Web / SEO/ App spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 22:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqLSp-00000000P9d-2CVb
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:49:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:49:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f66.google.com ([209.85.217.66]:56557)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqGJE-000000006xa-0rOW
for sales@nk.ca;
Mon, 16 Sep 2024 12:18:57 -0600
Received: by mail-vs1-f66.google.com with SMTP id ada2fe7eead31-49bc12c0041so1425735137.0
for; Mon, 16 Sep 2024 11:16:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1726510610; x=1727115410; darn=nk.ca;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=bFsI40QfOLHx90Ap9mylWplTork7u7spnzGfNotymqc=;
b=SaPz6vwvD61p3sPo/EkA7/WuT8QCo1UygYjqooiOQ3iWCR1itl6yh92iQ8CBW9cGPF
GEXEBmgi9aiUTblR3Vu9gPHo8tng4qENdbsLE8pGYLnNyVTA1aOhUTPIfLR8VpHwPhS+
KQqc7sfLrQosEEttyM7133L/+YbH4UoKHMH/DLXqMAAJ6JTSaeJryKiz3gTAzNxq/RfR
iQAF5DwUmgzOPIz92iLf/NW7evzdegPA16gb1gsILtt0XDDhAOgAtVG8YlRuv6y7Z/Nk
XHIHmQV9SA+0nIPJR4+ItpvFGcl4AmwMuHTde0wE8Gu+GC44LUCT0SazU0gSMeuw37wu
Om8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1726510610; x=1727115410;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bFsI40QfOLHx90Ap9mylWplTork7u7spnzGfNotymqc=;
b=pb3wSnoCdp2S8fIQWvYNm4FNi4SRg/bTuTsYqyLvV7QR/nrz5BWw3pF9L+hrBJzMxs
IHmvvBxNszohKSrx0P3YTRR92Z2qsyFSWW6nmrOWD+PIflh609HH78U1vGeN3D6SAoOC
a7OZyj9gRi8Kf3/IzsTPxAEIdHWjcEx73gfzdBfTXduxsAb11RkTF5WlNhz8CoJgZp9j
bxb9aDQTKbPk3EKvlyHdJZgbTRUlJk5EJAxFd3HxnOluo8Gu6f0sFfhwEyiceNlfn0P9
lNATtl2CRH9zpCyf3Cf/SYHpe961mEgt11X/LmcEEEJQzPOLwg9IxrMRP0wJN6JNWlzy
6gbQ==
X-Gm-Message-State: AOJu0Yyh+7Z+cmnNvDVmNa2CMq+alLmNAh2B60b6wCgYVig59hSFu5IS
o6MpG1A+ZlMe9elT8VMDvSuHDc2YD6fAe7K9FXw96a0vABT93M2XgVH6aDOjwzmkbXvnhpZjGtN
7gzj1TbNvmz4x5UP8bh1N3tj8cTnp2ouJ
X-Google-Smtp-Source: AGHT+IFUhkv2lCBXg+MoiXIgy0sTNogNB4EblF2b1/ZNrW/xOr1gPrjG0D3xxOHcLGkec7W0ebaAU2UiQsa6BXv5FGA=
X-Received: by 2002:a05:6102:3585:b0:492:abbe:8923 with SMTP id
ada2fe7eead31-49d4145c05amr12761804137.6.1726510610401; Mon, 16 Sep 2024
11:16:50 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
From: Will Carry
Date: Mon, 16 Sep 2024 23:46:39 +0530
Message-ID:
Subject: Re: package more info ?
To: Sales
Content-Type: multipart/alternative; boundary="000000000000a2618c0622409357"
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Following up on my previous email. Have you had a chance
to review it? If you’re interested, I can share our SEO packages and pricing.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.66 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.66 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[willycarry355(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[willycarry355(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Re: package more info ?
--000000000000a2618c0622409357
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Following up on my previous email. Have you had a chance to review it?
If you=E2=80=99re interested, I can share our SEO packages and pricing.
Best Regards,
Will
On Tue, 9 Jul 2024 at 21:47, Will wrote:
> Hi,
>
> Would you be interested in a Page 1 Google ranking? We provide the SEO
> services to small and medium-sized businesses:
>
> I=E2=80=99m an SEO Expert and I have helped many businesses rank on the 1=
st Page
> of Google. My rates are very affordable.
>
> Let me know what you think.
>
> Have a great day!
>
> Regards,
> Will
> [image: beacon]
--000000000000a2618c0622409357
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
Normal">Hi,
mal">
l">Following up on my previous email. Ha=
ve you had a chance to review it?
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 22:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sqLSp-00000000P9d-2CVb
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:49:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:49:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f66.google.com ([209.85.217.66]:56557)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sqGJE-000000006xa-0rOW
for sales@nk.ca;
Mon, 16 Sep 2024 12:18:57 -0600
Received: by mail-vs1-f66.google.com with SMTP id ada2fe7eead31-49bc12c0041so1425735137.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1726510610; x=1727115410; darn=nk.ca;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=bFsI40QfOLHx90Ap9mylWplTork7u7spnzGfNotymqc=;
b=SaPz6vwvD61p3sPo/EkA7/WuT8QCo1UygYjqooiOQ3iWCR1itl6yh92iQ8CBW9cGPF
GEXEBmgi9aiUTblR3Vu9gPHo8tng4qENdbsLE8pGYLnNyVTA1aOhUTPIfLR8VpHwPhS+
KQqc7sfLrQosEEttyM7133L/+YbH4UoKHMH/DLXqMAAJ6JTSaeJryKiz3gTAzNxq/RfR
iQAF5DwUmgzOPIz92iLf/NW7evzdegPA16gb1gsILtt0XDDhAOgAtVG8YlRuv6y7Z/Nk
XHIHmQV9SA+0nIPJR4+ItpvFGcl4AmwMuHTde0wE8Gu+GC44LUCT0SazU0gSMeuw37wu
Om8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1726510610; x=1727115410;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bFsI40QfOLHx90Ap9mylWplTork7u7spnzGfNotymqc=;
b=pb3wSnoCdp2S8fIQWvYNm4FNi4SRg/bTuTsYqyLvV7QR/nrz5BWw3pF9L+hrBJzMxs
IHmvvBxNszohKSrx0P3YTRR92Z2qsyFSWW6nmrOWD+PIflh609HH78U1vGeN3D6SAoOC
a7OZyj9gRi8Kf3/IzsTPxAEIdHWjcEx73gfzdBfTXduxsAb11RkTF5WlNhz8CoJgZp9j
bxb9aDQTKbPk3EKvlyHdJZgbTRUlJk5EJAxFd3HxnOluo8Gu6f0sFfhwEyiceNlfn0P9
lNATtl2CRH9zpCyf3Cf/SYHpe961mEgt11X/LmcEEEJQzPOLwg9IxrMRP0wJN6JNWlzy
6gbQ==
X-Gm-Message-State: AOJu0Yyh+7Z+cmnNvDVmNa2CMq+alLmNAh2B60b6wCgYVig59hSFu5IS
o6MpG1A+ZlMe9elT8VMDvSuHDc2YD6fAe7K9FXw96a0vABT93M2XgVH6aDOjwzmkbXvnhpZjGtN
7gzj1TbNvmz4x5UP8bh1N3tj8cTnp2ouJ
X-Google-Smtp-Source: AGHT+IFUhkv2lCBXg+MoiXIgy0sTNogNB4EblF2b1/ZNrW/xOr1gPrjG0D3xxOHcLGkec7W0ebaAU2UiQsa6BXv5FGA=
X-Received: by 2002:a05:6102:3585:b0:492:abbe:8923 with SMTP id
ada2fe7eead31-49d4145c05amr12761804137.6.1726510610401; Mon, 16 Sep 2024
11:16:50 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
From: Will Carry
Date: Mon, 16 Sep 2024 23:46:39 +0530
Message-ID:
Subject: Re: package more info ?
To: Sales
Content-Type: multipart/alternative; boundary="000000000000a2618c0622409357"
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Following up on my previous email. Have you had a chance
to review it? If you’re interested, I can share our SEO packages and pricing.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
[209.85.217.66 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
[209.85.217.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.217.66 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.66 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.66 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[willycarry355(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[willycarry355(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Re: package more info ?
--000000000000a2618c0622409357
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Following up on my previous email. Have you had a chance to review it?
If you=E2=80=99re interested, I can share our SEO packages and pricing.
Best Regards,
Will
On Tue, 9 Jul 2024 at 21:47, Will
> Hi,
>
> Would you be interested in a Page 1 Google ranking? We provide the SEO
> services to small and medium-sized businesses:
>
> I=E2=80=99m an SEO Expert and I have helped many businesses rank on the 1=
st Page
> of Google. My rates are very affordable.
>
> Let me know what you think.
>
> Have a great day!
>
> Regards,
> Will
> [image: beacon]
--000000000000a2618c0622409357
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
Normal">Hi,
mal">
l">Following up on my previous email. Ha=
ve you had a chance to review it?
ce=3D"verdana, sans-serif">
=3D"verdana, sans-serif">If you=E2=80=99re interested, I can share our SEO =
packages and pricing.
a, sans-serif">
sans-serif">Best Regards,
erdana, sans-serif">Will
class=3D"gmail_quote">
tyle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pad=
ding-left:1ex">
:11.75pt;margin:0cm 0cm 8pt">
ound-position:initial;background-size:initial;background-repeat:initial;bac=
kground-origin:initial;background-clip:initial">
-serif">Hi,
Would you be interested in a Page 1 Google ranking? We provide the SEO serv=
ices
to small and medium-sized businesses:
I=E2=80=99m an SEO Expert and I have helped many businesses rank on the 1st=
Page of
Google. My rates are very affordable.
Let me know what you think.
Have a great day!
Regards,
Will
LMs54Eozp9D4rBke7D-3WEpmEuvObtHt0iYkAELbn0semwqXv4f4C6PL5b6oFV4xA6Lc65meejS=
a74Z6yUXIj23_JrggJSAMNfztHNZa2kXa7wmOpPwxSbvKRb2_fBi6pqzaNXvzzbwVaDQ3ls" wi=
dth=3D"1" height=3D"1" alt=3D"beacon" style=3D"display: none;">
>
--000000000000a2618c0622409357--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments