Web/SEO/App spam from Microsoft Outlook Part 2
Posted by Dave Yadallee on
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[52.103.43.23 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.2 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[hughledgermark(at)outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.43.23 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Web-Site Inquiry
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
I hope you're well.
I recently reviewed your website and see significant potential for growth.
I=92d like to offer a complimentary audit report, along with a quote, showi=
ng how we can greatly enhance your search results and help place your websi=
te on Google=92s first page.
May I send you the report and quote?
Thank you for considering this.
Best regards,
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
>
gb(0, 32, 96);">Hi,
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I hope you're well.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I recently reviewed your website and see significant potenti=
al for growth.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I=92d like to offer a complimentary audit report, along with=
a quote, showing how we can greatly enhance your search results and help p=
lace your website on Google=92s first
page.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">May I send you the report and quote?
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">Thank you for considering this.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">Best regards,
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_--
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[2603:1096:604:262:0:0:0:8 listed in]
[will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
[52.103.43.23 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[52.103.43.23 listed in dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
[2603:1096:604:262:0:0:0:8 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.43.23 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[52.103.43.23 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.2 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[hughledgermark(at)outlook.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.43.23 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Web-Site Inquiry
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
I hope you're well.
I recently reviewed your website and see significant potential for growth.
I=92d like to offer a complimentary audit report, along with a quote, showi=
ng how we can greatly enhance your search results and help place your websi=
te on Google=92s first page.
May I send you the report and quote?
Thank you for considering this.
Best regards,
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
>
gb(0, 32, 96);">Hi,
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I hope you're well.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I recently reviewed your website and see significant potenti=
al for growth.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">I=92d like to offer a complimentary audit report, along with=
a quote, showing how we can greatly enhance your search results and help p=
lace your website on Google=92s first
page.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">May I send you the report and quote?
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">Thank you for considering this.
=3D"elementToProof">
b(0, 32, 96);">
=3D"elementToProof">
b(0, 32, 96);">Best regards,
--_000_OS7PR01MB12083114B0C3E227029E09221C64BAOS7PR01MB12083jp_--