Google ranking SEO spam from Gmail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:43:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgo47-000A2V-1P

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:43:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:43:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:38409)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgnvC-0009WK-00

for sales@nk.ca;

Mon, 27 Mar 2023 08:34:15 -0600

Received: by mail-pl1-f170.google.com with SMTP id ja10so8620550plb.5

for ; Mon, 27 Mar 2023 07:32:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679927521;

h=content-language:thread-index:sensitivity:importance:mime-version

:message-id:date:subject:to:from:from:to:cc:subject:date:message-id

:reply-to;

bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;

b=SXCVxyGsIxi3XXPHBFRIqxZzCMbI0F4pY8fy1ZUjxTfVeV3yPCnBH3Y9FwOfkSq58z

ASjRDHLNWGsBcuNFJgsW6bD4nbF6TPhb1B/SjhWKH4JvfZVRFNDIKahnEV+DmuY5CjVO

maGa+jT6o1grZ6K0VlVsgoBEmes2BYPhEOt9+RTxd+jgf8ujqqvgRf3UpqtiO+hYI8bq

Fxdh1vh+JiaIDzeASGHCPiewIhhJ9To4TsyLYaqQ+4FCJ+DjymEIFNFI9aFVIoIAOB/Y

AABFYAvA9sGwRmJZa9KH+ZJsiI3kpIfRYHuVgR5bX/Vd6l2qltUVdHmy9Qnr1sc0kP1D

70ig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679927521;

h=content-language:thread-index:sensitivity:importance:mime-version

:message-id:date:subject:to:from:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;

b=oP1qIR+j7dEPUe4xiym6ZdhTYDJ67qWYAghqobXabkbbRxPETjnYLNuf4lQUZowwE9

S9sz2x3AUCBR/7iXVE+xETaKBeNKFpQ680oI3GnAIFRIFKXtSObljLCvDm2A8MSNK8l5

QZ1MBp7wi09wnPWS/Vd2a0I4x5lOkHv13t41EPj185PASzqkyHJ9sAn1ajgyYkqgBc5j

1aBDaagIHreEu3alChTUgIvLuzYXvHg71ImFXkzTJ2BymjYXcHRRVj0CauPsAwoJdKt3

XqmFJBJhRcvaKH2ptV/3bWCLM2fn9zwQGswmwsQNzOQS10N6X2H5DG+zhNzOPQjZqVlt

7orw==

X-Gm-Message-State: AO0yUKUFekYAJAToXpBmrcqx04GiFPWu/WKGBWcHeRLzxG/pcTyj6Kfz

rSeFCsNIKMZqpGHI7N+PnGDXSWsxtCKoug==

X-Google-Smtp-Source: AK7set/lXFhEEKTpuj1r8ictThYN6E74wDUSniV9iNCQ7876P4i1S22MK1Dk3BWrc6WghiosXiLTMA==

X-Received: by 2002:a05:6a20:4b12:b0:d7:6b87:94b8 with SMTP id fp18-20020a056a204b1200b000d76b8794b8mr10943671pzb.18.1679927521407;

Mon, 27 Mar 2023 07:32:01 -0700 (PDT)

Received: from GalaxyGOV3EF1 ([205.254.174.81])

by smtp.gmail.com with ESMTPSA id c21-20020a62e815000000b005a8dcd32851sm2239591pfi.11.2023.03.27.07.32.00

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 27 Mar 2023 07:32:01 -0700 (PDT)

From: Koliya Brown

X-Google-Original-From: "Koliya Brown"

To:

Subject: Front Page-On Google ?

Date: Mon, 27 Mar 2023 20:01:48 +0530

Message-ID: <111701d960b8$e42acf00$ac806d00$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1118_01D960E6.FDE30B00"

X-Priority: 1 (Highest)

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook 16.0

Importance: High

Sensitivity: Personal

Thread-Index: AdlguMNaHOdIV88aSv+AtsYYzFBi4g==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_1118_01D960E6.FDE30B00

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi sales@nk.ca, I hope you are doing well!







Do you want to see your website 1st Page in Google or another major search

engine? Do you want more targeted visitors on your website?







There could be many reasons behind not getting enough visitors on your

website.



. Do you have 1st page ranking on Google?



. Are you using RIGHT keywords?



. Is your website content properly optimized?



. Is your current marketing agency doing enough to get more ROI?



. Do you have your website mobile friendly?







Do let us know. If you are interested to know more about our client's

testimonials, services methodology and pricing details.







I hope, you will be Interested in my services so I await your reply.







Thanks & Regards



Koliya Brown



Marketing Manager







Note: May I send you a quote? If you are interested!





------=_NextPart_000_1118_01D960E6.FDE30B00

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>


class=3DMsoNoSpacing>Hi sales@nk.ca, I hope you are doing well!


class=3DMsoNoSpacing> 

Do you =

want to see your website 1st Page in Google or another major search =

engine? Do you want more targeted visitors on your website?


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>There could be many reasons behind not getting =

enough visitors on your website.


class=3DMsoNoSpacing>•       &nb=

sp;     Do you have 1st page ranking on =

Google?


class=3DMsoNoSpacing>•       &nb=

sp;     Are you using RIGHT =

keywords?


class=3DMsoNoSpacing>•       &nb=

sp;     Is your website content properly =

optimized?


class=3DMsoNoSpacing>•       &nb=

sp;     Is your current marketing agency doing =

enough to get more ROI?


class=3DMsoNoSpacing>•       &nb=

sp;     Do you have your website mobile =

friendly?

 


class=3DMsoNoSpacing>Do let us know. If you are interested to know =

more about our client’s testimonials, services methodology and =

pricing details.


class=3DMsoNoSpacing> 

I =

hope, you will be Interested in my services so I await your reply.


class=3DMsoNoSpacing> 

Thanks =

& Regards

Koliya =

Brown

Marketing Manager


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Note: May I send you a quote? If you are =

interested!



------=_NextPart_000_1118_01D960E6.FDE30B00--



more link spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:37:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgny0-0009od-1l

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:37:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:37:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f45.google.com ([209.85.208.45]:35358)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgkCG-000Bov-2E

for doctor@nl2k.ab.ca;

Mon, 27 Mar 2023 04:35:33 -0600

Received: by mail-ed1-f45.google.com with SMTP id y4so34065201edo.2

for ; Mon, 27 Mar 2023 03:33:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679913203;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;

b=o60nsi5Dt2FU5Ua+Oi8GRaMCAbNixE6Cz2hM554+6dknXIBLMK890vqYKK40vuiv/U

DA/w4SRBM7Xksz3tAq1Kz2wpf/np30KUGRKKtNVqWca46VyHgk3fy4wXDP+V/RBWCOjE

HAcTrcXqpbhXYJqHfhCTgKeV42gPcXIzngLJGtffqosyIeytoAYpLL3aXFlMwCll/EWk

teGqON9EWdNmKO1fOMi179BXEbiJhxwSVu+UcJX4gnOqk+CjDRXRYkzOse2CADLHhBP1

byDdL720bXWElOZBlNYVD5jsHbHRyPPryGIWAGaHM2THo+h6Ba9Oxz3WtPoB1iL8DjMZ

QAkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679913203;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;

b=bViZZs6uPEIthnkq0eJHyy+J+J/1xT3bqalqvf3O6T1FzwFeTEorEjimhx8WZYM8Cv

1NK/7t1yXHPrwSnfxPBWm3t3Fjn7j7fPa/xg/mDJOKXuuIms9EmG6WQHAzQWmFSK8zKB

f+J7r2ls39fx89fjq2bx590XJZO1GA5eGdrTkd4TtzkQayoaS77gwTSFhAgKORt62i6W

UE3uMZ6X5Q3vWsTXamfn2ooI92JlMxI/4irP/ItSMNWXDYQ8C1/uNoWTw2FEW6m0i87u

humm8oXxMWavET6h60d6hdmnG5Ltg+BxjOA+Eb3bQstzQZQWYYAPCTt33p4sL/vWsLeY

8s5w==

X-Gm-Message-State: AAQBX9cHaAmdCToYSoukIOtK83fJJOnAlauf/aAopx/UP0UQVEp5gjrp

0QnzidszJTNg3HXlw+Bx5OYuxKjIUWucDu1znTQ=

X-Google-Smtp-Source: AKy350YtSDFacShdvQpW9BkKnngCZeakzo+YjWVD1xKw5qols35Zf0FfRHdbRTWLw1xX/+YOQ0mCEer0gAmWDogT/RQ=

X-Received: by 2002:a17:906:9244:b0:8e3:da0f:f3ea with SMTP id

c4-20020a170906924400b008e3da0ff3eamr4836378ejx.7.1679913203552; Mon, 27 Mar

2023 03:33:23 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7208:7054:b0:65:74fb:ecc8 with HTTP; Mon, 27 Mar 2023

03:33:23 -0700 (PDT)

From: bola17

Date: Mon, 27 Mar 2023 16:03:23 +0530

Message-ID:

Subject:

To: dmillar , doconnor ,

doctor , dolores32 ,

domenic rubino , donahued ,

dorlovic , dossantos , doug ,

douglas palframan

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3Kjpx4R



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[balajiramesh12345(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[balajiramesh12345(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

0.0 TVD_SPACE_RATIO No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.45 listed in wl.mailspike.net]

Subject: {SPAM?}



https://bit.ly/3Kjpx4R

More link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 04:39:38 -0600

Received: from mail-qk1-f182.google.com ([209.85.222.182]:36470)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgkFL-000Buo-0L

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 04:38:45 -0600

Received: by mail-qk1-f182.google.com with SMTP id q2so2303171qki.3

for ; Mon, 27 Mar 2023 03:36:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679913394;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;

b=WXOP357uAvf6TJXM9kbgBSOpj0Tdngkz7hunrxGIHkItMfdHZQ+rFYSiDrtBEAMMBJ

YffXhs4kHjdX91kjXSUOjK571L6f4nbfAoCQ0PLu+YiiN6nXiHd10H858A4N8fvNmrKJ

vkhjKCXN3FAih74s5ryv/G6+C0B+QAivPhUJo377tjk8zElyTBtXsqmvaxxjj+/ax3zP

JLzmJSDfICnCgthBHXx94orl/3D2d+KvbtfixAwCRLNMGsKKXQ2u640joBSzXwPCoL7W

KFivM0lMxMQkVn+iqMAc8tFy+r5MngGewk6BWU48oUVaFY2rP4uHJBkIGPYwbwdaqaZ+

mQ7g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679913394;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;

b=gq3CI8BD9r48tiu3vI589f6hWeBI23+7L/xYyUEBHyGJMAc+Plr3FXgKdOMeGr88bN

qO+lljElYDuk3WJacmyc4HntxFTXltu7pTCASUNKDW6nUbcpp6Hhwjor+0dbr0pl8sTv

rICIKkWJ2bAuMhuMXK1iFub4XXOGC4rCOelWb7jNNKvv8FujjRX9TuTrvUH7WsMvz7/I

HlQW0u7znY3obgJPEGjfJr8SEOxmNUXWiWtBim5m2UH+pyRoE+AQjUkIiaWnPwRzBMkm

Aa2g8kfCVZDB3u5fwLIJOdaFoX7d/D/Rgqw5lMSiTPSKaLYwFYbfZbuYPGNucAv2IOMf

Au/w==

X-Gm-Message-State: AO0yUKU7byeDMcYYrsvJUT90fpIPywFesCQo+A0BuOZYqC+7BM9fKapa

lmrCeKlsuCTk0PYDId6SJLK5bYlCrJMic52Ssyk=

X-Google-Smtp-Source: AK7set9K6Ub2g0ArciJ4P8izE5hpLk4/BvsC7o72VYUS5Pj/DuXxOqyw63SCKKQsjO+ukFVRSPUNETaII8gJmWlsC6w=

X-Received: by 2002:a37:6386:0:b0:745:da3d:cd0a with SMTP id

x128-20020a376386000000b00745da3dcd0amr2746619qkb.12.1679913394185; Mon, 27

Mar 2023 03:36:34 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ac8:5803:0:b0:3e3:92ce:cce2 with HTTP; Mon, 27 Mar 2023

03:36:33 -0700 (PDT)

From: "Dr.Charles Edward"

Date: Mon, 27 Mar 2023 16:06:33 +0530

Message-ID:

Subject:

To: daria b55 ,

darnaque leschats2011 , datok jp ,

datsit1968 , dave ,

davelongaphie5309 ,

david cameletti2 , david100 ,

david2divizio , davidbrunstein

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3noHupD



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.182 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sahilarya50906(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sahilarya50906(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 TVD_SPACE_RATIO No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.182 listed in wl.mailspike.net]

Subject: {SPAM?}



https://bit.ly/3noHupD

more link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:36:40 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgnxV-0009mU-0Q

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:36:29 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:36:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:40948)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgjBU-0009Ly-2c

for root@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 03:30:40 -0600

Received: by mail-pf1-f196.google.com with SMTP id fb38so5165004pfb.7

for ; Mon, 27 Mar 2023 02:28:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679909313;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Z1liy+wJSwePYFXy89rj+8vXjU4nL+0EKZnjj+0wpnU=;

b=l9PteIerdNxDIimJ3NID+bZQdEkyXU9WD+ScShxshDzIMkTRsJT3HdWcbQHPIBo9o6

ToWyzsGid0mZpdhrOY33kjKbJ5UDyQMk6YgbFj19pxWSIUNfEshhdwnOMyZR7pGUinJd

Bt2TscrdJEuV9V1OiVhACKykxCtQSEz/h1pkimJjhLbjunqPtqTso0+b9NkNC19E7+kc

mJOaylpNs0+XTDv7LLvDi4LPZp95D1WrMkMN22BirOO2FfCBbhUHAlJXUnukh0y4PtdN

142pVs/sv5Hf0Rk9lwigqKlzVAwu72zD/7vflq7n5Zy2/oCzdHktmwT1cKRSWb9Tf2Ia

FRUQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679909313;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Z1liy+wJSwePYFXy89rj+8vXjU4nL+0EKZnjj+0wpnU=;

b=RzcXbGizPbU48n9Tc+76f675pUiOjEBN/37pLfcYiSJEZmxLPHcDsfemRnUoQx09Ij

V5CKzPzCB+yHMDqhCeUEy7AWlxXECD2quCD/AeoWiAJDcYT13lqkjPZWdXkFIeou68QF

u5i99HxynzuCt+I8bW+s6O9cx6xWe1gxQYKDlQaGFO7W8PXslDewoCYLY7T6o7mMx147

zipRkhcgKeU/Dk+UL7nUFWUcyQpHNhDjuIlxyqgY8mda0gn0yH02YsEvGLqaPQNYqLjn

AWiHHV8zMs+h4gs10F//oy/KcCZbX8XQsrDluQ7+Uz9VRdl1Q2nZawGLEDcqsipf2SFw

/fbg==

X-Gm-Message-State: AAQBX9eVRIg4lQIjR+bt4/LulanIG24qAmu8lz5zIXa20465R/VaIgeX

yueL+HcmW/q/7gv9kFn6jf85jNEon0dHfQhCLIPjDsaUjHEcAUoh

X-Google-Smtp-Source: AKy350bZrhtbkWO1eiDSH70XlTeC9f4fYn9XEdFANpPTtlDS853bWj3PpH5R3gfffch3PrzbrSrN33VpEn8PG26fecs=

X-Received: by 2002:a05:6a00:a14:b0:625:66a9:c393 with SMTP id

p20-20020a056a000a1400b0062566a9c393mr5920933pfh.0.1679909313080; Mon, 27 Mar

2023 02:28:33 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6a10:e2c9:b0:446:ff5c:8c2e with HTTP; Mon, 27 Mar 2023

02:28:32 -0700 (PDT)

From: "evs_idea@yahoo.com"

Date: Mon, 27 Mar 2023 14:58:32 +0530

Message-ID:

Subject:

To: pierre tremblay , romarnal ,

romtrade mtl , root ,

sabby cattery

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/40DT5iW

Link spam from Gamil

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:36:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgnx6-0009m2-2h

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:36:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:36:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f170.google.com ([209.85.160.170]:42897)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgi0g-0006Lm-0d

for doctor@nl2k.ab.ca;

Mon, 27 Mar 2023 02:15:25 -0600

Received: by mail-qt1-f170.google.com with SMTP id g19so7729800qts.9

for ; Mon, 27 Mar 2023 01:13:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679904797;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;

b=KMt/QwghN8AP99/x7j5kGLFUJbeYm4qww9fwDthhwUJpajrTbGvDftaVheoxZ0Xyqb

7XqkmuB0SHFeTOle7mpt0ealc4tHLi7lS9CQFQHvse4bJdEAcvcGqMVgR6q1SrL9raer

Gq0vPxONP4MsLfy3dxssUe80ztQrc0IFp3T1J5IhF7170yG3+EhfiQ5Wvgw/viBdh0KF

qUiSCdDTCO+xCc0ffJB/zpZ7hTQT41Ub2xmweBYsy0CtiWrXOV2E8E0H2lm/+Aj1Dla8

psTz8id5I5bt/sOH7w0dEpRnRgdpBNlmIFLC8OwCj0zYjLMCGQxtBDzU6W0/nuy3cBAT

EMlg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679904797;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;

b=OzCVjWhCB0AbV1kFTddadQWOtCapbjR19KsikYwsSCaHd/hi7Cx6jR7p0apeS2Zqtu

ZT/7anI4o1Qgb2tieWMga1RRbsZK22a+bi4CGTGUdiGF5s5rQD4yJYfyy0gByKRIaguT

A8QyH/LZQt73HSWuk8vGQAquuTRHHhVuT51VvM5zPC7ihH7T6qPN2NxKP8kMqaLCZqDh

PZHiyPzCJBj90+qgSpjX5KVB4rZApXBHKCys5r5PU+fDzaKjN01RV6sGtnwPVg4rCtpI

2p+3TcXh6yFeWu5aUA38PSJgICe5r9y0By7FnYKP/bI93Dinr0sC7emiZP0/lVyarcB3

m0+g==

X-Gm-Message-State: AO0yUKWRfgf2iU/qAj1vN9Vm+AuJ+UkYSc+XqLVIB4kGEpCR9yNBYFFt

PCiR+ZyVPl3kkSDetIipT5Xnr5YLW/yeBPgCXhA=

X-Google-Smtp-Source: AK7set/yOEhBd1yXBnlUAMW5W+qcsY/VfHL68j0SpXQuAzhCqU41KlXEPVcdqXMSxbvp6JMNOXV1a1WBBvWPl1xBED8=

X-Received: by 2002:ac8:5905:0:b0:3e1:5755:7bbf with SMTP id

5-20020ac85905000000b003e157557bbfmr4145192qty.5.1679904797509; Mon, 27 Mar

2023 01:13:17 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a0c:8d84:0:b0:5bc:5071:8a6a with HTTP; Mon, 27 Mar 2023

01:13:17 -0700 (PDT)

From: "dieudonnenzuzi07@yahoo.fr"

Date: Mon, 27 Mar 2023 13:43:17 +0530

Message-ID:

Subject:

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre , fmbuyi

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3ZjRSMy



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.170 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mahen.bhavsar(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

0.0 TVD_SPACE_RATIO No description available.

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.170 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?}



https://bit.ly/3ZjRSMy