Italian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jan 2024 06:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rURrh-000000008Ns-1MsP

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jan 2024 06:39:57 -0700

Resent-From: The Doctor

Resent-Date: Mon, 29 Jan 2024 06:39:57 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f171.google.com ([209.85.214.171]:56775)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUOA5-00000000Lzs-0k8Y

for doctor@doctor.nl2k.ab.ca;

Mon, 29 Jan 2024 02:42:46 -0700

Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-1d7431e702dso15738295ad.1

for ; Mon, 29 Jan 2024 01:40:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=salesianocusco-edu-pe.20230601.gappssmtp.com; s=20230601; t=1706521240; x=1707126040; darn=doctor.nl2k.ab.ca;

h=from:date:message-id:mime-version:to:user-agent:from:to:cc:subject

:date:message-id:reply-to;

bh=LMCJwvpCvjlsENCEcTGXWO21eczfvfU9D4zIdhvbGZs=;

b=q/Y3vptWrb4r78KCl6EDOU4BWmIjwcPr8EZb4jDI2XqeN8G2TZjB/3jvz5SeGM46Ku

20z4tb4uoOxog/NEw9OH9EkeIbugZw53Gs387hK2LNl0stHd5JGktSbOD0TKwZBxVk9X

tJr07FKbEernpC/jqtJpm76oJZgrqdn6xAvCDkpzAogj6gQvZJuVn22CoZLKOMcnw4g1

UQqbbGTeFspTbNes8xWgOCSa81Wtyj+Bi9kLsAKnwVZue6Df1KEMJLt2GflLJ9meyNxy

5HU8r9i5GJM+ue8o7lN4dJyhJmgwDMyDOcTs+91AVQTp1+H+IwgHdFsu+f+4+CfSvwgK

RX/g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706521240; x=1707126040;

h=from:date:message-id:mime-version:to:user-agent:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=LMCJwvpCvjlsENCEcTGXWO21eczfvfU9D4zIdhvbGZs=;

b=rM9ojAEfGo5pNqFaoaq4ey1tuF/VvhSLRYQe9trXDHAp/6LJvdVPbxi0umMQqKiCfc

oyRu0AevlBvLAezxXqYyROsieZXmBO0cGHEQiIX/trrXv8V82I6qvqRlzvByvORkbhx6

iiWbP7YVDWE+tW0dO7A3rXJ2J1ZTDhOw23aHAvPkjV7culLRpPKwxEU51XD4JmztNh4V

aoMyX3DOLfnLTlRkrn7eb2nV4KRFtfMZ25h66CNC5+NrBepspoJWInk0EJ/ZpVz0PgZr

pSyqw5ZLyDRCCqwrrgwPAa1bNF2W2Jy//tN+4jFrq3L1DQqXiu1kqS62WaqHF0PSWNLc

qweA==

X-Gm-Message-State: AOJu0YwRpJAAqPcI71FD7cTFlUja25QaPcUpMFFeC8OgFO0RinytZ5EB

sy5r57sxiB37Uy0BwHJPZ11+MdufW5NLUvlVbaVuSu6Se1sPq5ucrKc8U/qTNzgoZJEJ6Mjek9Y

XNunbgA0SNTo=

X-Google-Smtp-Source: AGHT+IEOq6cDoP/nZng3spndX3enRPoOEb2gODFNSjSoVrQbJ/K1CFKB2FsIQA4DKOCGOYJouK4Jdg==

X-Received: by 2002:a17:902:eccf:b0:1d7:85ac:a39c with SMTP id a15-20020a170902eccf00b001d785aca39cmr2231973plh.32.1706521240447;

Mon, 29 Jan 2024 01:40:40 -0800 (PST)

Received: from smtp.gmail.com ([118.189.201.78])

by smtp.gmail.com with ESMTPSA id jb9-20020a170903258900b001d8ca3f5e3fsm2402220plb.295.2024.01.29.01.40.33

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 29 Jan 2024 01:40:40 -0800 (PST)

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64;

rv:60.0) Gecko/20100101 Thunderbird/60.6.0

To: "doctor" , "dougm" ,

"dpchurch" , "dwegscheid" ,

"eam" , "edwardp" ,

"emmalouise53" ,

"faisal akash2010" ,

"fbriere" , "fear far"

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_F46C_F8BD15E2.3B50C93B"

Message-ID: <55ef2e6c-8023-466a-b686-e11e9380848e@salesianocusco.edu.pe>

Date: Mon, 29 Jan 2024 05:40:31 -0400

From: "Ms Monica Rolland"

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.8 MISSING_SUBJECT Missing Subject: header

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.171 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.171 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

2.5 SORTED_RECIPS Recipient list is sorted by address

0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.9 SCC_BODY_URI_ONLY No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

0.2 GMD_PDF_EMPTY_BODY BODY: Attached PDF with empty message body

Subject: *** VIRUS ***{SPAM?}

X-Antivirus: AVG (VPS 240129-6, 1/29/2024), Inbound message

X-Antivirus-Status: Infected

X-Attachment: Invite-FDB37641-3781-4C74-B295-5243DB8AF676.pdf#2083741349 Virus: PDF:PhishingX-gen [Phish] Moved to chest



------=_NextPart_000_F46C_F8BD15E2.3B50C93B

Content-Type: multipart/related;

boundary="------------01170E5ED280FDEABC4DDD5E"



--------------01170E5ED280FDEABC4DDD5E

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





--------------01170E5ED280FDEABC4DDD5E

Content-Type: image/PNG; name="6fd7d4d2677593b1.png"

Content-Transfer-Encoding: Base64

Content-Disposition: inline; FileName="6fd7d4d2677593b1.png"

Content-ID: <6fd7d4d2677593b1>



iVBORw0KGgoAAAANSUhEUgAAAdEAAAAbCAIAAACspSKqAAAAAXNSR0IArs4c6QAAAARnQU1B

AACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAb9SURBVHhe7ZtrdqQ6DIRneVlQLyd7

yVayk4wxIFmqkhE0kHTi79dtIZWqDNdnzn38+xoMBoPBXYw7dzAYDO5j3LmDwWBwH+POHQwG

g/sYd+5gMBjcR+/O/Xx/+2d5fCyPLubz/fH+ufz1CWiQNQBWjvGc8skx+5wVmRKL35rxt3Ld

53opuO5mAzHf+VkGd+7HYzkawrWntbyVt19+514Rs89ZkSlU/P6Mv5Wz3t2l3wCC6242QPn2

z5Ldub0Ld+ayA5N38rvv3Gti9jkrMoWIf0fG38pZ7+7SbwDBdTcbIPyAzxLv3PbGNQfTPrjK

8DUncue7Tyn/gBd/OX8h411c97leCtr+/iA/4LP0d64eCvNUr11qVucqvkceT0dterWT/fHa

tD8+mkmzIbt9692jhY1PI62sbMbkyeJMFf8Y6Vg16ydUTdy6NM6XE48yrphlGfMFs7EVoNPW

QWSef1HOXYEbdH2+qdnielFu48PTaZekGxNBnT0mkd22nwrS9kwd8rtt71nCZ3bW5M+dwBHc

nRueSQ8WZaKREN23NxNrZm6MTsSdxIyex57tUiQ56ZqJ3tGnlC2bMc0+Wk1ERjpWOy9Fdxlx

b8uJRxknDpkvdN2aYb6haVG3DUuSyJ7zl0iROt4CdTOhr9wd78xmTAR1siaRQ7YPByE96hjV

HZ13u84mXuhZuDtXNuvBbaFmMbqomNPAmBJM+pr97SycwM7t2LRUyGJiD0goM8g2Wkv60p1m

1oLGtFJYi6AuXU0eaUIp6ZKS8XTQfCHnljgBs0ZKipW1t7GCgskUOcPSpSszobCCMZGeTgGk

Yq3TbGOFBFHpdR3xnbLEugo976bxDKI7V/P24RHU8KLDE+Awk+OzFdbeDsB2PNFO0MRhHFSW

JhaTZ1mrG23xVmzRSqsVbxRpPBiyH3QKrEaHCdplhsXLXKXvbC1CIisV+fMkU/AtmRUQArRT

MRHQecIksm37YBBpoh7trAXlWTQeF92fxJN3LneLfrl/rDI9PjvBuif8RGcPaM7IOVR4z8R+

5Yo05V/8UuVdmbXYwWc6fUuBfCRESkrqlJQqZBqJmowbvkGqy2S8z75373OG70BVviXeXeEf

XijdjYngcm6HVzvkbGNFfveC8CaibuCWmFigv7XgME/+swXp966cELePVRY/OpJntlM/MuXx

8kpS2cMisRpWs5GRrFVStSaYhc2hynHzBaJXMbPyg7OMRlIFDdJi+rIpyJkUWDV0vbb4oVxM

BJfnTSK7bR8MIk3ODKlvWlIHekiRvj4ID/QQT/47tKxdrtt5J01KVps5vh0rMlKp1VBeySgT

WCRWw2o2MpK1yqpSKyXqgAxJSQ0dN18gehUzKz8C5sWR1IKGMazN2RTkTApQtZZrETb4oVxM

BC0lTSJHbB8MAroLvp6xpA703Uf6+oB/J0dxd25zKGxPfdo+IAkq/mz97xmsMr1oR/zE63b2

9PyF70LZVqZIE4tpBv1rZ5MT22uxg8/0fTzel8d2PxmSknaSUoWvdERN5i1FGyy5roLurMyL

o2lv0P+ecVXaBB9eKL0VwIHb6P6g2kAbNm1jRX73ggRNTguXFcASE4tMUMUT8HduY7NgdrUP

xB33C265fawyOb6iwh+BbGfPUpFsbK/xbNlWpkjT1jotrp1sNLUVW/hQINW+/YLZToekxDLu

NV/QLtPm3pz8bHpgK7cR4tv5uPpbVkOh4qq5Dw8qqZhIQrnCqw0HbWMlFYRta6Tm2ZwlFC+w

Gh0+B7xzG/ch7IC0qiXJwP1jlfVJzZzIjPbv2+4rONQegnrxbCtTaJNuXD1oGw1DdpIjWsGd

1EVQdV+F30OGqI4WiYuO+UIzqsNqCuWgR3xIj9+IcgVUbKxgibyoRsxXca49Z1SPKxgTyehM

8GqDNjxrGyskiIqv63SsUBtzlsi+QqO2VlHuNNidW2jtesBD1ExDNUVWbdJPTLukxMMf2o6V

XYmFjDJDuyrzAlesyH/43XpIREayVsMAzVY4EDbk4qwzh8wXRG7r/4lwe1eaFpWCF9v5DIzB

RAp2JqTa2Sj+mNR2TAR1kiaRY7aZsNYMdjNZ93istaU1YwnWPftZHiC4cytoo2PANvuPmb9E

XjVK5YF0edGGvdvpZiNSNdZKuDmpzPAxg2powXT2zmYhazUOIE9wWTDEMxb2mi+Y7bqPT7fP

Cy5JJ8iEG57wRzHTT6Ey7TSrGp0qs1YWTS4FTrnLBtTJm0QO2I6EtV6hW9ses61p37RUMV3t

LvPAjJxJ784dDH4O8rfcVX8rDF6Ll/0gxp07eA3Gnftnaf74qX8qfd3vYdy5g9dg3Ll/F3n3

BPrPIX40484dvAbjzv3bsHv39e7biXHnDgaDwX2MO3cwGAzu4uvrP0Mauyr1V2btAAAAAElF

TkSuQmCC

--------------01170E5ED280FDEABC4DDD5E--



------=_NextPart_000_F46C_F8BD15E2.3B50C93B--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA