Link spam from Gamil
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 08:36:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pgnx6-0009m2-2h
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 08:36:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 08:36:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f170.google.com ([209.85.160.170]:42897)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pgi0g-0006Lm-0d
for doctor@nl2k.ab.ca;
Mon, 27 Mar 2023 02:15:25 -0600
Received: by mail-qt1-f170.google.com with SMTP id g19so7729800qts.9
for; Mon, 27 Mar 2023 01:13:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679904797;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;
b=KMt/QwghN8AP99/x7j5kGLFUJbeYm4qww9fwDthhwUJpajrTbGvDftaVheoxZ0Xyqb
7XqkmuB0SHFeTOle7mpt0ealc4tHLi7lS9CQFQHvse4bJdEAcvcGqMVgR6q1SrL9raer
Gq0vPxONP4MsLfy3dxssUe80ztQrc0IFp3T1J5IhF7170yG3+EhfiQ5Wvgw/viBdh0KF
qUiSCdDTCO+xCc0ffJB/zpZ7hTQT41Ub2xmweBYsy0CtiWrXOV2E8E0H2lm/+Aj1Dla8
psTz8id5I5bt/sOH7w0dEpRnRgdpBNlmIFLC8OwCj0zYjLMCGQxtBDzU6W0/nuy3cBAT
EMlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679904797;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;
b=OzCVjWhCB0AbV1kFTddadQWOtCapbjR19KsikYwsSCaHd/hi7Cx6jR7p0apeS2Zqtu
ZT/7anI4o1Qgb2tieWMga1RRbsZK22a+bi4CGTGUdiGF5s5rQD4yJYfyy0gByKRIaguT
A8QyH/LZQt73HSWuk8vGQAquuTRHHhVuT51VvM5zPC7ihH7T6qPN2NxKP8kMqaLCZqDh
PZHiyPzCJBj90+qgSpjX5KVB4rZApXBHKCys5r5PU+fDzaKjN01RV6sGtnwPVg4rCtpI
2p+3TcXh6yFeWu5aUA38PSJgICe5r9y0By7FnYKP/bI93Dinr0sC7emiZP0/lVyarcB3
m0+g==
X-Gm-Message-State: AO0yUKWRfgf2iU/qAj1vN9Vm+AuJ+UkYSc+XqLVIB4kGEpCR9yNBYFFt
PCiR+ZyVPl3kkSDetIipT5Xnr5YLW/yeBPgCXhA=
X-Google-Smtp-Source: AK7set/yOEhBd1yXBnlUAMW5W+qcsY/VfHL68j0SpXQuAzhCqU41KlXEPVcdqXMSxbvp6JMNOXV1a1WBBvWPl1xBED8=
X-Received: by 2002:ac8:5905:0:b0:3e1:5755:7bbf with SMTP id
5-20020ac85905000000b003e157557bbfmr4145192qty.5.1679904797509; Mon, 27 Mar
2023 01:13:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:8d84:0:b0:5bc:5071:8a6a with HTTP; Mon, 27 Mar 2023
01:13:17 -0700 (PDT)
From: "dieudonnenzuzi07@yahoo.fr"
Date: Mon, 27 Mar 2023 13:43:17 +0530
Message-ID:
Subject:
To: dcreativ, deniscarole5 ,
denisefob1991, desjar m ,
dianelefort, dleroux ,
doctor, dominique myre , fmbuyi
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3ZjRSMy
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.170 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mahen.bhavsar(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
0.0 TVD_SPACE_RATIO No description available.
2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.170 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?}
https://bit.ly/3ZjRSMy
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 08:36:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pgnx6-0009m2-2h
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 08:36:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 08:36:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f170.google.com ([209.85.160.170]:42897)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pgi0g-0006Lm-0d
for doctor@nl2k.ab.ca;
Mon, 27 Mar 2023 02:15:25 -0600
Received: by mail-qt1-f170.google.com with SMTP id g19so7729800qts.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679904797;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;
b=KMt/QwghN8AP99/x7j5kGLFUJbeYm4qww9fwDthhwUJpajrTbGvDftaVheoxZ0Xyqb
7XqkmuB0SHFeTOle7mpt0ealc4tHLi7lS9CQFQHvse4bJdEAcvcGqMVgR6q1SrL9raer
Gq0vPxONP4MsLfy3dxssUe80ztQrc0IFp3T1J5IhF7170yG3+EhfiQ5Wvgw/viBdh0KF
qUiSCdDTCO+xCc0ffJB/zpZ7hTQT41Ub2xmweBYsy0CtiWrXOV2E8E0H2lm/+Aj1Dla8
psTz8id5I5bt/sOH7w0dEpRnRgdpBNlmIFLC8OwCj0zYjLMCGQxtBDzU6W0/nuy3cBAT
EMlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679904797;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;
b=OzCVjWhCB0AbV1kFTddadQWOtCapbjR19KsikYwsSCaHd/hi7Cx6jR7p0apeS2Zqtu
ZT/7anI4o1Qgb2tieWMga1RRbsZK22a+bi4CGTGUdiGF5s5rQD4yJYfyy0gByKRIaguT
A8QyH/LZQt73HSWuk8vGQAquuTRHHhVuT51VvM5zPC7ihH7T6qPN2NxKP8kMqaLCZqDh
PZHiyPzCJBj90+qgSpjX5KVB4rZApXBHKCys5r5PU+fDzaKjN01RV6sGtnwPVg4rCtpI
2p+3TcXh6yFeWu5aUA38PSJgICe5r9y0By7FnYKP/bI93Dinr0sC7emiZP0/lVyarcB3
m0+g==
X-Gm-Message-State: AO0yUKWRfgf2iU/qAj1vN9Vm+AuJ+UkYSc+XqLVIB4kGEpCR9yNBYFFt
PCiR+ZyVPl3kkSDetIipT5Xnr5YLW/yeBPgCXhA=
X-Google-Smtp-Source: AK7set/yOEhBd1yXBnlUAMW5W+qcsY/VfHL68j0SpXQuAzhCqU41KlXEPVcdqXMSxbvp6JMNOXV1a1WBBvWPl1xBED8=
X-Received: by 2002:ac8:5905:0:b0:3e1:5755:7bbf with SMTP id
5-20020ac85905000000b003e157557bbfmr4145192qty.5.1679904797509; Mon, 27 Mar
2023 01:13:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:8d84:0:b0:5bc:5071:8a6a with HTTP; Mon, 27 Mar 2023
01:13:17 -0700 (PDT)
From: "dieudonnenzuzi07@yahoo.fr"
Date: Mon, 27 Mar 2023 13:43:17 +0530
Message-ID:
Subject:
To: dcreativ
denisefob1991
dianelefort
doctor
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3ZjRSMy
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.170 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mahen.bhavsar(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
0.0 TVD_SPACE_RATIO No description available.
2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.170 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?}
https://bit.ly/3ZjRSMy
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments