Web / SEO / App spam from Yahoo! Mail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tJaZe-000000002yI-2ho0
for dave@doctor.nl2k.ab.ca;
Fri, 06 Dec 2024 08:48:58 -0700
Resent-From: The Doctor
Resent-Date: Fri, 6 Dec 2024 08:48:58 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from sonic302-19.consmr.mail.sg3.yahoo.com ([106.10.242.139]:42900)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tJTle-0000000092l-26IE
for support@nk.ca;
Fri, 06 Dec 2024 01:32:59 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=1nYm0xHNuN4ioFQ9yHERBWaZAwzN8ZM+0QB/UMN9ENE=; h=Date:Subject:From:References:To:In-Reply-To:From:Subject:Reply-To; b=WyfZTUzshyoSCu6naFXGjyJeUw82stan0Jl2r9CtA8+S9nRf50K1IeAIEMsaHa+jqj/H8iIgqRQ9/Jx1KUxuL9YoBy1VgfOXwz+JCDpkMvJLjKobJykZFwjvTjkB+YbbatP64rNCstJ9FalXFdBgvmCR/fZu4RZ0smE2X/oXZegFKKROoIHueXnRorg6IfonJC31zpQN5MxcrtMevloip7HPee076E4qfU8wClRnSkZNEVwOuvPhWBh+RCvbv7XNREujpY6CcBZUkdvT84rsmAPazrANhU4EtQu+BrFx7h1PXyRi7Mx1zdK0ZMiDuvurVDnVTL15GHG3z60+XIa4DQ==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=Bmo21oar924Oz51+cSDVr8PscYdkXVzzUvHP+Qw/VRZ=; h=X-Sonic-MF:Date:Subject:From:To:From:Subject; b=AZRbHT16dkIigMZ2UHhu5Z0SVpucOvAUSQqHwWkGeScTarsfqyygnknN26oJTTHCngAUG4s1y1LCTghfvOejSv6eALGU1PqwF5K2Smj+a+KUUZNpE7cZvGjHZYj8u5hrNQa2FmQkKpEDOKHVWr05St3aBQORC8kyD1x0vzHfnwETAFm0/8cyKs/GUkkN5fL7VyA0t5k+3mz73Ta9wu9RU9TKyybZ0Q7CeUr/CSbd6IFDjq+AtceNQodKUAx9QG309dcsRCMYkNdbu5JDFBsVNRrVFZV6LbJncXgIrmuWR1wUQllijeNu+WftEj8pIDNY18ZMRUMReIqhdEhNg1Crew==
X-YMail-OSG: Z7z2eh0VM1lck3dsUB_r_YeKJDZm6c7I638qF_bh3IFN.sQzvpOgaqWZSc2A81H
4bMkJUaJLcX3vFQ73KDvC0T4DGkiCGU1x_QOwW.H.71Zck8_esvwuhxW_jha4T4T92b4cyhvEBiD
4yZiaLw8gGMhSadH0csPJBWB.98cAFth3zEiLnR9Jb8e1APxl7JrUKae.qSKZOU4qG6omk_9oBsY
whSu8UuHQ.SJobnB9Zp0HVl.N80dnYAuDjdLbBWhJp27CvJVLQGuJcoyl6jrmORNXz2PT.NBmWd4
BHPbOk3WwT_xILw0hHDFg31cAmZqLDQ_ilaSGy.nyX4RJ1ZloHnfa6xa2JpejXIxY.jsGxd51TJ5
dKh3KFOHF5ZHr1tMnIwLEQTl2Phmasl7tIKkCxUOQPXjCsT.rAnGuTXpgGy8QgZvLOdIZxkcDcqG
0eu.5ECbaEuRGvD9mDX0Zk0nBT1pL4dggEvpId15F5CrTf8W7WZrOQ.T7r4K5KOdKMbhfT67NZr_
XO3qZf5f14twKW3Gdt8NUfmsf9reL27QPdV3a0KIFGPHoFKTe0_1be2UsaTtbeW91E2.3w7urUMH
4QQNoefq.1W9cGMCtxhRgjixp25sXR25Dg03YuhZ_sK5Fkv4GWanw4rr07PuKDLUD38xu.Cpyvab
Rz.d_GR.4oi162zCE7qShDx27U75MCyRpsnFktF5c130jTzCsUaZUrwabBL0DR26v8Sd2qka3b1L
rcUj5BFu3BMxbjahsr0CabTBenUwmEv1fIHh2BlN4fRTnIsSEPKtbebMfQA4ZoY5oFbXMMH6RrgD
UiPg2O_WUKkz6dQCazeDN_5QTRdMWpSoNjSfTkmlEFnkLcrGY8he1Kb7ujZ.LXODvlvgtsfgU2yh
bjK5rET_giiKFoN7MOAVDJtq7QPdO2PNyh_TSpZLqr0X4CU0S1tEMG2YCHdp1DKN0vT4YqiWKi7R
Qwx5EDeAamAFxiCC4ZWHt.yLoCXHhmfKO_QKMcGfVxAUZPEAlev1tZcUWYTocFmOflIhr4_Eqb26
_pW1aBL7YAKM8I1geu435DpsMEdnjJ0VQvpVLL420EewFPPQ_Lt4P8F1np6stHXeKHFSHYXXMCeY
fgFJTJHUDvynF0Gsgr4v7t0qmQ_vsnSlyv3ZpWCN7Xwo6PAVWes_6wy_fLQvSnzjq3wk.D2HlIwc
DtFROhWePEMUN6kUHVKIdNdRidh8tfp_BMuQ_vWeOxXbkbD5qOVVbK5dbYPD.27itby7pily1Web
b9hez6D9jnzQeqkXvpMoLENdnjVpBGtWUEwt1WOnFojtZbB44CJ6PBUi.MqHvWIdim41_3nhrQrJ
OjjaTp5AmAcwzb0nfuOFPsholE.Ci_LwmNOr_PPh6y_cCqtGMFBtqNyDqOrN43l60UlmjoKP70mc
R9QkioYcO9PyVhrvq.1ma_hNFEcO05CoYbli2zzGvWUgCEl2gpGhI.9zItHq_KDi3Zl0JS3NzNO9
T5m9MGVdmkKzN15_L6tTQ2SRHQpN4V2zpZBWm7EJ6otR0brn8qCYIh2AmvdILYnOm.uEP34rMmJ0
w3RoVaWIYvrSj8dgege2h2OEnfnAETxCBHwc2hNt_mKkxL.CEbxdUDacXlLcoZW0zft6yWSbtw3q
_y0095Wfa1ww4SV4lHP15p.ifnMr8bKpgRKU5ia9V11ymFd50J6pgAEiylDGYSY2wTmM3fsKmAVs
O1j7LgdWVMYAmFd6tuiHR7APFywBWP_lfPN1LQOXP57gvOlvrysSFQVrZ9YNKjwjvYioXNaY5SDD
46.w7sv856PXc6b3N1v.RH1rCuAYQNb0fy78ifykEOUzrzOg3nMkHDwdXI5VG5knJwdXcXN00YJM
n5UUPeRCBkJyM7J.iseRHZm7ubHcGgDZnzcGUtmD0L63s4bHJjENzncIrrd15sbhlP5ruH3I.1F_
Qxp.OC6BUTigTYCNs9PIaL13edmK_YdFoCdJjZjumZyYw3UcT8R7f._4YSZz286sZNPAc9CclqLE
Z9WLyTB7VlmNJVq0gae6ILDCQPFrhl1RWEjjR5cGM9Tok4SOjVsWRvzGkeHV2uUtUTeWReRd7.yo
yYnteniHN_BDsRbtAxSEyIeADStv8ol93KQVDxdNwJOq0LGlKazLRPm4xZZeZxSt3atttZfoFCqf
AzR0k2WXyHzIPsx4KT3Xrn4Mh7RtF5FPle_Aat0HB0FI5zHT6pUafgpXyTjOAldZk2.IVOFi_ROC
oosWt9GYfjzcrVwer6vcmo4sy2r3NTz3GoBnq2.eQrqbmeBAAeZCwbafzcVFBTC2125JCXBk-
X-Sonic-MF:
X-Sonic-ID: da62483d-8304-40eb-8e19-287171b32c59
Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.sg3.yahoo.com with HTTP; Fri, 6 Dec 2024 08:30:51 +0000
Received: by hermes--production-sg3-5b7954b588-7n7t7 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 10883d54ac0c39a2eb1331f0f1450fc0;
Fri, 06 Dec 2024 08:30:49 +0000 (UTC)
Content-Type: multipart/alternative;
boundary="------------p0Nol0btCt0QJy0HpvYTnrIw"
Message-ID: <6730b140-2feb-454c-bad0-7d782e276d69@yahoo.com>
Date: Fri, 6 Dec 2024 14:02:18 +0530
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=
From: Sanjana
References: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>
Content-Language: en-US
To: undisclosed-recipients: ;
In-Reply-To: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>
X-Mailer: WebService/1.1.23040 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I sent you an email a few days ago regarding Digital
marketing Service. Let me know if you are interested, we will send you our
past work detailsCustom SEO Packages, and price list.
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[106.10.242.139 listed in dnsbl.ahbl.org]
[106.10.242.139 listed in dnsbl.ahbl.org]
[106.10.242.139 listed in dnsbl.ahbl.org]
[106.10.242.139 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[106.10.242.139 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[106.10.242.139 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[106.10.242.139 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[106.10.242.139 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
[106.10.242.139 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.242.139 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[106.10.242.139 listed in sa-accredit.habeas.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[106.10.242.139 listed in sa-trusted.bondedsender.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[106.10.242.139 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[106.10.242.139 listed in bl.score.senderscore.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sanjanarai57(at)yahoo.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sanjanarai57(at)yahoo.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=
This is a multi-part message in MIME format.
--------------p0Nol0btCt0QJy0HpvYTnrIw
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Hello,
I sent you an email a few days ago regarding Digital marketing Service.
Let me know if you are interested, we will send you our past work
detailsCustom SEO Packages, and price list.
Thanks & Regards,
On 11/20/2024 6:32 PM, Sanjana wrote:
>
> Hi,
>
> I can help your website to get on first page on Google and increase
> the number of leads and sales you are getting from your website.
>
> Let me know if you are interested, then I will send you our SEO
> Packages and price list.
>
> Thanks & Regards,
--------------p0Nol0btCt0QJy0HpvYTnrIw
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#222222;background:white">Hello,
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#222222;background:white">I
sent you
an email a few days ago regarding Digital marketing Service.
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#70AD47;mso-themecolor:accent6;
background:white">Let me know if you are interested, we will send you
our past
work details
style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#222222;background:white"> Custom SEO Packages, and price list.
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#222222;background:white">Thanks
&
Regards,
cite="mid:3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com">
style="font-family:"Calibri","sans-serif";
color:#222222">Hi,Â
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#222222">I
can help your website to get on first page on Google and
increase the number of leads and sales you are getting from
your website.Â
style="font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#222222">Let
me know if you are interested, then I
lang="EN-IN"
style="font-size:11.0pt;font-family:
"Calibri","sans-serif";color:#00B050">will send you
our SEO Packages and price list.Â
style="font-size:11.0pt;line-height:107%;font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;color:#222222;
mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Thanks
& Regards,Â
--------------p0Nol0btCt0QJy0HpvYTnrIw--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments