Web / SEO/ App spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Sep 2024 07:45:51 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1suB5y-0000000023e-1n0a
for dave@doctor.nl2k.ab.ca;
Fri, 27 Sep 2024 07:33:18 -0600
Resent-From: The Doctor
Resent-Date: Fri, 27 Sep 2024 07:33:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f65.google.com ([209.85.167.65]:56374)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1suA6P-00000000Iub-09JM
for sales@nk.ca;
Fri, 27 Sep 2024 06:29:45 -0600
Received: by mail-lf1-f65.google.com with SMTP id 2adb3069b0e04-5366fd6fdf1so2683336e87.0
for; Fri, 27 Sep 2024 05:27:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1727440063; x=1728044863; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=yGC/b4BGIdd2z35ZvHpwEYApjeDUmd4NaPHfgIVCcF4=;
b=duiarAoPkhbEGvezYC35615g+pAQifuUC58RwDW1VK3ywDnsA9IjlWl1eUFw7hpt6T
mnyMwbnUdKs2vUSefm23z5FsBBYO0B4KAXnFYgcWYEt/F0NQ6i+bvrlmBANrYwJ0jBB9
czFSALAYrzB7GTMe6s/r/y9rBRJO7V+RvuyESAVcmoFLoDDGtON9twSq0ybstV7Hf6vQ
UhvIgV0ku5GRdcKNJlPXepxu7f9UTITj4GRII0toU+e/KCBUUp8BF0Xy3WIHqOU9PRT1
WP7bAo5q9e13VxnG/Ou/+CqUS5RlFEEaYWyD4kKHc7PtwRZ/idVAkbEDG/rOb4i4E848
sztQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1727440063; x=1728044863;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=yGC/b4BGIdd2z35ZvHpwEYApjeDUmd4NaPHfgIVCcF4=;
b=OEJazC2A9r6OlBANC24JdiqTbxdfkHvBa3xnDY3W+q87V+3ljAkDgK2sdxbc4cgt0A
qGntfq8gyyAQOlIhBu5YoyQMSvwLhyq4KuJUi4GJs06qUYtCfKiLqNIqRZTrhDm02nJ2
9GLHUjnUBZ2lMAcQZTcEFs/CH+wUuZC50Ze2Yjayx+/DAC2yFVv+F0B4wpJjEB0jytfx
NucKrIfI9okWnu+39Md00ahOofsam8GILsv7ivcpdWMK65P20bv14YLizgKOn5bogNtz
qmTtf7GEtHKPGEa5RgUcUpeOh41Mf6Qvs/9419PlxNl0ifWqOaY0CQhsTNfyzenjxX3J
iVEg==
X-Gm-Message-State: AOJu0YzT57ye8WGNB8uWcYjD6sDN/ZnkUGEIHtOR2Aw/SUR0EKYiFYYE
dNHhClqbunOeyOeUv1bfNBuDl9+IdkIQTpw9tbP0e6+VvavyiMGa15qngZfnJC4o77RKBTaO7Po
DROGUsRSnYuGSjjYs96N1o1ycrWGMFwcS
X-Google-Smtp-Source: AGHT+IEz9xu1cSnukesHXxMM1jC6iPalMeZyfUcWCrfTbY49XZKmooYvx79fssIy7m3bqV0pt574aSMxSNNdezGF51E=
X-Received: by 2002:a05:6512:e9b:b0:536:554a:24c2 with SMTP id
2adb3069b0e04-5389fc3a50cmr2103942e87.13.1727440062379; Fri, 27 Sep 2024
05:27:42 -0700 (PDT)
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Fri, 27 Sep 2024 08:27:41 -0400
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Fri, 27 Sep 2024 05:27:40 -0700
MIME-Version: 1.0
Sender: Denish
From: Denish
Date: Fri, 27 Sep 2024 08:27:41 -0400
X-Google-Sender-Auth: sppPlHVrAabcbzZ_SYd5l33qcss
Message-ID:
Subject: Increase traffic to your website!!
To: Sales
Content-Type: multipart/alternative; boundary="0000000000004a0014062318fb79"
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, I noticed your website isn't ranking on Google and other
search engines. As an experienced SEO provider, I’ve successfully helped
businesses achieve top rankings.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.65 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[filmdinesh835(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[filmdinesh835(at)gmail.com]
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Increase traffic to your website!!
--0000000000004a0014062318fb79
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
I noticed your website isn't ranking on Google and other search engines.
As an experienced SEO provider, I=E2=80=99ve successfully helped businesses=
achieve
top rankings.
My services are both effective and budget-friendly.
Would you like to discuss how I can assist you? I=E2=80=99d be glad to prov=
ide a
detailed proposal and pricing.
Best regards,
Denish
[image: beacon]
--0000000000004a0014062318fb79
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
![](3D"https://filmdinesh835-dot-yamm-track.appspot.com/2t_ANTqaVwPiZD=<br)
AV_WQB0zKSUm_PU32SlL46GuTkYQOIsfXMzkgH6Kb4m-m61E1jizkusTZBZbxjhaFpCPgdrvenG=
jTAN99nM823M0NDtEpp9oQbQ8EwXGLYPg6KXiLY1qoGIqxAHmDLRiOMDilZ_6mfPDsOi6w" wid=
th=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!im=
portant;">
--0000000000004a0014062318fb79--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 27 Sep 2024 07:45:51 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1suB5y-0000000023e-1n0a
for dave@doctor.nl2k.ab.ca;
Fri, 27 Sep 2024 07:33:18 -0600
Resent-From: The Doctor
Resent-Date: Fri, 27 Sep 2024 07:33:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f65.google.com ([209.85.167.65]:56374)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1suA6P-00000000Iub-09JM
for sales@nk.ca;
Fri, 27 Sep 2024 06:29:45 -0600
Received: by mail-lf1-f65.google.com with SMTP id 2adb3069b0e04-5366fd6fdf1so2683336e87.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1727440063; x=1728044863; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=yGC/b4BGIdd2z35ZvHpwEYApjeDUmd4NaPHfgIVCcF4=;
b=duiarAoPkhbEGvezYC35615g+pAQifuUC58RwDW1VK3ywDnsA9IjlWl1eUFw7hpt6T
mnyMwbnUdKs2vUSefm23z5FsBBYO0B4KAXnFYgcWYEt/F0NQ6i+bvrlmBANrYwJ0jBB9
czFSALAYrzB7GTMe6s/r/y9rBRJO7V+RvuyESAVcmoFLoDDGtON9twSq0ybstV7Hf6vQ
UhvIgV0ku5GRdcKNJlPXepxu7f9UTITj4GRII0toU+e/KCBUUp8BF0Xy3WIHqOU9PRT1
WP7bAo5q9e13VxnG/Ou/+CqUS5RlFEEaYWyD4kKHc7PtwRZ/idVAkbEDG/rOb4i4E848
sztQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1727440063; x=1728044863;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=yGC/b4BGIdd2z35ZvHpwEYApjeDUmd4NaPHfgIVCcF4=;
b=OEJazC2A9r6OlBANC24JdiqTbxdfkHvBa3xnDY3W+q87V+3ljAkDgK2sdxbc4cgt0A
qGntfq8gyyAQOlIhBu5YoyQMSvwLhyq4KuJUi4GJs06qUYtCfKiLqNIqRZTrhDm02nJ2
9GLHUjnUBZ2lMAcQZTcEFs/CH+wUuZC50Ze2Yjayx+/DAC2yFVv+F0B4wpJjEB0jytfx
NucKrIfI9okWnu+39Md00ahOofsam8GILsv7ivcpdWMK65P20bv14YLizgKOn5bogNtz
qmTtf7GEtHKPGEa5RgUcUpeOh41Mf6Qvs/9419PlxNl0ifWqOaY0CQhsTNfyzenjxX3J
iVEg==
X-Gm-Message-State: AOJu0YzT57ye8WGNB8uWcYjD6sDN/ZnkUGEIHtOR2Aw/SUR0EKYiFYYE
dNHhClqbunOeyOeUv1bfNBuDl9+IdkIQTpw9tbP0e6+VvavyiMGa15qngZfnJC4o77RKBTaO7Po
DROGUsRSnYuGSjjYs96N1o1ycrWGMFwcS
X-Google-Smtp-Source: AGHT+IEz9xu1cSnukesHXxMM1jC6iPalMeZyfUcWCrfTbY49XZKmooYvx79fssIy7m3bqV0pt574aSMxSNNdezGF51E=
X-Received: by 2002:a05:6512:e9b:b0:536:554a:24c2 with SMTP id
2adb3069b0e04-5389fc3a50cmr2103942e87.13.1727440062379; Fri, 27 Sep 2024
05:27:42 -0700 (PDT)
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Fri, 27 Sep 2024 08:27:41 -0400
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Fri, 27 Sep 2024 05:27:40 -0700
MIME-Version: 1.0
Sender: Denish
From: Denish
Date: Fri, 27 Sep 2024 08:27:41 -0400
X-Google-Sender-Auth: sppPlHVrAabcbzZ_SYd5l33qcss
Message-ID:
Subject: Increase traffic to your website!!
To: Sales
Content-Type: multipart/alternative; boundary="0000000000004a0014062318fb79"
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, I noticed your website isn't ranking on Google and other
search engines. As an experienced SEO provider, I’ve successfully helped
businesses achieve top rankings.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
[209.85.167.65 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
[209.85.167.65 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.65 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.65 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[filmdinesh835(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[filmdinesh835(at)gmail.com]
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Increase traffic to your website!!
--0000000000004a0014062318fb79
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
I noticed your website isn't ranking on Google and other search engines.
As an experienced SEO provider, I=E2=80=99ve successfully helped businesses=
achieve
top rankings.
My services are both effective and budget-friendly.
Would you like to discuss how I can assist you? I=E2=80=99d be glad to prov=
ide a
detailed proposal and pricing.
Best regards,
Denish
[image: beacon]
--0000000000004a0014062318fb79
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
I noticed you=
r website isn't ranking on Google and other search engines.
As a=
n experienced SEO provider, I=E2=80=99ve successfully helped businesses ach=
ieve top rankings.
My services are both effective and budget-friendl=
y.
Would you like to discuss how I can assist you? I=E2=80=99d be gl=
ad to provide a detailed proposal and pricing.
Best regards,
Deni=
sh
I noticed you=
r website isn't ranking on Google and other search engines.
As a=
n experienced SEO provider, I=E2=80=99ve successfully helped businesses ach=
ieve top rankings.
My services are both effective and budget-friendl=
y.
Would you like to discuss how I can assist you? I=E2=80=99d be gl=
ad to provide a detailed proposal and pricing.
Best regards,
Deni=
sh
AV_WQB0zKSUm_PU32SlL46GuTkYQOIsfXMzkgH6Kb4m-m61E1jizkusTZBZbxjhaFpCPgdrvenG=
jTAN99nM823M0NDtEpp9oQbQ8EwXGLYPg6KXiLY1qoGIqxAHmDLRiOMDilZ_6mfPDsOi6w" wid=
th=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!im=
portant;">
--0000000000004a0014062318fb79--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments