more link spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Apr 2023 04:06:06 -0600
Received: from mail-lf1-f46.google.com ([209.85.167.46]:42498)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pjdXn-000NKd-1u
for dave@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 04:05:43 -0600
Received: by mail-lf1-f46.google.com with SMTP id g19so28561885lfr.9
for; Tue, 04 Apr 2023 03:03:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680602614;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=PC31JYf9LjVhQtF9JCL/VdWx29dmF4NW92wdN1cHU+I=;
b=cWds9GyT55GNsoGBM9ECbSHqp+lfJcDHc3lF0sXgotxmIDVgAQSVab9HswKDD8EJXA
0m1rpDZ686Xn1m0RWvuBiJMsqqp6VAFwUsPK0qUBgcQrYr3SQMMFoDKs0I5lrsCgnuLm
slZp58HqSJCZG54nuhJd0i9ns2DZDnklqVJdJLTqSYJciQzSGFo0VrZ3lTRVrUr8AbMB
lsSFV3hhRgv885XRzUHB1TMc9LZaX89VPqiZsPRJ+U1veNnQa/ZI1D0odb78f+KJXDyS
mRXi1RsV+PiyVIQfrtXJ/kdvsGjl5eLAh7dBQ+vwFP5vvOP542H3wekwiIm/lW+8c4PG
oPEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680602614;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=PC31JYf9LjVhQtF9JCL/VdWx29dmF4NW92wdN1cHU+I=;
b=EX/qgqeVy9TD34IiDUdYGB3ZUzbOJsVsOAAJQG7TblNHQGyLU5PhLpwQGavoeDT7Aj
ce1PiWH5Izn6dTOooJjmExeOFD7qBZotF1KPGPhcVgISzlun4gi4LuEDImsdx0S0+me2
w9jg7gtFOBcmNkaJKm6FAjrFFwk/DW+ZiCEpdn7mGxoV6mthC0caLdGnCdnNztD21Syg
RhV0mh5kG55JpOzx4Ovlg+VGgNMKpiB9uwOtCZMpj9hUt2+lzIH3vfKWiKJ0VdJoIvtO
4NtagC9XTDli7/g1Px75Ue8tc9OQ+RI3ntqkQiw1iPp0VfVGY7Y96FESJROLzfrTRzxX
r9dw==
X-Gm-Message-State: AAQBX9cfdG12nsUpRgTOvgOD3werkuohVINug1llK81VpcRlolVz2M5P
Ive/YaXaBdfUyHfJX2vVaCKV+RVCyXZ/gwp815i5MhIkDnubBw==
X-Google-Smtp-Source: AKy350b8jSE3LZkwrqpy8rlGIu9vOKx3XmmfyeMeEyC6ZcspCywf1y1Am4oN3USLIxVJ94tQjBJ8yAae4qpMB54SSQk=
X-Received: by 2002:a05:6512:376a:b0:4e9:c627:195f with SMTP id
z10-20020a056512376a00b004e9c627195fmr575720lft.7.1680602614240; Tue, 04 Apr
2023 03:03:34 -0700 (PDT)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Tue, 4 Apr 2023 10:03:53 +0000
Message-ID:
Subject:
To: daren krentz, daria b55 ,
darnaque leschats2011, datok jp ,
datsit1968, dave ,
davelongaphie5309,
david cameletti2
Content-Type: multipart/alternative; boundary="000000000000d499c905f87fc94e"
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3KpucBY https://bit.ly/3KpucBY
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[felipe.arcilaperez27(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[felipe.arcilaperez27(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000d499c905f87fc94e
Content-Type: text/plain; charset="UTF-8"
https://bit.ly/3KpucBY
--000000000000d499c905f87fc94e
Content-Type: text/html; charset="UTF-8"
https://bit.ly/3KpucBY
--000000000000d499c905f87fc94e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Apr 2023 04:06:06 -0600
Received: from mail-lf1-f46.google.com ([209.85.167.46]:42498)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pjdXn-000NKd-1u
for dave@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 04:05:43 -0600
Received: by mail-lf1-f46.google.com with SMTP id g19so28561885lfr.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680602614;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=PC31JYf9LjVhQtF9JCL/VdWx29dmF4NW92wdN1cHU+I=;
b=cWds9GyT55GNsoGBM9ECbSHqp+lfJcDHc3lF0sXgotxmIDVgAQSVab9HswKDD8EJXA
0m1rpDZ686Xn1m0RWvuBiJMsqqp6VAFwUsPK0qUBgcQrYr3SQMMFoDKs0I5lrsCgnuLm
slZp58HqSJCZG54nuhJd0i9ns2DZDnklqVJdJLTqSYJciQzSGFo0VrZ3lTRVrUr8AbMB
lsSFV3hhRgv885XRzUHB1TMc9LZaX89VPqiZsPRJ+U1veNnQa/ZI1D0odb78f+KJXDyS
mRXi1RsV+PiyVIQfrtXJ/kdvsGjl5eLAh7dBQ+vwFP5vvOP542H3wekwiIm/lW+8c4PG
oPEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680602614;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=PC31JYf9LjVhQtF9JCL/VdWx29dmF4NW92wdN1cHU+I=;
b=EX/qgqeVy9TD34IiDUdYGB3ZUzbOJsVsOAAJQG7TblNHQGyLU5PhLpwQGavoeDT7Aj
ce1PiWH5Izn6dTOooJjmExeOFD7qBZotF1KPGPhcVgISzlun4gi4LuEDImsdx0S0+me2
w9jg7gtFOBcmNkaJKm6FAjrFFwk/DW+ZiCEpdn7mGxoV6mthC0caLdGnCdnNztD21Syg
RhV0mh5kG55JpOzx4Ovlg+VGgNMKpiB9uwOtCZMpj9hUt2+lzIH3vfKWiKJ0VdJoIvtO
4NtagC9XTDli7/g1Px75Ue8tc9OQ+RI3ntqkQiw1iPp0VfVGY7Y96FESJROLzfrTRzxX
r9dw==
X-Gm-Message-State: AAQBX9cfdG12nsUpRgTOvgOD3werkuohVINug1llK81VpcRlolVz2M5P
Ive/YaXaBdfUyHfJX2vVaCKV+RVCyXZ/gwp815i5MhIkDnubBw==
X-Google-Smtp-Source: AKy350b8jSE3LZkwrqpy8rlGIu9vOKx3XmmfyeMeEyC6ZcspCywf1y1Am4oN3USLIxVJ94tQjBJ8yAae4qpMB54SSQk=
X-Received: by 2002:a05:6512:376a:b0:4e9:c627:195f with SMTP id
z10-20020a056512376a00b004e9c627195fmr575720lft.7.1680602614240; Tue, 04 Apr
2023 03:03:34 -0700 (PDT)
MIME-Version: 1.0
From: "Dr.Charles Edward"
Date: Tue, 4 Apr 2023 10:03:53 +0000
Message-ID:
Subject:
To: daren krentz
darnaque leschats2011
datsit1968
davelongaphie5309
david cameletti2
Content-Type: multipart/alternative; boundary="000000000000d499c905f87fc94e"
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3KpucBY https://bit.ly/3KpucBY
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[felipe.arcilaperez27(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[felipe.arcilaperez27(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000d499c905f87fc94e
Content-Type: text/plain; charset="UTF-8"
https://bit.ly/3KpucBY
--000000000000d499c905f87fc94e
Content-Type: text/html; charset="UTF-8"
https://bit.ly/3KpucBY
--000000000000d499c905f87fc94e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments