link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Apr 2023 08:10:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pjhLh-000HYJ-0j

for dave@doctor.nl2k.ab.ca;

Tue, 04 Apr 2023 08:09:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 4 Apr 2023 08:09:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f171.google.com ([209.85.215.171]:39815)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pjbmj-000HjV-1S

for doctor@nl2k.ab.ca;

Tue, 04 Apr 2023 02:13:04 -0600

Received: by mail-pg1-f171.google.com with SMTP id h31so19112412pgl.6

for ; Tue, 04 Apr 2023 01:10:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1680595852;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=mrfnU5gxlKOu+YZvgI+3HZadCp08zYDMM5daZIQlZwU=;

b=kaqzLnTZfn3KcgJtdeIniy6SOZQJoDHD8Yo3KBwK2HVoDDz+fX4D39ZffYvnJ0A+wu

/yl/T5r3y6bApNwA3jfqaSffyIsZRkTW5E79EGqnjE3Bv19/Wy2bPLhk/QDgFQQFAjr9

dtMQX7UKlSdh/6KErMSO9cC3dKpERa9onN58iqr4QSJO7A5i7YaNgX21YkloMhZm8PCZ

h8LX1CP8uTfC8ZIEg2hrhUkW7dRVc8FV4TzEctjREtqESYaKZnhcfDa1J82DA3d43fC3

vF4QNnRiz1WdGP0hrHk6degY3E/uB5C6ZjhpcHZF083SAEaN8hlWDstY9S2QeDvRc/RH

8qPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1680595852;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=mrfnU5gxlKOu+YZvgI+3HZadCp08zYDMM5daZIQlZwU=;

b=SCaBpb4AZrD9NjqaSO2TAgizcfZ4Qs4U8Esxqhlrygwi0KqNhySUY+aKemJ5qbtpvN

H7aPHGNVG/JnJGlf7Y6cn9/SZWpyqJ37PYYhxPjqR2ikWoazNztenLiFGjZHGLDYhFYi

BqRFP0pseauwWnkuv7ifvAAHK6rFkPn1KzQ7cAKw/kO88HzXVrU+qaFOLuWYG9P7LBMy

hTY1wQr0sbL8h7ZlI6e5tapLqWceACgmEJMSR2CJBId3CeYaMwyJ+krbVdg31BHz9Olz

D4f73YArDE7E18JtbOvcK8T2GGu3K8Q8kjBb/52LFSiKSckASK4c0o2mzW416WXkq8nu

uQKQ==

X-Gm-Message-State: AAQBX9eb4sBlN01xySZMePi1UMqkiu/uRI5Y4yvdWL0AUwz2s7y/SXVN

jqZholZ/VdKSOwsA5XSAE9ZlB7qLabozgazwC+o=

X-Google-Smtp-Source: AKy350YOTcCmo8PRtKF8VDBMeuosMfBRSDUqXTbhIkVVWrdcSr296KzbLVteFrrFQ4TKLrkHNZ+dWbdidyDtGnyMNWU=

X-Received: by 2002:a65:4344:0:b0:514:1e2c:4a3b with SMTP id

k4-20020a654344000000b005141e2c4a3bmr188969pgq.10.1680595852496; Tue, 04 Apr

2023 01:10:52 -0700 (PDT)

MIME-Version: 1.0

From: "dieudonnenzuzi07@yahoo.fr"

Date: Tue, 4 Apr 2023 08:11:12 +0000

Message-ID:

Subject:

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre , fmbuyi

Content-Type: multipart/alternative; boundary="000000000000cc96f705f87e36a8"

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3Ko6vKw https://bit.ly/3Ko6vKw



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.171 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[gyusug83(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gyusug83(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.171 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 TVD_SPACE_RATIO No description available.

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

Subject: {SPAM?}



--000000000000cc96f705f87e36a8

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/3Ko6vKw



--000000000000cc96f705f87e36a8

Content-Type: text/html; charset="UTF-8"



https://bit.ly/3Ko6vKw



--000000000000cc96f705f87e36a8--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA