link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 03 Mar 2023 07:29:05 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pY6OH-00066W-03
for dave@doctor.nl2k.ab.ca;
Fri, 03 Mar 2023 07:28:09 -0700
Resent-From: The Doctor
Resent-Date: Fri, 3 Mar 2023 07:28:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f50.google.com ([209.85.167.50]:46933)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pY5uH-000Lrs-14
for doctor@doctor.nl2k.ab.ca;
Fri, 03 Mar 2023 06:57:13 -0700
Received: by mail-lf1-f50.google.com with SMTP id j11so3631251lfg.13
for; Fri, 03 Mar 2023 05:55:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1677851703;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=3ahVGZkjCpowAMi6cT6GeEAIRDjYT5I3OCCvT02bVPA=;
b=FUBUd9qJjEmBT6EE4j6c05lP2GN2fFvfEnngjDyS/YuMMmaLmzxqbNYrtdFXfWcfPa
6HUDx4SnLYpkb0FQPLmhfoLLKWDpwhsxP7njIRABwBML0+ZH4NwjioV8SEy3YqqLvOdM
GfHdt7jtoTlg1Hu4RvvYjfbZnJeNbPF90aekacxlynpCtpyii7Ig9fgKLG0yxxRPWy8D
XQJaOhs41JrzrFbWrQM5ADVtnuPGAqO+n9yXGQwRxXyR7NOnpCruYRdE3jieLh4pMeaT
IXZoP9ckdH3QJ2rY93XdgdPRhbeO3Sb6bJ8Xmc5NrJ+NfB5DDP+AfHv1R7y5j0EqoFHZ
TOxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1677851703;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=3ahVGZkjCpowAMi6cT6GeEAIRDjYT5I3OCCvT02bVPA=;
b=D2R0Wh4WYlOxrUsav9Y+q//a/+2OM9GUB4qotEmjPVY7anu85Rx0k42qMVrQTYet5e
qNHVx4VwWqrEPs9SCOU/Lu3W3EiQB9f+xHrVls0RlfJBPcLdVUzWDiVmDRKdvup8F7HM
Ws8DdA0QtcvKxtvk3wFvjvZ6dRv8PaEi2crIuhwHGkQGiguKLO1VbwfblIIurJQ7dGWv
a5W0Dq9Qd36nGQlYy0x72oWdlf+neoo5TIKnXrRev5hKNOgnGiORFj9zeA3pWxwe56e8
roT8Ze2u6jkctY5AWxqL1iOVJig+wtYNgocuFHxG2W8eioCcyVrdd+Kf+Dn0a05OgUWB
FT4g==
X-Gm-Message-State: AO0yUKXQp0Y+cXn2KFXL0V92JsZXU2eHr/NnWplLZPCWgaoa9wdDRiOk
xqFOPgQT5/PfFbOcUlfc+dol5PcWY6y5/gl3nrU=
X-Google-Smtp-Source: AK7set+Uea7WVxs4jiVpJZ2rVMI8pKGCObCik7KinfnpowG/fUyeAVJdW2v0oAwyKC9wRw10JKlOwHuISiL56MwiBSk=
X-Received: by 2002:ac2:4c2e:0:b0:4d5:ca32:6ae4 with SMTP id
u14-20020ac24c2e000000b004d5ca326ae4mr641566lfq.4.1677851703595; Fri, 03 Mar
2023 05:55:03 -0800 (PST)
MIME-Version: 1.0
From: "Ms. Monica Rolland"
Date: Fri, 3 Mar 2023 13:55:04 +0000
Message-ID:
Subject:
To: david, david , david ,
deekoo, dkabura , dkg ,
doctor, dougm ,
dpchurch
Content-Type: multipart/alternative; boundary="000000000000c75ac705f5ff4a12"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://y7y0v.app.link/FAcwyD41Mxb https://y7y0v.app.link/FAcwyD41Mxb
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yosufmanhal(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.50 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.50 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--000000000000c75ac705f5ff4a12
Content-Type: text/plain; charset="UTF-8"
https://y7y0v.app.link/FAcwyD41Mxb
--000000000000c75ac705f5ff4a12
Content-Type: text/html; charset="UTF-8"
https://y7y0v.app.link/FAcwyD41Mxb
--000000000000c75ac705f5ff4a12--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 03 Mar 2023 07:29:05 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pY6OH-00066W-03
for dave@doctor.nl2k.ab.ca;
Fri, 03 Mar 2023 07:28:09 -0700
Resent-From: The Doctor
Resent-Date: Fri, 3 Mar 2023 07:28:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f50.google.com ([209.85.167.50]:46933)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pY5uH-000Lrs-14
for doctor@doctor.nl2k.ab.ca;
Fri, 03 Mar 2023 06:57:13 -0700
Received: by mail-lf1-f50.google.com with SMTP id j11so3631251lfg.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1677851703;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=3ahVGZkjCpowAMi6cT6GeEAIRDjYT5I3OCCvT02bVPA=;
b=FUBUd9qJjEmBT6EE4j6c05lP2GN2fFvfEnngjDyS/YuMMmaLmzxqbNYrtdFXfWcfPa
6HUDx4SnLYpkb0FQPLmhfoLLKWDpwhsxP7njIRABwBML0+ZH4NwjioV8SEy3YqqLvOdM
GfHdt7jtoTlg1Hu4RvvYjfbZnJeNbPF90aekacxlynpCtpyii7Ig9fgKLG0yxxRPWy8D
XQJaOhs41JrzrFbWrQM5ADVtnuPGAqO+n9yXGQwRxXyR7NOnpCruYRdE3jieLh4pMeaT
IXZoP9ckdH3QJ2rY93XdgdPRhbeO3Sb6bJ8Xmc5NrJ+NfB5DDP+AfHv1R7y5j0EqoFHZ
TOxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1677851703;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=3ahVGZkjCpowAMi6cT6GeEAIRDjYT5I3OCCvT02bVPA=;
b=D2R0Wh4WYlOxrUsav9Y+q//a/+2OM9GUB4qotEmjPVY7anu85Rx0k42qMVrQTYet5e
qNHVx4VwWqrEPs9SCOU/Lu3W3EiQB9f+xHrVls0RlfJBPcLdVUzWDiVmDRKdvup8F7HM
Ws8DdA0QtcvKxtvk3wFvjvZ6dRv8PaEi2crIuhwHGkQGiguKLO1VbwfblIIurJQ7dGWv
a5W0Dq9Qd36nGQlYy0x72oWdlf+neoo5TIKnXrRev5hKNOgnGiORFj9zeA3pWxwe56e8
roT8Ze2u6jkctY5AWxqL1iOVJig+wtYNgocuFHxG2W8eioCcyVrdd+Kf+Dn0a05OgUWB
FT4g==
X-Gm-Message-State: AO0yUKXQp0Y+cXn2KFXL0V92JsZXU2eHr/NnWplLZPCWgaoa9wdDRiOk
xqFOPgQT5/PfFbOcUlfc+dol5PcWY6y5/gl3nrU=
X-Google-Smtp-Source: AK7set+Uea7WVxs4jiVpJZ2rVMI8pKGCObCik7KinfnpowG/fUyeAVJdW2v0oAwyKC9wRw10JKlOwHuISiL56MwiBSk=
X-Received: by 2002:ac2:4c2e:0:b0:4d5:ca32:6ae4 with SMTP id
u14-20020ac24c2e000000b004d5ca326ae4mr641566lfq.4.1677851703595; Fri, 03 Mar
2023 05:55:03 -0800 (PST)
MIME-Version: 1.0
From: "Ms. Monica Rolland"
Date: Fri, 3 Mar 2023 13:55:04 +0000
Message-ID:
Subject:
To: david
deekoo
doctor
dpchurch
Content-Type: multipart/alternative; boundary="000000000000c75ac705f5ff4a12"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://y7y0v.app.link/FAcwyD41Mxb https://y7y0v.app.link/FAcwyD41Mxb
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yosufmanhal(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.50 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.50 listed in wl.mailspike.net]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--000000000000c75ac705f5ff4a12
Content-Type: text/plain; charset="UTF-8"
https://y7y0v.app.link/FAcwyD41Mxb
--000000000000c75ac705f5ff4a12
Content-Type: text/html; charset="UTF-8"
https://y7y0v.app.link/FAcwyD41Mxb
--000000000000c75ac705f5ff4a12--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments