Desparation spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Nov 2023 14:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6dV7-000000002WN-2HhO

for dave@doctor.nl2k.ab.ca;

Fri, 24 Nov 2023 14:14:13 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Nov 2023 14:14:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f178.google.com ([209.85.160.178]:45459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6bPD-00000000NSV-2MkL

for doctor@doctor.nl2k.ab.ca;

Fri, 24 Nov 2023 12:00:02 -0700

Received: by mail-qt1-f178.google.com with SMTP id d75a77b69052e-41cc44736f2so11512011cf.3

for ; Fri, 24 Nov 2023 10:58:01 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1700852275; x=1701457075; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;

b=UJQPq7M/bODGlKbK8o823ylsRdozLu//yrL1teNsmbDD87lE70t3hSuB1Z+ArJjtVO

fFVBKd6uAATOAAIfwSIeZ0dfRLehuZiLNOD/FdpxmXPJ5jKtz0nrcfTWNZSnfcssl1QC

dPj2EFAObTRSSlY5/D39uAt4y76PY/PQMhy1LkJegc7EcFlLffE+j/iWF5exIdmrDF5g

BGvBwGhz9J2mIozFyzfhcft2QCD3jPkD2Mcr0KoRT8ykJAtRtWeenjONiq5SBqcggUt6

s5iJqOzHWMHJRr29ctSfuiAg19TyAPNZOfo+EdxbYbVzbVl1b0mgtbewDdY4L6eI5l7T

K1xA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700852275; x=1701457075;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;

b=Q96DHcWjRlGDE/H1n6Cag5pK29VeICL/n+pViEZhL+F2c5NfzIvZRr6gcROZy66F3g

WUz3toQ+m9zJjxa1dmSbyIx0fJdByOljrOBbj6dgefbgJKGkfzSQNKrEGMOjAJdwrqN0

pt+5BvbDjJ0DlWXfTweK+ofU/INtsnAV+gEfnbDNG8nqF/ekmODONOn2hFn0GIeX85Oj

ybYuRtRriDXdqLoZUVUZb8olsEzczItlPp0KkOqjHVglgHhVKtxv6V5IP8IG5XNutFGG

6LqGYvsSjHKfBRory0CpCVBx2FfX+/GZjTJyf2SWfWoE//YZ7M3hAVi8v53s8rKmclmT

dPgQ==

X-Gm-Message-State: AOJu0YwsM5ciaTiqrOjQ5odVETefalJmB1VmsMIHLpc7N+DVBjA/ej67

j/JLdMXng0YaK4d2zgTr/3l7ww4huhIY+h5/pbA=

X-Google-Smtp-Source: AGHT+IE4K7msMoVssA7Njts46SIxM2fabVmcJCCDa4z2PnjF5KcYFAUTuzP1fNbN1ToK4KSlNTgSCLzkP3ManP1bR3s=

X-Received: by 2002:ac8:5c02:0:b0:41e:3259:529a with SMTP id

i2-20020ac85c02000000b0041e3259529amr4975833qti.9.1700852275029; Fri, 24 Nov

2023 10:57:55 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:ac8:4e83:0:b0:41e:1e40:cab3 with HTTP; Fri, 24 Nov 2023

10:57:54 -0800 (PST)

Reply-To: robertkoffi2@gmail.com

From: Mr Robert Koffi

Date: Fri, 24 Nov 2023 18:57:54 +0000

Message-ID:

Subject: HI

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear Friend. Good Day. Did you receive my previous email?





Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.178 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.178 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[robertkoffi2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chiji4uandme(at)gmail.com]

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} HI

X-Antivirus: AVG (VPS 231123-12, 11/23/2023), Inbound message

X-Antivirus-Status: Clean



Hello Dear Friend.



Good Day.



Did you receive my previous email?



Best Regards.



Mr.Robert Koffi.

Web / SEO Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Nov 2023 08:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6YZb-000000005DE-1BI8

for dave@doctor.nl2k.ab.ca;

Fri, 24 Nov 2023 08:58:31 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Nov 2023 08:58:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f193.google.com ([209.85.210.193]:55517)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6V1X-0000000018v-2Rzl

for root@nk.ca;

Fri, 24 Nov 2023 05:11:13 -0700

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-6c4eb5fda3cso1762856b3a.2

for ; Fri, 24 Nov 2023 04:09:09 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobileappinc-in.20230601.gappssmtp.com; s=20230601; t=1700827743; x=1701432543; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=pBtS22UxiWSyhUa216ob3inEOphbh+13Pw/D3dxEy1g=;

b=gk2LoNTn6Q/hLjTGzr9UFEWNxfrKe9veJumuuo+3i4ReTSy1/kizjdFiUfRCrGSE6r

LWXARp/Q77YwSRBHHZ507bQ9Z8XesCxJYlPm7vMePAsZkiBTRKNiMct8hf/HdVlQHcyn

2g43NiZacch/Cw2NdU4nHqaVm+moL8T7m3a8PHwW8b01hnj/VjOY0XCD0L1zX9WUSSWK

VttqSwGzBXoABujLGr+WlihjNKyLFmFz4WgyvOAMCcHj8yzOTX+7TU6A4Bu/FPM2jGX3

2QOsCjyUFz0Pk7jhjy4VC9xIXA+h6NbCi/w0cF2ZBmqgkZu259stP1OWUxmrOLjlTTCD

g2NA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700827743; x=1701432543;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=pBtS22UxiWSyhUa216ob3inEOphbh+13Pw/D3dxEy1g=;

b=kyyAtyOGTFxlPOZJtYBuZwKQIEkKjEtOGoH9GKXeb1bXwDR9P90Tcc2TZBePREr/CH

rjUqwRV90QKhDq28iiEStRdSMdR6cG3hN7RQzqAHx4h0So19cT/vASwwVH4KKZW7qT89

FO3V7vwzFgn9sGJKMgxku/4W1eHxmDpdlXBz0RUtA0Rnx2Ng4HfE5zW7ofDY+tC9MOFK

aTnX6jvRd0qym794kGiS4bei8jYyTPopD7r1SbWqgTVhngIzvTPiwjYjsQAndI6RgarM

UwsXXbEmn91/v0Tu/wRuzQv8oto8GdqKrpzQnHy3dY1OK8e5YpTyLpqiIBnYm3xXDGge

dTyA==

X-Gm-Message-State: AOJu0YwpyombajPY+fBMQoz6tHq7PeKvQszExeuAFk2lOXXI10LHrP8P

qkXu69yk1pKbK6o+uwSRGxlTIhhWICs1XdXaAmelvA==

X-Google-Smtp-Source: AGHT+IF9ICZDC/ge1uENl/vxz7b13370KOVUf2EJgRHXciDT7UyXMG7a8m4+ENhz5R+M+w0+oPMbtQ==

X-Received: by 2002:a05:6a20:729c:b0:18b:826c:411b with SMTP id o28-20020a056a20729c00b0018b826c411bmr3247464pzk.17.1700827743121;

Fri, 24 Nov 2023 04:09:03 -0800 (PST)

Received: from om ([122.161.75.88])

by smtp.gmail.com with ESMTPSA id fn16-20020a056a002fd000b006cbb51b9974sm2838250pfb.173.2023.11.24.04.09.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 24 Nov 2023 04:09:02 -0800 (PST)

From: "Anita"

To:

Subject: SEO Services Proposal

Date: Fri, 24 Nov 2023 17:24:26 +0530

Message-ID: <551401da1ecf$0114b9d0$033e2d70$@in>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5515_01DA1EFD.1ACCF5D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdoekkZgrP92nl8hTEGTUjUCXGdxig==

Content-Language: en-us

X-Antivirus: AVG (VPS 231123-8, 11/23/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



------=_NextPart_000_5515_01DA1EFD.1ACCF5D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey,



I was checking your website and saw you have a good design and it looks

great, but it's not ranking on Google and other major search engines.



I'm an SEO Expert and I helped over 250 businesses rank on the (1st Page on

Google, Yahoo and Bing). My rates are very affordable.



May I send you quote? If interested.



Thanks!



Anita





------=_NextPart_000_5515_01DA1EFD.1ACCF5D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hey,


class=3DMsoNormal>I was checking your website and saw you have a good =

design and it looks great, but it's not ranking on Google and other =

major search engines.

I’m an SEO Expert =

and I helped over 250 businesses rank on the (1st Page on Google, Yahoo =

and Bing). My rates are very affordable.

May I =

send you quote? If interested.

Thanks!


class=3DMsoNormal>Anita


class=3DMsoNormal>



------=_NextPart_000_5515_01DA1EFD.1ACCF5D0--



foreign language spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Nov 2023 08:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6YZO-000000003wy-3839

for dave@doctor.nl2k.ab.ca;

Fri, 24 Nov 2023 08:58:18 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Nov 2023 08:58:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f66.google.com ([209.85.208.66]:54296)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r6UXz-00000000BS2-3PMQ

for doctor@doctor.nl2k.ab.ca;

Fri, 24 Nov 2023 04:40:39 -0700

Received: by mail-ed1-f66.google.com with SMTP id 4fb4d7f45d1cf-54afd43c83cso546813a12.0

for ; Fri, 24 Nov 2023 03:38:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1700825911; x=1701430711; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ugNNaVQ6NgmnaoD44Od4JLrnGtV4w9LgJ+2RxQDspXQ=;

b=CH7HVspN0WQO5QfNT40i5I4zMhvFohAnNhk4do9cNVyfzue7SLvuJmfWhz1Kd4qibS

08eNMr3q692BpvDwImKbRS13FlPVJcjTDTbqw2Jy3Yn73WjOCPbVxSNEpywZbK9Rix0q

CUT+S5W12r28uu4NAZSXsrA5dux1jXA2ntBDta74/WHLK+f+SWvipjdNhriXdlKoHeEe

9R/slfjRM2krlM9xU8aiVvUc6Y61eQ89BIC7hlx8FskLgv7ZgrWnfroymGCsItbgBCQv

gpFLygrh2+DHPxjqMZ5n26RQuD4AllEr0v+Vo+wxDZ1X34XzZlScIEWUdPtzXjSIa2lI

Bv2w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700825911; x=1701430711;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ugNNaVQ6NgmnaoD44Od4JLrnGtV4w9LgJ+2RxQDspXQ=;

b=dpuj1VFLKI2wsi+Z9TxTqSyEmCRH9jHqwMGziD8/IEJPYwj9nuVPYrEmxvDPOV5KqJ

u1pL8i/amK6n9rswyPK5RJ7Z7Al/MSzFvb7f4TYSWrGraT9WCYU2hen7sNetW3h8aLGL

a+y4/U9CsUuF0rj4v1lqKPwxe5beg1zltOp9XJW+0X6fLZiIpowWubmFS+LqnoR9+BDL

3laolr8/hOxcaAy15Us7Dn/R/JI7mYArqs/T+uyP0Gvpjy6ZTVO7XTUTOo6UIqJwZC93

xo/8JT0g23VHq3/0ieVzjjkgtlS1VYeWUN3Vg+300P6NQEv5R/mYqIduTc4wKcBMeeWx

Re8w==

X-Gm-Message-State: AOJu0YwzS0gyKt9FCP6bge/XzQtkeDq311WVf5Dgns5/u84ibn7u+fHG

yZFhcyRRoqx1aWgu3j+fx/sKVhT/eK25NNeFhi8=

X-Google-Smtp-Source: AGHT+IHhci2u+uRbdQFt0JX3q6E3efVP3Idhlm+kUgTusTnprvJv4S8ZAscoFrKUCPj/V05zW/cN1wM8TPWhG74VPVU=

X-Received: by 2002:a17:906:2756:b0:9bd:9bfe:e40b with SMTP id

a22-20020a170906275600b009bd9bfee40bmr1662277ejd.75.1700825910529; Fri, 24

Nov 2023 03:38:30 -0800 (PST)

MIME-Version: 1.0

Reply-To: georgebrown0004@gmail.com

From: george brown

Date: Fri, 24 Nov 2023 11:37:25 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000038d5e6060ae464fa"

Bcc: doctor@doctor.nl2k.ab.ca

X-Antivirus: AVG (VPS 231123-8, 11/23/2023), Inbound message

X-Antivirus-Status: Clean



--00000000000038d5e6060ae464fa

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Buna ziua



Numele meu este George Brown. Sunt avocat de profesie. vreau sa va ofer

rudele apropiate clientului meu. Ve=C8=9Bi mo=C8=99teni suma de (8,5 milioa=

ne USD)

dolari pe care clientul meu i-a l=C4=83sat =C3=AEn banc=C4=83 =C3=AEnainte =

de moartea lui.



Clientul meu este un cet=C4=83=C8=9Bean al =C8=9B=C4=83rii tale care a muri=

t =C3=AEntr-un accident

de ma=C8=99in=C4=83 =C3=AEmpreun=C4=83 cu so=C8=9Bia sa

si singurul fiu. Voi avea dreptul cu 50% din fondul total, =C3=AEn timp ce =

50%

va avea

fie pentru tine.

V=C4=83 rug=C4=83m s=C4=83 contacta=C8=9Bi e-mailul meu privat aici pentru =

mai multe detalii:

georgebrown0004@gmail.com



Multe mul=C8=9Bumiri in avans,

Domnule George Brown,



--00000000000038d5e6060ae464fa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




Buna ziua

Numele meu este George Brown. Sunt av=

ocat de profesie. vreau sa va ofer
rudele apropiate clientului meu. Ve=

=C8=9Bi mo=C8=99teni suma de (8,5 milioane USD)
dolari pe care clientul =

meu i-a l=C4=83sat =C3=AEn banc=C4=83 =C3=AEnainte de moartea lui.

C=

lientul meu este un cet=C4=83=C8=9Bean al =C8=9B=C4=83rii tale care a murit=

=C3=AEntr-un accident de ma=C8=99in=C4=83 =C3=AEmpreun=C4=83 cu so=C8=9Bia=

sa
si singurul fiu. Voi avea dreptul cu 50% din fondul total, =C3=AEn t=

imp ce 50% va avea
fie pentru tine.
V=C4=83 rug=C4=83m s=C4=83 contac=

ta=C8=9Bi e-mailul meu privat aici pentru mai multe detalii:
lto:georgebrown0004@gmail.com">georgebrown0004@gmail.com

Multe m=

ul=C8=9Bumiri in avans,
Domnule George Brown,




--00000000000038d5e6060ae464fa--