More link spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Sep 2023 02:41:12 -0600
Received: from mail-lj1-f196.google.com ([209.85.208.196]:50312)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qfcHs-000POl-22
for dave@doctor.nl2k.ab.ca;
Mon, 11 Sep 2023 02:29:02 -0600
Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2bcc14ea414so67338471fa.0
for; Mon, 11 Sep 2023 01:26:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1694420807; x=1695025607; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=e6TmSDbl5H7BO5Vkj1JT5MGwymMAj04AANDVkFpAYAM=;
b=hA3d0TYM8eIAW1Gs8U3YuZIKu/N4dkqVcnpMe/tl8Ne8TRqi8i+7s30hfaIswwEp6V
YvXe66NFHf4VFGzP9ZmvIKm0oiiZlI3nKy5JpKkUiIxPt4xXZKcuL+v+vuz/d6K15TvE
eegoqdrt2LrcdR3mxdGuGK3s6lArb2k3ORIC84sFvESWagJ00d4k+68C8Q7JDSAnfarr
JcSTCuuLhYIV4oAqZ4Yczku5J4FhuNuDFWsbOqskoGrkMSXCL5tw6/EcxesUPnKOGC/k
89EZsTkopDNhUeShGWTxOmye8y3M7UXBK2farmy3BSZ4MasuXmcQDd+FfIjbogE97BZ8
Q+Ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1694420807; x=1695025607;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=e6TmSDbl5H7BO5Vkj1JT5MGwymMAj04AANDVkFpAYAM=;
b=JHUQdu8MRctLEtBeLRQC0ApS1dFAEKhZO6Z+0Sn/ZtPQDxUf2V0zP4KQK1Q4R9Bt1g
uf30s9CKwtD1R4pc+raxROCyNDz5Q2LzxblPbAmMgIaefu195SxoR2LN8Dpl0DLIgqmY
h5UNRCILmzj5VOPZQHz5eoXECQBBqPDLrea2FOz52ep7cgtf6V7BB5vaUDGrz5tpxHLB
V4bjjsbucw0p4o6bucvaScO3XzJeV5/N3SKzvcly234vkr2844zuGkfXxRaSFWzTKEeu
YoylK4gCWMNEC1todCWAVMx1VsG+bpnhwkVlvuXGt2LIj+08nxbOoO4w5K9VhkbGm2E/
NXoQ==
X-Gm-Message-State: AOJu0Yy395SJlK5CVsIp3B1VBzLi5PK7s14BAJgieFlzjdzeuNGKkJIX
GRcDNbvworhVOhnTvbAz0Dh/1J4rGMl5Q6emhuY=
X-Google-Smtp-Source: AGHT+IG9yQOBwRNd93/ZV8CHyaYSRP5DGzlJEul0EqCwIlnvHXz3uQPlAj58v6WPbTwE6MH5y7++UVvIpxb5kLiMbvk=
X-Received: by 2002:a05:651c:b25:b0:2be:54b4:ff87 with SMTP id
b37-20020a05651c0b2500b002be54b4ff87mr7972273ljr.40.1694420806502; Mon, 11
Sep 2023 01:26:46 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Mon, 11 Sep 2023 08:26:37 +0000
Message-ID:
Subject:
To: datsit1968, dave ,
davelongaphie5309
Content-Type: multipart/alternative; boundary="000000000000458afc06051116d0"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: dojol.cc]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: drcharlesedward.dojol.cc]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: dojol.cc]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: dojol.cc]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: drcharlesedward.dojol.cc/95.214.26.24]
[URI: drcharlesedward.dojol.cc/95.214.26.24]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[satyajitroy.gpt(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000458afc06051116d0
Content-Type: text/plain; charset="UTF-8"
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
--000000000000458afc06051116d0
Content-Type: text/html; charset="UTF-8"
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
--000000000000458afc06051116d0--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Sep 2023 02:41:12 -0600
Received: from mail-lj1-f196.google.com ([209.85.208.196]:50312)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qfcHs-000POl-22
for dave@doctor.nl2k.ab.ca;
Mon, 11 Sep 2023 02:29:02 -0600
Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2bcc14ea414so67338471fa.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1694420807; x=1695025607; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=e6TmSDbl5H7BO5Vkj1JT5MGwymMAj04AANDVkFpAYAM=;
b=hA3d0TYM8eIAW1Gs8U3YuZIKu/N4dkqVcnpMe/tl8Ne8TRqi8i+7s30hfaIswwEp6V
YvXe66NFHf4VFGzP9ZmvIKm0oiiZlI3nKy5JpKkUiIxPt4xXZKcuL+v+vuz/d6K15TvE
eegoqdrt2LrcdR3mxdGuGK3s6lArb2k3ORIC84sFvESWagJ00d4k+68C8Q7JDSAnfarr
JcSTCuuLhYIV4oAqZ4Yczku5J4FhuNuDFWsbOqskoGrkMSXCL5tw6/EcxesUPnKOGC/k
89EZsTkopDNhUeShGWTxOmye8y3M7UXBK2farmy3BSZ4MasuXmcQDd+FfIjbogE97BZ8
Q+Ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1694420807; x=1695025607;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=e6TmSDbl5H7BO5Vkj1JT5MGwymMAj04AANDVkFpAYAM=;
b=JHUQdu8MRctLEtBeLRQC0ApS1dFAEKhZO6Z+0Sn/ZtPQDxUf2V0zP4KQK1Q4R9Bt1g
uf30s9CKwtD1R4pc+raxROCyNDz5Q2LzxblPbAmMgIaefu195SxoR2LN8Dpl0DLIgqmY
h5UNRCILmzj5VOPZQHz5eoXECQBBqPDLrea2FOz52ep7cgtf6V7BB5vaUDGrz5tpxHLB
V4bjjsbucw0p4o6bucvaScO3XzJeV5/N3SKzvcly234vkr2844zuGkfXxRaSFWzTKEeu
YoylK4gCWMNEC1todCWAVMx1VsG+bpnhwkVlvuXGt2LIj+08nxbOoO4w5K9VhkbGm2E/
NXoQ==
X-Gm-Message-State: AOJu0Yy395SJlK5CVsIp3B1VBzLi5PK7s14BAJgieFlzjdzeuNGKkJIX
GRcDNbvworhVOhnTvbAz0Dh/1J4rGMl5Q6emhuY=
X-Google-Smtp-Source: AGHT+IG9yQOBwRNd93/ZV8CHyaYSRP5DGzlJEul0EqCwIlnvHXz3uQPlAj58v6WPbTwE6MH5y7++UVvIpxb5kLiMbvk=
X-Received: by 2002:a05:651c:b25:b0:2be:54b4:ff87 with SMTP id
b37-20020a05651c0b2500b002be54b4ff87mr7972273ljr.40.1694420806502; Mon, 11
Sep 2023 01:26:46 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Mon, 11 Sep 2023 08:26:37 +0000
Message-ID:
Subject:
To: datsit1968
davelongaphie5309
Content-Type: multipart/alternative; boundary="000000000000458afc06051116d0"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: dojol.cc]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: drcharlesedward.dojol.cc]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: dojol.cc]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: dojol.cc]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: drcharlesedward.dojol.cc/95.214.26.24]
[URI: drcharlesedward.dojol.cc/95.214.26.24]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[satyajitroy.gpt(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
Subject: {SPAM?}
--000000000000458afc06051116d0
Content-Type: text/plain; charset="UTF-8"
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
--000000000000458afc06051116d0
Content-Type: text/html; charset="UTF-8"
http://DrCharlesEdward.dojol.cc/34546de4235m342356?affsub2=SgwVISL5gSwhAl&st=55TR7xjt
--000000000000458afc06051116d0--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments