Sunday, January 9, 2022

Home / Unlabelled / Fwd: Fraud/Phishing emails - indeedseo.com Fwd: let's work together

Fwd: Fraud/Phishing emails - indeedseo.com Fwd: let's work together



---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Wednesday, January 5, 2022
Subject: Fraud/Phishing emails - indeedseo.com Fwd: let's work together
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, network-abuse@google.com, arin-contact@google.com, google-abuse-bounces-reports@devnull.spamcop.net, google-cloud-compliance@google.com, secure@microsoft.com, dns-admin@google.com, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@markmonitor.com, llashjames9876@gmail.com, david@davidstrauss.net, abuse@pantheon.io, abuse@cloudflare.com, info@indeedseo.com, abuse@godaddy.com, indeedseo.com@domainsbyproxy.com


This person sends fraud/phishing emails on behave of IneedSEO. I don't know this person nor company.  This person has no idea who he is contacting. I don't own website or company. My emails address is not officially listed anywhere.   The only way this person could get it is from the spam list. This person is phishing. Please block his accounts.  Below is the full header, info on the domain, his original email and the example messages sent from this IP address. 

Dear, indeedseo.com ,
I'm being bombarded with unsolicited emails on behave of your company coming from llashjames9876@gmail.com 
I reported all emails to the authorities. You'd better check who you hire to be your representative as they are not following anti-spam act and send emails to whoever they find on the internet.  Just look at the example messages sent from this IP address (attached below) And that is who represents you!  
Please take appropriate action to stop those emails as I will keep reporting them until theirs and your account are blocked including your website.  


Website: https://www.indeedseo.com Hosting Provider: Cloudflare IP Address: 172.67.211.229
Company: indeedseo.com
canonical name indeedseo.com. aliases addresses 104.21.77.214
172.67.211.229
2606:4700:3033::6815:4dd6
2606:4700:3034::ac43:d3e5

Domain Name: INDEEDSEO.COM     Registry Domain ID: 1886640252_DOMAIN_COM-VRSN     Registrar WHOIS Server: whois.godaddy.com     Registrar URL: http://www.godaddy.com     Updated Date: 2020-11-30T17:39:18Z     Creation Date: 2014-11-22T12:34:09Z     Registry Expiry Date: 2024-11-22T12:34:09Z     Registrar: GoDaddy.com, LLC     Registrar IANA ID: 146     Registrar Abuse Contact Email: abuse@godaddy.com




X-Originating-Ip: [209.85.216.48]
209.85.216.48 listed in dnsbl.sorbs.net ( 1 )

Geographic LocationUnited States United States
First Received Fromapproximately 11 months, 1 week ago 
Last Received Fromwithin 1 week 
Number Received107 email(s) sent from this IP

Example Messages Sent From 209.85.216.48
Subject: none/blank 
Subject: Deal 
Subject: Dear Friend, 
Subject: Greetings!!! 
Subject: Hello 
Subject: Regards. 
Subject: Attention , 
Subject: Qualification numbers (V-9920-1007, K-9770-549) 
Subject: Herzliche Glückwünsche 
Subject: Greeting's Beneficiary! 
Subject: Order Number: TEH-279149_55 
Subject: In_Voice ID : FLQ-198653_ 88 
Subject: IN_VOICE ID : EDL-2398/623_ 777 
Subject: INVOICE ID: MJK-7762PL_11 
Subject: Message from hospital 
Subject: 美緒っていいます❤LIN 
Subject: RESPOND TO THIS EMAIL(cshmagnate@gmail.com) ONLY. 
Subject: The United Nation have approved an international 
Subject: =?UTF-8?B?44Gv44GY44KB44G+44GX44Gm44CB5ZSv44G=? 
Subject: Outfit their home with t 
Subject: hurda hk 
Subject: Your E-bill key #65032-77621# 
Subject: Your Billing alert #73007-84398# 
Subject: +2349159132407 OR EMAIL dhlc375@gmail.com 



Ilash james <llashjames9876@gmail.com> 
let's work together
To: Svetlana Kopelev <ansvet_99@yahoo.com> 
X-Ymailisg: N8KZZMMWLDsxD.zyZ961GoU8_zKqiIz45dELKYJ_0.YT0pu9 7YehvVWEZIJr.UbkzSl_MktrEkrTsNxbvCAD5ZcehjNOScf.Bhr3mHvT3Zok QJIk9TxlXKLzcc7_SMo9lm5aabs3gKTXwV3NSaf2wV3jnUgFSCV8uEiirKWu 0YD7dCptQSMmFU7Vl1NR6jsfWa0aDML2s2ys_zd71_Zf6Ixt_54kYnVptTtM AZ5snCcT0Q1d6eBKAEGHOo7Q1Li9j7YgCo4kbchaUCpemPh9hgY2v7Va66Cm 2W9pydscaskFgXiXRdXHpUZzajZY.kkpuRGviUvBQjYTGejh70Lf1QbbvSyV 1CCOCqGY5BGL7dogaCiExVCcwsZ7PvD6a2xqtIax12KSqBs0CPWZo.aVMXOu 0Nqdlnr_8UyCiX5mpdrrZ6DCG5EhkJSlluDlFv.MId0X4C3CosNOtfS5uLdm PnMpO9YdTZec5M.vld7r3kql4DVrL5mY2y1Tqj1mkbdCJzyncYbrnF2C2el_ itBoIYOvyOp1lu633nYqDJkXoKfAXMseNznOSDua14XaTpD_ScpwJ9E9bxPy 39h3nbJlcQyEbF8Wdj7x4tggAHPv2741tJ5COldPH20gfZ3cux3w_LGv40h_ 6en7N4wOeaY1dTwSn5rZe9LvDExNy4YGl0dhgV5N9JoIhnj9AUdm3DNjhZTa v2.JOtFL_4wv0vVLNswTD393_Kt9UJBZq2bMiJ0yvydT5KoCDRQiw828kYVV EY0ZTmRUBuxWZLf50rdJRdKhkaGpYifu05aw.cDISxPUR7E6wMR9bIK6WyM. wRpRB8d7lEy.bi.1Rk2PAqzFjTeFGmSTUd.tO6TcZDVVcNcFRMFvZUjSbs1J 8pZBmSkj43Oe9nL9ktUkkVjgOQUcoNT765k_UT_u0pyY06M.fDbTqXUAtYBg ewt3JpWWNdsiUwpqwmp7Ba.bhWov9gDnsMIwX3paUWcTfjQTl8w9gA7ex_5M v2YBVR7ciLgeifloi4qbMVyLn2IP0qQV3A9ZufD6ZEzZd7vfPANF832rko9_ awJD1xL1ysTJ0H5k2UX6bKFjKa5iuK2rPbQsThAmM6UG68wrGNwYIXuyW0rA bAZpLOZENORcYpSoprpMus0P_7BXDV.I7uH_E4o4A96UI5CiF0i8nXRyUjrx klXTt76Dz6lBNrP7._AI
X-Received: by 2002:a17:902:ea04:b0:148:ccbf:f2cc with SMTP id s4-20020a170902ea0400b00148ccbff2ccmr55122161plg.134.1641385113172; Wed, 05 Jan 2022 04:18:33 -0800 (PST)
X-Gm-Message-State: AOAM533NB/MBfp3TV1RcNNehS99ayd6L/4mfiiKt6cL/N1GeykwWppxp N8z+gTzaiopJfQpjPIICsZPX5dsv2/r1RKwasjEAkPKz
X-Originating-Ip: [209.85.216.48]
X-Apparently-To: ansvet_99@yahoo.com; Wed, 5 Jan 2022 12:18:33 +0000
X-Google-Smtp-Source: ABdhPJwznObih6T9F1R/afqPiebmo62iwabUrSWfDgPShvCGYr4B+fLk05vc3u4EAEvkEStJoN7sQP5xz52Es/3i0nM=
Mime-Version: 1.0
Authentication-Results: atlas305.free.mail.bf1.yahoo.com; dkim=pass header.i=@gmail.com header.s=20210112; spf=pass smtp.mailfrom=gmail.com; dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
X-Google-Sender-Auth: MSAvcRwKDPBidNUVtEVtH79PmBE
Content-Length: 4627
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:sender:from:date:message-id:subject:to; bh=xoYQ9XvmC1CuAjfdgg4bOaOWLD4xgtL1B0Z2Yx4I/JM=; b=aoQI3lGNTDM72GBGV0H6HaT1tsAiFLSE35bnUpGikwQV3BHXUJrRVMdqQgR/HKKpr/ WhYRe1dTmDTKkJRRMabrpmDGw8bazh30C9bdqSzbDlZYjAPndfRa7XZSeVhfyDEZzJcV YuqkBCKsf1VGvdeBhdIDZBZj7U+jLtUWscAnrFCpe9m2tD3UlMVN1UVaH993d2YMZWqJ xeBfOuatmEzxdqR5Gqso4iMQxoNYgZ2jdlVirnsot6Sg3LC7DDRj4j15ZLQZW3EBY5/O jU8xkSA27ALXcyPi0qLSjIc3dyF66pgLqXvJwVdFd9GK0RKCMG37ww9H16UAlNqYzYe7 O2rA==
Sender: Ilash james <llashjames9876@gmail.com>
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=xoYQ9XvmC1CuAjfdgg4bOaOWLD4xgtL1B0Z2Yx4I/JM=; b=FdIVE0XrFMmNFYGdW1M+vFjbsidKIjfDXS7C1Ir987vyzaVqFvF9zq8LmwgeYo45XW ZqyWfWtajt1U7m7Ol2UkJ8N1YlJC0UCzJXfWxeeOz7Rf8aQm7gpJ4V0DedzoNhGsfuT2 VDlHiEUdQyep5fh0R+tZSkkwShUgwuRqBA00Wp/bFnfbvv7Sioqz0P25F+iPaEoeaaaf CugBgDd1mDCNwbKGItnHev+36E4E2bcp1bq0r1JTP5FuRMa1O5DknvZM96WdPlhTQ9RP Dmw/ZVoHEkd7ivAMV92jEqABbkSp+A4PTJTXFlo+W+uR+VFihmD/tYCrdnLBWOH+E86D hXBw==
Content-Type: multipart/alternative; boundary="0000000000009c3bf105d4d4c06b"
Received-Spf: pass (domain of gmail.com designates 209.85.216.48 as permitted sender)
Received: from 10.197.39.201 by atlas305.free.mail.bf1.yahoo.com with HTTPS; Wed, 5 Jan 2022 12:18:33 +0000
Received: from 209.85.216.48 (EHLO mail-pj1-f48.google.com) by 10.197.39.201 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Wed, 05 Jan 2022 12:18:33 +0000
Received: by mail-pj1-f48.google.com with SMTP id rj2-20020a17090b3e8200b001b1944bad25so6170594pjb.5 for <ansvet_99@yahoo.com>; Wed, 05 Jan 2022 04:18:33 -0800 (PST)
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST; Wed, 5 Jan 2022 04:18:32 -0800
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST; Wed, 5 Jan 2022 04:18:32 -0800


Begin forwarded message:

From: Ilash james <llashjames9876@gmail.com>
Subject: let's work together
Date: January 5, 2022 at 7:18:32 AM EST
To: Ansvet <ansvet_99@yahoo.com>

Hello,

Do you want to slash your SEO cost by 60%? We are IneedSEO and We offer 100% White Label outsourcing solutions to Digital agencies. You can check more about our services and profile at www.indeedseo.com.

Why partner with us?

1. White label reports with 24x7 support on Skype and basecamp.
2. We provide you a top notch white label SEO dashboard.
3. Our dashboard integrates Google analytics, Search console, SEMRUSH, Moz, Ahrefs data in one place.
4. We are technical SEO people and are geared towards performance only. We have a success score of 80% for our SEO campaigns.
5. Dedicated team of 100+ professionals ready to jump into your project right away.· save up to 60% marketing as well as resource hiring cost.

You are interested? Please share your ideas. If you want to talk over a call, we can schedule a meeting with my Manager. She can give you a demo of our work and discuss your ideas.

If this sounds good to you, I can send you our past work details, company information and an affordable quotation with the best offer. Let's hop on a Skype/Phone call for better communication.

Let's stay in touch!

Warm Regards,
Ilash james
Business Development Executive


 
beacon


Read more

🔍 Exposing Online Scams – One Email at a Time

This blog is dedicated to unmasking Advance Fee Fraud scams. Every suspicious or scammy email I receive gets posted here—not because you’re special, but to show you the truth:

There is no prize. No inheritance. No secret fortune.
It’s just a scam, and if you reply, you’ll soon be asked to pay a “processing fee”… then they vanish.

💬 Have you received a suspicious email?
Forward it to emailscamalerts@gmail.com and we’ll help investigate.
Together, we can make the internet a safer place — SCAM- and SPAM-free.

at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)