Yet another link spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Mar 2023 23:51:45 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pZ4h4-000Dkt-35
for dave@doctor.nl2k.ab.ca;
Sun, 05 Mar 2023 23:51:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Mar 2023 23:51:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:47052)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pZ4aq-0006Kh-03
for doctor@nl2k.ab.ca;
Sun, 05 Mar 2023 23:45:12 -0700
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-536cb25982eso165356397b3.13
for; Sun, 05 Mar 2023 22:43:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=esccbvr-pt.20210112.gappssmtp.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;
b=49TBAuITIbOBQUtMgsxOellt7y+YK38Sc+J/i3afYChv/pvcewHUI2KwhqbwchK1lQ
6NHiFK4EU4hMv1uUtCAW+m4S207GBDxFcObHu2VnT4M6XzIOdv3ywlX/VFUu+TckTjHL
mRM1LTjvluJgyNa/5SJPHfXRxBen92TDDtCcjYs1iPAWiNH5CcdfO8ONtRSTT6XS7N3v
mzltsXAHfX7wuq5cRCXLG9rNaHY8gm4N0jvf6voDkYJ/Q9ZJ/TeV8i6KDhzS2Gzg//2m
4XlP9GIlpZbz0pa63KcnX8F5FgVz6gTiZSapd+VhFzr52gn6cFeEwb9RXhGX2xsE9sQt
nX6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;
b=prz1hKOghe+mIKSgk63a6U35E+qpZw1RJ+wGvZvLz5fjWX4ZbM4ioZ0ONo5nzosFPY
otfbgIKQhQodR9oyL0aRjMnDlUoynRwpARWILZvThgTQeJS4/eib50ztHr16h7HapN4d
xbkWGtELbQdn1A00zeVcM1Eg3TjTyfRgqaWV17P09vjQ7J2HFJU6pUiD17s8mlNHArI8
jcCN6FOAiQHAF/EyH8A2X9ZNXNHRDTx3SE5+W62WkTiycvxXLJ5Ue26azSSI08jWDtkP
AFbInxXIzq0oB7ZJXr/JoZuTMNfTRnDwODYvjKRM70mGWmab6xIbwLgp1MwYyj6YjewO
UujA==
X-Gm-Message-State: AO0yUKV/Z6NUbAz2w0puKJTY/ur1vtKa+Y5wOfFGtp/ukOyz66OL84rD
/QfkoOIivxKPPveG/MReScU9I2YFUqZNnzaia2A0yw==
X-Google-Smtp-Source: AK7set93JbFodc8ZMg8XyeYwgnTQb56dzNZs+fRLDKk9sGrhoRoV/h9Z0w5fTxr3ijDEihFmSA0ccggnwPpXN2ize40=
X-Received: by 2002:a81:4520:0:b0:534:515:e472 with SMTP id
s32-20020a814520000000b005340515e472mr6201312ywa.4.1678084983422; Sun, 05 Mar
2023 22:43:03 -0800 (PST)
MIME-Version: 1.0
From: MONICA DAN
Date: Mon, 6 Mar 2023 06:43:01 +0000
Message-ID:
Subject:
To: Deb Nobes, denis gougeon ,
derekbrady, dgasparotto , dgonor ,
discdrive, dleinbach , dnto ,
doctor, doug
Content-Type: multipart/alternative; boundary="0000000000005703a305f6359b3e"
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://eah45.app.link/ID7weblPUxb https://eah45.app.link/ID7weblPUxb
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: eah45.app.link]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000005703a305f6359b3e
Content-Type: text/plain; charset="UTF-8"
https://eah45.app.link/ID7weblPUxb
--0000000000005703a305f6359b3e
Content-Type: text/html; charset="UTF-8"
https://eah45.app.link/ID7weblPUxb
--0000000000005703a305f6359b3e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Mar 2023 23:51:45 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pZ4h4-000Dkt-35
for dave@doctor.nl2k.ab.ca;
Sun, 05 Mar 2023 23:51:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Mar 2023 23:51:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:47052)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pZ4aq-0006Kh-03
for doctor@nl2k.ab.ca;
Sun, 05 Mar 2023 23:45:12 -0700
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-536cb25982eso165356397b3.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=esccbvr-pt.20210112.gappssmtp.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;
b=49TBAuITIbOBQUtMgsxOellt7y+YK38Sc+J/i3afYChv/pvcewHUI2KwhqbwchK1lQ
6NHiFK4EU4hMv1uUtCAW+m4S207GBDxFcObHu2VnT4M6XzIOdv3ywlX/VFUu+TckTjHL
mRM1LTjvluJgyNa/5SJPHfXRxBen92TDDtCcjYs1iPAWiNH5CcdfO8ONtRSTT6XS7N3v
mzltsXAHfX7wuq5cRCXLG9rNaHY8gm4N0jvf6voDkYJ/Q9ZJ/TeV8i6KDhzS2Gzg//2m
4XlP9GIlpZbz0pa63KcnX8F5FgVz6gTiZSapd+VhFzr52gn6cFeEwb9RXhGX2xsE9sQt
nX6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=eCcXplxhA5R6NzpLmi8TKNph+r58B6lN/h7GAYgT0JI=;
b=prz1hKOghe+mIKSgk63a6U35E+qpZw1RJ+wGvZvLz5fjWX4ZbM4ioZ0ONo5nzosFPY
otfbgIKQhQodR9oyL0aRjMnDlUoynRwpARWILZvThgTQeJS4/eib50ztHr16h7HapN4d
xbkWGtELbQdn1A00zeVcM1Eg3TjTyfRgqaWV17P09vjQ7J2HFJU6pUiD17s8mlNHArI8
jcCN6FOAiQHAF/EyH8A2X9ZNXNHRDTx3SE5+W62WkTiycvxXLJ5Ue26azSSI08jWDtkP
AFbInxXIzq0oB7ZJXr/JoZuTMNfTRnDwODYvjKRM70mGWmab6xIbwLgp1MwYyj6YjewO
UujA==
X-Gm-Message-State: AO0yUKV/Z6NUbAz2w0puKJTY/ur1vtKa+Y5wOfFGtp/ukOyz66OL84rD
/QfkoOIivxKPPveG/MReScU9I2YFUqZNnzaia2A0yw==
X-Google-Smtp-Source: AK7set93JbFodc8ZMg8XyeYwgnTQb56dzNZs+fRLDKk9sGrhoRoV/h9Z0w5fTxr3ijDEihFmSA0ccggnwPpXN2ize40=
X-Received: by 2002:a81:4520:0:b0:534:515:e472 with SMTP id
s32-20020a814520000000b005340515e472mr6201312ywa.4.1678084983422; Sun, 05 Mar
2023 22:43:03 -0800 (PST)
MIME-Version: 1.0
From: MONICA DAN
Date: Mon, 6 Mar 2023 06:43:01 +0000
Message-ID:
Subject:
To: Deb Nobes
derekbrady
discdrive
doctor
Content-Type: multipart/alternative; boundary="0000000000005703a305f6359b3e"
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://eah45.app.link/ID7weblPUxb https://eah45.app.link/ID7weblPUxb
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: eah45.app.link]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?}
--0000000000005703a305f6359b3e
Content-Type: text/plain; charset="UTF-8"
https://eah45.app.link/ID7weblPUxb
--0000000000005703a305f6359b3e
Content-Type: text/html; charset="UTF-8"
https://eah45.app.link/ID7weblPUxb
--0000000000005703a305f6359b3e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments