Google Spam | Entries from Monday, April 15. 2024

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Monday, April 15. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Apr 2024 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwTPo-00000000BKw-2CFA

for dave@doctor.nl2k.ab.ca;

Mon, 15 Apr 2024 14:59:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Apr 2024 14:59:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f69.google.com ([209.85.217.69]:43260)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwSG6-000000004b2-1HqR

for sales@nk.ca;

Mon, 15 Apr 2024 13:44:58 -0600

Received: by mail-vs1-f69.google.com with SMTP id ada2fe7eead31-479c5a9dd8eso3982319137.0

for ; Mon, 15 Apr 2024 12:42:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713210172; x=1713814972; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=BLdYIwhK+DtGZr6zjL56eeUD5JoeyJza+yf9aJADQXnpOV4jxllfXVTQWD/+XQtUNE

toBgrbjfN+ArNFjYdbUdSV8BvJwyyReUVDy904TRBGcZU0BffSnMYvO93ojPgbzbJgxa

znQxO7JOHCQbutLA2eshLcCG2xDFiIdAfVBy9cC1/4FC2e6f7Cs3t8yt0egPos7CG/9C

5a8VsP43IZKHFjeLGx251YU5AoAboHAqY6Sy6TL7aHnMIvrohz93VCBkwFPLNKmGsaPX

0dH1FHfvLo7yLi87iEw8N1u2LfeDyPiiUKr6VcFgff1OWco3QVG0cspMkCHBtDQolGla

9LeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713210172; x=1713814972;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=QQqkd0DskxEp7k7BCTrvHInouDo9W9Eyn/lPK8GnXH869r6nsb+7sJCve9unW/2CrU

JUs6S8ipGNjQE+vhLCNjX9sXIRBizUWs3JmyQbqtusi9mH6jkEXDw16jNQXRkNT5zRCH

6jG+xI5L/eyQdpXd/ddwK4TPDmMGRBmJyGnHVDriwp4759HS9r29cWVuKmExl3ICPKwx

TL6yC2yagNLoEO1RPqVhmKuUzsXKVafss+DOQPWKDaKtUBSh8j70X8VNqtuWjuZYBm3r

1jl+ewvb+0hfuPU0eeMAOMPVHpYexxgbEI2tYJs0UWMAz/kfsV0o2Ix30iu+rMPDhEp9

0Lgg==

X-Gm-Message-State: AOJu0YzJ75jwMpslv6XtiP6ZF+zgVywF5bImxDcvRoxjc27fkGwS6RS1

T8vNi2lGEdWc4z2vyrdID88FhFcjoUXd1fgzIabbjMZoFgpHkH+mnNGq+ntHBEzp7TThCHndBEw

=

X-Google-Smtp-Source: AGHT+IFYja+BuwsWjTzfQC3y63ES57pDl6jEu9TOhdqLKCs9MPcfVvE/5pHlx046gudsMoNbLAR3JKB+SA==

MIME-Version: 1.0

X-Received: by 2002:a05:6870:639e:b0:22f:47b:b764 with SMTP id

t30-20020a056870639e00b0022f047bb764mr11398oap.5.1713209606006; Mon, 15 Apr

2024 12:33:26 -0700 (PDT)

Message-ID:

Date: Mon, 15 Apr 2024 19:33:26 +0000

Subject: daveyadallee, Information

From: gasikanplegaplegu@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , daveyadallee Get 100K Followers Instagram NOW, Please

visit the web page below Cheaper. [ https://bit.ly/instamaxshop?daveyadallee

]

Content analysis details: (6.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.69 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.69 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gasikanplegaplegu(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} daveyadallee, Information

SGkgLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBOT1cs

DQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoNClsgaHR0cHM6Ly9i

aXQubHkvaW5zdGFtYXhzaG9wP2RhdmV5YWRhbGxlZSBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsg

TGVzcyB0aGFuIDEwMEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEhIE9mZiA0MCUg

VG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFByaXZhY3kgUHJv

dGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGlnaCBRdWFsaXR5

IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVzdGVkDQotIFN0

YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywgSW5zdGFncmFt

LCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFuayB5b3UsDQpS

ZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlhUHJvTUFYLiBB

bGwgUmlnaHRzIFJlc2VydmVkLg0K

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Monday, April 15. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Apr 2024 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwTPs-00000000BLD-2TmL

for dave@doctor.nl2k.ab.ca;

Mon, 15 Apr 2024 14:59:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Apr 2024 14:59:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:43056)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwSFE-000000004V5-0HfZ

for sales@nk.ca;

Mon, 15 Apr 2024 13:44:04 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-7e5daf24276so4072938241.0

for ; Mon, 15 Apr 2024 12:42:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713210117; x=1713814917; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=WyyDWT6uiTaiQaUzNlM0qJXgyTmXPaANwPy7LP4KT/782rnKT81yUDu4zqxREc73dZ

FVY7wqlpBIsdJ3MBmgJf+hSIA+MeuoyGr8aF6EiO8cTi1mO1P7ZrTGHCwBzH7FvrR0Vg

maalJxKC+kx8O2j9/yvUx+5NsPY+SFnQR6CNPNAQQwyG6Qj2qKPtEeNsoU9e7eqdL8NR

IaBAzjaO+ZJlm3Cqv2Q3y8pfifvvzp0BQDZeApA3W9FHNedVfb3hD5B//k+ecdAataT4

rP9bl+6lej53oyzapxX9N9KebQhIqoOt8GycRbtUktwuH+A8N5D0ajl29mcVIRxkCOC+

qgrA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713210117; x=1713814917;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=KWnrTpvd3felXTYt2oTh5PVlM9H9BJj2xMvHxZBEix9wzrIrXYz6cuWbv/rikuNkMh

eD4ZizhLdFK5guV0iqAcNeg9w+A3PhRu97CXJSkIOrx7ytyoZCyWrUArZfXDpTEilfGt

w0r0KX4vSGhOd4HdtqC+Z98Nv3tdTK2AQJKc3qjnxTlOFh9I/1DS/nj7UpS1W04p4C1J

0+JMYEWcfLIRzb2Gfr+iN1+/05nw6knJptgunm0UqaQxSEEwJ950hwM5nCgWHuuFMQtT

cKiN/bvqCSk5gU3LtTipzkeO0hBj8vdRhQq4PqU2q2wgP5FcXiFzNE3Tj/p4HukJXUQq

+aSw==

X-Gm-Message-State: AOJu0YwoT5ep3jvTj6VLH3wmDnTIS4n6zlqWrWu7r9ycknbdIwIb3PK0

SWNfCeD5CfsSxT/pzPwyeRser5aFVpw2ieqsLSuN12Z47CjEwmN5RFNpvVEKVvZyBB7oiWF/0JA

=

X-Google-Smtp-Source: AGHT+IFYja+BuwsWjTzfQC3y63ES57pDl6jEu9TOhdqLKCs9MPcfVvE/5pHlx046gudsMoNbLAR3JKB+SA==

MIME-Version: 1.0

X-Received: by 2002:a05:6870:639e:b0:22f:47b:b764 with SMTP id

t30-20020a056870639e00b0022f047bb764mr11398oap.5.1713209606006; Mon, 15 Apr

2024 12:33:26 -0700 (PDT)

Message-ID:

Date: Mon, 15 Apr 2024 19:33:26 +0000

Subject: daveyadallee, Information

From: gasikanplegaplegu@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , daveyadallee Get 100K Followers Instagram NOW, Please

visit the web page below Cheaper. [ https://bit.ly/instamaxshop?daveyadallee

]

Content analysis details: (6.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gasikanplegaplegu(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} daveyadallee, Information

SGkgLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBOT1cs

DQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoNClsgaHR0cHM6Ly9i

aXQubHkvaW5zdGFtYXhzaG9wP2RhdmV5YWRhbGxlZSBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsg

TGVzcyB0aGFuIDEwMEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEhIE9mZiA0MCUg

VG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFByaXZhY3kgUHJv

dGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGlnaCBRdWFsaXR5

IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVzdGVkDQotIFN0

YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywgSW5zdGFncmFt

LCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFuayB5b3UsDQpS

ZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlhUHJvTUFYLiBB

bGwgUmlnaHRzIFJlc2VydmVkLg0K

Web / App SEO spam from Google Gmail

Posted by Dave Yadallee on Monday, April 15. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Apr 2024 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwMiJ-000000004HV-2Lun

for dave@doctor.nl2k.ab.ca;

Mon, 15 Apr 2024 07:49:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Apr 2024 07:49:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f195.google.com ([209.85.166.195]:48257)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwGs5-00000000PTb-28NI

for sales@nk.ca;

Mon, 15 Apr 2024 01:35:25 -0600

Received: by mail-il1-f195.google.com with SMTP id e9e14a558f8ab-36a261cd6b5so17215505ab.0

for ; Mon, 15 Apr 2024 00:33:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=delhitechie-com.20230601.gappssmtp.com; s=20230601; t=1713166400; x=1713771200; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=LJEBVsIa4MUom6nS1j3LsOirOIMKlW3uhYjnL+1Dedw=;

b=q7ZmuoiQCT9vSt8K9SJOC6HWuVVH9dmGVFsK7Icpvh00x4OeauPrH44vzU8BTaOKdK

LzC/LyUY7POxyFy6tyipNWYjkqrNwcHdaqqctuvXoFf/Ae2idWD4BHnbwlv6LVKlfsdf

f4+IqUS4ZtoN3+kFkTQLrZRV4QEfGDfjgxr5tX6yD8tGzwY1I+M2yOTY07k6C6kQRtL0

GYfE24V47FVWiOH+p7oFZZvc8fMdUrj7OFvQkHKuyGY8/Oz8sKjcgpzlemjdox6r1wzh

yThF2zqCg/JitgHuIcf8BaxxtkObnQM0cVNFV5WT4YoISv5VfGBS2KaAsZJJ7uiq62sI

T3bg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713166400; x=1713771200;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=LJEBVsIa4MUom6nS1j3LsOirOIMKlW3uhYjnL+1Dedw=;

b=bxqPIONVX7p+8M0M3mKi14J2UzxSrPsF8NMd81b6rxAFgfJPWsGmSmcZaLxMNlLWG8

O94k9ja7OaKQot7gYh7k4qpRzoFdwDjpviE756Xpv8qdsS2p379iPZ4J80PH1GUscmv+

HSnuUUdmz2HT3LNR7VvwZEZW75vY91iGpa6ZEBafwzlrn6ZRRUkFxeT9Ri20lyF0lVhR

NFeLJxXIeLaJBhLjXT/jKAaCKA92XnqwzmLKs00LnSliXfFUjtwpSpE3Bm1Iud5rUP90

dJuSWif1yQPXrtqXq/7YIhMh2FLOtZnmTpYfr+PJBfWvLpOjKTddHiloRiI7Cz75xGBr

TqOw==

X-Gm-Message-State: AOJu0YySlIT6Fp16A9553Ye0bJ+tXxF2jkfszwUYes12/pTB4eFpPFQv

IPRJOhRN21GQR3tZFwGSMzN9GV4ykvO9u5/UaXgkxiuRdi0zZlybLltcrPDXu99ipeis7IPshro

L3eg=

X-Google-Smtp-Source: AGHT+IHMvpbFnWXKgMrqWVNjFztIiN7KpiFJEiVVFPIsG5TadrDXs8wnFL4iDNA4dIkW10rlp8fJQA==

X-Received: by 2002:a05:6e02:1fc1:b0:36a:3f10:7ef4 with SMTP id dj1-20020a056e021fc100b0036a3f107ef4mr11612777ilb.29.1713166400405;

Mon, 15 Apr 2024 00:33:20 -0700 (PDT)

Received: from aa ([122.161.77.46])

by smtp.gmail.com with ESMTPSA id h34-20020a635322000000b005f7536fbebfsm3003225pgb.11.2024.04.15.00.33.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 15 Apr 2024 00:33:19 -0700 (PDT)

From: "Mehak"

To:

Subject: Design/Developer

Date: Mon, 15 Apr 2024 12:54:30 +0530

Message-ID: <1912501da8f07$30127530$90375f90$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_19126_01DA8F35.49CAB130"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdqO/EklfR1Mjz22SNKJ/qobrq69+A==

Content-Language: en-us

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, Would you be interested in build or Re-build your business

website? We are a professional Website Development company. Re-designing

- Brand New Design as per latest market trend.

Content analysis details: (10.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.77.46 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.195 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.195 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 SPECIAL_OFFER BODY: Special Offer

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 RCVD_IN_SORBS No description available.

Subject: {SPAM?} Design/Developer

This is a multi-part message in MIME format.

------=_NextPart_000_19126_01DA8F35.49CAB130

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hello,

Would you be interested in build or Re-build your business website? We are a

professional Website Development company.

Re-designing - Brand New Design as per latest market trend.

Functionality - CMS, News Letter Subscription, Ecommerce, Shopping Cart,

Payment Get way etc.

Landing Pages - Highly Optimized Landing Pages for better Conversion.

Responsive Designing - 100% Compatible with all the devices like mobile,

iPod, laptop, desktop and all the web browsers.

If you are interested, please share your requirement.

It would be great if you can share your contact number whatsApp/skype.

My rates are very affordable. {Special offer only today}

Thanks You,

Mehak

------=_NextPart_000_19126_01DA8F35.49CAB130

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>Hello,

class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>

class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>Would you be interested in build or =

Re-build your business website? We are a professional Website =

Development company.