Desparation spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Apr 2024 07:58:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rsk4U-000000006zR-0R51
for dave@doctor.nl2k.ab.ca;
Fri, 05 Apr 2024 07:57:34 -0600
Resent-From: The Doctor
Resent-Date: Fri, 5 Apr 2024 07:57:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f175.google.com ([209.85.215.175]:58596)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rsel6-00000000HlY-3itR
for doctor@doctor.nl2k.ab.ca;
Fri, 05 Apr 2024 02:17:16 -0600
Received: by mail-pg1-f175.google.com with SMTP id 41be03b00d2f7-5d8ddbac4fbso1511489a12.0
for; Fri, 05 Apr 2024 01:15:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712304912; x=1712909712; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=tyFogUU2Ms+b0RXaJPTp3FcoKL/LUlCFWNWaQslrLLc=;
b=JPp1u4wS5Jsulna1dl8JlxI/YYspAf0Eb2sDP+ES7oRlqBsXZF6n7g4hkWka+jj6af
JRQqEN3j3UI0/un89TvEXWjDl9WobUP/4dcgW4OATyGZJxxsjZveneirT2pxnSGXaMz3
FS+CrKZvggsrT4uE49R0CxS1EZdlOoLqLk5292iXcqPrYwCktmgVqfc3jPTu44wMfdqJ
iKUDEOsodpNvkfYDGHip0Qa91fsA01liMxSj3of7gU2L8osj5ux08k4qOiM/yBrsVyaN
9nGbpFK7Qps94DUFFZNZH8SX369pGpSg7+gDRtfu873zOD0YYqu9APRX9+bQ4LisDflx
aC6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712304912; x=1712909712;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=tyFogUU2Ms+b0RXaJPTp3FcoKL/LUlCFWNWaQslrLLc=;
b=cUQwtA55P8+7KT04rrLWmPMO/sXU8JqL4LVq9sXRY7jBs+BOlGhg3X8H/otpim4rvU
asIQf2zuelKnNJh9/Jx+Q6PuRuIe9brFNmfu0j8WCTVLMPD+fGA9WQppvzULVrw8bg+y
I4OxXdywfFGZ42OJX6fX3dUKlMtJM09BOY5v5zF/VqK4cDvwm7/72FtBqJemJsUaXdhu
vr6gTR59jiojyRxqpZZBKhiHGtJT4rb1SpUR4qAGnc2g0q71tKVgFPsNqb7+ZqBQI+jh
dB/KwDsTos9Xr8GfTVjittZ8rlCSFxZ4qHVOHB2ITmhwhJ9MapojYZX05I+JteH3zOwq
i0Eg==
X-Forwarded-Encrypted: i=1; AJvYcCXb8roXgqNWKsNGcNeZBBl1wHr6bNVfjhNlxksYk94V9VxSOgc9dx/KlDeA/kQUlo9gz5BxWpSYiPb8Sob9Iy16FWDhwgszQak=
X-Gm-Message-State: AOJu0YxYm1UaUaEagTT+I9d9HTfKBwFO6cXhSA/z0ZVZ3HUxIAiM16hp
DjpMb54MHCN3S2UIJsmmrI6/U67DTcqY+4wFz3L13tHH/SpyUSi1aFojCTzB+xP4eIdiP0ZBSZu
9+6l7ykbETd2D/Mzi09uvCWV4Ag==
X-Google-Smtp-Source: AGHT+IGkbF8hkxFcJikmf0pIAGRzdG1d1QnJVX2mVZSW0ZGJjFQKS7OD7Bx2Ic/ZRc6w2a2yEUp10E1hrP7C0KyFa+Y=
X-Received: by 2002:a05:6a20:dc95:b0:1a3:7e88:2262 with SMTP id
ky21-20020a056a20dc9500b001a37e882262mr779502pzb.34.1712304911872; Fri, 05
Apr 2024 01:15:11 -0700 (PDT)
MIME-Version: 1.0
Reply-To: terryedwardbarwick3@gmail.com
From: "Terry E. Barwick"
Date: Fri, 5 Apr 2024 08:14:59 +0000
Message-ID:
Subject: =?UTF-8?Q?RE=3A_I=E2=80=99m_Terry_E=2E_Barwick=2E_I_sent_a_message_to_you_?=
=?UTF-8?Q?before=2C_but_I_did_not_hear_from_you=2C_did_you_receive_it=3F?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000004f8170615550e02"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.175 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.175 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[terremais145(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[terremais145(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[terryedwardbarwick3(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} =?UTF-8?Q?RE=3A_I=E2=80=99m_Terry_E=2E_Barwick=2E_I_sent_a_message_to_you_?=
=?UTF-8?Q?before=2C_but_I_did_not_hear_from_you=2C_did_you_receive_it=3F?=
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--00000000000004f8170615550e02
Content-Type: text/plain; charset="UTF-8"
--00000000000004f8170615550e02
Content-Type: text/html; charset="UTF-8"
--00000000000004f8170615550e02--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Apr 2024 07:58:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rsk4U-000000006zR-0R51
for dave@doctor.nl2k.ab.ca;
Fri, 05 Apr 2024 07:57:34 -0600
Resent-From: The Doctor
Resent-Date: Fri, 5 Apr 2024 07:57:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f175.google.com ([209.85.215.175]:58596)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rsel6-00000000HlY-3itR
for doctor@doctor.nl2k.ab.ca;
Fri, 05 Apr 2024 02:17:16 -0600
Received: by mail-pg1-f175.google.com with SMTP id 41be03b00d2f7-5d8ddbac4fbso1511489a12.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712304912; x=1712909712; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=tyFogUU2Ms+b0RXaJPTp3FcoKL/LUlCFWNWaQslrLLc=;
b=JPp1u4wS5Jsulna1dl8JlxI/YYspAf0Eb2sDP+ES7oRlqBsXZF6n7g4hkWka+jj6af
JRQqEN3j3UI0/un89TvEXWjDl9WobUP/4dcgW4OATyGZJxxsjZveneirT2pxnSGXaMz3
FS+CrKZvggsrT4uE49R0CxS1EZdlOoLqLk5292iXcqPrYwCktmgVqfc3jPTu44wMfdqJ
iKUDEOsodpNvkfYDGHip0Qa91fsA01liMxSj3of7gU2L8osj5ux08k4qOiM/yBrsVyaN
9nGbpFK7Qps94DUFFZNZH8SX369pGpSg7+gDRtfu873zOD0YYqu9APRX9+bQ4LisDflx
aC6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712304912; x=1712909712;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=tyFogUU2Ms+b0RXaJPTp3FcoKL/LUlCFWNWaQslrLLc=;
b=cUQwtA55P8+7KT04rrLWmPMO/sXU8JqL4LVq9sXRY7jBs+BOlGhg3X8H/otpim4rvU
asIQf2zuelKnNJh9/Jx+Q6PuRuIe9brFNmfu0j8WCTVLMPD+fGA9WQppvzULVrw8bg+y
I4OxXdywfFGZ42OJX6fX3dUKlMtJM09BOY5v5zF/VqK4cDvwm7/72FtBqJemJsUaXdhu
vr6gTR59jiojyRxqpZZBKhiHGtJT4rb1SpUR4qAGnc2g0q71tKVgFPsNqb7+ZqBQI+jh
dB/KwDsTos9Xr8GfTVjittZ8rlCSFxZ4qHVOHB2ITmhwhJ9MapojYZX05I+JteH3zOwq
i0Eg==
X-Forwarded-Encrypted: i=1; AJvYcCXb8roXgqNWKsNGcNeZBBl1wHr6bNVfjhNlxksYk94V9VxSOgc9dx/KlDeA/kQUlo9gz5BxWpSYiPb8Sob9Iy16FWDhwgszQak=
X-Gm-Message-State: AOJu0YxYm1UaUaEagTT+I9d9HTfKBwFO6cXhSA/z0ZVZ3HUxIAiM16hp
DjpMb54MHCN3S2UIJsmmrI6/U67DTcqY+4wFz3L13tHH/SpyUSi1aFojCTzB+xP4eIdiP0ZBSZu
9+6l7ykbETd2D/Mzi09uvCWV4Ag==
X-Google-Smtp-Source: AGHT+IGkbF8hkxFcJikmf0pIAGRzdG1d1QnJVX2mVZSW0ZGJjFQKS7OD7Bx2Ic/ZRc6w2a2yEUp10E1hrP7C0KyFa+Y=
X-Received: by 2002:a05:6a20:dc95:b0:1a3:7e88:2262 with SMTP id
ky21-20020a056a20dc9500b001a37e882262mr779502pzb.34.1712304911872; Fri, 05
Apr 2024 01:15:11 -0700 (PDT)
MIME-Version: 1.0
Reply-To: terryedwardbarwick3@gmail.com
From: "Terry E. Barwick"
Date: Fri, 5 Apr 2024 08:14:59 +0000
Message-ID:
Subject: =?UTF-8?Q?RE=3A_I=E2=80=99m_Terry_E=2E_Barwick=2E_I_sent_a_message_to_you_?=
=?UTF-8?Q?before=2C_but_I_did_not_hear_from_you=2C_did_you_receive_it=3F?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000004f8170615550e02"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.175 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.215.175 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[terremais145(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[terremais145(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[terryedwardbarwick3(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} =?UTF-8?Q?RE=3A_I=E2=80=99m_Terry_E=2E_Barwick=2E_I_sent_a_message_to_you_?=
=?UTF-8?Q?before=2C_but_I_did_not_hear_from_you=2C_did_you_receive_it=3F?=
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--00000000000004f8170615550e02
Content-Type: text/plain; charset="UTF-8"
--00000000000004f8170615550e02
Content-Type: text/html; charset="UTF-8"
--00000000000004f8170615550e02--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments