Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Oct 2024 06:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx3uo-00000000JZt-1gJe

for dave@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 06:29:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Oct 2024 06:29:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f194.google.com ([209.85.160.194]:60700)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx2hO-00000000HKB-0uvn

for root@nk.ca;

Sat, 05 Oct 2024 05:11:53 -0600

Received: by mail-qt1-f194.google.com with SMTP id d75a77b69052e-457ce5fda1aso24398211cf.1

for ; Sat, 05 Oct 2024 04:09:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ekcoder-com.20230601.gappssmtp.com; s=20230601; t=1728126592; x=1728731392; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=LQJaYSktq3Ko0Lx5Li+ztY4b001B9fv46eSuMhrllo8=;

b=rsOy2Rgw2X7LU9q8Jw1mPuxd1q0w9Xo9Yq+kny316NcHgZ1LD4cfUA9nOWGEXLsqHX

ZGTR9BARz2Q/VFZc6lxmXGzfwe6pVetpeqzrRgYJSuwWXLEwduY0vXaHJsVxvkGqthoU

gHx7cTT0ngwdtDiNYk6BT/NPzVrTtSKjr2BUrk/+P93eWpbAwNRpSojaVcJIKjeICGKF

WYsPUL80bG+WjV6Vq6amGKVVO0yltS+7Eo7T5nghgmL43QOUKEgL3H2EcCduvGUHn8Cp

IUrMuXYC721U/pRsfwQzJ/WAE39Jtd4RpfGKiq1C9F27ckZorL2oSYWxVpC+KKU7v5OF

khrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728126592; x=1728731392;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=LQJaYSktq3Ko0Lx5Li+ztY4b001B9fv46eSuMhrllo8=;

b=w+gcTcfk5xnZq+OMjLI+uuMVlxGgOQ8o7ytrQA9W7tju7arpnjJ/AKfAYzU09vDeAG

JevmQMY1Paqx2WVrhcSqpSrlioSDvEaPVQVJKHHO9PklZXj0YyqDVN/rH1cDdx6J18Qs

xf7f+IxCzhu1MUasn+XTEU9V1AaiUvy+8m+RPWFqLHfbJFST1tXgASsKjQuUGpBcbT+R

2xfffZJncuyTyQRMUS560ZvKM3KO/G5qI7VNI55X5T8f7ZagrrHJ+tB+hrqnxtK8F4yg

yhM5jwjBEstgh+sammTQdNO2PpgPN7ZWrVqbWNQLpMCRPOU/AqGxvAxbHUou8oVACd+z

drsg==

X-Gm-Message-State: AOJu0YwJGojMMMZx2LPbdnBYb+1igTEaihaBP8dEovHjzNd9Eiaz50y/

2YqmkzJ2jLlT5VhYeWNEg4AxEVS1X+S7F5sWM1jtZ5M8ml0u29EpeJBUaOMg6GKJ4HqkwQH9JbJ

aZb8=

X-Google-Smtp-Source: AGHT+IFO5Eqrkhyjdso+PO+RFtOZfBqSCLD2AWVanOEvkWytQ8rpzSgSGg6VMcIh+MPLq7gCTU4A9g==

X-Received: by 2002:a17:902:ccc1:b0:20b:951f:6dff with SMTP id d9443c01a7336-20bfd9987c4mr80768405ad.0.1728124535981;

Sat, 05 Oct 2024 03:35:35 -0700 (PDT)

Received: from Vikash ([122.161.78.35])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-20c138cbb45sm10917235ad.67.2024.10.05.03.35.34

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 05 Oct 2024 03:35:35 -0700 (PDT)

From: "Reyansh"

To:

Subject: Web-based app?

Date: Sat, 5 Oct 2024 15:56:07 +0530

Message-ID: <10acb01db1712$4e691000$eb3b3000$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_10ACC_01DB1740.68214C00"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdsW7nDNILLppXXoToO4YUt07wcwKw==

Content-Language: en-us

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, Greetings of the day! I am Reyansh, a mobile application

consultant, from an India-based web development agency. Are you interested

in building mobile apps for your business site?



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[122.161.78.35 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

[209.85.160.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.78.35 listed in dnsbl.ahbl.org]

[122.161.78.35 listed in dnsbl.ahbl.org]

[122.161.78.35 listed in dnsbl.ahbl.org]

[122.161.78.35 listed in dnsbl.ahbl.org]

[209.85.160.194 listed in dnsbl.ahbl.org]

[209.85.160.194 listed in dnsbl.ahbl.org]

[209.85.160.194 listed in dnsbl.ahbl.org]

[209.85.160.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.78.35 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.78.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.78.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.78.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.78.35 listed in sbl-xbl.spamhaus.org]

[122.161.78.35 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[122.161.78.35 listed in zen.spamhaus.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_FROM_SHORT No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.194 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.194 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Web-based app?



This is a multi-part message in MIME format.



------=_NextPart_000_10ACC_01DB1740.68214C00

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey,







Greetings of the day!







I am Reyansh, a mobile application consultant, from an India-based web

development agency. Are you interested in building mobile apps for your

business site?







I work with experienced IT Professionals (Team) who focus







I offer the following mobile application services.







A. Mobile apps for food ordering and delivery



B. Mobile applications related to the fitness and health sector



C. Mobile Online Taxi Reservations, School Bus and Vehicle Tracking Apps



D. Mobile educational applications and online education



E. Online shopping and mobile shopping cart management applications



F. Mobile applications for pharmacies and healthcare



G. Mobile apps for fashion and lifestyle



H. Employee tracking applications



I. Reservation requests for medical appointments



J. Applications for restaurants, shopping center parking and delivery

management, and much more..







Is there a chance that someone interests you? Please share what type of

application you are looking for for your business and I will be happy to

send you the technical proposal along with the time and effort required.







We are looking for your prompt and positive response.







Thank you!



Reyansh





------=_NextPart_000_10ACC_01DB1740.68214C00

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>Hey,=


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>Gree=

tings of the day!


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>I =

am Reyansh, a mobile application consultant, from an India-based =

web development agency. Are you interested in building mobile apps for =

your business site?


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>I =

work with experienced IT Professionals (Team) who focus


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>I =

offer the following mobile application services.


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>A. =

Mobile apps for food ordering and delivery


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>B. =

Mobile applications related to the fitness and health sector


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>C. =

Mobile Online Taxi Reservations, School Bus and Vehicle Tracking =

Apps


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>D. =

Mobile educational applications and online education


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>E. =

Online shopping and mobile shopping cart management applications


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>F. =

Mobile applications for pharmacies and healthcare


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>G. =

Mobile apps for fashion and lifestyle


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>H. =

Employee tracking applications


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>I. =

Reservation requests for medical appointments


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>J. =

Applications for restaurants, shopping center parking and delivery =

management, and much more….


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>Is =

there a chance that someone interests you? Please share what type of =

application you are looking for for your business and I will be happy to =

send you the technical proposal along with the time and effort =

required.


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>We =

are looking for your prompt and positive response.


class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>
> 


style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal'>Than=

k you!

Reyansh



------=_NextPart_000_10ACC_01DB1740.68214C00--

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Oct 2024 06:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx3uL-00000000JZO-3iRD

for dave@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 06:29:13 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Oct 2024 06:29:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f180.google.com ([209.85.166.180]:58524)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx0Mw-00000000CH4-0UUU

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 02:42:36 -0600

Received: by mail-il1-f180.google.com with SMTP id e9e14a558f8ab-3a34802247eso14848575ab.0

for ; Sat, 05 Oct 2024 01:40:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728117629; x=1728722429; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=yCfJAQEILLbuEnkqvj3B27pI41oGBIDaJmwc1NGZ/Sg=;

b=VrlCHiXJkUfncknZwxyWyT6M68D4+9zmB0dF0XOuWw+wvxYatKLJ9+nB/1xAmyr9YL

+LcC+n3CMj2R91VFMhoJaNOAabV0ZYSCK5YMKo8uzuEQOOjUE7/SFouqwBHNMqLX4h7A

5MeDUrjjeKMxWHx4dYGTkmhVzVZlaq5n9F0KjW+pTOKr7iZA3Z4N8s8EjRM3Oppynz3Z

Neug/Ipik8hjmE519fNpo0FjtmXYkferCtwOB5WzhoerYK1BkwnWEYf/qjihmGWw1s1J

u5jvW0lwfkaHX1z80eiSVire90WkmNYkWMsWHR+KqCB6SpJ9ecp9JicEncOl3wlueaZe

RPrg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728117629; x=1728722429;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=yCfJAQEILLbuEnkqvj3B27pI41oGBIDaJmwc1NGZ/Sg=;

b=D6TJozJwSnGIMTI2d7VmDnwC17yS0o5tL+LICxC7WB8EkTwMjcH8lgglJKfjEu2OIU

8z3uy6dr59BXfUOEs/axQ0CE2OJC1mYTXq2o+FykcP8Ea3vNhUGIBqPdjGK1eHFrZQdL

qRZICT9bJthswh2KcpttIhohVtidrljvhmWezRrKkDa8YPharin1nwYahm21C21j51wm

idK7DajocfoThaWst2c4/9jULa4U2RGgY/IQM2abkxUeq1GK8kx+yO2JTbKQgglOhoCp

IuUMBAUx9ne5e7L5BMj2P6r32dNoMf8Lvlhobg7E75sJ7ZdAw3LfJILOjjTVApeIIWXe

2BYg==

X-Forwarded-Encrypted: i=1; AJvYcCVKm9kiiSHGKDKBDd/vmVNHKitPb9p3Uo4DyOZDJMWU+6nlRR26iodCg0T4QsdZcpSyhQD9Y7M=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyZmCEa9cW3mmGLiw70LyyHD6SL2qnmTTL6ODrJT+bDXN7JADdC

cYqbkyagq8hMXaAZUoyq460CXp/t3sULJPHYgRhUWCAw6hX7LUWC8cfI1taJO+q8j/o7878d8cY

BwC30ReFCX/pAQF2Ofci0cN2J/yo=

X-Google-Smtp-Source: AGHT+IGdtgVb9BJDHJo09BbRkWR1/O7jfKfBgI3YGUtsezO0ocQVWbuR2rVIpS9WjCcxavtSg5OiVyqN+df80ILR8jk=

X-Received: by 2002:a05:6e02:16c9:b0:3a2:6ce9:19c6 with SMTP id

e9e14a558f8ab-3a375be2ec4mr44101735ab.25.1728117628540; Sat, 05 Oct 2024

01:40:28 -0700 (PDT)

MIME-Version: 1.0

Reply-To: juliannaxu5@gmail.com

From: Julianna Lambert

Date: Sat, 5 Oct 2024 09:40:16 +0100

Message-ID:

Subject: GREETINGS

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000061229e0623b6bd13"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- I am a 59 years old widow a deaf woman and also a cancer

patient I Have no child so I decided to donate whatI have to you for charity

works.I want to donate $12.5 million to you so that you will us [...]



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

[209.85.166.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.180 listed in dnsbl.ahbl.org]

[209.85.166.180 listed in dnsbl.ahbl.org]

[209.85.166.180 listed in dnsbl.ahbl.org]

[209.85.166.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.180 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.180 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.180 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[melaniechristine225(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[melaniechristine225(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[juliannaxu5(at)gmail.com]

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} GREETINGS



--00000000000061229e0623b6bd13

Content-Type: text/plain; charset="UTF-8"



--

I am a 59 years old widow a deaf woman

and also a cancer patient I Have no child so I decided to donate whatI

have to you for charity works.I want to donate $12.5 million to you so

that you will use part of this fund to help the poor ones,while you use

the rest for your family this is my last wish. Respond now for more

details



Mrs.Julianna Lambert



--00000000000061229e0623b6bd13

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






x">--

=3D"gmail_signature">
I am a 59 years old widow a deaf woma=

n
and also a cancer patient I Have no child so I decided to donate whatI=


have to you for charity works.I want to donate $12.5 million to you so<=

br>that you will use part of this fund to help the poor ones,while you use<=

br>the rest for your family this is my last wish. Respond now for more
d=

etails

Mrs.Julianna Lambert




--00000000000061229e0623b6bd13--

Chinese products spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Oct 2024 06:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx3ut-00000000Ja0-2CXn

for dave@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 06:29:47 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Oct 2024 06:29:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f177.google.com ([209.85.215.177]:43140)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from <98@9pz.org>)

id 1sx2H4-00000000GUB-0p3Y

for sales@nk.ca;

Sat, 05 Oct 2024 04:44:49 -0600

Received: by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-7db90a28cf6so2689264a12.0

for ; Sat, 05 Oct 2024 03:42:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=9pz-org.20230601.gappssmtp.com; s=20230601; t=1728124956; x=1728729756; darn=nk.ca;

h=content-transfer-encoding:mime-version:date:subject:to:from

:reply-to:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=FkpDoW0RTdsgBU5YWYSxvkhwRkiBOxTvn30qOFqR7hc=;

b=hfDUy+j9r80q1/HV6KgLf6+LZqzGHlA4GO6OUG6X2M7yVlgSxhkUVYZulRH78hpj09

gCkh21qk26qRRCoL0ndMoDJNYGiPRSYEAWmxljcXVVq+Js4K75nJn2ceDGkd51ENfm/Z

OEv98NsN78psE4CuOgduhyDTF53IxnDWoNE+BDOHs7Jrj+PrIhxQtlIyyjjze35UUFds

7oPxDM0wLvuv/HgU/vV/O1LtPOA6uqyjng0WIusN+Jg2HxkbmnLB1TkB+j1kI0GEwXn5

kvA2rskZN0Fa589q92J17cMyhxvtoeAPzaIbLhc1okGAi7wjCzdkIvSUC9v+3Kp4AtbA

IN7w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728124956; x=1728729756;

h=content-transfer-encoding:mime-version:date:subject:to:from

:reply-to:message-id:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=FkpDoW0RTdsgBU5YWYSxvkhwRkiBOxTvn30qOFqR7hc=;

b=qd6Z00/5eS5eb0VLz7WTNS9YobDxj6eK7tgImdt+mjxlBL0O9WmjeJGeOUu0x8AS4z

D6E8fn8Uno7AgS03KUyb0jM6Y0KLppON80MMxMm9+Gm1m64YhJVsoWdO/Cftk2KnQFJy

7lLnToOeAI3K8UoFESNr48Y2W+ezvaonYA3oY3hqG3UPRuwn1V2J/WC8qjlGYRqRyom/

hmGHlOWjMxMbEzlrHKwoSfd4BbdjUOky4hBewn9iNvnAwIxUEemTYSejaNdQ0In5BGFE

TUNTaiYzfE2Is2nJnW/eDSPPJWDXIEoTiMIgBpJrmkAbxohgILfZ+FCtUCUSCuZfENO3

WSKg==

X-Gm-Message-State: AOJu0Yy9OhhHJund6e7SPBkP/wbFcz93C4Bpbc7udZPS5+PbA4HWEojf

S/R2PfXjlP5k9FS2A1cor6zmi/7e2PEGlGCIhSjcdSsRubHxVSW5FFnHe86sZhh3UJ9Iz4Xr9tg

C

X-Google-Smtp-Source: AGHT+IGaOGYqzkdfZ3KPEMN05ekFDHNbkYwbBiopciu2veKYD6u6P0p/NbeTjQqoqLFCxa84c7hfsg==

X-Received: by 2002:a17:902:d2ca:b0:206:9dfb:3e9e with SMTP id d9443c01a7336-20be189892dmr129346955ad.10.1728124955909;

Sat, 05 Oct 2024 03:42:35 -0700 (PDT)

Received: from ldyjufgqcp.fr ([2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-20c138afaa0sm11175845ad.4.2024.10.05.03.42.34

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 05 Oct 2024 03:42:35 -0700 (PDT)

Message-ID: <44590c43d563dbe39c0326241d632caf@9pz.org>

Reply-To: tony@plastic-mouldings.top

From: Blakelee <98@9pz.org>

To: sales

Subject: Re: Toolmaking in China

Date: Sat, 05 Oct 2024 18:42:34 +0800

X-Priority: 3

X-Mailer: Mszbexwha Mauorznsd 2.6

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: sales, Hope you enjoy your day.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

[209.85.215.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

[209.85.215.177 listed in dnsbl.ahbl.org]

[209.85.215.177 listed in dnsbl.ahbl.org]

[209.85.215.177 listed in dnsbl.ahbl.org]

[209.85.215.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2409:8a60:1913:c3f1:5cd9:89ce:1918:47ff listed]

[in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.177 listed in list.dnswl.org]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.177 listed in wl.mailspike.net]

1.0 MONOTONE_WORDS_15_2 BODY: Many lowercase words (15+ words, 2+

letters)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Toolmaking in China



=0D=0A
mlns:o>=0D=0A
=3DContent-Type>=0D=0A
1001">=0D=0A=0D=0A

sales,=

=0D=0A


0cm; LINE-HEIGHT: normal; font-variant-numeric: normal; font-variant-east-=

asian: normal; font-stretch: normal">
=3DCalibri>Hope you enjoy your day.

=0D=0A


mal =0D=0Astyle=3D"WIDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-va=

riant-numeric: normal; font-variant-east-asian: normal; font-stretch: norma=

l"> 

=0D=

=0A


GHT: normal; font-variant-numeric: normal; font-variant-east-asian: normal;=

font-stretch: normal">Tool=

making in China

=0D=0A


IDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: norma=

l; font-variant-east-asian: normal; font-stretch: normal">
color=3D#0000ff face=3DCalibri> 

=0D=0A


ormal =0D=0Astyle=3D"WIDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-=

variant-numeric: normal; font-variant-east-asian: normal; font-stretch: nor=

mal">We also can do.
o:p>

=0D=0A


m; LINE-HEIGHT: normal; font-variant-numeric: normal; font-variant-east-asi=

an: normal; font-stretch: normal">
i>++METAL stamping-EXTRUDING-VACUUM forming-BLOW molding-DIE casting/CNC pa=

rts

=0D=0A


0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: normal; font-variant-ea=

st-asian: normal; font-stretch: normal">
ibri> 


3 face=3DCalibri>=0D=0A


x; FONT-FAMILY: "Microsoft YaHei UI", Tahoma; WHITE-SPACE: normal; WORD-SPA=

CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: =

rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norm=

al; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; t=

ext-decoration-style: initial; text-decoration-color: initial'>
color=3Dgreen size=3D3 face=3DCalibri>If you have any need for our services=

we would =0D=0Aappreciate the opportunity to help.

=0D=0A


=0Astyle=3D'FONT-SIZE: 14px; MARGIN-BOTTOM: 0px; FONT-FAMILY: "Microsoft Ya=

Hei UI", Tahoma; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; T=

EXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: norma=

l; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255=

,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-style: initial=

; text-decoration-color: initial'>
=3DCalibri>Not only do I have experience in toolmaking =0D=0A& tool des=

ign,

=0D=0A


FONT-FAMILY: "Microsoft YaHei UI", Tahoma; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rg=

b(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal=

; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-style: initial; text-decoration-color: initial'>
lor=3Dgreen size=3D3 face=3DCalibri>my years of experience also allow me to=

=0D=0Aeffectively manage and track projects for you as well.


ONT>=0D=0A


0cm; LINE-HEIGHT: normal; font-variant-numeric: normal; font-variant-east-=

asian: normal; font-stretch: normal">
Calibri> 

=0D=0A


DOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: normal=

; font-variant-east-asian: normal; font-stretch: normal">
olor=3Dblack face=3DCalibri>Best regards

=0D=0A


soNormal =0D=0Astyle=3D"WIDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; fo=

nt-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: =

normal"> 
P>=0D=0A


E-HEIGHT: normal; font-variant-numeric: normal; font-variant-east-asian: no=

rmal; font-stretch: normal">S=

alesManager

=0D=0A


S: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: normal; f=

ont-variant-east-asian: normal; font-stretch: normal">
=3DCalibri>Tony

=0D=0A


IDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: norma=

l; font-variant-east-asian: normal; font-stretch: normal">
color=3Dblack face=3DCalibri> 

=0D=0A


mal =0D=0Astyle=3D"WIDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-va=

riant-numeric: normal; font-variant-east-asian: normal; font-stretch: norma=

l"> 

=0D=

=0A


GHT: normal; font-variant-numeric: normal; font-variant-east-asian: normal;=

font-stretch: normal">2024-1=

0-05

=0D=0A


ARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-numeric: normal; font-var=

iant-east-asian: normal; font-stretch: normal">
ck face=3DCalibri>18:42:34

=0D=0A


=0Astyle=3D"WIDOWS: 1; MARGIN: 0px 0cm; LINE-HEIGHT: normal; font-variant-n=

umeric: normal; font-variant-east-asian: normal; font-stretch: normal">
>12-2nd


TML>=0D=0A

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Oct 2024 06:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx3ta-00000000JWn-08bp

for dave@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 06:28:26 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Oct 2024 06:28:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f199.google.com ([209.85.160.199]:56445)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1swxzi-000000006Rz-2ag6

for sales@nk.ca;

Sat, 05 Oct 2024 00:10:29 -0600

Received: by mail-qt1-f199.google.com with SMTP id d75a77b69052e-4582182b6afso55289861cf.0

for ; Fri, 04 Oct 2024 23:08:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728108503; x=1728713303; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=JKD++bRLyz3eO234pPJBW8h0tRYwGOOAJUxJNMba9W8=;

b=Yz6G9tFe2NK4kNN7LBof/vzw0/i7jalkYYXuHdkRfKy1ZQEB92vGUx0CbCdSqTuFzn

wN5XGQr6HJVNZFoiLPPGAVdkEXz0VqaWDz7G8faSbAVQ0ag50xQpzKaqhXhHH9QODdNA

5yJzZ99OzVZCp4NXHuLPVbECL9Q5abiCkGfjccJbCmxxzpGgEPgAp0iIYa3q5eWAV3l/

f1iFSKZf7KE+8HNp3brxacllj24IHp5BFrzK6WqgqqbNyO2ziGEhhC7bmxyuzNoN/OhO

FQ603Zpff6NyRe40wMI8DbEBJn+w9Epl7rMkzIvSWQadfm1Mck01p1v3Ats+bpAAZrQn

pPAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728108503; x=1728713303;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=JKD++bRLyz3eO234pPJBW8h0tRYwGOOAJUxJNMba9W8=;

b=fRkakvQwyokqjqq7sD98fORBs9gt2nFhB1yh3iSBKmvsxQ4YnWS0LKE0TPWh9OJqh2

8+OHoJIyC5jS9I2AGTjEdznZo/jTvDBSinn7Vh4DULphFl13egn3kShTFkgFFR0xRWBn

RMihPP6dXazmOYXYDy4PmlhheqAKFn1oq6ribnhAYmo1mIAwYlxGjazrR9vWIJiXstfX

x3gDjZLQ82PfLuISu8/PvtLUvMl3Y0hIQcV5QjVxA+CB4iV2DSyNgjBVsdg//Wk6H8tv

mCSBe8rn/UJDNheM9bRrnIfURy+6uehcN6YtbKjcV6x5aXOZIooWZhow0TOct+sbeuXu

59zQ==

X-Gm-Message-State: AOJu0YxnorOVqbYxZEOgv4clfPG4fbcxu+gEMx/B0FSeveuwAS53gKdF

6SdUqi9wPGx7TBsNVnvq4+mSPmtxzHdjehpRXBL8JrUX/hVm9rCwo2jMfTe44+m0uEFy4l5d6Rc

=

X-Google-Smtp-Source: AGHT+IERxzbLDa0pan6KMoNZ9nf8mjeJ5YVvjI+VqHmh9ZuM6T5cRnbbK3YcDpcJBjAXwldzO61p7Om2Zg==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:3c87:b0:2da:905a:d893 with SMTP id

98e67ed59e1d1-2e1e636c83dmr5175520a91.31.1728082538845; Fri, 04 Oct 2024

15:55:38 -0700 (PDT)

Message-ID:

Date: Fri, 04 Oct 2024 22:55:38 +0000

Subject: daveyadallee, Get More Instagram Followers and Reels Views here

From: ramsingh9936531925@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello daveyadallee, Do you want to get more followers on Instagram

We found your email on your Instagram Account @daveyadallee and you have

about a limited Followers. Our company offers Buy Instagram Followers services.

This is the best way to gain more followers fast and easily.



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

[209.85.160.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.199 listed in dnsbl.ahbl.org]

[209.85.160.199 listed in dnsbl.ahbl.org]

[209.85.160.199 listed in dnsbl.ahbl.org]

[209.85.160.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.199 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.199 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.199 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ramsingh9936531925(at)gmail.com]

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ramsingh9936531925(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} daveyadallee, Get More Instagram Followers and Reels Views here



Hello daveyadallee,



Do you want to get more followers on Instagram

We found your email on your Instagram Account @daveyadallee and you have

about a limited Followers.



Our company offers Buy Instagram Followers services.

This is the best way to gain more followers fast and easily.



Our price:



Buy 1,000 Instagram Followers: $29 USD

Buy 2,000 Instagram Followers: $39 USD



We can add up to 1 Million Followers.



Buy Instagram Followers can help attract thousands of followers that you

can keep informed about any of your product or service offerings instantly.

Branding is also another successful, important marketing factor that

Instagram can provide for your business.



We also have other services like YouTube, TikTok, Threads, and Twitter.



See all packages here: https://resocial.shop/





Thank you,







Best regards,

General Marketing,

Instasocial Corp.

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Oct 2024 02:37:00 -0600

Received: from mail-lf1-f67.google.com ([209.85.167.67]:44436)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sx0H7-00000000C1P-05BF

for dave@doctor.nl2k.ab.ca;

Sat, 05 Oct 2024 02:36:39 -0600

Received: by mail-lf1-f67.google.com with SMTP id 2adb3069b0e04-5398df2c871so3165544e87.1

for ; Sat, 05 Oct 2024 01:34:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728117265; x=1728722065; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=i7e5GLf+mef1gGrNGUZYpZntFhp1v4FogdxHZmoEpR4=;

b=SARg+FN+e3g2y079r0nvLZv6w2GI8Z7j7RA1nSk8oZ3/J/Abcn+rzt+JtQ2COBVZlR

6XwHVdh6Y4+2CaQMXw9A5jgfBDEQ7dbvcpG+YlnNRacffYDTfkJ/Ri5Qd1ExXEzPhPJB

xVPX7a1ZcwuLHpQ/fLg84Uy+8jn734HDVmE0udvt657FL0I7nPWn4iaW1k3ml/j8IDnu

5DlgdxqI9/s/PqU1wWnqDbK9Z59WoifvqGXsSV7GEW4EkOh+IepXJRI8uVxe6rslhhg8

MOWhzaLmnTjx1lpEVsIqbEAV3oKOrxqoejgoESfjSg9tBbPVWyxpPqeD+Ma9sd0VUDFI

SR1A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728117265; x=1728722065;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=i7e5GLf+mef1gGrNGUZYpZntFhp1v4FogdxHZmoEpR4=;

b=doTiI6ymYsuY/lVQ664YtaPVwXeRC9fa0z8cRB8lfZfccEYOdUs81QeNvSz56KtNxT

g41vlFyUcfORtAYtvZ5ivraPrAFZz3DNyxb67RMhEjmtrJn1EJYqpcgwaNhNPbPyR2EM

yuhablDAYAygkGPbcG5m5fyXGiwqnWDAxdi9d4aM/T4gXlK/CmsKKYHJ0bLRZma+NXh8

4o354fHPEgFNq1aGPZWuJpG9xxjzPu6EYslZ1nXsCgDOHORVjqdDDRbd3lKirkHQ3uJK

xTQPnejwifhB35nERR0FVketMKVNpyElZsuGtjqnYSIFp9CHqC7iBkRiDijkdycYNJFV

+6Ew==

X-Forwarded-Encrypted: i=1; AJvYcCXcV4/noGoHtYpVnyIIEiKdoRcYjR+6QFJ7KCb7aB5s88Ng3VB2yYiG6sX1ozxEAtg5sY6j@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwCg7GmwtGno6FCHppW7pAFnco68unZrBUThWs+zBoPN4+dP+Dp

BLcq72On6w+FPUwtO15bHCC+i1VHbMMyl7tx72zoB6l0u1qE0ozvvM2D0jDxofmW3vWcr5geNNC

J49Sn7lr7BSM4IBWwxII2pDXTv/8=

X-Google-Smtp-Source: AGHT+IHeZ19VDBVNrTlzJfQhw3U81L38aTq1ZkLdzlzmX+oyfGGhDnQ19xtIwl4tVPRPJBM4QK+FRc6UqFGtAevBbZg=

X-Received: by 2002:a05:6512:2313:b0:539:8c02:64d5 with SMTP id

2adb3069b0e04-539ab873368mr3134426e87.27.1728117264422; Sat, 05 Oct 2024

01:34:24 -0700 (PDT)

MIME-Version: 1.0

Reply-To: juliannaxu5@gmail.com

From: Julianna Lambert

Date: Sat, 5 Oct 2024 09:34:13 +0100

Message-ID:

Subject: Greetings

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ad22770623b6a7fc"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- I am a 59 years old widow a deaf woman and also a cancer

patient I Have no child so I decided to donate whatI have to you for charity

works.I want to donate $12.5 million to you so that you will us [...]



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.67 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[elenem878(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[elenem878(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[juliannaxu5(at)gmail.com]

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings



--000000000000ad22770623b6a7fc

Content-Type: text/plain; charset="UTF-8"



--

I am a 59 years old widow a deaf woman

and also a cancer patient I Have no child so I decided to donate whatI

have to you for charity works.I want to donate $12.5 million to you so

that you will use part of this fund to help the poor ones,while you use

the rest for your family this is my last wish. Respond now for more

details



Mrs.Julianna Lambert



--000000000000ad22770623b6a7fc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






x">--

=3D"gmail_signature">
I am a 59 years old widow a deaf woma=

n
and also a cancer patient I Have no child so I decided to donate whatI=


have to you for charity works.I want to donate $12.5 million to you so<=

br>that you will use part of this fund to help the poor ones,while you use<=

br>the rest for your family this is my last wish. Respond now for more
d=

etails

Mrs.Julianna Lambert




--000000000000ad22770623b6a7fc--