More link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Jun 2023 07:40:00 -0600
Received: from mail-lf1-f52.google.com ([209.85.167.52]:47422)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qE8tL-000BKO-2o
for dave@doctor.nl2k.ab.ca;
Tue, 27 Jun 2023 07:38:03 -0600
Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-4f95bf5c493so6012950e87.3
for; Tue, 27 Jun 2023 06:36:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687872954; x=1690464954;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=1+pn3XvExxFa7jvyPojAm0urJb/3eiQ6dnnUngqFj/c=;
b=WzB0D71dP7biAdajskammV3+PJ3x7/cAmWjr5/DowYFHbYdGPqpdm37dCorX4w+Gi9
9lGBOH9rry3vTVtvxvfN/JtOsotChkCfIbNMD4TofesgNkCXUsSZSJCW6GVwF/p+PrIA
AsCp2PoVeZkAVgWxVtqfRcHnNgS9S4bYXhtb2oCqR19eVe8M/qbHcdmKHjloR+f5NClQ
6fde6FhKDJupFFaRmhC+HKzKGIomh3pY0lSC2pLN35zYRAl4oF2XZEz+XSCUr1Jx4Wr1
UEuuF54HKt5DVWa8uMnbdsZQPZQJkG0nji/DvtcNHRmsdGJLprJQHlLySpnpp6lbUVF6
bjXg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687872954; x=1690464954;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=1+pn3XvExxFa7jvyPojAm0urJb/3eiQ6dnnUngqFj/c=;
b=WmPUU7m+rerYZRJ+JGdPtKGntgJTRsWgyvxMmIR5KCSjENuRMX1rSzNEQSmvfgpopy
C9A28hWlHD71d7Mfai8QXP/5wNDi0Fd3C6VSXUCsUii6orI+N9WXZSqQcMvNaQ7Dz+eu
KGXsXxTeYUUPUrAe4eBDmZD6RUESczcpF/LwbXFJPWxI2ynANd4NltPpTjhaC0jD/tQl
EMCEg6ucrCXFqKiGkWPZKNXLBdWTaD5rsjfY09aOw+NABeLefmCCboxovoWKH62WmuoO
P8aeYIK+JYDlxd6EwkvnC5fIThSFIY7wEQKEhmqFeUUP+d6Edl6Kdkj6CSF+xw80kneV
d4Qw==
X-Gm-Message-State: AC+VfDy0RCWyrJKG3Q27/gv9QhhqufDJPhIvfZYMUbHMfPfzB/vQB5lr
hDKQJDtBIySOjxL6dHaS7dfLLzwAr5YnITXhQWE=
X-Google-Smtp-Source: ACHHUZ61ZpcK+1ip9UvTeyxqbqgDWDQ5nYcJ+DksYgqxHIqDfSLVWB8yzaSTvwRNSoXrK3oQcr73ZJ3hHVir6BJTEMM=
X-Received: by 2002:a19:5e53:0:b0:4f8:6c1f:b1ab with SMTP id
z19-20020a195e53000000b004f86c1fb1abmr15611830lfi.27.1687872953914; Tue, 27
Jun 2023 06:35:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a9a:4e17:0:b0:261:1396:d2b9 with HTTP; Tue, 27 Jun 2023
06:35:53 -0700 (PDT)
From: =?UTF-8?B?4o+p?=
Date: Tue, 27 Jun 2023 13:35:53 +0000
Message-ID:
Subject: Dr.Charles Edward
To: darcybeer, daren krentz ,
daria b55, darnaque leschats2011 ,
datok jp, datsit1968 , dave
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://numberonetigerdetective.tumblr.com/#2UzMyQzMtVzMyQTZkZDN1QzMvM2Yu4WYyVmZpZmLtVmM692LvoDc0RHa
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.52 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kashifprincekhan533(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kashifprincekhan533(at)gmail.com]
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 SCC_BODY_URI_ONLY No description available.
Subject: {SPAM?} Dr.Charles Edward
https://numberonetigerdetective.tumblr.com/#2UzMyQzMtVzMyQTZkZDN1QzMvM2Yu4WYyVmZpZmLtVmM692LvoDc0RHa
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Jun 2023 07:40:00 -0600
Received: from mail-lf1-f52.google.com ([209.85.167.52]:47422)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qE8tL-000BKO-2o
for dave@doctor.nl2k.ab.ca;
Tue, 27 Jun 2023 07:38:03 -0600
Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-4f95bf5c493so6012950e87.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687872954; x=1690464954;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=1+pn3XvExxFa7jvyPojAm0urJb/3eiQ6dnnUngqFj/c=;
b=WzB0D71dP7biAdajskammV3+PJ3x7/cAmWjr5/DowYFHbYdGPqpdm37dCorX4w+Gi9
9lGBOH9rry3vTVtvxvfN/JtOsotChkCfIbNMD4TofesgNkCXUsSZSJCW6GVwF/p+PrIA
AsCp2PoVeZkAVgWxVtqfRcHnNgS9S4bYXhtb2oCqR19eVe8M/qbHcdmKHjloR+f5NClQ
6fde6FhKDJupFFaRmhC+HKzKGIomh3pY0lSC2pLN35zYRAl4oF2XZEz+XSCUr1Jx4Wr1
UEuuF54HKt5DVWa8uMnbdsZQPZQJkG0nji/DvtcNHRmsdGJLprJQHlLySpnpp6lbUVF6
bjXg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687872954; x=1690464954;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=1+pn3XvExxFa7jvyPojAm0urJb/3eiQ6dnnUngqFj/c=;
b=WmPUU7m+rerYZRJ+JGdPtKGntgJTRsWgyvxMmIR5KCSjENuRMX1rSzNEQSmvfgpopy
C9A28hWlHD71d7Mfai8QXP/5wNDi0Fd3C6VSXUCsUii6orI+N9WXZSqQcMvNaQ7Dz+eu
KGXsXxTeYUUPUrAe4eBDmZD6RUESczcpF/LwbXFJPWxI2ynANd4NltPpTjhaC0jD/tQl
EMCEg6ucrCXFqKiGkWPZKNXLBdWTaD5rsjfY09aOw+NABeLefmCCboxovoWKH62WmuoO
P8aeYIK+JYDlxd6EwkvnC5fIThSFIY7wEQKEhmqFeUUP+d6Edl6Kdkj6CSF+xw80kneV
d4Qw==
X-Gm-Message-State: AC+VfDy0RCWyrJKG3Q27/gv9QhhqufDJPhIvfZYMUbHMfPfzB/vQB5lr
hDKQJDtBIySOjxL6dHaS7dfLLzwAr5YnITXhQWE=
X-Google-Smtp-Source: ACHHUZ61ZpcK+1ip9UvTeyxqbqgDWDQ5nYcJ+DksYgqxHIqDfSLVWB8yzaSTvwRNSoXrK3oQcr73ZJ3hHVir6BJTEMM=
X-Received: by 2002:a19:5e53:0:b0:4f8:6c1f:b1ab with SMTP id
z19-20020a195e53000000b004f86c1fb1abmr15611830lfi.27.1687872953914; Tue, 27
Jun 2023 06:35:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a9a:4e17:0:b0:261:1396:d2b9 with HTTP; Tue, 27 Jun 2023
06:35:53 -0700 (PDT)
From: =?UTF-8?B?4o+p?=
Date: Tue, 27 Jun 2023 13:35:53 +0000
Message-ID:
Subject: Dr.Charles Edward
To: darcybeer
daria b55
datok jp
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://numberonetigerdetective.tumblr.com/#2UzMyQzMtVzMyQTZkZDN1QzMvM2Yu4WYyVmZpZmLtVmM692LvoDc0RHa
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.52 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kashifprincekhan533(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kashifprincekhan533(at)gmail.com]
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 SCC_BODY_URI_ONLY No description available.
Subject: {SPAM?} Dr.Charles Edward
https://numberonetigerdetective.tumblr.com/#2UzMyQzMtVzMyQTZkZDN1QzMvM2Yu4WYyVmZpZmLtVmM692LvoDc0RHa
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments