Instagram followers spam from Google gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Aug 2024 18:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sjT3u-00000000KDY-1Ry6

for dave@doctor.nl2k.ab.ca;

Wed, 28 Aug 2024 18:30:54 -0600

Resent-From: The Doctor

Resent-Date: Wed, 28 Aug 2024 18:30:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:60689)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sjSm5-00000000Hs6-1Jv7

for sales@nk.ca;

Wed, 28 Aug 2024 18:12:33 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-6b46a237b48so2948837b3.1

for ; Wed, 28 Aug 2024 17:10:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1724890228; x=1725495028; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=tlX0voWJXh24rCwmX2u8a2dKRzsA8jzvfeqjXeLPuzM=;

b=PKabMk4dN7bhcc7JezilkLULgHH1HKxc9NHIOivxr8Z/KYeRMukv9MmCLv8oCBRy3U

E8bguoZ2/63nk8N8kCHXDcu0VIculExCZ/SHmgejQjCR6KvZnLpnCpj6rsrfC2spy6T4

XseHQ9FgYcANmEaZ8bhLnD6BqxvbEthagctfeDjnrBGbR+NHYRJIfhD7eAQBYqxFOeSZ

N5CLrTLhpK43ufP9Id5wCmsREn07pMPF3SSTn1VTu0SkXq6cQQbrzREV5mDed5OIghtN

/1IuOwmTMLEH5ubMbPnHdhWzXvA/SIZ+kgMO5/yCVZoG1fzsncs4UHilDW+QZ2Ldyv2q

zBvQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724890228; x=1725495028;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=tlX0voWJXh24rCwmX2u8a2dKRzsA8jzvfeqjXeLPuzM=;

b=oP/BlLM0eYHWw11fPJFI8ZpTc4WUwTqPyVRSLEXE+nc76BMkLddGqgEoIEM2f5I3gd

Tk/k85VEJQHSmf7lfXl6R0XGLStRxomE+Wu3uBqtla5NxfQitor+euNNby0DUpe7AJQy

npMMG651gfqb1jIiAD9dHgQe7y0+F0P/O0LD6QdOHGhCkn0tp6y86Tm3eSCUjAodmdJ+

lyFXGFHvyTxulU0oZTe6GGrTtUIAXBMPLijijTFsJrVQY9tLot1PQricr8VcRhZRZWCY

CAjf7QHRNY6EM3xIQsF2IJDyKoaMvIijYjfYVouNboEDatxh6W/d+8QCxkCi0c02cvpT

XmZQ==

X-Gm-Message-State: AOJu0YzTMEnWbVIdDAQWpk2VPa/G1JtndUjzfH5Fsp0dW32/uQDbooff

fayMZEOzhs59vulQX4cQ9/r5UhlVYluJ/X4If4GWnRnqp/N6MaIayrshE1ONkzusMCTT/A42qrs

=

X-Google-Smtp-Source: AGHT+IEwuksemHC+RWEYffs5JaD8S3CB8ulpYLomMoal7uVH4s/w8EjETr7dMSgUIAe8Um/BRvEDJoKcOQ==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:3086:b0:664:4b9c:3de with SMTP id

00721157ae682-6d27620bcc5mr9918347b3.13.1724890228327; Wed, 28 Aug 2024

17:10:28 -0700 (PDT)

Message-ID:

Date: Thu, 29 Aug 2024 00:10:28 +0000

Subject: daveyadallee, BEST SELLER

From: navazadgarika@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , daveyadallee GET 100K Followers Instagram NOW !!!

Please visit the web page below. [ https://instamedia.shop/??daveyadallee

]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.200 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[navazadgarika(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} daveyadallee, BEST SELLER



SGVsbG8gLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR0VUIDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBO

T1cgISEhDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93Lg0KDQpbIGh0dHBzOi8vaW5z

dGFtZWRpYS5zaG9wLz8/ZGF2ZXlhZGFsbGVlIF0NCg0KRG8geW91IGhhdmUgYWJvdXQgWyBMZXNz

IHRoYW4gODVLIF0gRm9sbG93ZXJzID8NClNwZWNpYWxzICBsaW1pdGVkICBPZmYgNDAlIFRvZGF5

Li4uIQ0KSW5jcmVhc2UgTm93IC4uISEhDQoNCi0gSW5zdGFudCBTdGFydA0KLSBTYWZlc3QgTWV0

aG9kcw0KLSBQcml2YWN5IFByb3RlY3Rpb24NCi0gU3BlZWQgMTAwSyBGb2xsb3dlcnMvZGF5DQot

IEhpZ2ggUXVhbGl0eSBGb2xsb3dlcnMNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVzdGVk

IFNlbGxlciB0ZXN0aW1vbnkNCi0gU3RhcnRpbmcgZ2V0IDVLIEZvbGxvd2VycyBJbnN0YWdyYW0N

Ci0gR3VhcmFudGVlZCB0byBiZSB0aGUgY2hlYXBlc3QNCg0KVGhhbmsgeW91LA0KUmVnYXJkcywN

CnNvY2lhbGluc3RhbWF4QGdtYWlsLmNvbQ0KDQpDb3B5cmlnaHQgwqkgMjAxNCAtIDIwMjUgSW5z

dGFtZWRpYU1BWA0K

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA