Web/ SEO / App development spam from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Oct 2023 16:11:49 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qxZrF-000JPJ-24

for dave@doctor.nl2k.ab.ca;

Mon, 30 Oct 2023 15:31:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Oct 2023 15:31:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dhtrptvr.outbound-mail.sendgrid.net ([208.117.55.133]:50276)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qxUvQ-000DTK-2w

for sales@nk.ca;

Mon, 30 Oct 2023 10:15:40 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.me;

h=from:subject:references:in-reply-to:mime-version:to:content-type:

content-transfer-encoding:cc:content-type:from:subject:to;

s=smtpapi; bh=6AYV85wlt4vk7RMIJt/Ac64DXyxRCR2flGzm7O3AZzs=;

b=gWMCxLEjh1PJhT1b5Lqvy2OvBzOWQItQZ3wmWXpgx6BbAiAg0yaKF93UhSRlEynXFbJf

o5jvbQD+xjpSh1+hUsZ/FJzzwr+aM/+j7iMANNwGSmAiQZ5GoYSyhIvCyGBa1fXhWSGg7k

E61i4my7h3HsYynIGRVHNgBaHDgYA/ftw=

Received: by filterdrecv-6b68c9f446-djb5v with SMTP id filterdrecv-6b68c9f446-djb5v-1-653FD62C-25

2023-10-30 16:13:32.767554252 +0000 UTC m=+1114351.511716248

Received: from 127.0.0.1 (unknown)

by geopod-ismtpd-7 (SG) with ESMTP

id zP2vvu9dRYu3po0D2smthA

for ;

Mon, 30 Oct 2023 16:13:32.199 +0000 (UTC)

Date: Mon, 30 Oct 2023 16:13:32 +0000 (UTC)

From: Mike Kyle

Subject: WP partner for NetKnow Internet Knowledge Co.

Message-ID: <4af0cb5f-d367-089b-9042-b4a71af236f5@mail.gmail.com>

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0

References: <02ad8af7-f5c9-0626-5e63-ac54cd097b2f@mail.gmail.com>

X-Forwarded-Message-Id: <02ad8af7-f5c9-0626-5e63-ac54cd097b2f@mail.gmail.com>

In-Reply-To: <02ad8af7-f5c9-0626-5e63-ac54cd097b2f@mail.gmail.com>

MIME-Version: 1.0

X-SG-EID:

=?us-ascii?Q?gQkno2vIGpTbi=2FX3IyC+KiwMuSWPeAu6AAAUtb8PBFPmc5mmYUivfGi6Cymb6N?=

=?us-ascii?Q?vJCk6u0eLlTkj8kHq3kzZAJFsTReA77UAhqcTSn?=

=?us-ascii?Q?Xtyl3GtSskX5nXzlgWsNBPptyy6BVnkaaIvpYK3?=

=?us-ascii?Q?yt=2FVrciDQailmGAZ3cfcfPPszhD1A8ntKHuFRXi?=

=?us-ascii?Q?7luoyAR6gDMSrYqwo4F0M+bd4gYpAM9aIS8C8M9?=

=?us-ascii?Q?NxKi=2Fgwd=2FQta+HzvQ=3D?=

To: sales@nk.ca

X-Entity-ID: a2DzOxQgTHayZSyNfKdyJQ==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit

X-Antivirus: AVG (VPS 231029-4, 10/29/2023), Inbound message

X-Antivirus-Status: Clean



Hello Aboo,





I just wanted to reach out and see if there is room for us to work together.





QeWebby is a white-label agency that helps companies like yours in their WordPress and WooCommerce projects.





Why Us?


- USD 20/hour


- No minimum project size


- Quick turnaround time


- Strict NDA


- Dedicated account manager





Does this sound like something you are interested in?





A reply would be greatly appreciated.





Best,


Mike Kyle // QeWebby





P.S. If you are not interested, no problem at all, just click here to let me know. (Ref: dd6ebe9c)



Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Oct 2023 06:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qxRUs-000JZg-3D

for dave@doctor.nl2k.ab.ca;

Mon, 30 Oct 2023 06:35:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Oct 2023 06:35:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f196.google.com ([209.85.219.196]:59439)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qxRQd-000DIA-1a

for root@nk.ca;

Mon, 30 Oct 2023 06:31:39 -0600

Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-d84c24a810dso3724855276.2

for ; Mon, 30 Oct 2023 05:29:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1698668971; x=1699273771; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;

b=aQ+nASmLwXLoO1hREducuW3vv+XZB0B8gAIvCuXtB7cW+oLEjPZlulEa+n7M0gi7ND

lGEtwu68XZo3vv/0i6Pm1loHLrAIUq/iuci9+85WkJuk6s4xRcnnfeBkGX1YthMwjOzp

/5hNpv60u8BEw31UwLQoxv17Wqq/n9HwN839Ze8//PxS/+wRbkDzaH+qhzz4g4mBjuMo

LXmQyko/T6v88vvQyb4ea8MLTSxPVos6RyzuZ8S+yR1+myhhMVtru6rlaFRuokcz7VIi

YbifBiNwdg8dx5h+FhwWXfhuTKL/XltkM4wyvQdfcAP7e/jgUyKA1PTfSEza/uRXLyuA

J5JA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1698668971; x=1699273771;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;

b=wWpQ4HBEzNRcXf2u8eLRwNxDNpC6KDmcLUjEGjSsvDgMSqtSLDcG3/z65IrFymlZtI

YP4JscW3k33aeatdtW8P0sXWkDKy4PZ8ACwWzS+HeQZo04wpJCGL6TKWPYO0NiwfhO83

d+YvRntccu/Nr1+Ey0tTNVa78hG1/5pc3pvxAdKhJcFtyG6wV3hl/zN8q/8RuMEQdK70

jMOd+OoqmZzp7cO8sUI8CAsdbYPfJPH5QmghZnK9JvU+ZTdoeEPsvxpdR+Ow6lKhj9UW

7j++Fp1XpE3+gYh/efx7H5OU0KlDNzHuQeOrBs+0TF1+8pc9ZuZyh4zP2mMbxj5+X4rR

fiRw==

X-Gm-Message-State: AOJu0Ywzw9PzCIfVTjbWmLkPVL2e0WhL5bFtV2KGf6NdPY8GTxl0G5WD

Q5HscuWGoL4dK/mPX4sRMcV2Rel67YgCVdIipOk=

X-Google-Smtp-Source: AGHT+IHoOQy4V26hnw4YEOS5p8P5QyG0loF9zItRYPY6KaINYNVShkYVt1e1fDZrXgVe6HcJfqrWx4IeGE4CpjfxZPU=

X-Received: by 2002:a25:84c9:0:b0:da0:4bda:dc41 with SMTP id

x9-20020a2584c9000000b00da04bdadc41mr7875300ybm.37.1698668970768; Mon, 30 Oct

2023 05:29:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: rinat77@inbox.lv

From: "Mr. Rinat Akhmetov"

Date: Mon, 30 Oct 2023 05:29:19 -0700

Message-ID:

Subject: Hello Friend

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000098006c0608ee3052"

Bcc: root@nk.ca

X-Spam_score: 13.8

X-Spam_score_int: 138

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Day, I am Mr. Rinat Akhmetov, an investor and a director

with SCM Holdings (System Capital Management) Donetsk, Ukraine. Considering

the current situation in my country Ukraine in regards to the Military I

[...]



Content analysis details: (13.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.196 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.196 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ashleymg862(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ashleymg862(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rinat77(at)inbox.lv]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Hello Friend

X-Antivirus: AVG (VPS 231029-4, 10/29/2023), Inbound message

X-Antivirus-Status: Clean



--00000000000098006c0608ee3052

Content-Type: text/plain; charset="UTF-8"



Good Day,



I am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings

(System Capital Management) Donetsk, Ukraine. Considering the current

situation in my country Ukraine in regards to the Military Invasion by the

Russian Federation, which has destroyed our country and many companies,

and has put a hold on economic activities.



I am soliciting your consent to transfer the sum of Three Hundred and Fifty

Million US Dollars ($350M) investment funds deposited with an Austrian bank

(SGB BANK AUSTRIA) into your personal bank account or Company bank account

for investment purposes.



Please respond back for more details.



Yours Truly,

Mr. Rinat Akhmetov

Chairman SCM Holdings



--00000000000098006c0608ee3052

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good Day,

I=

am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings (Syste=

m Capital Management) Donetsk, Ukraine. Considering the current situation i=

n my country Ukraine in regards to the Military Invasion=C2=A0 by the Russi=

an Federation, which has destroyed our country and many companies,=C2=A0 an=

d has put a hold on economic activities.

I am soli=

citing your consent to transfer the sum of Three Hundred and Fifty Million =

US Dollars ($350M) investment funds deposited with an Austrian bank (SGB BA=

NK AUSTRIA) into your personal bank account or Company bank account for inv=

estment purposes.

Please respond back for more det=

ails.

Yours Truly,
Mr. Rinat Akhmetov
iv>
Chairman SCM Holdings





--00000000000098006c0608ee3052--