Follow up spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 24 Apr 2023 15:26:54 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1pr3gF-000OqX-RN
for dave@doctor.nl2k.ab.ca;
Mon, 24 Apr 2023 15:25:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 24 Apr 2023 15:25:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f66.google.com ([209.85.219.66]:49406)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1pr1Mt-000Ht3-BD
for doctor@doctor.nl2k.ab.ca;
Mon, 24 Apr 2023 12:56:58 -0600
Received: by mail-qv1-f66.google.com with SMTP id 6a1803df08f44-5ef6b757a60so20114236d6.2
for; Mon, 24 Apr 2023 11:54:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682362490; x=1684954490;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bz8GBYThSywpU64N/Ak+raYwTirnKbk5BMcyS4VvTEA=;
b=jKkpuqKXN+8Xk9NcNh8f+t3QXjKQQ3xvL6wZ5gYPFDIH5mwtELiPasd7QLUTZEDMrt
MH4WhVcirVzzsC5tMhf6u0cMF4o+N/YOEjU+v3APPwXGHx+BhmJV5/N3jWzqQgh/0Wap
Yn+JhWG/uQ49yPrZgwzLZ4XCqo09QT4f+LjD09R3BNrmvUWYZnDW4G/2RHgZ77GNdkn7
qEvrHbiueYaH+sZjSeLdgGnUyJHkiEgW65fc4hXcJu6YIWFOoFjIVb3pAdd8uASl/fFg
KcmxOQJT4x55Kp1s1ntmO+L0Ss0gZfjX+All1VPLH4qdqqK4rkV8TNBTC5jQjJABsCLa
4BWQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682362490; x=1684954490;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bz8GBYThSywpU64N/Ak+raYwTirnKbk5BMcyS4VvTEA=;
b=RM915t18jAWWMJBV2itSDMOvvpmeU+IDPaNOr5+87oo/m6wYsFtPBbmHN2CF/YFK7X
FP5yGL78qGQmpH7wyr1XN0Ip5GouaCbvnqXN98vco/YQ6Laa788frP4LVGjWq74zdiE6
rVU3z4PheGKtZq/nkRwWkp0Uxrj4axv2rFkmIggf3RwDpah4HgBEc7A4EyEcn5nC9kgU
EpY3wTuPM8H9t/hIgkiJQGXTQH4sLyYzM/VKFPrc3cqR3mAw/W/x22s4andqKQfpm9zY
4J8Becb+jJYBMpzyQq6CKP+FnF8SFfd8yxV2GGi/SnVXDnRj9nL3atgyYEf4BaAaoHXt
HKyQ==
X-Gm-Message-State: AAQBX9cobq7L26AHaR+vkNrbZ1jOxTl8/24NijXMLDWppsCKi8A+SHP5
TYxOuE6OsFcrngh8xHXKd2YQxlPEGKcEz/5cFDQ=
X-Google-Smtp-Source: AKy350bsGL6D+wL78cA9bBNoPQJBlOM/NvAO0PbPFEsGdXsl9PSfRZo0TBvl5HvQEoM7IhD3osPpWEad6LaiZ+HhWRw=
X-Received: by 2002:ad4:5d66:0:b0:5aa:8e3e:496e with SMTP id
fn6-20020ad45d66000000b005aa8e3e496emr28152665qvb.34.1682362490064; Mon, 24
Apr 2023 11:54:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: steveadams01@yahoo.com
From: Steve adams
Date: Mon, 24 Apr 2023 20:54:41 +0200
Message-ID:
Subject: Please check and respond back to my previous email
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009a95b305fa198aac"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.66 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[walterzulu13(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[steveadams01(at)yahoo.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[walterzulu13(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.66 listed in wl.mailspike.net]
Subject: {SPAM?} Please check and respond back to my previous email
--0000000000009a95b305fa198aac
Content-Type: text/plain; charset="UTF-8"
--0000000000009a95b305fa198aac
Content-Type: text/html; charset="UTF-8"
--0000000000009a95b305fa198aac--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 24 Apr 2023 15:26:54 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1pr3gF-000OqX-RN
for dave@doctor.nl2k.ab.ca;
Mon, 24 Apr 2023 15:25:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 24 Apr 2023 15:25:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f66.google.com ([209.85.219.66]:49406)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1pr1Mt-000Ht3-BD
for doctor@doctor.nl2k.ab.ca;
Mon, 24 Apr 2023 12:56:58 -0600
Received: by mail-qv1-f66.google.com with SMTP id 6a1803df08f44-5ef6b757a60so20114236d6.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682362490; x=1684954490;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bz8GBYThSywpU64N/Ak+raYwTirnKbk5BMcyS4VvTEA=;
b=jKkpuqKXN+8Xk9NcNh8f+t3QXjKQQ3xvL6wZ5gYPFDIH5mwtELiPasd7QLUTZEDMrt
MH4WhVcirVzzsC5tMhf6u0cMF4o+N/YOEjU+v3APPwXGHx+BhmJV5/N3jWzqQgh/0Wap
Yn+JhWG/uQ49yPrZgwzLZ4XCqo09QT4f+LjD09R3BNrmvUWYZnDW4G/2RHgZ77GNdkn7
qEvrHbiueYaH+sZjSeLdgGnUyJHkiEgW65fc4hXcJu6YIWFOoFjIVb3pAdd8uASl/fFg
KcmxOQJT4x55Kp1s1ntmO+L0Ss0gZfjX+All1VPLH4qdqqK4rkV8TNBTC5jQjJABsCLa
4BWQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682362490; x=1684954490;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bz8GBYThSywpU64N/Ak+raYwTirnKbk5BMcyS4VvTEA=;
b=RM915t18jAWWMJBV2itSDMOvvpmeU+IDPaNOr5+87oo/m6wYsFtPBbmHN2CF/YFK7X
FP5yGL78qGQmpH7wyr1XN0Ip5GouaCbvnqXN98vco/YQ6Laa788frP4LVGjWq74zdiE6
rVU3z4PheGKtZq/nkRwWkp0Uxrj4axv2rFkmIggf3RwDpah4HgBEc7A4EyEcn5nC9kgU
EpY3wTuPM8H9t/hIgkiJQGXTQH4sLyYzM/VKFPrc3cqR3mAw/W/x22s4andqKQfpm9zY
4J8Becb+jJYBMpzyQq6CKP+FnF8SFfd8yxV2GGi/SnVXDnRj9nL3atgyYEf4BaAaoHXt
HKyQ==
X-Gm-Message-State: AAQBX9cobq7L26AHaR+vkNrbZ1jOxTl8/24NijXMLDWppsCKi8A+SHP5
TYxOuE6OsFcrngh8xHXKd2YQxlPEGKcEz/5cFDQ=
X-Google-Smtp-Source: AKy350bsGL6D+wL78cA9bBNoPQJBlOM/NvAO0PbPFEsGdXsl9PSfRZo0TBvl5HvQEoM7IhD3osPpWEad6LaiZ+HhWRw=
X-Received: by 2002:ad4:5d66:0:b0:5aa:8e3e:496e with SMTP id
fn6-20020ad45d66000000b005aa8e3e496emr28152665qvb.34.1682362490064; Mon, 24
Apr 2023 11:54:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: steveadams01@yahoo.com
From: Steve adams
Date: Mon, 24 Apr 2023 20:54:41 +0200
Message-ID:
Subject: Please check and respond back to my previous email
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009a95b305fa198aac"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.66 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[walterzulu13(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[steveadams01(at)yahoo.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[walterzulu13(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.66 listed in wl.mailspike.net]
Subject: {SPAM?} Please check and respond back to my previous email
--0000000000009a95b305fa198aac
Content-Type: text/plain; charset="UTF-8"
--0000000000009a95b305fa198aac
Content-Type: text/html; charset="UTF-8"
--0000000000009a95b305fa198aac--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments