Web / SEO/ App spam from Microsoft Outlook
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 13 Jun 2024 10:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sHnQE-00000000AzV-0psN
for dave@doctor.nl2k.ab.ca;
Thu, 13 Jun 2024 10:35:34 -0600
Resent-From: The Doctor
Resent-Date: Thu, 13 Jun 2024 10:35:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-tyzapc01olkn2087.outbound.protection.outlook.com ([40.92.107.87]:48878 helo=APC01-TYZ-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sHkuj-00000000436-3y5I
for root@nk.ca;
Thu, 13 Jun 2024 07:54:59 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=nMSV6WGeWv89dcV4xITISkmil40Qhf5mMX9D5/mNlzIiFw94jJcVfTYQA33dJDZJD+zM75sBmBjJPk1SgGzNjvN72PwcB302kdSl9w7JGbQ24y9mKYccohgPRBeJuSD5y6UM+6zY+Rj9LRTkF8xCvB754YwZPOAONVrXfyCl/iAGHoznt6Y+/7Y7Q3oox5+0VvYM4K+py1Z7ZtIf5aJQuiBF3cTSP6SR9CGyNsXyH372WEstjubC0P+4dz/86VHIc+TKZhO4Iz74L1pAzxMOYMtN5Quh8n9DaF2okGxLVqJdAmmHHRyd8BeqtTL90sm5pXD/LMek4+SyByGX4Qb5zw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=S0xQ6RF8ZmFYf8DlVh0lJb+dREAFeh1FvV7zseomXyM=;
b=cH9/bhKJ8+jRck8shSdQVOgfnE/KxS1cJ0A9W3camqoayU2OVW1QwwhVjXGe1E6cuBg/hnTBLlG9NW4xtyxG60vl5UrUOWnrBQbrVFMp8krgk75x0eNByEP1sW5O2JXBpXFTrYeoqj0mGCkHR1E0/bF3ArUYgg8WyFV864rdV9jrS2PVIUrUDJsaOOljiPCJaJ8hTl50zV8heAZAE/gbk+pmUU+UnedhWeZUn8O6Pt5CEkH6b+dpHK2mhR+KFOYnqTadndQ22OAsQYzHwnXK6Ecaq7+gAVDdDNwMOf3Ucuf/0I1a5vAmKVWRb3HsfpcYvcxmRCoUGhykNvaWfV3/xg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=S0xQ6RF8ZmFYf8DlVh0lJb+dREAFeh1FvV7zseomXyM=;
b=Ok2cLCab9CvWXYMvT8dxlQa+DE6j13FN2XuErckmPQPB4hIxhqGdMZN5GtaoFbgdh+VLep03vcG+gCm75Zy0feBtL9bTnu90J3DFmAMTp8Qo58qMKQirWQJPgkPKMSunZEnlhziYyiDB944MHcDwbahjCHpOtG5M/bdlh1DhnGubd6FujetYad565IQBYXs3kUCVhv13j0pVfqlG8BF8LbjqpKS8ioo1W/s1tcf52fExx/nJXyGH/aZN+Zcw6txkUZ/82K2L85LhIFvOy60vlxeu++7ZOYtkhJe8PQKwPpvIfvl3EdEsHZa5cMly49TjuCuprZNAfssYs85spUP5mQ==
Received: from SI2PR01MB4225.apcprd01.prod.exchangelabs.com
(2603:1096:4:1a9::10) by TY0PR0101MB4964.apcprd01.prod.exchangelabs.com
(2603:1096:400:27f::8) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7677.25; Thu, 13 Jun
2024 13:51:40 +0000
Received: from SI2PR01MB4225.apcprd01.prod.exchangelabs.com
([fe80::f382:414:19cc:da50]) by SI2PR01MB4225.apcprd01.prod.exchangelabs.com
([fe80::f382:414:19cc:da50%4]) with mapi id 15.20.7677.024; Thu, 13 Jun 2024
13:51:40 +0000
Reply-To:
From: "Amy Smith"
To: "Amy Smith"
Subject: Don't miss out!
Date: Thu, 13 Jun 2024 19:20:38 +0530
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01DABDC6.E77045C0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Adq9Zre1J/gdJxlfSwmyqZFXRzrBaw==
Content-Language: en-in
X-TMN:
[N/OF0rhYklLdaNb9Fby7SoLsFTzLhvHTIY5b1Tc2beMDT9X/GGh5jLRVzM4IaixCRI6yc/hvBdU=]
X-ClientProxiedBy: PN0PR01CA0025.INDPRD01.PROD.OUTLOOK.COM
(2603:1096:c01:4e::13) To SI2PR01MB4225.apcprd01.prod.exchangelabs.com
(2603:1096:4:1a9::10)
X-Microsoft-Original-Message-ID:
<006901dabd98$cdb809c0$69281d40$@Web.seo87@hotmail.com>
Importance: high
X-Priority: 1
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SI2PR01MB4225:EE_|TY0PR0101MB4964:EE_
X-MS-Office365-Filtering-Correlation-Id: 5d9d6e7e-e2c4-41e8-d5e5-08dc8baff0ca
X-Microsoft-Antispam:
BCL:0;ARA:14566002|461199023|3412199020|440099023|1710799023;
X-Microsoft-Antispam-Message-Info:
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
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?us-ascii?Q?cJ8uWlC5AOr3yYhMxQ8VGEDG8FXVS0kIXD7P6IxnI3irFBYuPEOWToWvMQk1?=
=?us-ascii?Q?g2gqdOmdsGdJqVjyPO3SwrV2ORcz3BAu0lAe0GgJ06MPOjSFTXF5CKxbchYC?=
=?us-ascii?Q?rDc+LJ/Vv2Dp2ecEiyYi4SbpFpM0JsnqhTF/LnUuQ3tFW9jaQBizIEO1y6OL?=
=?us-ascii?Q?b+oOnAOntMP/oax3MJTNeIxiIwYn2y4S3iuhoEPP1nX74/sKBYBOPE/Pnvvw?=
=?us-ascii?Q?i/y3lfzb9+gy/h6yzBPDp/OwKoJZM9+6CJZLzqLlsjAiDehXYAlXM+O56VcJ?=
=?us-ascii?Q?krcX4H4TcQeOa00zIFiCC3A9uoV89BzMzoODxKRedjW+k337D5liivebe3Kg?=
=?us-ascii?Q?dPZCdJN7e55jxy5KTiUPm92i/pY0PsHAGyfWkDLqpSMn08S0+1y+Go30QVgQ?=
=?us-ascii?Q?vp6/IyiMS8pM02ai7E6tehHZpQOMTpLsj1nbT3Aqa91u1+A9l8qdivSyGNMq?=
=?us-ascii?Q?5BlGQgNKNzD5bcgOTNs+pg8w4R+X7D+cQ/DfSTa45G3eMW8h8Jpk2dzwoYSW?=
=?us-ascii?Q?hPW/2Ch4zdE8QDRZiAyaj1Rpn4/2RNLHKPfBGwOrtl2Z04I1sAN3Aels3uUF?=
=?us-ascii?Q?JnotKWexlRaq84h+TeS7bhriiRYWrUgtTHgcZjJYkosL3HJny+ItQhlE722I?=
=?us-ascii?Q?z8PyEVzdUiFdOFtm9kXTXNVEVBY7oMOnmcpU4QNBq6Q/sfS1VkLePghTNalX?=
=?us-ascii?Q?Hm4USBPtvhNPS0mxrr/XExvY9Wk6dGllVttBwle5i4J790btSzST+OR6YXQ5?=
=?us-ascii?Q?1bBBtolSM0/7AYQlAUxYFkQW5SpGMKJ92J8OZFBBrqmwaGH6XKqSqyi1NmMc?=
=?us-ascii?Q?aI4Erv+QVYOC8ZOEZwcT1FDVlwyazrqZlOZ2QJJ9PH2wo/qloRGUd6NYJx0q?=
=?us-ascii?Q?6i6b3yaFSlfqW2jTVACCztKpnfHhUq92dQOnaxhXy0boc3PZLgSPUOeiL7n3?=
=?us-ascii?Q?w3XRBIpyabggxzd01Rn/g4M4/jq5gqqyeOn++PKluH/vjp8ilKxDDRV30l5S?=
=?us-ascii?Q?edLOKNvUUuT+xr39LSVDfmQKcNmROT3jzo39E4rtcBPrCmD6S6Gj8rypEfts?=
=?us-ascii?Q?GRuUOvNOtngwnsPf06Y642fyg5tmXEg8FZ5GUM6TcnBd3G1ivKXDoQEfLs59?=
=?us-ascii?Q?AfBhGjf/D8SgVJ67kHHEPYm0QZKQZDRXPx97S0FFKADGJPVpzSVNGqOoQwSi?=
=?us-ascii?Q?5QCT41YYajWEbFkqejtkmVIWueZkuKKO0Qm3GrfDoi9Oi0ACZBLV11AszEiz?=
=?us-ascii?Q?eZkPiwpcIncYknt6rIGW2gNuHDjLlGo5Pj2Vbzl+RRjJpRMmJELhwTvxRX4K?=
=?us-ascii?Q?V8NVKQVwpAfmkrFPecfCP0OF?=
X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-d8e84.templateTenant
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d9d6e7e-e2c4-41e8-d5e5-08dc8baff0ca
X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4225.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jun 2024 13:51:38.5235
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR0101MB4964
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey, I sent you an email some days ago regarding First Page
of Google (Without Paying for Ads) Would you be interested in update website
description google search?
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.92.107.87 listed in dnsbl.ahbl.org]
[40.92.107.87 listed in dnsbl.ahbl.org]
[40.92.107.87 listed in dnsbl.ahbl.org]
[40.92.107.87 listed in dnsbl.ahbl.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.92.107.87 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.92.107.87 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.92.107.87 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.92.107.87 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:1a9:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
[40.92.107.87 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.107.87 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.107.87 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 ARC_VALID Message has a valid ARC signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[apps.web.seo87(at)hotmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[apps.web.seo87(at)hotmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[apps.web.seo87(at)hotmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} Don't miss out!
------=_NextPart_000_006A_01DABDC6.E77045C0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hey,
I sent you an email some days ago regarding First Page of Google (Without
Paying for Ads)
Would you be interested in update website description google search?
Would you like to get a quote on upgrading your Business?
Thanks,
From: Amy Smith
Sent: 18 April 2024 17:46
Subject: Re: Quote & Cost
Hey,
I hope you are having a wonderful day.
Without your permission I was checking your website on behalf your email and
see you have a good design and it looks great, but it's not ranking on
Google and other major search engine
I would like to send you an quote of your website with prices showing you a
few things to greatly improve these search results for your business
website.
These things are not difficult, and my quote? will be very specific. It will
show you exactly what needs to be done to move you up in the rankings
dramatically.
If you were on page #1, you'd get so many new customers/ every days..
We have helped 250+ businesses to get the top 1 rank at a very low price!
May I send you quote? If you interested.
Wait for your reply.
------=_NextPart_000_006A_01DABDC6.E77045C0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
>
Hey,
I sent you an email some days ago regarding First=
Page of
Google (Without Paying for Ads)
Would you be intere=
sted in
update website description google search?
span>
Would you like to g=
et a quote
on upgrading your Business?
Thanks,
indowtext 1.0pt;
padding:0cm 0cm 1.0pt 0cm">
/p>
From: Amy Sm=
ith
Sent: 18 April 2024 17:46
Subject: Re: Quote & Cost
Hey,
I hope you are having a wond=
erful day.
Without your permission I wa=
s checking
your website on behalf your email and see you have a good design and it loo=
ks
great, but it's not ranking on Google and other major search engine
:p>
I would like to send you an =
quote of your
website with prices showing you a few things to greatly improve these searc=
h
results for your business website.
These things are not difficu=
lt, and my
quote? will be very specific. It will show you exactly what needs to be don=
e to
move you up in the rankings dramatically.
If you were on page #1, you'=
d get so
many new customers/ every days..
We have helped 250+ business=
es to get
the top 1 rank at a very low price!
May I send you quote? If you=
interested.
Wait for your reply.
:p>
------=_NextPart_000_006A_01DABDC6.E77045C0--
I1.68KLLD41.6KI2.17KwhoissourceRank12.7MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments