Web / SEO/ App spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 Sep 2024 08:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1slqne-00000000Emw-3Yjn
for dave@doctor.nl2k.ab.ca;
Wed, 04 Sep 2024 08:15:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 4 Sep 2024 08:15:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f196.google.com ([209.85.219.196]:45319)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sloqf-00000000Oyj-2lrf
for sales@nk.ca;
Wed, 04 Sep 2024 06:11:03 -0600
Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-e0b7efa1c1bso817046276.3
for; Wed, 04 Sep 2024 05:09:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1725451743; x=1726056543; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;
b=CixqJLnidGiOB3BC6zYrIH8X6bSJscvbZA3OsU8q3kuG6uZwjxHXp0MaPp7LMC7aE8
gJO1PkYD9tdosB6zZGCU2V/gLl6yLvFVsdkR7Ve9WGDcfqv8m29EXVRF7O8GjYUFoWbl
WkYa+QQrhxiQYTnf4xgVkUmLeV5RZwi6Y84V5JxXbMWebgJvulckPDJ53D4yHzTunHhx
cL0BpkAbKE7Royllo0EwOEl9nmjN+SZOyU0zhG8iiPe3jWQAIq5lm3sGntyng+jLRPP0
fZ4XJVTncIvDOsJC5q+8SOs/Ae80EzC9NneK1/vP11YAMp4Tz7hVp0p/MBpdTxBV2V3r
ivxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1725451743; x=1726056543;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;
b=fD/a+TZNcSKLM+wl0ZM3LlhlsnenlMNTLeds42L5LK1B0mb+CFbdMUCbRI9QzzxQwA
bKE72ys1opeTc6TrS7uKavMMvs4GVScls6KOSxPNuxBZaS5F0bgIy2Vd1K90HD/UAT9E
lJQzn9YbAv7Mw99Y7xAvB+mC6KDh0TiboPACFlfY/STDD6aggwokOMimKtaca6hKrGdI
bv7wCluu9pBB9RDcIlyuGZlPLaD6qu0VuTxD79BsVVpsODjjaoeYGpoKeJVLLmMOp56V
JkUfNO3UqanXim3Mi9jwuRWP0/WLIt+/bn5M1DE8QP4l76UxYP6ZXAr+xiS4EQvaQ5Qw
/vzg==
X-Gm-Message-State: AOJu0YyiIPrEB2YtTFfER0mhbKJT60nHdgUGDQZ+99szLj8YcjeFp+sw
L20v0kEKBL6MO5B19l0vOp8vi2Zp+s53F8iE9IelHBQ1Ti25hhXMTtyRnPmiDpHHQmAQNdnrcr9
IqZMjjJmePnewA8UeiY39/az4OBeHtlBe
X-Google-Smtp-Source: AGHT+IFlyVUgJJLhR5ZzgDQXja7yZvZkZQ1Jp7LCyMICPpCZCWbbsiiAjC4QbvG+3Ue7DlLV3qx121RnWthKGOx1KXM=
X-Received: by 2002:a05:690c:fc5:b0:63b:f919:2e89 with SMTP id
00721157ae682-6db234a4282mr23445067b3.2.1725451743142; Wed, 04 Sep 2024
05:09:03 -0700 (PDT)
Received: from 1030813660740 named unknown by gmailapi.google.com with
HTTPREST; Wed, 4 Sep 2024 05:09:01 -0700
MIME-Version: 1.0
Sender: Taylor Stuart
From: Taylor Stuart
Date: Wed, 4 Sep 2024 05:09:01 -0700
X-Google-Sender-Auth: JrdIlUOkmRyUaPIwkNFZyyDnN38
Message-ID:
Subject: Ammundsenhomecare.Com, Gain Customers on Autopilot
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="0000000000003a2de006214a0a73"
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey Ammundsenhomecare Team, I hope you are having a good day,
Imagine walking into a bustling market where everyone's glued to their phones.
That's how the online world works currently. Businesses with outdated strategies
are getting lost in the noise.
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.196 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[taylor.stuart7709807(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[taylor.stuart7709807(at)gmail.com]
1.0 OPT_OUT BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} Ammundsenhomecare.Com, Gain Customers on Autopilot
--0000000000003a2de006214a0a73
Content-Type: text/plain; charset="UTF-8"
Hey Ammundsenhomecare Team,
I hope you are having a good day,
Imagine walking into a bustling market where everyone's glued to their
phones. That's how the online world works currently. Businesses with
outdated strategies are getting lost in the noise.
It doesn't have to be you!
We're a team of digital professionals helping businesses dominate their
market.
Our secret weapons for your online boom:
- Engaging, impactful content
- Protecting online Reputation with vigilance
- Turning visitors into customers
- Targeting Local Optimization
Claim your NO-FEE website fix-it kit and growth plan by replying to this
email!
Don't miss your moment to dominate online.
Taylor Stuart
Relationship Manager
------------------------
PS: Suggest to Opt out.
--0000000000003a2de006214a0a73
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
in 0.0001pt">
rif">=C2=A0
style=3D"margin:0in 0in 0.0001pt">
nt-weight:normal">=C2=A0
strong>
in 0.0001pt">
t face=3D"verdana, sans-serif">=C2=A0
"margin:0in 0in 0.0001pt">
lang=3D"EN-IN" style=3D"">Our secret weapons for your online
boom:
=3D"margin-top:0in;margin-bottom:0in" type=3D"disc">
-IN" style=3D"">Engaging,
impactful content
-IN" style=3D"">Protecting
online Reputation with vigilance
-IN" style=3D"">Turning
visitors into customers
-IN" style=3D"">Targeting Local
Optimization
n:0in 0in 0.0001pt">
sans-serif">Claim your NO-FEE website fix-it kit and growth
plan by replying to this email!
n 0.0001pt">
if">=C2=A0
--0000000000003a2de006214a0a73--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 Sep 2024 08:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1slqne-00000000Emw-3Yjn
for dave@doctor.nl2k.ab.ca;
Wed, 04 Sep 2024 08:15:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 4 Sep 2024 08:15:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f196.google.com ([209.85.219.196]:45319)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sloqf-00000000Oyj-2lrf
for sales@nk.ca;
Wed, 04 Sep 2024 06:11:03 -0600
Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-e0b7efa1c1bso817046276.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1725451743; x=1726056543; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;
b=CixqJLnidGiOB3BC6zYrIH8X6bSJscvbZA3OsU8q3kuG6uZwjxHXp0MaPp7LMC7aE8
gJO1PkYD9tdosB6zZGCU2V/gLl6yLvFVsdkR7Ve9WGDcfqv8m29EXVRF7O8GjYUFoWbl
WkYa+QQrhxiQYTnf4xgVkUmLeV5RZwi6Y84V5JxXbMWebgJvulckPDJ53D4yHzTunHhx
cL0BpkAbKE7Royllo0EwOEl9nmjN+SZOyU0zhG8iiPe3jWQAIq5lm3sGntyng+jLRPP0
fZ4XJVTncIvDOsJC5q+8SOs/Ae80EzC9NneK1/vP11YAMp4Tz7hVp0p/MBpdTxBV2V3r
ivxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1725451743; x=1726056543;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;
b=fD/a+TZNcSKLM+wl0ZM3LlhlsnenlMNTLeds42L5LK1B0mb+CFbdMUCbRI9QzzxQwA
bKE72ys1opeTc6TrS7uKavMMvs4GVScls6KOSxPNuxBZaS5F0bgIy2Vd1K90HD/UAT9E
lJQzn9YbAv7Mw99Y7xAvB+mC6KDh0TiboPACFlfY/STDD6aggwokOMimKtaca6hKrGdI
bv7wCluu9pBB9RDcIlyuGZlPLaD6qu0VuTxD79BsVVpsODjjaoeYGpoKeJVLLmMOp56V
JkUfNO3UqanXim3Mi9jwuRWP0/WLIt+/bn5M1DE8QP4l76UxYP6ZXAr+xiS4EQvaQ5Qw
/vzg==
X-Gm-Message-State: AOJu0YyiIPrEB2YtTFfER0mhbKJT60nHdgUGDQZ+99szLj8YcjeFp+sw
L20v0kEKBL6MO5B19l0vOp8vi2Zp+s53F8iE9IelHBQ1Ti25hhXMTtyRnPmiDpHHQmAQNdnrcr9
IqZMjjJmePnewA8UeiY39/az4OBeHtlBe
X-Google-Smtp-Source: AGHT+IFlyVUgJJLhR5ZzgDQXja7yZvZkZQ1Jp7LCyMICPpCZCWbbsiiAjC4QbvG+3Ue7DlLV3qx121RnWthKGOx1KXM=
X-Received: by 2002:a05:690c:fc5:b0:63b:f919:2e89 with SMTP id
00721157ae682-6db234a4282mr23445067b3.2.1725451743142; Wed, 04 Sep 2024
05:09:03 -0700 (PDT)
Received: from 1030813660740 named unknown by gmailapi.google.com with
HTTPREST; Wed, 4 Sep 2024 05:09:01 -0700
MIME-Version: 1.0
Sender: Taylor Stuart
From: Taylor Stuart
Date: Wed, 4 Sep 2024 05:09:01 -0700
X-Google-Sender-Auth: JrdIlUOkmRyUaPIwkNFZyyDnN38
Message-ID:
Subject: Ammundsenhomecare.Com, Gain Customers on Autopilot
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="0000000000003a2de006214a0a73"
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey Ammundsenhomecare Team, I hope you are having a good day,
Imagine walking into a bustling market where everyone's glued to their phones.
That's how the online world works currently. Businesses with outdated strategies
are getting lost in the noise.
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
[209.85.219.196 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
[209.85.219.196 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.219.196 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.196 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[taylor.stuart7709807(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[taylor.stuart7709807(at)gmail.com]
1.0 OPT_OUT BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} Ammundsenhomecare.Com, Gain Customers on Autopilot
--0000000000003a2de006214a0a73
Content-Type: text/plain; charset="UTF-8"
Hey Ammundsenhomecare Team,
I hope you are having a good day,
Imagine walking into a bustling market where everyone's glued to their
phones. That's how the online world works currently. Businesses with
outdated strategies are getting lost in the noise.
It doesn't have to be you!
We're a team of digital professionals helping businesses dominate their
market.
Our secret weapons for your online boom:
- Engaging, impactful content
- Protecting online Reputation with vigilance
- Turning visitors into customers
- Targeting Local Optimization
Claim your NO-FEE website fix-it kit and growth plan by replying to this
email!
Don't miss your moment to dominate online.
Taylor Stuart
Relationship Manager
------------------------
PS: Suggest to Opt out.
--0000000000003a2de006214a0a73
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
face=3D"verdana, sans-serif" style=3D"">Hey Ammundsenhomecare Team,<=
/span>
=3D"">
I hope you are having a good day,
in 0.0001pt">
rif">=C2=A0
g=3D"EN-IN" style=3D"">Imagine walking i=
nto a bustling market where
everyone's glued to their phones. That's how the online world works=
currently. Businesses
with outdated strategies are getting lost in the noise.
style=3D"margin:0in 0in 0.0001pt">
nt-weight:normal">=C2=A0
strong>
-serif">It doesn't have to be y=
ou!
">
g=3D"EN-IN" style=3D"">=C2=A0
an>
>We're a team of digital professiona=
ls helping
businesses dominate their market.
in 0.0001pt">
t face=3D"verdana, sans-serif">=C2=A0
"margin:0in 0in 0.0001pt">
lang=3D"EN-IN" style=3D"">Our secret weapons for your online
boom:
=3D"margin-top:0in;margin-bottom:0in" type=3D"disc">
-IN" style=3D"">Engaging,
impactful content
-IN" style=3D"">Protecting
online Reputation with vigilance
-IN" style=3D"">Turning
visitors into customers
-IN" style=3D"">Targeting Local
Optimization
<=
font face=3D"verdana, sans-serif">=C2=A0
n:0in 0in 0.0001pt">
sans-serif">Claim your NO-FEE website fix-it kit and growth
plan by replying to this email!
n 0.0001pt">
if">=C2=A0
verdana, sans-serif" style=3D"">Don't m=
iss your moment
to dominate online.
Taylor Stuart
Relationship Manager
------------------------
PS: Suggest to Opt out.
--0000000000003a2de006214a0a73--