More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 22 Jun 2023 11:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qCORi-000D3V-29
for dave@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 11:50:14 -0600
Resent-From: The Doctor
Resent-Date: Thu, 22 Jun 2023 11:50:14 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f195.google.com ([209.85.128.195]:60710)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qCKwE-000BBJ-0K
for doctor@nl2k.ab.ca;
Thu, 22 Jun 2023 08:05:34 -0600
Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-5700b37da3fso66898257b3.1
for; Thu, 22 Jun 2023 07:03:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687442605; x=1690034605;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=o1euq874x6OJbMRaTzlOucwWNy1UtfdDHbVNY8k5aD4=;
b=jRJxjY2aZenihD0XHlgE73KyWc6jOOddMu6uhI4tUsSGP6jhVHrP4P8RXErGCaYDL9
WuvN9olBHxwSSYDDwz/mZYrNMTftLGX5saG/c9ondjL8pziBBeZV9FLgoOWF+o1956YR
WkKYqu2g4DvRU3cInirnniSjDN5uD2OVlWzeJ9liZ7r7RJikuGqFljHXtwuADrBIEPW0
aG1NOrW4K6HBGW29AFXO7Dv5QcpG0FQ8bLkxc2MjJHCaStijI6+df0VPht6QrUdzuHoJ
u5q1kKgjDOmxnE69RQwYwdldpP1x++3OIPl00jCSL5BcdKxsJtixXloJbpEw6Nhs+S3s
lYRQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687442605; x=1690034605;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=o1euq874x6OJbMRaTzlOucwWNy1UtfdDHbVNY8k5aD4=;
b=Xo4bEoBrkl9uyqAX2w+yeNxE/MtdKtbptMg8d5TGUv3RKhCif/srT2lND4viW+4oUO
5ZkZNqRK6t6RZ0s2trA+MQhUN5zddQDr1diDk92Bzr+AuVXHrNenghf4L9TCmGpUXsnf
yqN+w6LddkSLjtUmE6+xjhjPpZXGkvqM5QsYsBQ70EJzqsW9mjU6jfmxkkK5kMDRBkdE
OA4T2cLbhopLz/1dXVlbeKoe6GFknbyD1PQXxC/89rFritdtGbCJYWczGDmibIrhGoid
bm+JdibvWfuI/78lsMw92v0cU0Xzg9KgCsrn4ncxiwn9OlBIXMPKylS4ntVkfY/Oo902
x85w==
X-Gm-Message-State: AC+VfDx4UBiAiogkyybmyYZGFGJpSV+tewzbFBni+bDEfPFIiALja8Bh
Eqo4zAwL/xWPlQA2SBM66QrTKSuhtdes7HW8S4rSGDe7eVOoIg==
X-Google-Smtp-Source: ACHHUZ6H/CkdjpDGZE+0lUze2yJfTkh/ylwRTTQ88vlY4VyuARhdda3i8HeUY+8gYW8H5EMQj/sJmY6t8EDzi0DZnoM=
X-Received: by 2002:a67:b141:0:b0:43b:5516:9089 with SMTP id
z1-20020a67b141000000b0043b55169089mr6621675vsl.12.1687436779885; Thu, 22 Jun
2023 05:26:19 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:c54d:0:b0:3e4:9a3f:e3ff with HTTP; Thu, 22 Jun 2023
05:26:19 -0700 (PDT)
From: Copiaso Parras
Date: Thu, 22 Jun 2023 12:26:19 +0000
Message-ID:
Subject: bola17
To: doconnor, doctor ,
dolores32, domenic rubino ,
donahued, dorlovic ,
dossantos
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3NIGtTZ
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.195 listed in list.dnswl.org]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[copiaso.parras(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
0.0 SCC_BODY_SINGLE_WORD No description available.
1.0 SCC_BODY_URI_ONLY No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
2.3 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.195 listed in wl.mailspike.net]
Subject: {SPAM?} bola17
https://bit.ly/3NIGtTZ
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 22 Jun 2023 11:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qCORi-000D3V-29
for dave@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 11:50:14 -0600
Resent-From: The Doctor
Resent-Date: Thu, 22 Jun 2023 11:50:14 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f195.google.com ([209.85.128.195]:60710)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qCKwE-000BBJ-0K
for doctor@nl2k.ab.ca;
Thu, 22 Jun 2023 08:05:34 -0600
Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-5700b37da3fso66898257b3.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687442605; x=1690034605;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=o1euq874x6OJbMRaTzlOucwWNy1UtfdDHbVNY8k5aD4=;
b=jRJxjY2aZenihD0XHlgE73KyWc6jOOddMu6uhI4tUsSGP6jhVHrP4P8RXErGCaYDL9
WuvN9olBHxwSSYDDwz/mZYrNMTftLGX5saG/c9ondjL8pziBBeZV9FLgoOWF+o1956YR
WkKYqu2g4DvRU3cInirnniSjDN5uD2OVlWzeJ9liZ7r7RJikuGqFljHXtwuADrBIEPW0
aG1NOrW4K6HBGW29AFXO7Dv5QcpG0FQ8bLkxc2MjJHCaStijI6+df0VPht6QrUdzuHoJ
u5q1kKgjDOmxnE69RQwYwdldpP1x++3OIPl00jCSL5BcdKxsJtixXloJbpEw6Nhs+S3s
lYRQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687442605; x=1690034605;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=o1euq874x6OJbMRaTzlOucwWNy1UtfdDHbVNY8k5aD4=;
b=Xo4bEoBrkl9uyqAX2w+yeNxE/MtdKtbptMg8d5TGUv3RKhCif/srT2lND4viW+4oUO
5ZkZNqRK6t6RZ0s2trA+MQhUN5zddQDr1diDk92Bzr+AuVXHrNenghf4L9TCmGpUXsnf
yqN+w6LddkSLjtUmE6+xjhjPpZXGkvqM5QsYsBQ70EJzqsW9mjU6jfmxkkK5kMDRBkdE
OA4T2cLbhopLz/1dXVlbeKoe6GFknbyD1PQXxC/89rFritdtGbCJYWczGDmibIrhGoid
bm+JdibvWfuI/78lsMw92v0cU0Xzg9KgCsrn4ncxiwn9OlBIXMPKylS4ntVkfY/Oo902
x85w==
X-Gm-Message-State: AC+VfDx4UBiAiogkyybmyYZGFGJpSV+tewzbFBni+bDEfPFIiALja8Bh
Eqo4zAwL/xWPlQA2SBM66QrTKSuhtdes7HW8S4rSGDe7eVOoIg==
X-Google-Smtp-Source: ACHHUZ6H/CkdjpDGZE+0lUze2yJfTkh/ylwRTTQ88vlY4VyuARhdda3i8HeUY+8gYW8H5EMQj/sJmY6t8EDzi0DZnoM=
X-Received: by 2002:a67:b141:0:b0:43b:5516:9089 with SMTP id
z1-20020a67b141000000b0043b55169089mr6621675vsl.12.1687436779885; Thu, 22 Jun
2023 05:26:19 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:c54d:0:b0:3e4:9a3f:e3ff with HTTP; Thu, 22 Jun 2023
05:26:19 -0700 (PDT)
From: Copiaso Parras
Date: Thu, 22 Jun 2023 12:26:19 +0000
Message-ID:
Subject: bola17
To: doconnor
dolores32
donahued
dossantos
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3NIGtTZ
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.195 listed in list.dnswl.org]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[copiaso.parras(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
0.0 SCC_BODY_SINGLE_WORD No description available.
1.0 SCC_BODY_URI_ONLY No description available.
0.0 TVD_SPACE_RATIO No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
2.3 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.195 listed in wl.mailspike.net]
Subject: {SPAM?} bola17
https://bit.ly/3NIGtTZ
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments