link spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 07 Jul 2023 08:09:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qHm8L-000J2s-1H
for dave@doctor.nl2k.ab.ca;
Fri, 07 Jul 2023 08:08:29 -0600
Resent-From: The Doctor
Resent-Date: Fri, 7 Jul 2023 08:08:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f47.google.com ([209.85.167.47]:62783)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qHlTI-0002Oe-1t
for doctor@doctor.nl2k.ab.ca;
Fri, 07 Jul 2023 07:26:08 -0600
Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-4fb7373dd35so3849880e87.1
for; Fri, 07 Jul 2023 06:24:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688736239; x=1691328239;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=vVraEXoBYBcxZ1lzIPtNWbXNkNsdqpQ2BNuxmtVxN0A=;
b=A9I/Vnv/Aho0psAMNwpm2bquvyFrBbVkPe63j/NYJMibW6fyXtGOV1JJQQVy9vGubC
MaWKpCut65UpcF9ocGzo76BN12pV0bXoSAUZIobiiGcASLMGGi1iAedO9aRCCu2UIGlP
r/fCDVMchzFNS/N/6OtmIxTYNvXzOeeZrz223j4dqlw0ydu/jXm6Rbf6OXwlKTkCTTg/
I8D04XZ7aRIKCwFsgFHetuAXxdxB3DEgYqoJcOHSXfWrdJtZrHKrMPoOQIN+ywYvxfX3
dFEF1Lh13vxnaYsbUY0UO+qrWiaZxuOgOCiT38xLO9t5GEy4Dnas+TnG0AAAmSGpKgnW
2uqw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688736239; x=1691328239;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=vVraEXoBYBcxZ1lzIPtNWbXNkNsdqpQ2BNuxmtVxN0A=;
b=eJAf0NZYEM22LozkLDTKQru9dlapTao5KhFFujjNKnTYorPI5SPX7wNMN+0i8nxe+H
lIqMP+0tnH4KeCQWBmSypMUTswZZyLqImPecZNJHqFfbPxVdX/MfHFJz9G2YyeDXb/Zy
pcfAcBXNwqCO7qIjCoK7ljYG/QOwhHCTAVwhz1sHUSFD78TcI3oAED219eoxARHC2gKk
vZ5X55mturOgDVBoCODjyY0+4fUlhmrlaLoBC7rqQkaxGitWO5QcjqvrK55TQ/SYRERp
Rs/6nuoQBi47g0bADs343RbX/+eehD0OevsvIViywK0rvgGX6GUYnh/qIKjvQpf5AKBd
GTJg==
X-Gm-Message-State: ABy/qLbo7cNgw1ncgeQARRDAVi1pR/ZLnzPOMNbZWZsiE4i38mqWz+MT
5uJevwizg/zKUrSyXufVI1saqq8aihdP4mRYq1XiSNX0BJTtKI68
X-Google-Smtp-Source: APBJJlGk2xTM3XegXLRsnb7ga9Y1/4GojklRniDoYYHvPSHT8op7LX5qZV2WQQ/JaiWE9iRgYucu1yL28Po/CcUNpvk=
X-Received: by 2002:a05:6512:603:b0:4f7:6404:4638 with SMTP id
b3-20020a056512060300b004f764044638mr1868478lfe.17.1688736239584; Fri, 07 Jul
2023 06:23:59 -0700 (PDT)
MIME-Version: 1.0
From: Ms Monica Rolland
Date: Fri, 7 Jul 2023 13:23:45 +0000
Message-ID:
Subject:
To: david, david , david ,
david, deekoo , dkabura ,
dkg, doctor ,
dougm, dpchurch
Content-Type: multipart/alternative; boundary="000000000000ae0c8a05ffe58be1"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[agungfer1987(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[agungfer1987(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.47 listed in list.dnswl.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: 1drv.ms/13.107.42.12]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
2.5 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.47 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000ae0c8a05ffe58be1
Content-Type: text/plain; charset="UTF-8"
https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
--000000000000ae0c8a05ffe58be1
Content-Type: text/html; charset="UTF-8"
https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
--000000000000ae0c8a05ffe58be1--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 07 Jul 2023 08:09:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qHm8L-000J2s-1H
for dave@doctor.nl2k.ab.ca;
Fri, 07 Jul 2023 08:08:29 -0600
Resent-From: The Doctor
Resent-Date: Fri, 7 Jul 2023 08:08:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f47.google.com ([209.85.167.47]:62783)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qHlTI-0002Oe-1t
for doctor@doctor.nl2k.ab.ca;
Fri, 07 Jul 2023 07:26:08 -0600
Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-4fb7373dd35so3849880e87.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688736239; x=1691328239;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=vVraEXoBYBcxZ1lzIPtNWbXNkNsdqpQ2BNuxmtVxN0A=;
b=A9I/Vnv/Aho0psAMNwpm2bquvyFrBbVkPe63j/NYJMibW6fyXtGOV1JJQQVy9vGubC
MaWKpCut65UpcF9ocGzo76BN12pV0bXoSAUZIobiiGcASLMGGi1iAedO9aRCCu2UIGlP
r/fCDVMchzFNS/N/6OtmIxTYNvXzOeeZrz223j4dqlw0ydu/jXm6Rbf6OXwlKTkCTTg/
I8D04XZ7aRIKCwFsgFHetuAXxdxB3DEgYqoJcOHSXfWrdJtZrHKrMPoOQIN+ywYvxfX3
dFEF1Lh13vxnaYsbUY0UO+qrWiaZxuOgOCiT38xLO9t5GEy4Dnas+TnG0AAAmSGpKgnW
2uqw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688736239; x=1691328239;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=vVraEXoBYBcxZ1lzIPtNWbXNkNsdqpQ2BNuxmtVxN0A=;
b=eJAf0NZYEM22LozkLDTKQru9dlapTao5KhFFujjNKnTYorPI5SPX7wNMN+0i8nxe+H
lIqMP+0tnH4KeCQWBmSypMUTswZZyLqImPecZNJHqFfbPxVdX/MfHFJz9G2YyeDXb/Zy
pcfAcBXNwqCO7qIjCoK7ljYG/QOwhHCTAVwhz1sHUSFD78TcI3oAED219eoxARHC2gKk
vZ5X55mturOgDVBoCODjyY0+4fUlhmrlaLoBC7rqQkaxGitWO5QcjqvrK55TQ/SYRERp
Rs/6nuoQBi47g0bADs343RbX/+eehD0OevsvIViywK0rvgGX6GUYnh/qIKjvQpf5AKBd
GTJg==
X-Gm-Message-State: ABy/qLbo7cNgw1ncgeQARRDAVi1pR/ZLnzPOMNbZWZsiE4i38mqWz+MT
5uJevwizg/zKUrSyXufVI1saqq8aihdP4mRYq1XiSNX0BJTtKI68
X-Google-Smtp-Source: APBJJlGk2xTM3XegXLRsnb7ga9Y1/4GojklRniDoYYHvPSHT8op7LX5qZV2WQQ/JaiWE9iRgYucu1yL28Po/CcUNpvk=
X-Received: by 2002:a05:6512:603:b0:4f7:6404:4638 with SMTP id
b3-20020a056512060300b004f764044638mr1868478lfe.17.1688736239584; Fri, 07 Jul
2023 06:23:59 -0700 (PDT)
MIME-Version: 1.0
From: Ms Monica Rolland
Date: Fri, 7 Jul 2023 13:23:45 +0000
Message-ID:
Subject:
To: david
david
dkg
dougm
Content-Type: multipart/alternative; boundary="000000000000ae0c8a05ffe58be1"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[agungfer1987(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[agungfer1987(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.47 listed in list.dnswl.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: 1drv.ms/13.107.42.12]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
2.5 BODY_SINGLE_URI Message body is only a URI
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.47 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000ae0c8a05ffe58be1
Content-Type: text/plain; charset="UTF-8"
https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
--000000000000ae0c8a05ffe58be1
Content-Type: text/html; charset="UTF-8"
https://1drv.ms/b/s!As8xPfZy327AbjGZgXPP7H5BRVU
--000000000000ae0c8a05ffe58be1--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments