAxKmYW41dGg2o0UsE
OFvvxEg9Uo4DzrglwuhUgB3PcmtL7BcWmB6xK54=
X-Google-Smtp-Source: AK7set/Yg5j0C1xPX0HdajFNdpBHsaNmcVc0XDtIhQMUmmRrBl3I/IibgCl+GdvlZZc7uqtlpMO9aUavxsLTGTE65t0=
X-Received: by 2002:a05:6902:1205:b0:a09:314f:9f09 with SMTP id
s5-20020a056902120500b00a09314f9f09mr2549426ybu.6.1677581971356; Tue, 28 Feb
2023 02:59:31 -0800 (PST)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Tue, 28 Feb 2023 10:59:31 +0000
Message-ID:
Subject:
To: datsit1968
davelongaphie5309
david cameletti2
david2divizio
davidpalmer23
Content-Type: multipart/alternative; boundary="0000000000007c003105f5c07db2"
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://ckcwb.app.link/32beRrduMxb https://ckcwb.app.link/32beRrduMxb
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[micael.rocha.silva(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.195 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
0.0 T_HK_NAME_FM_DR No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.195 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000007c003105f5c07db2
Content-Type: text/plain; charset="UTF-8"
https://ckcwb.app.link/32beRrduMxb
--0000000000007c003105f5c07db2
Content-Type: text/html; charset="UTF-8"
https://ckcwb.app.link/32beRrduMxb
--0000000000007c003105f5c07db2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments