link spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 19 Sep 2023 05:36:01 -0600
Received: from mail-qk1-f173.google.com ([209.85.222.173]:45357)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qiYxA-000DFN-1T
for dave@doctor.nl2k.ab.ca;
Tue, 19 Sep 2023 05:31:45 -0600
Received: by mail-qk1-f173.google.com with SMTP id af79cd13be357-76e09202322so376892185a.3
for; Tue, 19 Sep 2023 04:29:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1695122976; x=1695727776; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=xVj81g7KvzA7W73yGY3ClguohOsj6GCQaIwifLfx/4A=;
b=AYLo8u1rBvvuXqE24wPeIab+amQkxMiPz04h/9Gkh+gcBKlHNzBctlyAbpvg5viZUK
qVE61l2s18CsdT3cjgwCAESlDp2+fr6jRUAMWbK779FQY6qDvPtb9lu5cwa2UBFk1XFw
6p+s+JROs5rzmEAxooe8OkhN03e2cqTKlzXjqz9Lrzto2lnIVZcrkmTbMg7CrSF9JEpv
rd1/deoHj4+kdENJaMPuNRT3g0LpsYLy3ov8+Q0xrEf0ArZ+hzILppfxCOwsFSbH4a8j
lXe9qqFxOzmga/4b+M9khJ/sRU3+5s0anjOzwqTMMqlIuyxYKxGDZfaQkiJdw7e3H/v2
hcJg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1695122976; x=1695727776;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=xVj81g7KvzA7W73yGY3ClguohOsj6GCQaIwifLfx/4A=;
b=rB1BcW/ViTtVt0qaCuREkUSPS1wIsaFywf1GSUASlRirQHwl4/cu4/AiF7R9DF27C3
9crp93LgWCvtndS9GtKWZUzyLqlUl/kMCb664wQRkfMl8+/iEALdOh9h8w57PRBeZfZJ
Ak0Mc4ZEix56UhrW6l2nL152MpkuLdwjQNz+yOKCVZC0/cZPTEBQxs9UD4lbE34z4Jeg
M1ULzr7gr2wsPAoMCSRKbGlUsnIgF58gdI3LyVCV7OUxDoQ4NPcwcIz7f+9LZKHgQ0wo
BG4TlbJUJdzamloIye7tjQKcoVYbRgCkIjELq//qhvylhtxrqJxqU4s6VO1zccGGf3LN
ziTw==
X-Gm-Message-State: AOJu0YyEwHbEoXyTz3FLj5RiGEAojO7bBYgoxmEqQSpOsYZCyBPnWNI1
iV7nlssweAV0hefrOKzPlcPLjAVqCUf/p0gnTeM=
X-Google-Smtp-Source: AGHT+IE/7AH8e7ErurVG+fKRflnOwj8n5MagXfWSbzOA+zRu0HbfjnqoTVdITRVIz7lv6TYYNwyC3anPAM1tF8ctG0g=
X-Received: by 2002:a05:620a:17a2:b0:76c:8e13:75f0 with SMTP id
ay34-20020a05620a17a200b0076c8e1375f0mr14002563qkb.5.1695122975910; Tue, 19
Sep 2023 04:29:35 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Tue, 19 Sep 2023 11:29:23 +0000
Message-ID:
Subject: Greetings
To: datsit1968, dave ,
davelongaphie5309,
david cameletti2, david100
Content-Type: multipart/alternative; boundary="000000000000d4701d0605b4926d"
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your own friend Dr Charles Edward shared the web page link
with you - https://viyi6.app.link/crOfM8EbcDb You will be impressed Your
own friend Dr Charles Edward shared the web page link with you - https://viyi6.app.link/crOfM8EbcDb
You will be impressed
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.173 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[versalyasociados(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} Greetings
--000000000000d4701d0605b4926d
Content-Type: text/plain; charset="UTF-8"
Your own friend Dr Charles Edward shared the web page link with you -
https://viyi6.app.link/crOfM8EbcDb
You will be impressed
--000000000000d4701d0605b4926d
Content-Type: text/html; charset="UTF-8"
Your own friend Dr Charles Edward shared the web page link with you - https://viyi6.app.link/crOfM8EbcDb
You will be impressed
--000000000000d4701d0605b4926d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 19 Sep 2023 05:36:01 -0600
Received: from mail-qk1-f173.google.com ([209.85.222.173]:45357)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qiYxA-000DFN-1T
for dave@doctor.nl2k.ab.ca;
Tue, 19 Sep 2023 05:31:45 -0600
Received: by mail-qk1-f173.google.com with SMTP id af79cd13be357-76e09202322so376892185a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1695122976; x=1695727776; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=xVj81g7KvzA7W73yGY3ClguohOsj6GCQaIwifLfx/4A=;
b=AYLo8u1rBvvuXqE24wPeIab+amQkxMiPz04h/9Gkh+gcBKlHNzBctlyAbpvg5viZUK
qVE61l2s18CsdT3cjgwCAESlDp2+fr6jRUAMWbK779FQY6qDvPtb9lu5cwa2UBFk1XFw
6p+s+JROs5rzmEAxooe8OkhN03e2cqTKlzXjqz9Lrzto2lnIVZcrkmTbMg7CrSF9JEpv
rd1/deoHj4+kdENJaMPuNRT3g0LpsYLy3ov8+Q0xrEf0ArZ+hzILppfxCOwsFSbH4a8j
lXe9qqFxOzmga/4b+M9khJ/sRU3+5s0anjOzwqTMMqlIuyxYKxGDZfaQkiJdw7e3H/v2
hcJg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1695122976; x=1695727776;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=xVj81g7KvzA7W73yGY3ClguohOsj6GCQaIwifLfx/4A=;
b=rB1BcW/ViTtVt0qaCuREkUSPS1wIsaFywf1GSUASlRirQHwl4/cu4/AiF7R9DF27C3
9crp93LgWCvtndS9GtKWZUzyLqlUl/kMCb664wQRkfMl8+/iEALdOh9h8w57PRBeZfZJ
Ak0Mc4ZEix56UhrW6l2nL152MpkuLdwjQNz+yOKCVZC0/cZPTEBQxs9UD4lbE34z4Jeg
M1ULzr7gr2wsPAoMCSRKbGlUsnIgF58gdI3LyVCV7OUxDoQ4NPcwcIz7f+9LZKHgQ0wo
BG4TlbJUJdzamloIye7tjQKcoVYbRgCkIjELq//qhvylhtxrqJxqU4s6VO1zccGGf3LN
ziTw==
X-Gm-Message-State: AOJu0YyEwHbEoXyTz3FLj5RiGEAojO7bBYgoxmEqQSpOsYZCyBPnWNI1
iV7nlssweAV0hefrOKzPlcPLjAVqCUf/p0gnTeM=
X-Google-Smtp-Source: AGHT+IE/7AH8e7ErurVG+fKRflnOwj8n5MagXfWSbzOA+zRu0HbfjnqoTVdITRVIz7lv6TYYNwyC3anPAM1tF8ctG0g=
X-Received: by 2002:a05:620a:17a2:b0:76c:8e13:75f0 with SMTP id
ay34-20020a05620a17a200b0076c8e1375f0mr14002563qkb.5.1695122975910; Tue, 19
Sep 2023 04:29:35 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Tue, 19 Sep 2023 11:29:23 +0000
Message-ID:
Subject: Greetings
To: datsit1968
davelongaphie5309
david cameletti2
Content-Type: multipart/alternative; boundary="000000000000d4701d0605b4926d"
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your own friend Dr Charles Edward shared the web page link
with you - https://viyi6.app.link/crOfM8EbcDb You will be impressed Your
own friend Dr Charles Edward shared the web page link with you - https://viyi6.app.link/crOfM8EbcDb
You will be impressed
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.173 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[versalyasociados(at)gmail.com]
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} Greetings
--000000000000d4701d0605b4926d
Content-Type: text/plain; charset="UTF-8"
Your own friend Dr Charles Edward shared the web page link with you -
https://viyi6.app.link/crOfM8EbcDb
You will be impressed
--000000000000d4701d0605b4926d
Content-Type: text/html; charset="UTF-8"
Your own friend Dr Charles Edward shared the web page link with you - https://viyi6.app.link/crOfM8EbcDb
You will be impressed
--000000000000d4701d0605b4926d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments