Web / SEO/ App spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 23 Jul 2024 08:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sWG3w-000000006aj-1Oze
for dave@doctor.nl2k.ab.ca;
Tue, 23 Jul 2024 08:00:20 -0600
Resent-From: The Doctor
Resent-Date: Tue, 23 Jul 2024 08:00:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f194.google.com ([209.85.167.194]:42036)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sWCv3-00000000IgW-0P8A
for root@nk.ca;
Tue, 23 Jul 2024 04:39:06 -0600
Received: by mail-oi1-f194.google.com with SMTP id 5614622812f47-3d92e1bc90dso2145675b6e.0
for; Tue, 23 Jul 2024 03:37:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=web4you-in.20230601.gappssmtp.com; s=20230601; t=1721731016; x=1722335816; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;
b=acPrYiyJpw16+l+0TVHUuDpI1pulwRb8n9n2+QoPVTF98IQehYD6wSWn5eTQPIRCXZ
7QFQAqjEsOPVFGKJeqORZDFRlSz8IY3ekNKPNRz1NFT+SaFXp23aeMnW3OxrxNWiA2u5
XQLKtSNOB5eYjvNTPcJ0baRFmdoG3z8HUCfFVMFITDqfuB27lML3Ro9C21bgKnrigMvL
v5IqV0OGLY07aQXrb3/tPohSsN2Iif/QoAZUqQy/tIWOvKR0So6FJqNlqpREK3SIvAwO
7755GWjn8DIZ1fjBISO4NGCSg1vdD/vwEx70Z8OBjz1o/TLlYfIHyHwZAf3PqdNdqTt0
kc/A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1721731016; x=1722335816;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;
b=cn5TpJ5emIFFNtN4vQxWeuIbznjCJ7LeVOyxYFfYENKKDI3D2bHHAURV6GlsjuzZTG
4k9inya35PIMUKMfJjwT2kkjZDKdzBspoueKJjhEqEhPJrzTnQHo3tMhpIakXKFEx3ts
MEoQHEX8Xk0F40z3itoVtTErw/ng2n7fLOZEypE9m0xPry0DPpgUFKnb9PGYjzJXYe2O
/MQNGlpK/kzIxSEFAn1yHgbR20SjKRrL5nGqHTzn4OBgurYBLgEsxH4dv0odqP2L9B2X
DCeNU3kCyhUswj8lkCneZ9i/kgJP7j8b1W9vLjE189LUHHjVK36UhEEQ02uYUf78OfNi
fcyg==
X-Gm-Message-State: AOJu0YwKdh/UxXeWa+MkxQZbD76QP1gHJXU+rNK7h2ESarsyEA8pC8eE
QOs/pyzxNhcjhmKYMvWK4MOSVyMW2v1tsGSS5CqDtCrneNdxVeGZ2emqgiqAgT74XygW0eBgTmX
7ki8=
X-Google-Smtp-Source: AGHT+IFgQ8b0yvrRAnuEH6z1thwhhNP2cZx0ew7BpVgyF5hcCTJBEOgjo/nDRBsDoSGm6jSSQW6eKQ==
X-Received: by 2002:a17:903:41cf:b0:1fb:2ebc:d16b with SMTP id d9443c01a7336-1fdb94d14eemr30664175ad.7.1721729022593;
Tue, 23 Jul 2024 03:03:42 -0700 (PDT)
Received: from admin ([122.161.78.172])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fd6f48f58bsm70690265ad.300.2024.07.23.03.03.41
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 23 Jul 2024 03:03:42 -0700 (PDT)
From: "Cowan"
To:
Subject: Design/Developer
Date: Tue, 23 Jul 2024 15:28:11 +0530
Message-ID: <66df01dadce7$9a13dcc0$ce3b9640$@in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_66E0_01DADD15.B3CC18C0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Adrc2iOPzKxdQGjQS6C8oGomoUFLkw==
Content-Language: en-in
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm reaching out to see if there is anything that would
like to create Shopify & Wordpress, upgrade, repair, or redesign on your
website or Mobile App. I am a web designer/developer that can do just about
anything you can imagine at very affordable prices.
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.194 listed in list.dnswl.org]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.167.194 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.194 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too
expensive
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 NO_RDNS2 Sending MTA has no reverse DNS
Subject: {SPAM?} Design/Developer
This is a multi-part message in MIME format.
------=_NextPart_000_66E0_01DADD15.B3CC18C0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hello,
I'm reaching out to see if there is anything that would like to create
Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile
App.
I am a web designer/developer that can do just about anything you can
imagine at very affordable prices.
Let me know what you think.
Please share your WhatsApp or Skype for quick conversations.
Kind Regards,
Cowan
------=_NextPart_000_66E0_01DADD15.B3CC18C0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
class=3DMsoNoSpacing>
class=3DMsoNoSpacing>I am a web designer/developer that can do just =
about anything you can imagine at very affordable prices.
class=3DMsoNoSpacing>
class=3DMsoNoSpacing>Please share your WhatsApp or Skype for quick =
conversations.
class=3DMsoNoSpacing>Kind Regards,
class=3DMsoNormal>Cowan
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 23 Jul 2024 08:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sWG3w-000000006aj-1Oze
for dave@doctor.nl2k.ab.ca;
Tue, 23 Jul 2024 08:00:20 -0600
Resent-From: The Doctor
Resent-Date: Tue, 23 Jul 2024 08:00:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f194.google.com ([209.85.167.194]:42036)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sWCv3-00000000IgW-0P8A
for root@nk.ca;
Tue, 23 Jul 2024 04:39:06 -0600
Received: by mail-oi1-f194.google.com with SMTP id 5614622812f47-3d92e1bc90dso2145675b6e.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=web4you-in.20230601.gappssmtp.com; s=20230601; t=1721731016; x=1722335816; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;
b=acPrYiyJpw16+l+0TVHUuDpI1pulwRb8n9n2+QoPVTF98IQehYD6wSWn5eTQPIRCXZ
7QFQAqjEsOPVFGKJeqORZDFRlSz8IY3ekNKPNRz1NFT+SaFXp23aeMnW3OxrxNWiA2u5
XQLKtSNOB5eYjvNTPcJ0baRFmdoG3z8HUCfFVMFITDqfuB27lML3Ro9C21bgKnrigMvL
v5IqV0OGLY07aQXrb3/tPohSsN2Iif/QoAZUqQy/tIWOvKR0So6FJqNlqpREK3SIvAwO
7755GWjn8DIZ1fjBISO4NGCSg1vdD/vwEx70Z8OBjz1o/TLlYfIHyHwZAf3PqdNdqTt0
kc/A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1721731016; x=1722335816;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;
b=cn5TpJ5emIFFNtN4vQxWeuIbznjCJ7LeVOyxYFfYENKKDI3D2bHHAURV6GlsjuzZTG
4k9inya35PIMUKMfJjwT2kkjZDKdzBspoueKJjhEqEhPJrzTnQHo3tMhpIakXKFEx3ts
MEoQHEX8Xk0F40z3itoVtTErw/ng2n7fLOZEypE9m0xPry0DPpgUFKnb9PGYjzJXYe2O
/MQNGlpK/kzIxSEFAn1yHgbR20SjKRrL5nGqHTzn4OBgurYBLgEsxH4dv0odqP2L9B2X
DCeNU3kCyhUswj8lkCneZ9i/kgJP7j8b1W9vLjE189LUHHjVK36UhEEQ02uYUf78OfNi
fcyg==
X-Gm-Message-State: AOJu0YwKdh/UxXeWa+MkxQZbD76QP1gHJXU+rNK7h2ESarsyEA8pC8eE
QOs/pyzxNhcjhmKYMvWK4MOSVyMW2v1tsGSS5CqDtCrneNdxVeGZ2emqgiqAgT74XygW0eBgTmX
7ki8=
X-Google-Smtp-Source: AGHT+IFgQ8b0yvrRAnuEH6z1thwhhNP2cZx0ew7BpVgyF5hcCTJBEOgjo/nDRBsDoSGm6jSSQW6eKQ==
X-Received: by 2002:a17:903:41cf:b0:1fb:2ebc:d16b with SMTP id d9443c01a7336-1fdb94d14eemr30664175ad.7.1721729022593;
Tue, 23 Jul 2024 03:03:42 -0700 (PDT)
Received: from admin ([122.161.78.172])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fd6f48f58bsm70690265ad.300.2024.07.23.03.03.41
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 23 Jul 2024 03:03:42 -0700 (PDT)
From: "Cowan"
To:
Subject: Design/Developer
Date: Tue, 23 Jul 2024 15:28:11 +0530
Message-ID: <66df01dadce7$9a13dcc0$ce3b9640$@in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_66E0_01DADD15.B3CC18C0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Adrc2iOPzKxdQGjQS6C8oGomoUFLkw==
Content-Language: en-in
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm reaching out to see if there is anything that would
like to create Shopify & Wordpress, upgrade, repair, or redesign on your
website or Mobile App. I am a web designer/developer that can do just about
anything you can imagine at very affordable prices.
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[209.85.167.194 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
[122.161.78.172 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[209.85.167.194 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
[122.161.78.172 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.194 listed in list.dnswl.org]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.167.194 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.194 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too
expensive
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 NO_RDNS2 Sending MTA has no reverse DNS
Subject: {SPAM?} Design/Developer
This is a multi-part message in MIME format.
------=_NextPart_000_66E0_01DADD15.B3CC18C0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hello,
I'm reaching out to see if there is anything that would like to create
Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile
App.
I am a web designer/developer that can do just about anything you can
imagine at very affordable prices.
Let me know what you think.
Please share your WhatsApp or Skype for quick conversations.
Kind Regards,
Cowan
------=_NextPart_000_66E0_01DADD15.B3CC18C0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
Hello,
class=3DMsoNoSpacing>
I'm =
reaching out to see if there is anything that would like to create =
Shopify & Wordpress, upgrade, repair, or redesign on your website or =
Mobile App.
class=3DMsoNoSpacing>I am a web designer/developer that can do just =
about anything you can imagine at very affordable prices.
class=3DMsoNoSpacing>
Let me =
know what you think.
class=3DMsoNoSpacing>Please share your WhatsApp or Skype for quick =
conversations.
class=3DMsoNoSpacing>Kind Regards,
class=3DMsoNormal>Cowan
------=_NextPart_000_66E0_01DADD15.B3CC18C0--