More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Thu, 11 May 2023 11:21:55 -0600
Received: from mail-lj1-f181.google.com ([209.85.208.181]:57850)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1px9w1-000IfO-1t
for dave@nk.ca;
Thu, 11 May 2023 11:18:37 -0600
Received: by mail-lj1-f181.google.com with SMTP id 38308e7fff4ca-2ac7c59665bso98701301fa.3
for; Thu, 11 May 2023 10:16:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1683825388; x=1686417388;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=lUeQvyXDhtVBzLsUQ1kwoPlwgaCaTj2COuGEFmyl5kk=;
b=Fs+eFUpZ5Zx0hC749Y7MOfJKV9lP3N0Oxd4yuBFOvCE4dD7eNk6EobR+w1dGlpZlr0
w70OJJptlzfJIdt3Thg5VSyGSHKgpECTx3ClyjdNGIlI2YYIOimMOKJ9dxCXr2URCru3
UEu3dihpvkpHP67ZSsq38V0orghNYTfnRdPTx80+nD7Zq4kY5YZ1f9lv/i469vzKW68w
oNfdQwbEcRgp7YEzgCLT5yCdNKs8/QgikVgbVhtvEGY2s8Ia/iKPLLSJRA1zGYtZROFw
UYup5034SQBSAqcgnKCKRzdB51m2GRUlpfgsD8YWHhKaXcbvgoP+8Zso3DOOfz1J0wCH
8e/Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1683825388; x=1686417388;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=lUeQvyXDhtVBzLsUQ1kwoPlwgaCaTj2COuGEFmyl5kk=;
b=gVnKMyd5IqfvYntPRuzAN8d2mF19/emJhD/WV7m3Bnat6j7/43wMbWRvjCAnhMSXvT
shatBUNyyfWzTPAGX5PCas95EZ/8zzUTVvIAX4lYxPtoQFn1JTepmsYdO4l448SskHHu
BM+0tPs/pb8ZhBwmVV1AQU1cgRmuyiaTEi2j4ngazPtDT6xstIZlYfewvzXXxgqWlYSc
I8iW5n7hXcY6u9xgkLOjBuQqRLrUo3ybE1X5dsEgfZ0Sf94dqflN2/hZbyR6ynSiZ9BD
kOhuEap7D13qU6ibj6/qpmPW4RrFdlnySCGZP8+5NN+Mv21akBcKjlOo23JUaVEZRJdV
2fzg==
X-Gm-Message-State: AC+VfDy3L8mXO87/0qnc+Dl7QqprPDEQOzNfZAXIhyNDWDYpNH5MyO6Z
ZmNBp1GQFvbzNafOZTbTOvFUWddsmY5Ek/inDbs=
X-Google-Smtp-Source: ACHHUZ6MvaRvW6qZfsN/4oS8shtX2VhftUmya8Ab/mwiw4n57UrtivnlIZ2qG3oKX9Iym8CCf4ub82wM0gFpjO97W1I=
X-Received: by 2002:a2e:b709:0:b0:2ac:8992:272d with SMTP id
j9-20020a2eb709000000b002ac8992272dmr3212663ljo.11.1683825388269; Thu, 11 May
2023 10:16:28 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6022:73a3:b0:3f:1a51:af32 with HTTP; Thu, 11 May 2023
10:16:27 -0700 (PDT)
From: "studiobuscema@alice.it"
Date: Thu, 11 May 2023 17:16:27 +0000
Message-ID:
Subject: Herr Gomez Rodrigo
To: dashwilson2003, dave , dave ,
dave, David Hirtle ,
david rdt
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 8.6
X-Spam_score_int: 86
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3B2m8Sm
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.181 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ddji4371(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ddji4371(at)gmail.com]
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
2.8 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.7 PDS_FROM_2_EMAILS No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.181 listed in wl.mailspike.net]
Subject: {SPAM?} Herr Gomez Rodrigo
X-Antivirus: AVG (VPS 230511-0, 5/10/2023), Inbound message
X-Antivirus-Status: Clean
https://bit.ly/3B2m8Sm
Envelope-to: dave@nk.ca
Delivery-date: Thu, 11 May 2023 11:21:55 -0600
Received: from mail-lj1-f181.google.com ([209.85.208.181]:57850)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1px9w1-000IfO-1t
for dave@nk.ca;
Thu, 11 May 2023 11:18:37 -0600
Received: by mail-lj1-f181.google.com with SMTP id 38308e7fff4ca-2ac7c59665bso98701301fa.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1683825388; x=1686417388;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=lUeQvyXDhtVBzLsUQ1kwoPlwgaCaTj2COuGEFmyl5kk=;
b=Fs+eFUpZ5Zx0hC749Y7MOfJKV9lP3N0Oxd4yuBFOvCE4dD7eNk6EobR+w1dGlpZlr0
w70OJJptlzfJIdt3Thg5VSyGSHKgpECTx3ClyjdNGIlI2YYIOimMOKJ9dxCXr2URCru3
UEu3dihpvkpHP67ZSsq38V0orghNYTfnRdPTx80+nD7Zq4kY5YZ1f9lv/i469vzKW68w
oNfdQwbEcRgp7YEzgCLT5yCdNKs8/QgikVgbVhtvEGY2s8Ia/iKPLLSJRA1zGYtZROFw
UYup5034SQBSAqcgnKCKRzdB51m2GRUlpfgsD8YWHhKaXcbvgoP+8Zso3DOOfz1J0wCH
8e/Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1683825388; x=1686417388;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=lUeQvyXDhtVBzLsUQ1kwoPlwgaCaTj2COuGEFmyl5kk=;
b=gVnKMyd5IqfvYntPRuzAN8d2mF19/emJhD/WV7m3Bnat6j7/43wMbWRvjCAnhMSXvT
shatBUNyyfWzTPAGX5PCas95EZ/8zzUTVvIAX4lYxPtoQFn1JTepmsYdO4l448SskHHu
BM+0tPs/pb8ZhBwmVV1AQU1cgRmuyiaTEi2j4ngazPtDT6xstIZlYfewvzXXxgqWlYSc
I8iW5n7hXcY6u9xgkLOjBuQqRLrUo3ybE1X5dsEgfZ0Sf94dqflN2/hZbyR6ynSiZ9BD
kOhuEap7D13qU6ibj6/qpmPW4RrFdlnySCGZP8+5NN+Mv21akBcKjlOo23JUaVEZRJdV
2fzg==
X-Gm-Message-State: AC+VfDy3L8mXO87/0qnc+Dl7QqprPDEQOzNfZAXIhyNDWDYpNH5MyO6Z
ZmNBp1GQFvbzNafOZTbTOvFUWddsmY5Ek/inDbs=
X-Google-Smtp-Source: ACHHUZ6MvaRvW6qZfsN/4oS8shtX2VhftUmya8Ab/mwiw4n57UrtivnlIZ2qG3oKX9Iym8CCf4ub82wM0gFpjO97W1I=
X-Received: by 2002:a2e:b709:0:b0:2ac:8992:272d with SMTP id
j9-20020a2eb709000000b002ac8992272dmr3212663ljo.11.1683825388269; Thu, 11 May
2023 10:16:28 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6022:73a3:b0:3f:1a51:af32 with HTTP; Thu, 11 May 2023
10:16:27 -0700 (PDT)
From: "studiobuscema@alice.it"
Date: Thu, 11 May 2023 17:16:27 +0000
Message-ID:
Subject: Herr Gomez Rodrigo
To: dashwilson2003
dave
david rdt
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 8.6
X-Spam_score_int: 86
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3B2m8Sm
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.181 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ddji4371(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ddji4371(at)gmail.com]
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails
2.8 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.7 PDS_FROM_2_EMAILS No description available.
1.2 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.181 listed in wl.mailspike.net]
Subject: {SPAM?} Herr Gomez Rodrigo
X-Antivirus: AVG (VPS 230511-0, 5/10/2023), Inbound message
X-Antivirus-Status: Clean
https://bit.ly/3B2m8Sm
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments