SEO spam from Gmail servers
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 30 Oct 2022 05:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1op65E-000JYd-Fd
for dave@doctor.nl2k.ab.ca;
Sun, 30 Oct 2022 05:02:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 30 Oct 2022 05:02:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f194.google.com ([209.85.215.194]:44567)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1op188-000Nru-GY
for doctor@netknow.ca;
Sat, 29 Oct 2022 23:45:16 -0600
Received: by mail-pg1-f194.google.com with SMTP id q1so8149663pgl.11
for; Sat, 29 Oct 2022 22:42:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cadssocial.org; s=google;
h=message-id:disposition-notification-to:to:reply-to:date
:mime-version:from:from:to:cc:subject:date:message-id:reply-to;
bh=qZn2iEx2rlQOLw2P9QqYGG9DRpYstQil0YDchnccRJA=;
b=Df7oiTJ9XHzMx+QNmBE7y28GgMIugOv+WNry01aew8pE1WmMPyupT5vU89J9R0gonW
S7QFVg8QMQeQ5nvEFN6Kkts2zlV99tUlGOd1a6Ho5vpTFtgEI/RcHIyEYGx9pvVg9jx2
yLbsE//zZsdFgCqGn65aw6zidDeT8XF3jWusQl43zRqHv6OoRQs5MRmWbxC22e18SzTH
8aFcjdgxDhUN3ND32jLYcnlmhw/wLa3fabDuWY9P8dgRZjiFMszVLNzM/enYPi2BVYBZ
jRZYd9l/NoWUdBgt+js8UqTwwe16BmBciMmg8WpBGV35QPWjEq8Sl+q6W8Gem8r04Ana
WEYg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:disposition-notification-to:to:reply-to:date
:mime-version:from:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=qZn2iEx2rlQOLw2P9QqYGG9DRpYstQil0YDchnccRJA=;
b=F9iWH8WKiSZ44BXXam9ExI9GqU6Qz0HKiaJgmL/tgTmFXa8dnMLu0JjcP8byqT7OAy
CmrnExDggZXZ6Pf91CXDtuCvIJPQzlJJY7q3eSadz+C7yY77SJpNEU2d0kt0DRmB0GAk
1W/8r4s3/0kCcjpF/eute+oufBoxN0cGQdC+IZsA57OkSBNjIRXPYyIyiAb/F2aXf74V
oMRktwZ+AXyKfYWZ/dqYFDw2hFqSCu6JAxmy7TS2EpjAqoKvYBoE1+BJT7XbINqByX67
dE2lGY2aJcv6xHxaYxb8JUmfxlDSoNi997d6vCfIuYowrhi0oLuKCRrFsjDrVG4xjrZ+
HxyA==
X-Gm-Message-State: ACrzQf2T2yq2zRAcfGsj6yHvvHPHmmFNP05+I/FiXlxSgIZIAg92oAA3
VFOOcTuATfZytl0ZgRH2NOnZvctBAf5bjOSN
X-Google-Smtp-Source: AMsMyM6V/3skMD+SGp21alyV759L+LFappbEcs7Tw5yV5NiT2LZ0HnQzAUBfA40X28LRyCyMINVPVA==
X-Received: by 2002:a63:cd42:0:b0:46f:9f49:9468 with SMTP id a2-20020a63cd42000000b0046f9f499468mr2227058pgj.361.1667108538921;
Sat, 29 Oct 2022 22:42:18 -0700 (PDT)
Received: from Softgains ([122.161.79.88])
by smtp.gmail.com with ESMTPSA id l16-20020a170903245000b001871acf245csm179644pls.37.2022.10.29.22.42.17
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sat, 29 Oct 2022 22:42:18 -0700 (PDT)
From: Rahul Sharma
X-Google-Original-From: "Rahul Sharma"
MIME-Version: 1.0
X-Unsent: 1
Date: Sun, 30 Oct 2022 11:12:14 +0530
Content-Type: multipart/alternative;
boundary="------------030108000608060605000702"
Reply-To: info@cadssocial.org
X-Priority: Normal
To: doctor@netknow.ca
Disposition-Notification-To:
Message-ID: <2BEB28084D33E4FCA17F3F464804BF28AF5559DD@Softgains>
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, doctor@netknow.ca Hope you are doing well. Could we talk
to you about the website? would you be interested in new build or Re-build
your website?
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: deliverytrackingportal.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.8 MISSING_SUBJECT Missing Subject: header
Subject: {SPAM?}
This is a multi-part message in MIME format.
--------------030108000608060605000702
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8";format="flowed"
--------------030108000608060605000702
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
d>
">Hi, doctor@netknow.=
ca =0AHope you are doing well. =0ACould we talk to yo=
u about the website? would you be interested in new build or Re-build yo=
ur website? =0AOur team expert in: =0A<=
span style=3D"color: blue">Website Designing and Development, E-commerce=
solutions, Graphic design, UX-UI Designing, PHP Development, Word Press=
etc. =0AWe are a very skilled web designer with vario=
us abilities and can develop anything. =0AJust share your desired =
requirement with reference example and your Contact info. =0AI wil=
l go through the analysis and suggest best solution as per the Industry.=
=0A
Thanks & Regards, =0ARahul Sharma, =0A![]()
src=3D'http://www.deliverytrackingportal.com/index.php/cron/open/?tracki=
ngcode=3D1666020175u1971&emailaddress=3Ddoctor@netknow.ca' style=3D'disp=
lay:none !important;'>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 30 Oct 2022 05:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1op65E-000JYd-Fd
for dave@doctor.nl2k.ab.ca;
Sun, 30 Oct 2022 05:02:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 30 Oct 2022 05:02:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f194.google.com ([209.85.215.194]:44567)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1op188-000Nru-GY
for doctor@netknow.ca;
Sat, 29 Oct 2022 23:45:16 -0600
Received: by mail-pg1-f194.google.com with SMTP id q1so8149663pgl.11
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cadssocial.org; s=google;
h=message-id:disposition-notification-to:to:reply-to:date
:mime-version:from:from:to:cc:subject:date:message-id:reply-to;
bh=qZn2iEx2rlQOLw2P9QqYGG9DRpYstQil0YDchnccRJA=;
b=Df7oiTJ9XHzMx+QNmBE7y28GgMIugOv+WNry01aew8pE1WmMPyupT5vU89J9R0gonW
S7QFVg8QMQeQ5nvEFN6Kkts2zlV99tUlGOd1a6Ho5vpTFtgEI/RcHIyEYGx9pvVg9jx2
yLbsE//zZsdFgCqGn65aw6zidDeT8XF3jWusQl43zRqHv6OoRQs5MRmWbxC22e18SzTH
8aFcjdgxDhUN3ND32jLYcnlmhw/wLa3fabDuWY9P8dgRZjiFMszVLNzM/enYPi2BVYBZ
jRZYd9l/NoWUdBgt+js8UqTwwe16BmBciMmg8WpBGV35QPWjEq8Sl+q6W8Gem8r04Ana
WEYg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:disposition-notification-to:to:reply-to:date
:mime-version:from:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=qZn2iEx2rlQOLw2P9QqYGG9DRpYstQil0YDchnccRJA=;
b=F9iWH8WKiSZ44BXXam9ExI9GqU6Qz0HKiaJgmL/tgTmFXa8dnMLu0JjcP8byqT7OAy
CmrnExDggZXZ6Pf91CXDtuCvIJPQzlJJY7q3eSadz+C7yY77SJpNEU2d0kt0DRmB0GAk
1W/8r4s3/0kCcjpF/eute+oufBoxN0cGQdC+IZsA57OkSBNjIRXPYyIyiAb/F2aXf74V
oMRktwZ+AXyKfYWZ/dqYFDw2hFqSCu6JAxmy7TS2EpjAqoKvYBoE1+BJT7XbINqByX67
dE2lGY2aJcv6xHxaYxb8JUmfxlDSoNi997d6vCfIuYowrhi0oLuKCRrFsjDrVG4xjrZ+
HxyA==
X-Gm-Message-State: ACrzQf2T2yq2zRAcfGsj6yHvvHPHmmFNP05+I/FiXlxSgIZIAg92oAA3
VFOOcTuATfZytl0ZgRH2NOnZvctBAf5bjOSN
X-Google-Smtp-Source: AMsMyM6V/3skMD+SGp21alyV759L+LFappbEcs7Tw5yV5NiT2LZ0HnQzAUBfA40X28LRyCyMINVPVA==
X-Received: by 2002:a63:cd42:0:b0:46f:9f49:9468 with SMTP id a2-20020a63cd42000000b0046f9f499468mr2227058pgj.361.1667108538921;
Sat, 29 Oct 2022 22:42:18 -0700 (PDT)
Received: from Softgains ([122.161.79.88])
by smtp.gmail.com with ESMTPSA id l16-20020a170903245000b001871acf245csm179644pls.37.2022.10.29.22.42.17
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sat, 29 Oct 2022 22:42:18 -0700 (PDT)
From: Rahul Sharma
X-Google-Original-From: "Rahul Sharma"
MIME-Version: 1.0
X-Unsent: 1
Date: Sun, 30 Oct 2022 11:12:14 +0530
Content-Type: multipart/alternative;
boundary="------------030108000608060605000702"
Reply-To: info@cadssocial.org
X-Priority: Normal
To: doctor@netknow.ca
Disposition-Notification-To:
Message-ID: <2BEB28084D33E4FCA17F3F464804BF28AF5559DD@Softgains>
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, doctor@netknow.ca Hope you are doing well. Could we talk
to you about the website? would you be interested in new build or Re-build
your website?
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: deliverytrackingportal.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.8 MISSING_SUBJECT Missing Subject: header
Subject: {SPAM?}
This is a multi-part message in MIME format.
--------------030108000608060605000702
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8";format="flowed"
--------------030108000608060605000702
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
d>
">Hi, doctor@netknow.=
ca =0AHope you are doing well. =0ACould we talk to yo=
u about the website? would you be interested in new build or Re-build yo=
ur website? =0AOur team expert in: =0A<=
span style=3D"color: blue">Website Designing and Development, E-commerce=
solutions, Graphic design, UX-UI Designing, PHP Development, Word Press=
etc. =0AWe are a very skilled web designer with vario=
us abilities and can develop anything. =0AJust share your desired =
requirement with reference example and your Contact info. =0AI wil=
l go through the analysis and suggest best solution as per the Industry.=
=0A
Thanks & Regards, =0ARahul Sharma, =0A
Business=
Development Manger
scribe/unsubscribe.aspx?username=3Dbusiness@cadssocial.org&emailid=3Ddoc=
tor@netknow.ca">If you want to unsubscribe then click here.
src=3D'http://www.deliverytrackingportal.com/index.php/cron/open/?tracki=
ngcode=3D1666020175u1971&emailaddress=3Ddoctor@netknow.ca' style=3D'disp=
lay:none !important;'>