More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 May 2023 21:36:00 -0600
Received: from mail-ed1-f49.google.com ([209.85.208.49]:57394)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ptgnJ-0003Xx-MF
for dave@doctor.nl2k.ab.ca;
Mon, 01 May 2023 21:35:19 -0600
Received: by mail-ed1-f49.google.com with SMTP id 4fb4d7f45d1cf-50bc4bc2880so2843967a12.2
for; Mon, 01 May 2023 20:33:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682998389; x=1685590389;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;
b=Julq9jZUz3ibKfJk6LGjykYk/aYKQiGxYuE1yrNuOQt304g160flQNnTDCF4PNlK4O
0lDsPFkZW3BByLWMT4L2j5fAa1hML6U1Xk598MGWznUfYWKRkqoJOGYcCuEHM3HyJIhB
gNfRwTO1vbThUyGMl6FI6mzBXm5QVUuqAc1jWx0cvwwcmjBwFikWd3nPT0Ql7NKwG17a
u2N5YW+ajsFrRr3IidbIHKKFISRp29pVQKEyXxYXM110wCOhjPot9o3ACYjjhL9q8ChC
zVweP+fIeon1w0Fy+d4gdc61A4AzPqw1we0rlp74D+bIfgH8sJwQ1N7xl6NlYkaRpXKp
X7Ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682998389; x=1685590389;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;
b=Wx9+fXE9YhfDl9n9iIKCfLTVOtQ+3PikfBy7sWombcf9E2Mzq/cGXUAppYydmuyoTS
FKq6sIxdq2JqFnSu9HLyIQiCu8mXK2O67oG4h0eibCCQjph0BaIwshsuEKvtH+kQ83Ft
N6oaaNJxFzR+AsqtE+shSTcRLqQDoKsR/QyA4DSHWCmEJjsGD7CwaYclCce+ZAm3K4cC
ZJ3j+RIkjLf2Zgq6NJ6gq7NDdSN7gvO3a4F2f35e867+qPySnhR3Xy9wM+6E1PN+q7uQ
9QKLlq5TS+O+lGUaRbAWzK8eGIO168eMHEtQ8NpCkY35b0nSn56V+/k4duQivPN2DyJ0
EzxQ==
X-Gm-Message-State: AC+VfDx1BaMONQ+uqqlnX8omPfCTpHb4q57TMG0pkZkyDRm4pT3RSy9y
8l5PurFQ9Xm+Byunhm0y7a0tOo9wyN7zf2eOA2o=
X-Google-Smtp-Source: ACHHUZ4LicgwDX9QMlvfKjxBYQA1OgKpqtw7Fuw+U/I4Evz1t0U4wRrC0nkeZ0/96wQK7paQe9eQZo9f47woigkQS8U=
X-Received: by 2002:a05:6402:1614:b0:502:4862:d453 with SMTP id
f20-20020a056402161400b005024862d453mr7029018edv.3.1682998388803; Mon, 01 May
2023 20:33:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6f02:211:b0:4b:48ff:a5a0 with HTTP; Mon, 1 May 2023
20:33:08 -0700 (PDT)
From: Thomas Sam
Date: Tue, 2 May 2023 03:33:08 +0000
Message-ID:
Subject: Dr.Charles Edward
To: datok jp, datsit1968 ,
dave, davelongaphie5309 ,
david cameletti2, david100 ,
david2divizio, davidbrunstein ,
davidpalmer23
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.2
X-Spam_score_int: 62
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3NF3kjN
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[aminenajiddofus2(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[aminenajiddofus2(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.49 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?} Dr.Charles Edward
https://bit.ly/3NF3kjN
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 May 2023 21:36:00 -0600
Received: from mail-ed1-f49.google.com ([209.85.208.49]:57394)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ptgnJ-0003Xx-MF
for dave@doctor.nl2k.ab.ca;
Mon, 01 May 2023 21:35:19 -0600
Received: by mail-ed1-f49.google.com with SMTP id 4fb4d7f45d1cf-50bc4bc2880so2843967a12.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1682998389; x=1685590389;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;
b=Julq9jZUz3ibKfJk6LGjykYk/aYKQiGxYuE1yrNuOQt304g160flQNnTDCF4PNlK4O
0lDsPFkZW3BByLWMT4L2j5fAa1hML6U1Xk598MGWznUfYWKRkqoJOGYcCuEHM3HyJIhB
gNfRwTO1vbThUyGMl6FI6mzBXm5QVUuqAc1jWx0cvwwcmjBwFikWd3nPT0Ql7NKwG17a
u2N5YW+ajsFrRr3IidbIHKKFISRp29pVQKEyXxYXM110wCOhjPot9o3ACYjjhL9q8ChC
zVweP+fIeon1w0Fy+d4gdc61A4AzPqw1we0rlp74D+bIfgH8sJwQ1N7xl6NlYkaRpXKp
X7Ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1682998389; x=1685590389;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=c87Xf8PgLU1BUMEX8Njbajok+4mBmIp3TI2ylI8mFHM=;
b=Wx9+fXE9YhfDl9n9iIKCfLTVOtQ+3PikfBy7sWombcf9E2Mzq/cGXUAppYydmuyoTS
FKq6sIxdq2JqFnSu9HLyIQiCu8mXK2O67oG4h0eibCCQjph0BaIwshsuEKvtH+kQ83Ft
N6oaaNJxFzR+AsqtE+shSTcRLqQDoKsR/QyA4DSHWCmEJjsGD7CwaYclCce+ZAm3K4cC
ZJ3j+RIkjLf2Zgq6NJ6gq7NDdSN7gvO3a4F2f35e867+qPySnhR3Xy9wM+6E1PN+q7uQ
9QKLlq5TS+O+lGUaRbAWzK8eGIO168eMHEtQ8NpCkY35b0nSn56V+/k4duQivPN2DyJ0
EzxQ==
X-Gm-Message-State: AC+VfDx1BaMONQ+uqqlnX8omPfCTpHb4q57TMG0pkZkyDRm4pT3RSy9y
8l5PurFQ9Xm+Byunhm0y7a0tOo9wyN7zf2eOA2o=
X-Google-Smtp-Source: ACHHUZ4LicgwDX9QMlvfKjxBYQA1OgKpqtw7Fuw+U/I4Evz1t0U4wRrC0nkeZ0/96wQK7paQe9eQZo9f47woigkQS8U=
X-Received: by 2002:a05:6402:1614:b0:502:4862:d453 with SMTP id
f20-20020a056402161400b005024862d453mr7029018edv.3.1682998388803; Mon, 01 May
2023 20:33:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6f02:211:b0:4b:48ff:a5a0 with HTTP; Mon, 1 May 2023
20:33:08 -0700 (PDT)
From: Thomas Sam
Date: Tue, 2 May 2023 03:33:08 +0000
Message-ID:
Subject: Dr.Charles Edward
To: datok jp
dave
david cameletti2
david2divizio
davidpalmer23
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.2
X-Spam_score_int: 62
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3NF3kjN
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[aminenajiddofus2(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[aminenajiddofus2(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.49 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TVD_SPACE_RATIO No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?} Dr.Charles Edward
https://bit.ly/3NF3kjN
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments