More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Mon, 19 Jun 2023 06:08:09 -0600
Received: from mail-oa1-f66.google.com ([209.85.160.66]:58872)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qBDeV-0001Xz-0h
for dave@nk.ca;
Mon, 19 Jun 2023 06:06:38 -0600
Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-1aa250e9cb3so801349fac.1
for; Mon, 19 Jun 2023 05:04:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687176271; x=1689768271;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;
b=eQzskGaRo2jeCXgDefwWkma5ahAjfY41OVlUqDj5E3WZm5s2dk3xcW4jNE4evwlqyZ
nxJXYP1JSZZvLb4ZaCH2c0ORYn/sbu9uAwmU2WWxInjCydaktYpRObogPhmY4Rv3A68U
Uf27AhkplJQQysGeL5Z0fG9YekE6aJlFX10n6jjOLEmIApsWv5ZXFmzs75QkbkmTQcfY
nzycTOSaNkEEAaq9wSuln4LnP3TKjYOXD+LnVIAkNDXQx0xwkirMVupzzKmvb7awUBH2
5YlNUHLGkKVZs3lNH9SFq92d0XvOvbxUcsk3Yf0oTujP7PRZGu/8ljGst0ne+Uxj1IcG
sK7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687176271; x=1689768271;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;
b=j6Wu+i+ViMPLCUp+R9QRsyKB10k6dyq0rrqOQEQKJ4Ofl2EkDFhBevQ+N5TavkNB3y
t17y8imnCb5h90nSYS+a5VAtxFAX9zvEa3xYLaZHjgltaSQfQZ928EGJh01df+ZxOleo
Tbs3hp79joKUvNAoMNJKTeHlYVhbwvB+A5DM6TQSyAOJtMkmAzLAwJR2w2++pPqh0xK1
OJmP9ud8C1yMMwapiHwWBrQp/kVY+NbL6BdbGTEXS3RiRW3CiooEr5iElnln499Ntu3U
SupZThkh+uZ+B8E318Q2MHhNz4Z+TQ5dPZGkpjE/j129PtQuqhzCqVhJo0+69b0mhfNr
k+wA==
X-Gm-Message-State: AC+VfDy/5UisyxuvDtDzuUvrS0oADMnQ3HgjyyQYaiBYMHxNKmg7czLS
cbq8F9W+lLb8H1GYC4+cqjL70r9C2WEBmCI1pw==
X-Google-Smtp-Source: ACHHUZ65d/zRdk19dYBDCYHNDmrVcjHwlEOUNU2j5dMU7931SsoYyruNGsbtYgq04r7PEUUvBPUUYcGKVZZnQzYdHzk=
X-Received: by 2002:a05:6870:a402:b0:1a9:bad4:838f with SMTP id
m2-20020a056870a40200b001a9bad4838fmr4053572oal.11.1687176270939; Mon, 19 Jun
2023 05:04:30 -0700 (PDT)
MIME-Version: 1.0
From: Herr Gomez Rodrigo
Date: Mon, 19 Jun 2023 12:04:24 +0000
Message-ID:
Subject:
To: dashwilson2003, dave , dave ,
dave, David Hirtle ,
david rdt, davidjlalonde
Content-Type: multipart/alternative; boundary="0000000000004d8ce905fe7a56cf"
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356 http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: steadydrive.homes]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kyawsantun.er1(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kyawsantun.er1(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.66 listed in list.dnswl.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]
[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.66 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?}
--0000000000004d8ce905fe7a56cf
Content-Type: text/plain; charset="UTF-8"
http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
--0000000000004d8ce905fe7a56cf
Content-Type: text/html; charset="UTF-8"
http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
--0000000000004d8ce905fe7a56cf--
Envelope-to: dave@nk.ca
Delivery-date: Mon, 19 Jun 2023 06:08:09 -0600
Received: from mail-oa1-f66.google.com ([209.85.160.66]:58872)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qBDeV-0001Xz-0h
for dave@nk.ca;
Mon, 19 Jun 2023 06:06:38 -0600
Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-1aa250e9cb3so801349fac.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687176271; x=1689768271;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;
b=eQzskGaRo2jeCXgDefwWkma5ahAjfY41OVlUqDj5E3WZm5s2dk3xcW4jNE4evwlqyZ
nxJXYP1JSZZvLb4ZaCH2c0ORYn/sbu9uAwmU2WWxInjCydaktYpRObogPhmY4Rv3A68U
Uf27AhkplJQQysGeL5Z0fG9YekE6aJlFX10n6jjOLEmIApsWv5ZXFmzs75QkbkmTQcfY
nzycTOSaNkEEAaq9wSuln4LnP3TKjYOXD+LnVIAkNDXQx0xwkirMVupzzKmvb7awUBH2
5YlNUHLGkKVZs3lNH9SFq92d0XvOvbxUcsk3Yf0oTujP7PRZGu/8ljGst0ne+Uxj1IcG
sK7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687176271; x=1689768271;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=bTkPpaHY1PMH2aGnojf2we/5DeHD89IyAiOljVtSlV8=;
b=j6Wu+i+ViMPLCUp+R9QRsyKB10k6dyq0rrqOQEQKJ4Ofl2EkDFhBevQ+N5TavkNB3y
t17y8imnCb5h90nSYS+a5VAtxFAX9zvEa3xYLaZHjgltaSQfQZ928EGJh01df+ZxOleo
Tbs3hp79joKUvNAoMNJKTeHlYVhbwvB+A5DM6TQSyAOJtMkmAzLAwJR2w2++pPqh0xK1
OJmP9ud8C1yMMwapiHwWBrQp/kVY+NbL6BdbGTEXS3RiRW3CiooEr5iElnln499Ntu3U
SupZThkh+uZ+B8E318Q2MHhNz4Z+TQ5dPZGkpjE/j129PtQuqhzCqVhJo0+69b0mhfNr
k+wA==
X-Gm-Message-State: AC+VfDy/5UisyxuvDtDzuUvrS0oADMnQ3HgjyyQYaiBYMHxNKmg7czLS
cbq8F9W+lLb8H1GYC4+cqjL70r9C2WEBmCI1pw==
X-Google-Smtp-Source: ACHHUZ65d/zRdk19dYBDCYHNDmrVcjHwlEOUNU2j5dMU7931SsoYyruNGsbtYgq04r7PEUUvBPUUYcGKVZZnQzYdHzk=
X-Received: by 2002:a05:6870:a402:b0:1a9:bad4:838f with SMTP id
m2-20020a056870a40200b001a9bad4838fmr4053572oal.11.1687176270939; Mon, 19 Jun
2023 05:04:30 -0700 (PDT)
MIME-Version: 1.0
From: Herr Gomez Rodrigo
Date: Mon, 19 Jun 2023 12:04:24 +0000
Message-ID:
Subject:
To: dashwilson2003
dave
david rdt
Content-Type: multipart/alternative; boundary="0000000000004d8ce905fe7a56cf"
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356 http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: steadydrive.homes]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kyawsantun.er1(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kyawsantun.er1(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.66 listed in list.dnswl.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]
[URI: slvhi2ul5.steadydrive.homes/194.50.153.72]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.66 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 BODY_SINGLE_URI Message body is only a URI
Subject: {SPAM?}
--0000000000004d8ce905fe7a56cf
Content-Type: text/plain; charset="UTF-8"
http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
--0000000000004d8ce905fe7a56cf
Content-Type: text/html; charset="UTF-8"
http://SlvHI2Ul5.steadydrive.homes/34546de4235m342356
--0000000000004d8ce905fe7a56cf--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments