Web / App SEO spam from Google Gmail

Posted by Dave Yadallee on Monday, April 15. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Apr 2024 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwMiJ-000000004HV-2Lun

for dave@doctor.nl2k.ab.ca;

Mon, 15 Apr 2024 07:49:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Apr 2024 07:49:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f195.google.com ([209.85.166.195]:48257)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rwGs5-00000000PTb-28NI

for sales@nk.ca;

Mon, 15 Apr 2024 01:35:25 -0600

Received: by mail-il1-f195.google.com with SMTP id e9e14a558f8ab-36a261cd6b5so17215505ab.0

for ; Mon, 15 Apr 2024 00:33:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=delhitechie-com.20230601.gappssmtp.com; s=20230601; t=1713166400; x=1713771200; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=LJEBVsIa4MUom6nS1j3LsOirOIMKlW3uhYjnL+1Dedw=;

b=q7ZmuoiQCT9vSt8K9SJOC6HWuVVH9dmGVFsK7Icpvh00x4OeauPrH44vzU8BTaOKdK

LzC/LyUY7POxyFy6tyipNWYjkqrNwcHdaqqctuvXoFf/Ae2idWD4BHnbwlv6LVKlfsdf

f4+IqUS4ZtoN3+kFkTQLrZRV4QEfGDfjgxr5tX6yD8tGzwY1I+M2yOTY07k6C6kQRtL0

GYfE24V47FVWiOH+p7oFZZvc8fMdUrj7OFvQkHKuyGY8/Oz8sKjcgpzlemjdox6r1wzh

yThF2zqCg/JitgHuIcf8BaxxtkObnQM0cVNFV5WT4YoISv5VfGBS2KaAsZJJ7uiq62sI

T3bg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713166400; x=1713771200;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=LJEBVsIa4MUom6nS1j3LsOirOIMKlW3uhYjnL+1Dedw=;

b=bxqPIONVX7p+8M0M3mKi14J2UzxSrPsF8NMd81b6rxAFgfJPWsGmSmcZaLxMNlLWG8

O94k9ja7OaKQot7gYh7k4qpRzoFdwDjpviE756Xpv8qdsS2p379iPZ4J80PH1GUscmv+

HSnuUUdmz2HT3LNR7VvwZEZW75vY91iGpa6ZEBafwzlrn6ZRRUkFxeT9Ri20lyF0lVhR

NFeLJxXIeLaJBhLjXT/jKAaCKA92XnqwzmLKs00LnSliXfFUjtwpSpE3Bm1Iud5rUP90

dJuSWif1yQPXrtqXq/7YIhMh2FLOtZnmTpYfr+PJBfWvLpOjKTddHiloRiI7Cz75xGBr

TqOw==

X-Gm-Message-State: AOJu0YySlIT6Fp16A9553Ye0bJ+tXxF2jkfszwUYes12/pTB4eFpPFQv

IPRJOhRN21GQR3tZFwGSMzN9GV4ykvO9u5/UaXgkxiuRdi0zZlybLltcrPDXu99ipeis7IPshro

L3eg=

X-Google-Smtp-Source: AGHT+IHMvpbFnWXKgMrqWVNjFztIiN7KpiFJEiVVFPIsG5TadrDXs8wnFL4iDNA4dIkW10rlp8fJQA==

X-Received: by 2002:a05:6e02:1fc1:b0:36a:3f10:7ef4 with SMTP id dj1-20020a056e021fc100b0036a3f107ef4mr11612777ilb.29.1713166400405;

Mon, 15 Apr 2024 00:33:20 -0700 (PDT)

Received: from aa ([122.161.77.46])

by smtp.gmail.com with ESMTPSA id h34-20020a635322000000b005f7536fbebfsm3003225pgb.11.2024.04.15.00.33.18

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 15 Apr 2024 00:33:19 -0700 (PDT)

From: "Mehak"

To:

Subject: Design/Developer

Date: Mon, 15 Apr 2024 12:54:30 +0530

Message-ID: <1912501da8f07$30127530$90375f90$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_19126_01DA8F35.49CAB130"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdqO/EklfR1Mjz22SNKJ/qobrq69+A==

Content-Language: en-us

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, Would you be interested in build or Re-build your business

website? We are a professional Website Development company. Re-designing

- Brand New Design as per latest market trend.

Content analysis details: (10.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[122.161.77.46 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

[209.85.166.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[122.161.77.46 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

[209.85.166.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.77.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.77.46 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.195 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.195 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 SPECIAL_OFFER BODY: Special Offer

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 RCVD_IN_SORBS No description available.

Subject: {SPAM?} Design/Developer

This is a multi-part message in MIME format.

------=_NextPart_000_19126_01DA8F35.49CAB130

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hello,

Would you be interested in build or Re-build your business website? We are a

professional Website Development company.

Re-designing - Brand New Design as per latest market trend.

Functionality - CMS, News Letter Subscription, Ecommerce, Shopping Cart,

Payment Get way etc.

Landing Pages - Highly Optimized Landing Pages for better Conversion.

Responsive Designing - 100% Compatible with all the devices like mobile,

iPod, laptop, desktop and all the web browsers.

If you are interested, please share your requirement.

It would be great if you can share your contact number whatsApp/skype.

My rates are very affordable. {Special offer only today}

Thanks You,

Mehak

------=_NextPart_000_19126_01DA8F35.49CAB130

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>Hello,

class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>

class=3DMsoNormal =

style=3D'margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;text-=

autospace:none'>Would you be interested in build or =

Re-build your business website? We are a professional Website =

Development company.