Sunday, January 9, 2022

Fwd: Fraud/Phishing emails. Fwd: rightwayautorepair.com Hidden issues in your website



---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Wednesday, January 5, 2022
Subject: Fraud/Phishing emails. Fwd: rightwayautorepair.com Hidden issues in your website
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, abuse-contact@publicdomainregistry.com, san.kswain90@gmail.com, narayanm.up@gov.in, indiaportal@gov.in, "ABUSE@enom.com" <ABUSE@enom.com>, abuse@hostgator.com, eig-net-team@endurance.com, compliance@domain-inc.net, corpdomains@endurance.com, network-abuse@google.com, arin-contact@google.com, google-abuse-bounces-reports@devnull.spamcop.net, google-cloud-compliance@google.com, registrar-abuse@google.com, secure@microsoft.com, dns-admin@google.com, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@markmonitor.com, david@davidstrauss.net, abuse@pantheon.io, nancy@smartwebexpert.com


This email violates anti-spam act: there is no company's name, no contact info, no valid physical address. The unsubscribe button looks very suspicious - I did not risk to click on it. 
 I don't know this person.  This person has no idea who he is contacting. I don't own website or company. My emails address is not officially listed anywhere.   The only way this person could get it is from the spam list. His website report shows malicious activity (attached below). This person is phishing. Please block his accounts.  Below is the full header, info on the domain, his original email and the example messages sent from this IP address. 

Domain: nancy@smartwebexpert.com Hosting Provider: Unified Layer IP Address: 192.185.129.80
canonical namesmartwebexpert.com.
aliases
addresses192.185.129.80
Website: http://www.smartwebexpert.com looks very physhi 
   Domain Name: SMARTWEBEXPERT.COM     Registry Domain ID: 2624049380_DOMAIN_COM-VRSN     Registrar WHOIS Server: whois.PublicDomainRegistry.com     Registrar URL: http://www.publicdomainregistry.com     Updated Date: 2021-11-10T05:12:09Z     Creation Date: 2021-07-03T13:10:06Z     Registry Expiry Date: 2022-07-03T13:10:06Z     Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com     Registrar IANA ID: 303     Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com     Registrar Abuse Contact Phone: +1.2013775952     Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited     Name Server: NS1.BH-HT-11.WEBHOSTBOX.NET     Name Server: NS2.BH-HT-11.WEBHOSTBOX.NET

Registrant Email: san.kswain90@gmail.com  Registry Admin ID: Not Available From Registry  Admin Name: Sandeep Swain  Admin Organization: Smart Web Expert  Admin Street: Kalinga Vihar    Admin City: Bhubaneswar  Admin State/Province: Orissa  Admin Postal Code: 751010  Admin Country: IN






X-Originating-Ip: [209.85.166.72]
209.85.166.72 listed in dnsbl.sorbs.net ( 1 )

Geographic LocationUnited States United States

First Received Fromapproximately 3 years, 3 months, 4 weeks ago 
Last Received Fromwithin 2 weeks 
Number Received162 email(s) sent from this IP

Dictionary Attacks6 email(s) sent from this IP
First Received Fromapproximately 1 year, 1 month, 2 weeks ago 
Last Received Fromwithin 1 year, 1 month, 2 weeks 


Example Messages Sent From 209.85.166.72
Subject: INTERNATIONAL MONETARY FUND (IMF) 
Subject: Re: 
Subject: 在线挖掘采购信息 
Subject: Hello Dear Friend 
Subject: FROM DHL GET BACK TO US 
Subject: RE: supply project 
Subject: Attn Dear.Beneficiary, 
Subject: =?UTF-8?B?5aSW6LS45bmy6LS=? 
Subject: =?UTF-8?B?5a+55a6i5oi36L+b6KGM5ZWG5py65YWz5rOo77=? 
Subject: (freankaddo707@gmail.com) 
Subject: PHP & My SQL Development and E-Commerce/Online S 
Subject: You have been added to BornagainOnesNorthEast 
Subject: You have been added to ChristOnhighNorth 
Subject: You have been added to ChristOnhighMidwest 
Subject: Professional Creative Web Design Services! 
Subject: Website revamping (Total revamp with Mobile Resp 
Subject: SEO | Digital Marketing Proposal At Affordable P 
Subject: Live Chat Search My WhatsApp Number 
Subject: Reminder: Web Designing and SEO Proposal 
Subject: Web Development – (E-comme 
Subject: SMO Service 
Subject: =?UTF-8?B?WW91IGhhdmUgYmVlbiBhZGRlZCB0byDw=? 
Subject: Open Her Tonight At 12.30 am 
Subject: Business software and solutions for iPhone, iPad 
Example User Names Used By 209.85.166.72
User-namewade.moraes
User-nameselypuk
User-nameina_blee
User-nameebora_h_mostowy
User-nameerisaharvel
User-namegpride



rightwayautorepair.com Hidden issues in your website
To: Svetlana Kopelev <ansvet_99@yahoo.com> 
X-Ymailisg: cgC5_yoWLDsznJQrt2FBMU9Qk4GYe.Bog0np.8fSj1WGLJNj reaq130wsS9nmtR74FGRoORlWPUzHwFT4eFS5mxuBMYQqpHEaXi6U9yOT8Yo maKsbDwDs3RmahzPCrr9ts5GS9wgurQW0k280.8hLoxptRDBNLRpL.cdYDiu p3kb4QPU3x4zvSXBGwp4RHFtAYjZ.yhOHAfvX5R6gHfuUBisq_QYvgMxvIbV x2T0thoQADMNnUpRyyLAzGB5sqS8ApsSW7cBJVnuSjHGJU2kVGpadkR3AF3u VOZI.OBA14CrieT95cptXbZIZID.KvKwyXZluwlVoyQjgDvOyV42r7pu4zMS F8Fmk9lDhdOLc8ksDBlKEWfiZiwzZvEZsHbdpunL7r.PO2ZMb4ZX7Ujgb.BD z56I6lAnAGxzO5Kv1jOCpqEboPCD.qPccJuSdXQB.R.v8w6d_pQm0at_qSNn c4AM3BGKTTvo8L4itzn0ZZG.wHUx3ulL6pX8SCffaSjEQlEcmSvM368aigc. eAs_DBSFfSKJUnXYgMY.okapzk0cZm0avatftm0lRpVajJ8T31S.y0B1aVA4 2FETYm1FBOlSQAP.OIbO4ZdB6vdv7_ZrAxjHmzVaDunS.1SHZIHk0edi15NH K2olYE_ynL3n.RpKYXQZ3Aa94iOA8Ux0afyUpCuhFLgBj4FTPZ8wOtqMMNK8 DgqMpw1H4gDADm4jfA9X7cOEr6ATUOkR9ouTTr4c1HyjVSdj3qECR5hBLGzd xdr8TwAWqPJPUdCbJJOTzRKaAfMw1lXqthiTFn3oWldY7wheP._V0Zl271Gu W5rmtYHP4WqH8tOGyc4ac0guL_6PDgFKTFkSY4eVs0FssLHyGsor_VE1v9T0 meWGPxRxqE6Rz7MiMcRV40H5103gomwaWjgC3.6ZifSZvdyBWgdgGYf0GkQw X21FYZEf35i6NnIpOI_Ieyf.TG87_eoz.btM0jVSitrf64Hn_x2qg9pnbKZr L75rGSdsUwae4awTPJ3M3FBo8xcbanwZYiCKXww34CY.b2meeSyfjmNkKRbh jsAITFjNbr6BimMK20Rm75YkrvgqDZHE_18S1pRwZ4RTKFsS5.IkVtCvHMXJ Eq97MhZgVy5anvEOhgFmqUETOcc8tCUH.38LaOpYBFkoZHfcEVdHIkLzRgyT PoQaopip_8hWk7DkWiP77o2Fai6KHgDsUoONjmLqKDSv
X-Received: by 2002:a05:6e02:2149:: with SMTP id d9mr22260642ilv.187.1641387800304; Wed, 05 Jan 2022 05:03:20 -0800 (PST)
X-Gm-Message-State: AOAM530XvK6xgjqU6KlOqgEQ5vFxbME0D66Zf6Wj8wMsx9G5kx7f94ce nK/vQKy9oOceUehoo62COm/VuFbmDhwg
X-Originating-Ip: [209.85.166.72]
X-Apparently-To: ansvet_99@yahoo.com; Wed, 5 Jan 2022 13:03:21 +0000
X-Google-Smtp-Source: ABdhPJysANWzVN248B2Oi8+xe7T7qf6oKGCdgNgPqQXX2A3B9aET+zRi9DjPdJHfoGpgQ2sYQ93V6NBqKA==
Mime-Version: 1.0
Authentication-Results: atlas325.free.mail.ne1.yahoo.com; dkim=pass header.i=@smartwebexpert-com.20210112.gappssmtp.com header.s=20210112; spf=pass smtp.mailfrom=smartwebexpert.com; dmarc=unknown header.from=smartwebexpert.com;
Content-Length: 19496
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smartwebexpert-com.20210112.gappssmtp.com; s=20210112; h=mime-version:reply-to:message-id:date:subject:from:to; bh=uL1FNBfiFeM04bvqQnrvTIPKx2Qn8DACHy/r/5CHgvQ=; b=aYxODUyOjZUgEQg3SS/glWJtm2w/hK0xDUvGGD7bzdfH6vZHj+TiPBFtlQIs4Xzblv kvU0uFv1csztzT5/AzeOgiJQ2Ul1wrMWT9M5WsjEZyUEkJ4iUSvMkE4K3uUIzIUeEN6/ ZLiFKojYg0M/Yiux4/HW2Aj59PW6g3AYU6c8y0XvPmLSyzI/Gf3njDPO1GbWQe6mgDW7 Jnbcy5K21K7jUVkvLJsAH8Ac2HfMPSyJ53K7shOI0Qs+nP2tiN/P0xz3FEUF1jh5AUUe 2W+ZS8Ioz66VCAa4NgNQ6Y/58oQnoOgB7fsNeC98vyhw6Umdq7tAFTSTBEkuEeA+tUNY wf4A==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:message-id:date:subject :from:to; bh=uL1FNBfiFeM04bvqQnrvTIPKx2Qn8DACHy/r/5CHgvQ=; b=lTH/zjbaUI/keOWYTK6aebyFzfYixIC6lPwZIrvPXib2S+qkeNsGBrOv3/MfFUOsUi ofmboLKexYBB4RhUnAJjW8scm7CW8ikS8iq90MLu1+xxlmRKrWzC9TIRi9NwIkHKputQ CRc07mqH2VlQMJ2O6r9yNGexANEKbnicrLLiA/B49VYc45F6AQ228Wd3/sUIxM+Doj+C ziUuzLwPqPUX68+rdzJcJyH2kdSM3sQnTGE/ZOofBcqO3NAVsO6H951OkVVByOPOlDKj xRexpMysUiPHlMOHtsBDwQE6nqOUJvvYhf4osQfPBDKfSyqI0IfIzDcR9WTlqYLeDbpB 50IA==
Content-Type: multipart/alternative; boundary="000000000000c6a11605d4d560b7"
Received-Spf: pass (domain of smartwebexpert.com designates 209.85.166.72 as permitted sender)
Received: from 10.217.134.141 by atlas325.free.mail.ne1.yahoo.com with HTTPS; Wed, 5 Jan 2022 13:03:20 +0000
Received: from 209.85.166.72 (EHLO mail-io1-f72.google.com) by 10.217.134.141 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Wed, 05 Jan 2022 13:03:20 +0000
Received: by mail-io1-f72.google.com with SMTP id x11-20020a0566022c4b00b005e702603028so22109089iov.2 for <ansvet_99@yahoo.com>; Wed, 05 Jan 2022 05:03:20 -0800 (PST)



Begin forwarded message:

Subject: rightwayautorepair.com Hidden issues in your website
Date: January 5, 2022 at 8:03:20 AM EST


I am a Digital Marketing Consultant and while working on an online project I came across your website 
rightwayautorepair.com first of all congrats for having such a beautiful layout of your website but while analyzing it a bit I found certain errors in it. They are the following mentioned below:

1. A couple of onsite issues on your website.
2. Your website is not completely mobile responsive.
3. The SEO of your website is not to the optimum level and that is directly affecting the traffic, rank and sales that you deserve to get from your website.


My team can fix all those issues, make your website mobile optimized and bring it to the TOP PAGE of Google so that you will get enough traffic to your website and in return your quantity of new sales or new business rate will increase.

I had prepared No obligation audit report of your website where you find all the issues and understand it in detail. 
So, if you are interested I can show you the report & I'd be happy to send you our package price and past work details.

Thank you in advance.

Regards,
Nancy Smith
Sr. Digital Marketing Consultant

 

PS: If you are no longer interested in receiving emails from us, you can unsubscribe here : https://forms.gle/Bfm3FQCrH4c4dFbJ6


No comments:

Post a Comment