link spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Jul 2024 17:53:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sYaAg-00000000EK3-2Lf8
for dave@doctor.nl2k.ab.ca;
Mon, 29 Jul 2024 17:52:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 29 Jul 2024 17:52:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f194.google.com ([209.85.208.194]:57355)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sYYB8-00000000L39-1dLC
for doctor@nl2k.ab.ca;
Mon, 29 Jul 2024 15:45:18 -0600
Received: by mail-lj1-f194.google.com with SMTP id 38308e7fff4ca-2eeb1ba0481so62907101fa.2
for; Mon, 29 Jul 2024 14:43:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1722289393; x=1722894193; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;
b=V9383+C7p97ih1E1Q467FTyvVZpNXOiJsWd0xx4lfGb5uqccR1oP+p8Q8dK0VPbgyi
v0G3qVgWiJiK4YabZC1vkRedlLD28AhIDI2CnFM9wgsVSgFTuk4S4R+4gLZGmOlvU/+k
Ldqs5MJsdxCzbVgWvtHMx0tvW8+oJVKeC0NXeq9iKogtzPgt36k55uW7KWnU9GIe1EHm
MAXasA9RV/bHykcdrSvV11Q5tH7bSdyAZY6UozS2kDAdTSyxYMnR+mNDoPkeY0rURZxX
R/Xrutbb7APdiQq7hJ1UtA4hc5EHeFKlBBRDacfSHs+l/hKg7vzGQALoiUDn4TjUgwn/
jiYQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1722289393; x=1722894193;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;
b=G5Xroht54sjCR8yCB2FWHp4q094G9pK2YeUCboEnWLCS2S7YviK2Apz/LtWaEV87Hs
LiOv17in9/U6RzgF4SBh4yT1o5N26yUe6ixSLtBj0UUVcR0Y1/yTbdri0dXL5bQwqBiA
NbLr6ao6HuVJPb5FDuxn5McWV7YpjtujbwDVvPAqfPIuTC+D6MVjvmY04JKAkwU0tsMK
dap/S5q5pDW+EynzSZNUA855TfaZGqZKWoWWFUOd/LFhXVHViAL20tK4H0ZJfq1oTKaU
A7m57qcDr7jz5weaN+efwvKkbSHTcEEW+mdBZRAq3khhLXpEliR5OYJRDzI+eN0Y1rrm
u49g==
X-Gm-Message-State: AOJu0Yz9QCebsjQ8yTwryAiWEUOC9J+38mdt/kGPBJZe6wFJiK0mrp4k
WNZeHxP+6MIBDHmmndGtuDrCGq5YIzO4XKAhhyQE/L25DruDqyBFveOhrgi+ZIl3jes42hx5htn
yKtgODijQeaHmAK+Kfo6ahE0MwTCd+2JchrMRlQ==
X-Google-Smtp-Source: AGHT+IGk+xOaqZijJW/66yAQoJwlTHmSVsuJ0h4N6jU+QbMkiu/qrupx3GGseCWLB3ymHQrDUWLKseugV4TWUepBn2M=
X-Received: by 2002:a17:907:86a2:b0:a79:8318:288f with SMTP id
a640c23a62f3a-a7d3ffb6a2cmr646817766b.16.1722284196671; Mon, 29 Jul 2024
13:16:36 -0700 (PDT)
MIME-Version: 1.0
From: bola17
Date: Mon, 29 Jul 2024 20:16:29 +0000
Message-ID:
Subject: bola17
To: doctor
Content-Type: multipart/alternative; boundary="000000000000beb713061e68898d"
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://t.co/QlNB4BVVWW https://t.co/QlNB4BVVWW
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.208.194 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.194 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[oxnkevinharris027(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[oxnkevinharris027(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
Subject: {SPAM?} bola17
--000000000000beb713061e68898d
Content-Type: text/plain; charset="UTF-8"
https://t.co/QlNB4BVVWW
--000000000000beb713061e68898d
Content-Type: text/html; charset="UTF-8"
--000000000000beb713061e68898d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Jul 2024 17:53:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sYaAg-00000000EK3-2Lf8
for dave@doctor.nl2k.ab.ca;
Mon, 29 Jul 2024 17:52:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 29 Jul 2024 17:52:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f194.google.com ([209.85.208.194]:57355)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sYYB8-00000000L39-1dLC
for doctor@nl2k.ab.ca;
Mon, 29 Jul 2024 15:45:18 -0600
Received: by mail-lj1-f194.google.com with SMTP id 38308e7fff4ca-2eeb1ba0481so62907101fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1722289393; x=1722894193; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;
b=V9383+C7p97ih1E1Q467FTyvVZpNXOiJsWd0xx4lfGb5uqccR1oP+p8Q8dK0VPbgyi
v0G3qVgWiJiK4YabZC1vkRedlLD28AhIDI2CnFM9wgsVSgFTuk4S4R+4gLZGmOlvU/+k
Ldqs5MJsdxCzbVgWvtHMx0tvW8+oJVKeC0NXeq9iKogtzPgt36k55uW7KWnU9GIe1EHm
MAXasA9RV/bHykcdrSvV11Q5tH7bSdyAZY6UozS2kDAdTSyxYMnR+mNDoPkeY0rURZxX
R/Xrutbb7APdiQq7hJ1UtA4hc5EHeFKlBBRDacfSHs+l/hKg7vzGQALoiUDn4TjUgwn/
jiYQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1722289393; x=1722894193;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;
b=G5Xroht54sjCR8yCB2FWHp4q094G9pK2YeUCboEnWLCS2S7YviK2Apz/LtWaEV87Hs
LiOv17in9/U6RzgF4SBh4yT1o5N26yUe6ixSLtBj0UUVcR0Y1/yTbdri0dXL5bQwqBiA
NbLr6ao6HuVJPb5FDuxn5McWV7YpjtujbwDVvPAqfPIuTC+D6MVjvmY04JKAkwU0tsMK
dap/S5q5pDW+EynzSZNUA855TfaZGqZKWoWWFUOd/LFhXVHViAL20tK4H0ZJfq1oTKaU
A7m57qcDr7jz5weaN+efwvKkbSHTcEEW+mdBZRAq3khhLXpEliR5OYJRDzI+eN0Y1rrm
u49g==
X-Gm-Message-State: AOJu0Yz9QCebsjQ8yTwryAiWEUOC9J+38mdt/kGPBJZe6wFJiK0mrp4k
WNZeHxP+6MIBDHmmndGtuDrCGq5YIzO4XKAhhyQE/L25DruDqyBFveOhrgi+ZIl3jes42hx5htn
yKtgODijQeaHmAK+Kfo6ahE0MwTCd+2JchrMRlQ==
X-Google-Smtp-Source: AGHT+IGk+xOaqZijJW/66yAQoJwlTHmSVsuJ0h4N6jU+QbMkiu/qrupx3GGseCWLB3ymHQrDUWLKseugV4TWUepBn2M=
X-Received: by 2002:a17:907:86a2:b0:a79:8318:288f with SMTP id
a640c23a62f3a-a7d3ffb6a2cmr646817766b.16.1722284196671; Mon, 29 Jul 2024
13:16:36 -0700 (PDT)
MIME-Version: 1.0
From: bola17
Date: Mon, 29 Jul 2024 20:16:29 +0000
Message-ID:
Subject: bola17
To: doctor
Content-Type: multipart/alternative; boundary="000000000000beb713061e68898d"
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://t.co/QlNB4BVVWW https://t.co/QlNB4BVVWW
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
[209.85.208.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
[209.85.208.194 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.208.194 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.194 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[oxnkevinharris027(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[oxnkevinharris027(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO No description available.
Subject: {SPAM?} bola17
--000000000000beb713061e68898d
Content-Type: text/plain; charset="UTF-8"
https://t.co/QlNB4BVVWW
--000000000000beb713061e68898d
Content-Type: text/html; charset="UTF-8"
--000000000000beb713061e68898d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments