link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 01 Mar 2023 16:45:04 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pXW78-000L3O-20
for dave@doctor.nl2k.ab.ca;
Wed, 01 Mar 2023 16:44:02 -0700
Resent-From: The Doctor
Resent-Date: Wed, 1 Mar 2023 16:44:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f67.google.com ([209.85.216.67]:39787)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pXSr0-000Gy1-0z
for doctor@doctor.nl2k.ab.ca;
Wed, 01 Mar 2023 13:15:14 -0700
Received: by mail-pj1-f67.google.com with SMTP id 6-20020a17090a190600b00237c5b6ecd7so444863pjg.4
for; Wed, 01 Mar 2023 12:13:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1677701585;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=lboTuKncdf8k4psklbQzc2XQzxxuTLakC5N+IJUogtk=;
b=WsSGBd9XJ/OjyHeqbpA6Eb0ipIa3wXc3mi8HRF9y6J90jVUlXDVLdyZ+Pzl7b5yNiz
Yn70qVxo1le3WiS8ahCiIjuDxhfZpYM63IZZp5XA/er3/gS9WLX3w2hH89w2Dwq1CQhJ
vR5/gi4tNnRj+HeCxAxbmB6zvP6F1ET3GFmtqkYvfzvND0L+vhfrjKByTzMhEO64G3q5
CKbo/29SO0Cn4L+/QnxSmDdIrIr05BOhM4tH9hQmcnYhl9IdrVyJX92zDS6E4c8Tw78w
0w0hi+DXJDlPirqBu+lZk+I99hESFX4eFdN50lcoDvqH8bum8kKr6+lYqSY4LM3gDOaa
q8OA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1677701585;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=lboTuKncdf8k4psklbQzc2XQzxxuTLakC5N+IJUogtk=;
b=PZzyxcaOVg8WLxi8KRhZFpZ297X2H2mdnRjKn1CAk7gFO1elbCGzfwl90q3ncnMpze
aqL/biJ1K0GJS72RR9iQCaRrK6Z+s2Aw5KKNv+0rR8Cku4s8ZgNg7rvvP/4A/ajauCQq
mViuXgzxskF2xOnG4ub5VVI9v37HygsOMctesLaZaeErdWzeLhyWpyQ+u9t0+4Uu342F
doiA7HD+mTluXa+1az8B7Uxkm2fAIsBI8IKPqbaDqvLNie6q2qKid1D9lRdYFDn5duao
egBPlvU+v7GeFPCOWi01R5QNWxLV50ZvO4hzmWGK2xFpKUEdmu/L5/v26zsMb4hN5k4f
53Lw==
X-Gm-Message-State: AO0yUKXby6j0Y3Tvc01c3mvr8YIpsn1nM3PrvXyk3dI4LHVfM7UlwEgI
4bvTvd37wQBUaSoKt+7a1eF+rC4fLZXfIsZRwiEo801gD7QLH4F/Budc
X-Google-Smtp-Source: AK7set8qMTrkFnkAryZ/Pezk0y7xamscei22hxbdB7UkFUZEmkh9of5o8Cn0R23aMPN5qFASPlhkvCuYD9wzKT1ZFTU=
X-Received: by 2002:a17:902:ef8a:b0:19b:456:6400 with SMTP id
iz10-20020a170902ef8a00b0019b04566400mr2805313plb.7.1677701585290; Wed, 01
Mar 2023 12:13:05 -0800 (PST)
MIME-Version: 1.0
From: "LOAN OFFER @2% INTEREST RATE"
Date: Wed, 1 Mar 2023 20:13:05 +0000
Message-ID:
Subject:
To: doctor
Content-Type: multipart/alternative; boundary="00000000000007cb0005f5dc57f6"
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://urj78.app.link/ZmEBvxW0Mxb https://urj78.app.link/ZmEBvxW0Mxb
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.67 listed in list.dnswl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: urj78.app.link]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[safeir(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.67 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?}
--00000000000007cb0005f5dc57f6
Content-Type: text/plain; charset="UTF-8"
https://urj78.app.link/ZmEBvxW0Mxb
--00000000000007cb0005f5dc57f6
Content-Type: text/html; charset="UTF-8"
https://urj78.app.link/ZmEBvxW0Mxb
--00000000000007cb0005f5dc57f6--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 01 Mar 2023 16:45:04 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pXW78-000L3O-20
for dave@doctor.nl2k.ab.ca;
Wed, 01 Mar 2023 16:44:02 -0700
Resent-From: The Doctor
Resent-Date: Wed, 1 Mar 2023 16:44:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f67.google.com ([209.85.216.67]:39787)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pXSr0-000Gy1-0z
for doctor@doctor.nl2k.ab.ca;
Wed, 01 Mar 2023 13:15:14 -0700
Received: by mail-pj1-f67.google.com with SMTP id 6-20020a17090a190600b00237c5b6ecd7so444863pjg.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1677701585;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=lboTuKncdf8k4psklbQzc2XQzxxuTLakC5N+IJUogtk=;
b=WsSGBd9XJ/OjyHeqbpA6Eb0ipIa3wXc3mi8HRF9y6J90jVUlXDVLdyZ+Pzl7b5yNiz
Yn70qVxo1le3WiS8ahCiIjuDxhfZpYM63IZZp5XA/er3/gS9WLX3w2hH89w2Dwq1CQhJ
vR5/gi4tNnRj+HeCxAxbmB6zvP6F1ET3GFmtqkYvfzvND0L+vhfrjKByTzMhEO64G3q5
CKbo/29SO0Cn4L+/QnxSmDdIrIr05BOhM4tH9hQmcnYhl9IdrVyJX92zDS6E4c8Tw78w
0w0hi+DXJDlPirqBu+lZk+I99hESFX4eFdN50lcoDvqH8bum8kKr6+lYqSY4LM3gDOaa
q8OA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1677701585;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=lboTuKncdf8k4psklbQzc2XQzxxuTLakC5N+IJUogtk=;
b=PZzyxcaOVg8WLxi8KRhZFpZ297X2H2mdnRjKn1CAk7gFO1elbCGzfwl90q3ncnMpze
aqL/biJ1K0GJS72RR9iQCaRrK6Z+s2Aw5KKNv+0rR8Cku4s8ZgNg7rvvP/4A/ajauCQq
mViuXgzxskF2xOnG4ub5VVI9v37HygsOMctesLaZaeErdWzeLhyWpyQ+u9t0+4Uu342F
doiA7HD+mTluXa+1az8B7Uxkm2fAIsBI8IKPqbaDqvLNie6q2qKid1D9lRdYFDn5duao
egBPlvU+v7GeFPCOWi01R5QNWxLV50ZvO4hzmWGK2xFpKUEdmu/L5/v26zsMb4hN5k4f
53Lw==
X-Gm-Message-State: AO0yUKXby6j0Y3Tvc01c3mvr8YIpsn1nM3PrvXyk3dI4LHVfM7UlwEgI
4bvTvd37wQBUaSoKt+7a1eF+rC4fLZXfIsZRwiEo801gD7QLH4F/Budc
X-Google-Smtp-Source: AK7set8qMTrkFnkAryZ/Pezk0y7xamscei22hxbdB7UkFUZEmkh9of5o8Cn0R23aMPN5qFASPlhkvCuYD9wzKT1ZFTU=
X-Received: by 2002:a17:902:ef8a:b0:19b:456:6400 with SMTP id
iz10-20020a170902ef8a00b0019b04566400mr2805313plb.7.1677701585290; Wed, 01
Mar 2023 12:13:05 -0800 (PST)
MIME-Version: 1.0
From: "LOAN OFFER @2% INTEREST RATE"
Date: Wed, 1 Mar 2023 20:13:05 +0000
Message-ID:
Subject:
To: doctor
Content-Type: multipart/alternative; boundary="00000000000007cb0005f5dc57f6"
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://urj78.app.link/ZmEBvxW0Mxb https://urj78.app.link/ZmEBvxW0Mxb
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.67 listed in list.dnswl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: urj78.app.link]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[safeir(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.67 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?}
--00000000000007cb0005f5dc57f6
Content-Type: text/plain; charset="UTF-8"
https://urj78.app.link/ZmEBvxW0Mxb
--00000000000007cb0005f5dc57f6
Content-Type: text/html; charset="UTF-8"
https://urj78.app.link/ZmEBvxW0Mxb
--00000000000007cb0005f5dc57f6--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments