link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Mar 2023 14:23:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1peM1A-000F4k-0U
for dave@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 14:22:08 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Mar 2023 14:22:08 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f67.google.com ([209.85.166.67]:35457)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1peGZK-000Img-1q
for doctor@nl2k.ab.ca;
Mon, 20 Mar 2023 08:33:06 -0600
Received: by mail-io1-f67.google.com with SMTP id q6so5490837iot.2
for; Mon, 20 Mar 2023 07:31:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679322657;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=zF9myJ2ux7DxqiGeyKrgi0nu97kqwBuJHNU24wEO/BY=;
b=IR3+bMDMcj6rZFhKseeTG05V6Mk3wxL/kIelE76fiCSgw3jXZL3v1lPS2bBdBephM5
7EWbyAcvZbyMuzkVXHxseqLdQcqluU1TSvXex8IOg8s0+6sLVUC6/KVuV0s4pQysI8mG
szLyLlU2Ce4Jf0youTgn1cTnoyipakpS/zI8eLlua7UWSr+bQKO3T3T4XpT36q/EbhP9
fYmCDBJhe2A7djO7bKNgAPKlW3E/ajFdgRW4rugdJ2ERMieQXJs2lh/wFaISOpqnwZ5l
v2KXmhkl3YE0L0ixUNjqtcrH5r6+S/EEbBjyTlqctxHZn5tTQfxANVGbicERsF2X+Lmt
qTDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679322657;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=zF9myJ2ux7DxqiGeyKrgi0nu97kqwBuJHNU24wEO/BY=;
b=ScF8ktqhGG/cpEfx7yLElnh6CbcfxeQCwJqh8Kp//kqwn3EVjdTAxKHTwD6l1ELDcV
eKv33WuyoF8fCQTba6533PTyNfeBemyhW33tVDO5msqO+KCR4ve6oquepsim0WGDJWQF
qu3JwaClkq0MebmmbTCvwwRyFhD8JOu+V+yaTaevk6mKptCOrIcL+oc6Ppj3r0h5guM8
DbHwSpNAziTqETrLHcFP1+Sl/JmVfG8kBX8fpzrYx0v7722pr2olDC5IUEjWv2yySb5r
6djZkFT08+tcXoF0eC76pOoKwawC6raVn8IChCtHrW/zlcx7WdiFXQcdhhnEXSjZvUSa
YYrQ==
X-Gm-Message-State: AO0yUKXvcq3jYVI6X++JjuAY83qP34Ae4sBJ36Jt/5pC5lbWRijUV/50
XQj1LOUsDlvdDF/apS2Aeci4aRMF5x1Udy+CL5c=
X-Google-Smtp-Source: AK7set8MvpzqLfYvBXeKUa0rA9OsCMfBn5LNmQ/S+lqNPD75ZlhNmKSSyvdsv91HbwwFMZwFQyOOeIjr23Iyv3dZmNk=
X-Received: by 2002:a02:2243:0:b0:406:3588:9456 with SMTP id
o64-20020a022243000000b0040635889456mr102917jao.0.1679322657310; Mon, 20 Mar
2023 07:30:57 -0700 (PDT)
MIME-Version: 1.0
From: "dieudonnenzuzi07@yahoo.fr"
Date: Mon, 20 Mar 2023 14:31:08 +0000
Message-ID:
Subject:
To: dcreativ, deniscarole5 ,
denisefob1991, desjar m ,
dianelefort, dleroux ,
doctor, dominique myre , fmbuyi
Content-Type: multipart/alternative; boundary="00000000000073cb7905f755c6bc"
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://rebrand.ly/103658 https://rebrand.ly/103658
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: rebrand.ly]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[computerhacker1111150007(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[computerhacker1111150007(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.67 listed in wl.mailspike.net]
Subject: {SPAM?}
--00000000000073cb7905f755c6bc
Content-Type: text/plain; charset="UTF-8"
https://rebrand.ly/103658
--00000000000073cb7905f755c6bc
Content-Type: text/html; charset="UTF-8"
https://rebrand.ly/103658
--00000000000073cb7905f755c6bc--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Mar 2023 14:23:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1peM1A-000F4k-0U
for dave@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 14:22:08 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Mar 2023 14:22:08 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f67.google.com ([209.85.166.67]:35457)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1peGZK-000Img-1q
for doctor@nl2k.ab.ca;
Mon, 20 Mar 2023 08:33:06 -0600
Received: by mail-io1-f67.google.com with SMTP id q6so5490837iot.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679322657;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=zF9myJ2ux7DxqiGeyKrgi0nu97kqwBuJHNU24wEO/BY=;
b=IR3+bMDMcj6rZFhKseeTG05V6Mk3wxL/kIelE76fiCSgw3jXZL3v1lPS2bBdBephM5
7EWbyAcvZbyMuzkVXHxseqLdQcqluU1TSvXex8IOg8s0+6sLVUC6/KVuV0s4pQysI8mG
szLyLlU2Ce4Jf0youTgn1cTnoyipakpS/zI8eLlua7UWSr+bQKO3T3T4XpT36q/EbhP9
fYmCDBJhe2A7djO7bKNgAPKlW3E/ajFdgRW4rugdJ2ERMieQXJs2lh/wFaISOpqnwZ5l
v2KXmhkl3YE0L0ixUNjqtcrH5r6+S/EEbBjyTlqctxHZn5tTQfxANVGbicERsF2X+Lmt
qTDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679322657;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=zF9myJ2ux7DxqiGeyKrgi0nu97kqwBuJHNU24wEO/BY=;
b=ScF8ktqhGG/cpEfx7yLElnh6CbcfxeQCwJqh8Kp//kqwn3EVjdTAxKHTwD6l1ELDcV
eKv33WuyoF8fCQTba6533PTyNfeBemyhW33tVDO5msqO+KCR4ve6oquepsim0WGDJWQF
qu3JwaClkq0MebmmbTCvwwRyFhD8JOu+V+yaTaevk6mKptCOrIcL+oc6Ppj3r0h5guM8
DbHwSpNAziTqETrLHcFP1+Sl/JmVfG8kBX8fpzrYx0v7722pr2olDC5IUEjWv2yySb5r
6djZkFT08+tcXoF0eC76pOoKwawC6raVn8IChCtHrW/zlcx7WdiFXQcdhhnEXSjZvUSa
YYrQ==
X-Gm-Message-State: AO0yUKXvcq3jYVI6X++JjuAY83qP34Ae4sBJ36Jt/5pC5lbWRijUV/50
XQj1LOUsDlvdDF/apS2Aeci4aRMF5x1Udy+CL5c=
X-Google-Smtp-Source: AK7set8MvpzqLfYvBXeKUa0rA9OsCMfBn5LNmQ/S+lqNPD75ZlhNmKSSyvdsv91HbwwFMZwFQyOOeIjr23Iyv3dZmNk=
X-Received: by 2002:a02:2243:0:b0:406:3588:9456 with SMTP id
o64-20020a022243000000b0040635889456mr102917jao.0.1679322657310; Mon, 20 Mar
2023 07:30:57 -0700 (PDT)
MIME-Version: 1.0
From: "dieudonnenzuzi07@yahoo.fr"
Date: Mon, 20 Mar 2023 14:31:08 +0000
Message-ID:
Subject:
To: dcreativ
denisefob1991
dianelefort
doctor
Content-Type: multipart/alternative; boundary="00000000000073cb7905f755c6bc"
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://rebrand.ly/103658 https://rebrand.ly/103658
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: rebrand.ly]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[computerhacker1111150007(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[computerhacker1111150007(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.67 listed in wl.mailspike.net]
Subject: {SPAM?}
--00000000000073cb7905f755c6bc
Content-Type: text/plain; charset="UTF-8"
https://rebrand.ly/103658
--00000000000073cb7905f755c6bc
Content-Type: text/html; charset="UTF-8"
https://rebrand.ly/103658
--00000000000073cb7905f755c6bc--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments