Web / SEO / App spam from Yahoo! Mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZe-000000002yI-2ho0

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:58 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic302-19.consmr.mail.sg3.yahoo.com ([106.10.242.139]:42900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTle-0000000092l-26IE

for support@nk.ca;

Fri, 06 Dec 2024 01:32:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=1nYm0xHNuN4ioFQ9yHERBWaZAwzN8ZM+0QB/UMN9ENE=; h=Date:Subject:From:References:To:In-Reply-To:From:Subject:Reply-To; b=WyfZTUzshyoSCu6naFXGjyJeUw82stan0Jl2r9CtA8+S9nRf50K1IeAIEMsaHa+jqj/H8iIgqRQ9/Jx1KUxuL9YoBy1VgfOXwz+JCDpkMvJLjKobJykZFwjvTjkB+YbbatP64rNCstJ9FalXFdBgvmCR/fZu4RZ0smE2X/oXZegFKKROoIHueXnRorg6IfonJC31zpQN5MxcrtMevloip7HPee076E4qfU8wClRnSkZNEVwOuvPhWBh+RCvbv7XNREujpY6CcBZUkdvT84rsmAPazrANhU4EtQu+BrFx7h1PXyRi7Mx1zdK0ZMiDuvurVDnVTL15GHG3z60+XIa4DQ==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=Bmo21oar924Oz51+cSDVr8PscYdkXVzzUvHP+Qw/VRZ=; h=X-Sonic-MF:Date:Subject:From:To:From:Subject; b=AZRbHT16dkIigMZ2UHhu5Z0SVpucOvAUSQqHwWkGeScTarsfqyygnknN26oJTTHCngAUG4s1y1LCTghfvOejSv6eALGU1PqwF5K2Smj+a+KUUZNpE7cZvGjHZYj8u5hrNQa2FmQkKpEDOKHVWr05St3aBQORC8kyD1x0vzHfnwETAFm0/8cyKs/GUkkN5fL7VyA0t5k+3mz73Ta9wu9RU9TKyybZ0Q7CeUr/CSbd6IFDjq+AtceNQodKUAx9QG309dcsRCMYkNdbu5JDFBsVNRrVFZV6LbJncXgIrmuWR1wUQllijeNu+WftEj8pIDNY18ZMRUMReIqhdEhNg1Crew==

X-YMail-OSG: Z7z2eh0VM1lck3dsUB_r_YeKJDZm6c7I638qF_bh3IFN.sQzvpOgaqWZSc2A81H

4bMkJUaJLcX3vFQ73KDvC0T4DGkiCGU1x_QOwW.H.71Zck8_esvwuhxW_jha4T4T92b4cyhvEBiD

4yZiaLw8gGMhSadH0csPJBWB.98cAFth3zEiLnR9Jb8e1APxl7JrUKae.qSKZOU4qG6omk_9oBsY

whSu8UuHQ.SJobnB9Zp0HVl.N80dnYAuDjdLbBWhJp27CvJVLQGuJcoyl6jrmORNXz2PT.NBmWd4

BHPbOk3WwT_xILw0hHDFg31cAmZqLDQ_ilaSGy.nyX4RJ1ZloHnfa6xa2JpejXIxY.jsGxd51TJ5

dKh3KFOHF5ZHr1tMnIwLEQTl2Phmasl7tIKkCxUOQPXjCsT.rAnGuTXpgGy8QgZvLOdIZxkcDcqG

0eu.5ECbaEuRGvD9mDX0Zk0nBT1pL4dggEvpId15F5CrTf8W7WZrOQ.T7r4K5KOdKMbhfT67NZr_

XO3qZf5f14twKW3Gdt8NUfmsf9reL27QPdV3a0KIFGPHoFKTe0_1be2UsaTtbeW91E2.3w7urUMH

4QQNoefq.1W9cGMCtxhRgjixp25sXR25Dg03YuhZ_sK5Fkv4GWanw4rr07PuKDLUD38xu.Cpyvab

Rz.d_GR.4oi162zCE7qShDx27U75MCyRpsnFktF5c130jTzCsUaZUrwabBL0DR26v8Sd2qka3b1L

rcUj5BFu3BMxbjahsr0CabTBenUwmEv1fIHh2BlN4fRTnIsSEPKtbebMfQA4ZoY5oFbXMMH6RrgD

UiPg2O_WUKkz6dQCazeDN_5QTRdMWpSoNjSfTkmlEFnkLcrGY8he1Kb7ujZ.LXODvlvgtsfgU2yh

bjK5rET_giiKFoN7MOAVDJtq7QPdO2PNyh_TSpZLqr0X4CU0S1tEMG2YCHdp1DKN0vT4YqiWKi7R

Qwx5EDeAamAFxiCC4ZWHt.yLoCXHhmfKO_QKMcGfVxAUZPEAlev1tZcUWYTocFmOflIhr4_Eqb26

_pW1aBL7YAKM8I1geu435DpsMEdnjJ0VQvpVLL420EewFPPQ_Lt4P8F1np6stHXeKHFSHYXXMCeY

fgFJTJHUDvynF0Gsgr4v7t0qmQ_vsnSlyv3ZpWCN7Xwo6PAVWes_6wy_fLQvSnzjq3wk.D2HlIwc

DtFROhWePEMUN6kUHVKIdNdRidh8tfp_BMuQ_vWeOxXbkbD5qOVVbK5dbYPD.27itby7pily1Web

b9hez6D9jnzQeqkXvpMoLENdnjVpBGtWUEwt1WOnFojtZbB44CJ6PBUi.MqHvWIdim41_3nhrQrJ

OjjaTp5AmAcwzb0nfuOFPsholE.Ci_LwmNOr_PPh6y_cCqtGMFBtqNyDqOrN43l60UlmjoKP70mc

R9QkioYcO9PyVhrvq.1ma_hNFEcO05CoYbli2zzGvWUgCEl2gpGhI.9zItHq_KDi3Zl0JS3NzNO9

T5m9MGVdmkKzN15_L6tTQ2SRHQpN4V2zpZBWm7EJ6otR0brn8qCYIh2AmvdILYnOm.uEP34rMmJ0

w3RoVaWIYvrSj8dgege2h2OEnfnAETxCBHwc2hNt_mKkxL.CEbxdUDacXlLcoZW0zft6yWSbtw3q

_y0095Wfa1ww4SV4lHP15p.ifnMr8bKpgRKU5ia9V11ymFd50J6pgAEiylDGYSY2wTmM3fsKmAVs

O1j7LgdWVMYAmFd6tuiHR7APFywBWP_lfPN1LQOXP57gvOlvrysSFQVrZ9YNKjwjvYioXNaY5SDD

46.w7sv856PXc6b3N1v.RH1rCuAYQNb0fy78ifykEOUzrzOg3nMkHDwdXI5VG5knJwdXcXN00YJM

n5UUPeRCBkJyM7J.iseRHZm7ubHcGgDZnzcGUtmD0L63s4bHJjENzncIrrd15sbhlP5ruH3I.1F_

Qxp.OC6BUTigTYCNs9PIaL13edmK_YdFoCdJjZjumZyYw3UcT8R7f._4YSZz286sZNPAc9CclqLE

Z9WLyTB7VlmNJVq0gae6ILDCQPFrhl1RWEjjR5cGM9Tok4SOjVsWRvzGkeHV2uUtUTeWReRd7.yo

yYnteniHN_BDsRbtAxSEyIeADStv8ol93KQVDxdNwJOq0LGlKazLRPm4xZZeZxSt3atttZfoFCqf

AzR0k2WXyHzIPsx4KT3Xrn4Mh7RtF5FPle_Aat0HB0FI5zHT6pUafgpXyTjOAldZk2.IVOFi_ROC

oosWt9GYfjzcrVwer6vcmo4sy2r3NTz3GoBnq2.eQrqbmeBAAeZCwbafzcVFBTC2125JCXBk-

X-Sonic-MF:

X-Sonic-ID: da62483d-8304-40eb-8e19-287171b32c59

Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.sg3.yahoo.com with HTTP; Fri, 6 Dec 2024 08:30:51 +0000

Received: by hermes--production-sg3-5b7954b588-7n7t7 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 10883d54ac0c39a2eb1331f0f1450fc0;

Fri, 06 Dec 2024 08:30:49 +0000 (UTC)

Content-Type: multipart/alternative;

boundary="------------p0Nol0btCt0QJy0HpvYTnrIw"

Message-ID: <6730b140-2feb-454c-bad0-7d782e276d69@yahoo.com>

Date: Fri, 6 Dec 2024 14:02:18 +0530

MIME-Version: 1.0

User-Agent: Mozilla Thunderbird

Subject: =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=

From: Sanjana

References: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

Content-Language: en-US

To: undisclosed-recipients: ;

In-Reply-To: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

X-Mailer: WebService/1.1.23040 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I sent you an email a few days ago regarding Digital

marketing Service. Let me know if you are interested, we will send you our

past work detailsCustom SEO Packages, and price list.



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[106.10.242.139 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.10.242.139 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sanjanarai57(at)yahoo.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sanjanarai57(at)yahoo.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=



This is a multi-part message in MIME format.

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 7bit



Hello,



I sent you an email a few days ago regarding Digital marketing Service.



Let me know if you are interested, we will send you our past work

detailsCustom SEO Packages, and price list.



Thanks & Regards,



On 11/20/2024 6:32 PM, Sanjana wrote:

>

> Hi,

>

> I can help your website to get on first page on Google and increase

> the number of leads and sales you are getting from your website.

>

> Let me know if you are interested, then I will send you our SEO

> Packages and price list.

>

> Thanks & Regards,

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit




















style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Hello,




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">I

sent you

an email a few days ago regarding Digital marketing Service.




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#70AD47;mso-themecolor:accent6;

background:white">Let me know if you are interested, we will send you

our past

work details

style="font-size:11.0pt;font-family:"Calibri","sans-serif";

color:#222222;background:white"> Custom SEO Packages, and price list.




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Thanks

&

Regards,



On 11/20/2024 6:32 PM, Sanjana wrote:





cite="mid:3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com">






style="font-family:"Calibri","sans-serif";

color:#222222">Hi,Â




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">I

can help your website to get on first page on Google and

increase the number of leads and sales you are getting from

your website.Â




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">Let

me know if you are interested, then I

lang="EN-IN"

style="font-size:11.0pt;font-family:

"Calibri","sans-serif";color:#00B050">will send you

our SEO Packages and price list.Â




style="font-size:11.0pt;line-height:107%;font-family:"Calibri","sans-serif";

mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;color:#222222;

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Thanks

& Regards,Â








--------------p0Nol0btCt0QJy0HpvYTnrIw--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA