Web / App / SEO Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Apr 2024 07:18:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwigu-00000000AFP-3miH

for dave@doctor.nl2k.ab.ca;

Tue, 16 Apr 2024 07:17:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Apr 2024 07:17:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:40340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwgqO-00000000KQr-2mvY

for sales@nk.ca;

Tue, 16 Apr 2024 05:19:25 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-1e4f8a2b026so6592115ad.1

for ; Tue, 16 Apr 2024 04:17:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=delhitechie-com.20230601.gappssmtp.com; s=20230601; t=1713266240; x=1713871040; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=2oyHyHEp5VfqfsEvrql5gwixSwj+e1L9Zk6onQySlCI=;

b=d/LejT+qF/Ee8XgG2afkkZu/10vsuNHg/Ks5IC79FNKcWnY23YEAxHpSG8bwZKTYn1

/aVeNHoH2dG4nOqNsnYXNBZOUnJObdO2ZLaKNFsDoGOOK3c51zF2gJkMAzaQI3I2+eul

VqlpIoomiNIRj5wXaHazPt3GYZ+fB7lpMJliMjLz5CygUmPNMJ364XeoiZzjtuplpOV1

ElgMaG3LIRPlND2fRHTx4fRVS4I11YcagJxTG+jeCWgEDzPjLroeL2GYjf7bwfO8PHU/

NC7PZkl7C93yw/oV6bLFPtNXc96qOVXJ0qDfYiQw9SPgd8bn8T911PzdVt1KEpmRcDyV

Q4Cw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713266240; x=1713871040;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=2oyHyHEp5VfqfsEvrql5gwixSwj+e1L9Zk6onQySlCI=;

b=iExgaV0eJnZI1h4bzYmNZDBM8r0o5C1eviwPU3p5gG27mCRS/c7H5g1BGsjUSU8HCh

nRHTrKGKkIR9YEuWFT6G++LZQD7srrRELKOwv8YBgVSkRwQn/K3G5ZDH+DvMvt1jjrXO

GDZB8pbUvZWly9uVuzZSBcK6T1Hg5ij+bBri4Tru3aNf7vydVdQ1o4lXiNy2beALJM1T

29do6XPcc3cYepKuPf7qPPX5ORmHV7IPZfSvJArBRRrL1BaBJ30MxUlUOcoVKsO71pRI

xp/s9kXQ+d+3lTI6hYTv6lfUPQvyJdScmM0sBfZTjBej8BfArRpjWpQ4PCv/zQrgMxph

yuiQ==

X-Gm-Message-State: AOJu0YzYY7RExSUWD9FnDgDycbbdT/CFLoFfQ8ynKXjgH1+Hl1t4eu8A

N1dY7pp/0dM+RqANBj6KKJBO0EM7pRupzZtGrBHMB2C3d4qdbik+H5X+Vzf1UjuutZXLPIzfVCL

/JA8=

X-Google-Smtp-Source: AGHT+IG+vLCIVL7FT9gq+/6UhVdxnsgcWEphXWpDnTowpSNo04BlQwcSY3rQVNTm35W0Cw07YutKDg==

X-Received: by 2002:a05:6a20:c52f:b0:1aa:5acf:8e7c with SMTP id gm47-20020a056a20c52f00b001aa5acf8e7cmr425953pzb.3.1713266240333;

Tue, 16 Apr 2024 04:17:20 -0700 (PDT)

Received: from om ([122.161.66.223])

by smtp.gmail.com with ESMTPSA id fi1-20020a056a00398100b006e554afa254sm8597382pfb.38.2024.04.16.04.17.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 16 Apr 2024 04:17:19 -0700 (PDT)

From: "Josie"

To:

Subject: Any Application

Date: Tue, 16 Apr 2024 16:40:21 +0530

Message-ID: <35aba01da8fef$a2c47270$e84d5750$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_35ABB_01DA901D.BC7CAE70"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdqPzidNhnRuPtjpTHyjq2xEICRAnA==

Content-Language: en-us

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, My name is Josie, and I am an app designer along with

an App Developer working with an "Indian based Company" with over 7+ years

of experience. Do you need a great game or App adjusted or built from scratch?





Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

[122.161.66.223 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.66.223 listed in dnsbl.ahbl.org]

[122.161.66.223 listed in dnsbl.ahbl.org]

[122.161.66.223 listed in dnsbl.ahbl.org]

[122.161.66.223 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.66.223 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.66.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.66.223 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.66.223 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 RCVD_IN_SORBS No description available.

Subject: {SPAM?} Any Application

X-Antivirus: AVG (VPS 240416-0, 4/15/2024), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



------=_NextPart_000_35ABB_01DA901D.BC7CAE70

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







My name is Josie, and I am an app designer along with an App Developer

working with an "Indian based Company" with over 7+ years of experience.







Do you need a great game or App adjusted or built from scratch?







If you are interested in any Mobile App. I will send you our Price list, and

past work & samples.







Thanks,







Josie





------=_NextPart_000_35ABB_01DA901D.BC7CAE70

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'font-size:11.5pt'>Hi,


class=3DMsoNoSpacing>
style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>My name is Josie, =

and I am an app designer along with an App Developer working with an =

“Indian based Company” with over 7+ years of =

experience.


style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>Do you need a =

great game or App adjusted or built from =

scratch?


style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>If you are =

interested in any Mobile App. I will send you our Price list, and past =

work & samples.


style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>
style=3D'font-size:11.5pt'>Thanks,


class=3DMsoNoSpacing>
style=3D'font-size:11.5pt'> 


class=3DMsoNoSpacing>
style=3D'font-size:11.5pt'>Josie


>

------=_NextPart_000_35ABB_01DA901D.BC7CAE70--



Instragam followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Apr 2024 07:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwif4-000000009Ww-1gQZ

for dave@doctor.nl2k.ab.ca;

Tue, 16 Apr 2024 07:15:46 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Apr 2024 07:15:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f200.google.com ([209.85.166.200]:46330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <3dRAeZg8JBUY4mtq1zwkmtq6mliouiqt.kwu0itm0vs.ki@maestro.bounces.google.com>)

id 1rwbfE-00000000FL2-2sU2

for sales@nk.ca;

Mon, 15 Apr 2024 23:47:33 -0600

Received: by mail-il1-f200.google.com with SMTP id e9e14a558f8ab-36a38d56655so46034115ab.0

for ; Mon, 15 Apr 2024 22:45:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713246326; x=1713851126; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=OYFdaQqvankVX5Mf2Lk/gWcEvDleCldUUAS2yx9CmM6477VFOWDLDGTt320+XxbjT+

YtY+wlkQrz1xoB0t++5OCGIzJHMuM87O8FJG2ho/jr6JwStAiN4mNlvCUWm9hUbiNv8t

tcUVQcHeIQg44n9eTtJAuXVTDOGJwdmTBcX1QVTvqAzRy7Fh44he86RwQeD+2ckJCFxP

GptCvFNjaEN6GUjKt8gN2jNl1X9+docWIQseL3Pu7sdwjXbWcaa7Ph0xigRf11yu7B7G

YilEkqR6vewEDcA1j0AMjJOzxVRZxY061ZXjjndXmi5Oi+cDqCyEljh3pKprdEVYOe27

Nqyg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713246326; x=1713851126;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=No7tshmzTUIDVKVCz+v/aW+Arw7ZNWkkVO179DI+gITyxF79PUb6G+MRORUw0guo1L

6oEYdBEy4RkcTYC5H0SkpdRwtJTaa8QpA26d2uNOXcipvcdxkE5FFVq2Rn/Xz7sbo6Kx

Xy4843oVvvtOgqVdo2W9heSRpz76y8ZQwrQUaFjHSVDB7qAVCcaIEC5LlGGo5J8lqOJu

a1sZtW+QBE+z51VtF6rAhuaSnc6wR0K/THj++ak26DD9tViuBIbshkUruSX3w3Gq+p22

PxQSBieRYXAeCcKHu5hPlL+2n0Gb54uOBbG+7pSxiWjqUvFyDzrI+4XrqRwYyzn5/8Kj

6DmA==

X-Gm-Message-State: AOJu0Yy08hJENe+8gVaWMpwA8Bt2fxDUgsbVHFXcLtUPUv4WkJOh51Wo

oXRA3qvfnDuGLeBQ9Ha43n13ohxczpS2Znn4VENEmYBkUhnCDh5R389Hg+sV3q3IGT3+wwdgkZ4

=

X-Google-Smtp-Source: AGHT+IF5RJpZ8MeEpKyj0K4WytHma2iRSDxkVp1uShC4/yHN3tGHYk5RzRIlvC+5bn7JDPQQaqct5/OvMQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6e02:20e5:b0:36a:224d:14e2 with SMTP id

q5-20020a056e0220e500b0036a224d14e2mr859100ilv.2.1713246325897; Mon, 15 Apr

2024 22:45:25 -0700 (PDT)

Message-ID:

Date: Tue, 16 Apr 2024 05:45:25 +0000

Subject: daveyadallee,Information

From: welitroceliyeda@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , daveyadallee Get 100K Followers Instagram NOW, Please

visit the web page below Cheaper. [ https://bit.ly/instamaxshop?daveyadallee

]



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.200 listed in dnsbl.ahbl.org]

[209.85.166.200 listed in dnsbl.ahbl.org]

[209.85.166.200 listed in dnsbl.ahbl.org]

[209.85.166.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

[209.85.166.200 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.200 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.200 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[welitroceliyeda(at)gmail.com]

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} daveyadallee,Information

X-Antivirus: AVG (VPS 240416-0, 4/15/2024), Inbound message

X-Antivirus-Status: Clean



SGkgLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBOT1cs

DQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoNClsgaHR0cHM6Ly9i

aXQubHkvaW5zdGFtYXhzaG9wP2RhdmV5YWRhbGxlZSBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsg

TGVzcyB0aGFuIDEwMEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEhIE9mZiA0MCUg

VG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFByaXZhY3kgUHJv

dGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGlnaCBRdWFsaXR5

IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVzdGVkDQotIFN0

YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywgSW5zdGFncmFt

LCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFuayB5b3UsDQpS

ZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlhUHJvTUFYLiBB

bGwgUmlnaHRzIFJlc2VydmVkLg0K

Instragam followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Apr 2024 21:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwZUe-00000000OZK-1IDz

for dave@doctor.nl2k.ab.ca;

Mon, 15 Apr 2024 21:28:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Apr 2024 21:28:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f69.google.com ([209.85.161.69]:43096)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwYhv-00000000JtD-15l8

for sales@nk.ca;

Mon, 15 Apr 2024 20:38:07 -0600

Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-5aa1fe6ec61so3248217eaf.0

for ; Mon, 15 Apr 2024 19:36:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713234962; x=1713839762; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=myG72j07tOV6+0csQmGWftgKvahPdjjFaaFAGnm5O7g=;

b=R6V3a+f299dMmS6VIPSGNrm5aU+TQKhlWJEeUKG/DRzv/0vx/MrBp22BtEL1dUqHwp

Y6LLgteRpE5T5TCu7aDZrIHONZRXGjFDSRHGo1djtg3aHibcsgDQNJFtb0kSWupYpyu1

9VTGQQzgYETP+yBdi8/fOmVvuOFJ4UrzIxIf6n2RuzchSACb8Y9491eoV0J/CBLEEmzt

ptTjQhqBC2X8PwxJmVsig8M/sQFvLMfvkrhappO2kJ+8hb1fKR/ViGdT5cz34P9Hhhj5

VZHl716/Ydq28IV/RgRQRygw9Mjs4rFttJyrR4kFXtskpxcVMBo7NTuLALqKulYGvB28

j4fg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713234962; x=1713839762;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=myG72j07tOV6+0csQmGWftgKvahPdjjFaaFAGnm5O7g=;

b=koODS6aS1//zMqgP4gOxuh0Bz6R+pvkx7jkpYwF2GNHcS5GgaDoMDWvmoe5WX4GiTa

Q73Gn59OrJSoeARpZtCaEJPPdErGYComkrZMO4pfYMoBUoZwON0DAsRfCI6X8mrCayzU

ZJa3QhlMscX9mIoofQ8PZmzJ/sRt9qnEQg8yASBhSaFbEcB6EjAZNpYo9VbRiGx0slEJ

xilknz4Zu1GtaiqO/mq5ghxx3nNCxHeYeYhCY3XNFN9fRiYBQWkRB1iXmKuxhNK+ZNFa

Rj5dXzjITLJRGTDia+opt4X2ZCTJXm7kPMtfU9F0TYALpKkrU6O5tvgSO5ksRI024vDs

jwrg==

X-Gm-Message-State: AOJu0Yxg8tp8N1BJ6WC2CCp6B3Iz2VRkmiHLxvl1a/fp6PwbqR9fIDZk

LAuPnPb7Ppb+YOjFPJqDYDku4M6OyCLqd5RluutxMs5obuALIOupvlkFWXLYiQ5YkMYK/Sc3IhQ

=

X-Google-Smtp-Source: AGHT+IFo4KF04C8Hstak2McmntlLpcTaliHUkYk4CO9B4VGis8F+eWN+NTNdvwcmta/BwoIGXlq+GcghlQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6871:7615:b0:22a:d3b:e68f with SMTP id

ob21-20020a056871761500b0022a0d3be68fmr7962oac.2.1713219264556; Mon, 15 Apr

2024 15:14:24 -0700 (PDT)

Message-ID:

Date: Mon, 15 Apr 2024 22:14:24 +0000

Subject: netknowyeg, Information

From: hendrategar931@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , Netknow Internet Service Get 100K Followers Instagram

NOW, Please visit the web page below Cheaper. [ https://bit.ly/instamaxshop?netknowyeg

]



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.69 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.69 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[hendrategar931(at)gmail.com]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hendrategar931(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Information

X-Antivirus: AVG (VPS 240415-4, 4/15/2024), Inbound message

X-Antivirus-Status: Clean



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1csDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoN

ClsgaHR0cHM6Ly9iaXQubHkvaW5zdGFtYXhzaG9wP25ldGtub3d5ZWcgXQ0KDQpEbyB5b3UgaGF2

ZSBhYm91dCBbIExlc3MgdGhhbiAxMDBLIF0gRm9sbG93ZXJzID8NCkluY3JlYXNlIE5vdyAuLiEh

ISBPZmYgNDAlIFRvZGF5Li4uISEhDQoNCi0gSW5zdGFudA0KLSBTYWZlc3QgTWV0aG9kcw0KLSBQ

cml2YWN5IFByb3RlY3Rpb24NCi0gU3BlZWQgNTBLIC0gMTAwSyBGb2xsb3dlcnMvZGF5DQotIEhp

Z2ggUXVhbGl0eSBGb2xsb3dlcnMgJiBSZWFsDQotIERyb3AtQmFjayBHdWFyYW50ZWUNCi0gVHJ1

c3RlZA0KLSBTdGFydGluZyBnZXQgNUsgRm9sbG93ZXJzIEluc3RhZ3JhbQ0KDQooIFRocmVhZHMs

IEluc3RhZ3JhbSwgVHdpdHRlciwgWW91dHViZSwgRmFjZWJvb2ssIGV0Yy4gKQ0KDQoNCg0KVGhh

bmsgeW91LA0KUmVnYXJkcywNCg0KDQpDb3B5cmlnaHQgwqkgMjAxNCAtIDIwMjUgSW5zdGFtZWRp

YVByb01BWC4gQWxsIFJpZ2h0cyBSZXNlcnZlZC4NCg==