Web / App / SEO Spam from Google Gmail

Posted by Dave Yadallee on Saturday, April 27. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 Apr 2024 14:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s0oRw-00000000BMR-2g3j

for dave@doctor.nl2k.ab.ca;

Sat, 27 Apr 2024 14:15:08 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 Apr 2024 14:15:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:45295)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s0m7Q-00000000OGQ-1EtW

for sales@nk.ca;

Sat, 27 Apr 2024 11:45:52 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-6ed01c63657so3144475b3a.2

for ; Sat, 27 Apr 2024 10:43:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1714239828; x=1714844628; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:to:from:from:to:cc:subject

:date:message-id:reply-to;

bh=FVMOJErIJAXVAaQZHrhc/HSbat5QTfGsOn0Gdfj+iiM=;

b=CfxvhJQJV1AYaTkNTp7reBCgcIGpOCyb5vSQdKdyi34b7H9Cp8HDU8jNCLL4i5di7n

pj/K7+V9hE/oIlxtIege20DUIyTNoXN8fNJgUeuc/+iy/GtNWolzQFsUgyL0RrK++zFr

s7duy3ht1nhmv/OwJFoOBacQZRn4C9aQ6F87UUQpfQSL+y68nZChtuzBRoCJI/yE/a3r

eZaZt7EZM+8USUSD55Rbyr0nfXJf5i6IPFz23Bj2qcmpHd1dM9GV9yQMQl0Dbgwe3ZCm

jSOkdFYWs9WHGGUmvodEYh0xmrj8V1+fh6JcfMUwdlWuZFYRP3PaFw2yDk4UyWUAmhXA

PQFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1714239828; x=1714844628;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:to:from:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=FVMOJErIJAXVAaQZHrhc/HSbat5QTfGsOn0Gdfj+iiM=;

b=Zt4KBBim7/W6DfMzq4Yfd3kifHGd4DznCbknqoOKz2pphiPpwND+UI8qO+LbOBm+0o

XGJEEbdJ36GHnDAY/5sMQoKz7NSruNz0Imjcq38UHTMuU8UxJOnKIfPLbB1QewHSKF5q

dbnCRzkyzgGIREty8Q4P5VlGI73Rn0XY1nU90JoW/aJxcNf40SMc5VP+8oPn8VEmS6Wh

QHHLMI0/XcXE4cum/Gc7EsWHVDWFhmekr6UP5jguOQoYg9G33AqbofH38AoR1seeXGMG

ftH+Koe+QZrjxcqrbdCyxQTtpqCYamIiK0CeZiDjywuKcI5o2dZR28I35NQ/cK6FRQ7P

cnaw==

X-Gm-Message-State: AOJu0YyzJVs6EIl+dz2Jl0PYDE6xsRNs6m0jy8ZgrO+zUCtDl5BdeZmm

nVW/mM/4eftXnp5p9zWBodCjG40cIj+3KC1egvkr+oUXhrHUJtFJM17mTw==

X-Google-Smtp-Source: AGHT+IENQMsOVSBWR0Det5f9m/yb81PzkGa8iPpFPUxq1a776lWbWveNmXBjEcfU7Q32KqBkiWVHig==

X-Received: by 2002:a05:6a21:3e09:b0:1a8:2cd0:10ef with SMTP id bk9-20020a056a213e0900b001a82cd010efmr3240338pzc.22.1714239827701;

Sat, 27 Apr 2024 10:43:47 -0700 (PDT)

Received: from DESKTOP06P5HI6 ([2409:4050:2dbb:a0ff:7870:b052:810e:f7bb])

by smtp.gmail.com with ESMTPSA id n56-20020a056a000d7800b006e6b7124b33sm16571352pfv.209.2024.04.27.10.43.45

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 27 Apr 2024 10:43:47 -0700 (PDT)

From: "Kohil Pate"

To:

Subject: Re: Upgrade, repair, or redesign....!!

Date: Sat, 27 Apr 2024 23:13:42 +0530

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0694_01DA98F8.8E59EBA0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdqYynG1FP+NTpaLQr+uqFkGWQ22+A==

Content-Language: en-in

Disposition-Notification-To: "Kohil Pate"

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi there, I am reaching out to see if there is anything that

would like to create, upgrade, repair, or redesign on your website. I am

a web designer / developer that can do just about anything you can imagine

at very affordable prices.

Content analysis details: (6.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.181 listed in dnsbl.ahbl.org]

[209.85.210.181 listed in dnsbl.ahbl.org]

[209.85.210.181 listed in dnsbl.ahbl.org]

[209.85.210.181 listed in dnsbl.ahbl.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in dnsbl.ahbl.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in dnsbl.ahbl.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in dnsbl.ahbl.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.181 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[209.85.210.181 listed in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

[2409:4050:2dbb:a0ff:7870:b052:810e:f7bb listed]

[in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.181 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.181 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kohilpat41(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kohilpat41(at)gmail.com]

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Re: Upgrade, repair, or redesign....!!

X-Antivirus: AVG (VPS 240427-4, 4/27/2024), Inbound message

X-Antivirus-Status: Clean

This is a multipart message in MIME format.

------=_NextPart_000_0694_01DA98F8.8E59EBA0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi there,

I am reaching out to see if there is anything that would like to create,

upgrade, repair, or redesign on your website.

I am a web designer / developer that can do just about anything you can

imagine at very affordable prices.

Let me know what you think.

Thanks,

Kohil Pate

Note:- If you are not interested Our Service u can simple reply No I will

never contact you sales@nk.ca again.

------=_NextPart_000_0694_01DA98F8.8E59EBA0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>

class=3DMsoNoSpacing>Hi there,

style=3D'font-variant-ligatures: normal;font-variant-caps: =

normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: =

0px;text-decoration-thickness: initial;text-decoration-style: =

initial;text-decoration-color: initial;word-spacing:0px'>I am reaching =

out to see if there is anything that would like to create, upgrade, =

repair, or redesign on your website.

class=3DMsoNoSpacing style=3D'font-variant-ligatures: =

normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: =

2;-webkit-text-stroke-width: 0px;text-decoration-thickness: =

initial;text-decoration-style: initial;text-decoration-color: =

initial;word-spacing:0px'>

class=3DMsoNoSpacing>

style=3D'font-variant-ligatures: normal;font-variant-caps: =

normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: =

0px;text-decoration-thickness: initial;text-decoration-style: =

initial;text-decoration-color: =

initial;background-image:initial;background-position:initial;background-s=

ize: initial;background-repeat:initial;background-origin: =

initial;background-clip: initial;word-spacing:0px'>Note:- If you =

are not interested Our Service u can simple reply No I will never =

contact you sales@nk.ca again.

------=_NextPart_000_0694_01DA98F8.8E59EBA0--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Name

Homepage

In reply to

Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enter the string from the spam-prevention image above:

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

Enter the string from the spam-prevention image above:

Remember Information?

Subscribe to this entry

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '24					Forward →
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31