More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 May 2023 23:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ptj2P-0005tl-Ud
for dave@doctor.nl2k.ab.ca;
Mon, 01 May 2023 23:58:57 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 May 2023 23:58:57 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f45.google.com ([209.85.160.45]:57436)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ptgdu-000Lex-Cd
for doctor@nl2k.ab.ca;
Mon, 01 May 2023 21:25:34 -0600
Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-187c78c6657so2409643fac.2
for; Mon, 01 May 2023 20:23:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682997806; x=1685589806;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;
b=htJ1+LtmEnj1UGGZXwETXdk4SGOQoD/PD3OKGMs3oRnabTjut4YSzysRi8QaooY2wO
PajbjHKzLAmp4DguksPRVKzIfsvl6gLKQPz8y/3mdG+Q8vnQv78g7q6urLKTXTc2l8Hb
b5Wd/y8Qc+eQgjVs9+LReLSkRhW8YpyUfolkt07zwuqfGcSCdxKGKiuWMJ9l37JVNq29
XyYNOPaarO7E0Z+8Xb2yYmMlHSixisAHCeLUrmENrxNyuKdM5PnX10NwixDC93pVsYqn
22f3PUwgYNDki3aNylJD5mmuzbk5JkLDH7HhJ8BZDnAT67/DUGKCwCPrploRWgFsRY5R
lF+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682997806; x=1685589806;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;
b=R508LNqQf1M3sBTATH6g2Ge5Pf2T8KXmk9I7/fpzP9XMLKeA+smvs/7Wg+pCi8rnVL
An5r1riPCMxHNhtjk+C39KUoeTegmAAA7ByjfThTYZECq4g2eKfe5NxeqTO3HPM7u/U8
sfo4KyUg1ktA8TPw3ZA0JMmu5Jlz9mdg+V3oowdZAAXURAFPyxHku5Dj+SMV519OVDkD
xzpDIHVQv8Oz6q0BM97/WIUYlR3tT5N8URT5myEEwIwyfKJj8wmdg+/q0B6vVubQGU5f
0xAYhbdQfWonirGFQhHH77k+tmdQHfiUxYjTdh7oh3h9D+dB9WTt+GBpQ2e6RQ6RS0B1
H5AA==
X-Gm-Message-State: AC+VfDzAx+NhVAAhnO6YeXt2F99BZD+yvs8vpjIRrl/h+LTfXuZBtFra
qbBLiaZy5NTZzXyKPf+epJxR9b1pxsgWFfOJYu0=
X-Google-Smtp-Source: ACHHUZ6275vq2tGe9hy054mtO2vL6X/jjaII+Du9VRUboq7FiBUddtk+MsPcgosv2BbBWWtCjJVepv8njNMrB7d9zWY=
X-Received: by 2002:a54:4090:0:b0:38e:87ed:e149 with SMTP id
i16-20020a544090000000b0038e87ede149mr7732197oii.45.1682997806035; Mon, 01
May 2023 20:23:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6358:6f01:b0:11e:7c45:cc9f with HTTP; Mon, 1 May 2023
20:23:25 -0700 (PDT)
From: =?UTF-8?Q?thomas_k=C3=BCchler?=
Date: Tue, 2 May 2023 03:23:25 +0000
Message-ID:
Subject: bola17
To: dmillar, doconnor ,
doctor, dolores32 ,
domenic rubino, donahued ,
dorlovic, dossantos , doug
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/422YRf7
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.45 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ajengkurniapramesti9(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ajengkurniapramesti9(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
1.2 BODY_SINGLE_URI Message body is only a URI
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.45 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} bola17
https://bit.ly/422YRf7
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 May 2023 23:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ptj2P-0005tl-Ud
for dave@doctor.nl2k.ab.ca;
Mon, 01 May 2023 23:58:57 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 May 2023 23:58:57 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f45.google.com ([209.85.160.45]:57436)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ptgdu-000Lex-Cd
for doctor@nl2k.ab.ca;
Mon, 01 May 2023 21:25:34 -0600
Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-187c78c6657so2409643fac.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682997806; x=1685589806;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;
b=htJ1+LtmEnj1UGGZXwETXdk4SGOQoD/PD3OKGMs3oRnabTjut4YSzysRi8QaooY2wO
PajbjHKzLAmp4DguksPRVKzIfsvl6gLKQPz8y/3mdG+Q8vnQv78g7q6urLKTXTc2l8Hb
b5Wd/y8Qc+eQgjVs9+LReLSkRhW8YpyUfolkt07zwuqfGcSCdxKGKiuWMJ9l37JVNq29
XyYNOPaarO7E0Z+8Xb2yYmMlHSixisAHCeLUrmENrxNyuKdM5PnX10NwixDC93pVsYqn
22f3PUwgYNDki3aNylJD5mmuzbk5JkLDH7HhJ8BZDnAT67/DUGKCwCPrploRWgFsRY5R
lF+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682997806; x=1685589806;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=J0cDKMXrtdUfpIHc8NgBaZVKctvTghRzCAzk4ObP9/U=;
b=R508LNqQf1M3sBTATH6g2Ge5Pf2T8KXmk9I7/fpzP9XMLKeA+smvs/7Wg+pCi8rnVL
An5r1riPCMxHNhtjk+C39KUoeTegmAAA7ByjfThTYZECq4g2eKfe5NxeqTO3HPM7u/U8
sfo4KyUg1ktA8TPw3ZA0JMmu5Jlz9mdg+V3oowdZAAXURAFPyxHku5Dj+SMV519OVDkD
xzpDIHVQv8Oz6q0BM97/WIUYlR3tT5N8URT5myEEwIwyfKJj8wmdg+/q0B6vVubQGU5f
0xAYhbdQfWonirGFQhHH77k+tmdQHfiUxYjTdh7oh3h9D+dB9WTt+GBpQ2e6RQ6RS0B1
H5AA==
X-Gm-Message-State: AC+VfDzAx+NhVAAhnO6YeXt2F99BZD+yvs8vpjIRrl/h+LTfXuZBtFra
qbBLiaZy5NTZzXyKPf+epJxR9b1pxsgWFfOJYu0=
X-Google-Smtp-Source: ACHHUZ6275vq2tGe9hy054mtO2vL6X/jjaII+Du9VRUboq7FiBUddtk+MsPcgosv2BbBWWtCjJVepv8njNMrB7d9zWY=
X-Received: by 2002:a54:4090:0:b0:38e:87ed:e149 with SMTP id
i16-20020a544090000000b0038e87ede149mr7732197oii.45.1682997806035; Mon, 01
May 2023 20:23:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6358:6f01:b0:11e:7c45:cc9f with HTTP; Mon, 1 May 2023
20:23:25 -0700 (PDT)
From: =?UTF-8?Q?thomas_k=C3=BCchler?=
Date: Tue, 2 May 2023 03:23:25 +0000
Message-ID:
Subject: bola17
To: dmillar
doctor
domenic rubino
dorlovic
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/422YRf7
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.45 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ajengkurniapramesti9(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ajengkurniapramesti9(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
1.2 BODY_SINGLE_URI Message body is only a URI
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.45 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} bola17
https://bit.ly/422YRf7
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments