Power charging hub spam from Goolge
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 Dec 2024 14:53:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tIxIN-0000000048L-3E5n
for dave@doctor.nl2k.ab.ca;
Wed, 04 Dec 2024 14:52:31 -0700
Resent-From: The Doctor
Resent-Date: Wed, 4 Dec 2024 14:52:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 110.15.205.35.bc.googleusercontent.com ([35.205.15.110]:47260 helo=localhost)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tIwFf-000000000zu-1Mmd
for doctor@doctor.nl2k.ab.ca;
Wed, 04 Dec 2024 13:45:43 -0700
Received: by localhost (Postfix, from userid 1000)
id A60A620CE32; Wed, 4 Dec 2024 20:42:24 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
From: Swift Power Hub
Subject: Small but fast! Pick up your Swift Power Hub charger ASAP
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <20241204204224.A60A620CE32@localhost>
Date: Wed, 4 Dec 2024 20:42:24 +0000 (UTC)
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Unsubscribe 7652 Sawmill Rd; STE 213, Dublin, OH 43016
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[35.205.15.110 listed in sbl-xbl.spamhaus.org]
[35.205.15.110 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[35.205.15.110 listed in zen.spamhaus.org]
0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[35.205.15.110 listed in zen.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in sa-trusted.bondedsender.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.205.15.110 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in bl.score.senderscore.com]
0.0 FSL_HELO_NON_FQDN_1 No description available.
3.6 HELO_LOCALHOST No description available.
0.0 TVD_RCVD_IP Message was received from an IP address
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and HTML
3.7 DYNAMIC_IMGUR dynamic IP + hosted image
0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for
an image
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.0 URI_ONLY_MSGID_MALF URI only + malformed message ID
Subject: {SPAM?} Small but fast! Pick up your Swift Power Hub charger ASAP
Unsubscribe
7652 Sawmill Rd; STE 213, Dublin, OH 43016
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 Dec 2024 14:53:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tIxIN-0000000048L-3E5n
for dave@doctor.nl2k.ab.ca;
Wed, 04 Dec 2024 14:52:31 -0700
Resent-From: The Doctor
Resent-Date: Wed, 4 Dec 2024 14:52:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 110.15.205.35.bc.googleusercontent.com ([35.205.15.110]:47260 helo=localhost)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from
id 1tIwFf-000000000zu-1Mmd
for doctor@doctor.nl2k.ab.ca;
Wed, 04 Dec 2024 13:45:43 -0700
Received: by localhost (Postfix, from userid 1000)
id A60A620CE32; Wed, 4 Dec 2024 20:42:24 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
From: Swift Power Hub
Subject: Small but fast! Pick up your Swift Power Hub charger ASAP
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <20241204204224.A60A620CE32@localhost>
Date: Wed, 4 Dec 2024 20:42:24 +0000 (UTC)
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Unsubscribe 7652 Sawmill Rd; STE 213, Dublin, OH 43016
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
[35.205.15.110 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
[35.205.15.110 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[35.205.15.110 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[35.205.15.110 listed in sbl-xbl.spamhaus.org]
[35.205.15.110 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[35.205.15.110 listed in zen.spamhaus.org]
0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[35.205.15.110 listed in zen.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in sa-trusted.bondedsender.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[35.205.15.110 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.15.110 listed in bl.score.senderscore.com]
0.0 FSL_HELO_NON_FQDN_1 No description available.
3.6 HELO_LOCALHOST No description available.
0.0 TVD_RCVD_IP Message was received from an IP address
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and HTML
3.7 DYNAMIC_IMGUR dynamic IP + hosted image
0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for
an image
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.0 URI_ONLY_MSGID_MALF URI only + malformed message ID
Subject: {SPAM?} Small but fast! Pick up your Swift Power Hub charger ASAP
Unsubscribe
7652 Sawmill Rd; STE 213, Dublin, OH 43016
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments