More SEO Spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Apr 2022 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nk313-000DbP-Hc

for dave@doctor.nl2k.ab.ca;

Thu, 28 Apr 2022 06:13:01 -0600

Resent-From: The Doctor

Resent-Date: Thu, 28 Apr 2022 06:13:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:55245)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nk2pD-000CWd-2g

for sales@nk.ca;

Thu, 28 Apr 2022 06:00:51 -0600

Received: by mail-pj1-f68.google.com with SMTP id fv2so4100908pjb.4

for ; Thu, 28 Apr 2022 05:00:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=from:to:subject:date:message-id:mime-version:thread-index

:content-language;

bh=oMLcH2QF6pgHBBbk4GZiyxvQjNjjBRDwxzFPOj+8Dk4=;

b=jOv3ZGGkwncOjT3oexlh56QiChhPq5cLVSqRJesBWh9gur/7VQaZ9bvN4BjRQn9Crv

NSjc66pIwO04rHUY7sns9Q2gc/S2dbL+h8fO8R4hB8oPg/oeQ9IDv2GAXAXeDqVfV+KY

WF9AP2V5aE30VML6q6tqo0tRGSZuyqSx+Vm7Tsup/u8nOe9gVEALiOT7Kv/W7B8o1MwC

ntQUhfQuD/OPxzLADA9UukgheKIPcY5R3Ow45DfB31K/8SsKbAIoZg5L1qjhlvKWXZO0

J1mE3gyrTFbCECIZWQP2oX1A/Y4Q+UyN78CvIbVRZJdWu8Y0TV4iLyXEFnfv5vks2D3P

ibOA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:from:to:subject:date:message-id:mime-version

:thread-index:content-language;

bh=oMLcH2QF6pgHBBbk4GZiyxvQjNjjBRDwxzFPOj+8Dk4=;

b=IPzS0Cab36oIxCdWtLAVszr5aO648UruK9InUvOgB65vufdwm+hgeFE3ty0bAYqaHq

L+FFCeQXj3RtQeXwkhGxXw59/WCdFCW2W91X/ojv+5/54SYzsEaAcv159JPyQZNGAay7

7lg0EPtIoayIaf/xWKc5+e40ZFxf6DL0WLOZkKC5upKbP4JEwtrvu5JI1GQxBypxR92e

sdwm0k7w4B64ENLTnuaNorNyDCPCqiIvUl3xQbmZ3002sOXL4gnyfHceSlxVh5rpNY0L

3xfQYd7X4RFDqizOpW68P0hQxD+V2MGhaTtTL2Af33XjOI0pDxE3CBUU7OnmZ2bnK+vS

QuEw==

X-Gm-Message-State: AOAM530Fibo/3zbc9M3wj0GslcwD1K8Qqr0Yqv/IdfQqjXZnBv92/idS

3Sbx17l4yA+jh+zGKxiCte7KlQAZmMk=

X-Google-Smtp-Source: ABdhPJwogBiBRKspyR+V5E+SsCJ1aDqy8A7gZZFqt+DapAuefpWUdlNkHq0nUTKSgrflnA84pUL7Zw==

X-Received: by 2002:a17:902:a417:b0:158:ed2c:3740 with SMTP id p23-20020a170902a41700b00158ed2c3740mr32969295plq.121.1651147224321;

Thu, 28 Apr 2022 05:00:24 -0700 (PDT)

Received: from DESKTOPIF57C6J ([163.53.85.164])

by smtp.gmail.com with ESMTPSA id i3-20020a056a00224300b0050d32f838e1sm15589204pfu.21.2022.04.28.05.00.22

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 28 Apr 2022 05:00:23 -0700 (PDT)

From: "Sara"

To:

Subject: Traffic Site

Date: Thu, 28 Apr 2022 17:29:49 +0530

Message-ID: <148201d85af7$8bc6c070$a3544150$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1484_01D85B25.A57EFC70"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adha7OqM43jW5MZFTJOnHuKL1Gus/w==

Content-Language: en-us

x-cr-hashedpuzzle: ALw= AjW1 AlBj Aw9Y A7dH BGCg BOoo CWxP CoW4 DdyK D/9D GT2x GeN6 HK0q IklH J2w0;1;cwBhAGwAZQBzAEAAbgBrAC4AYwBhAA==;Sosha1_v1;7;{FEE09A41-AA3C-4C35-B25B-4C359A0AE326};cwBhAHIAYQBjAG8AcgBuAGEAcgA4ADkANQA2ADQAQABnAG0AYQBpAGwALgBjAG8AbQA=;Thu, 28 Apr 2022 10:44:20 GMT;VAByAGEAZgBmAGkAYwAgAFMAaQB0AGUA

x-cr-puzzleid: {FEE09A41-AA3C-4C35-B25B-4C359A0AE326}



This is a multipart message in MIME format.



------=_NextPart_000_1484_01D85B25.A57EFC70

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello sales@nk.ca,







I found your web contact email from Google "sales@nk.ca". I would like to

discuss a business opportunity with you.



We are a Leading Indian Based SEO & Web Development Company and one of the

very few company which offer organic SEO services with a full range of

supporting services such as one way themed text links, blog submissions,

directory submissions, article writing and postings, etc.



We are a team of 50+ professionals which includes 18 full time SEO experts.

We are proud to inform you that our team handled 100+ SEO projects.



We will be glad to assist you with offering our services. Please let me

know your interest.



Thanks for your time, looking for your kind response!







Kinds Regards,



Sara



SEO-Consultant









------=_NextPart_000_1484_01D85B25.A57EFC70

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'>Hello

sales@nk.ca,         

        

           

          
span>






style=3D'font-size:10.0pt;font-family:"Helvetica =

Neue"'>  






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'>I

found your web contact email from Google “sales@nk.ca”. =

I

would like to discuss a business opportunity with =

you.






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'> We

are a Leading Indian Based SEO & Web Development Company and =

one of

the very few company which offer organic SEO services with a full range =

of

supporting services such as one way themed text links, blog submissions,

directory submissions, article writing and postings, =

etc.






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'> We

are a team of 50+ professionals which includes 18 full time SEO experts. =

We are

proud to inform you that our team handled 100+ SEO =

projects.






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'> We

will be glad to assist you with offering our services. Please let me =

know your

interest.






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'> Thanks

for your time, looking for your kind response!






style=3D'font-size:10.0pt;font-family:"Helvetica =

Neue"'> 






style=3D'font-size:10.0pt;font-family:"Helvetica Neue"'>Kinds

Regards,






style=3D'font-size:10.0pt;font-family:"Helvetica =

Neue"'>Sara






style=3D'font-size:10.0pt;font-family:"Helvetica =

Neue"'>SEO-Consultant





 

















------=_NextPart_000_1484_01D85B25.A57EFC70--



Chinese spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Apr 2022 05:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nk2BS-0001tY-5y

for dave@doctor.nl2k.ab.ca;

Thu, 28 Apr 2022 05:19:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 28 Apr 2022 05:19:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [112.255.137.21] (port=58942 helo=alt2.aspmx.l.google.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1njzSB-000N3H-HL

for sales@nk.ca;

Thu, 28 Apr 2022 02:25:08 -0600

Date: Thu, 28 Apr 2022 16:24:13 +0800 (CST)

From: newhopeglassmirror

Sender: opooaw

To: sales

Message-ID: <351419494.1023385.1651134253246@alt2.aspmx.l.google.com>

Subject: Modern Popular Mirrors from New Hope Supplier

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Partner, Glad to write to you. This is Grace from Qingdao

New Hope Industry & Trade Co.,Ltd., a professional manufacturer specializing

in Mirrors. And mirror products such as wall mirrors, arch mirrors and mirror

candle plates are [...]



Content analysis details: (9.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[112.255.137.21 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=opooaw%40fairmont.com;ip=112.255.137.21;r=doctor.nl2k.ab.ca]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[newhopeglassmirror[at]163.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and

EnvelopeFrom freemail headers are

different

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

1.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

2.0 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Modern Popular Mirrors from New Hope Supplier




n style=3D"font-family: "times new roman"; font-size: 16px;">Dear=

Partner,


space: normal;">


hite-space: normal;">
;; font-size: 16px;">Glad to write to you.


: 2px; margin-bottom: 2px; white-space: normal;">


n-top: 2px; margin-bottom: 2px; white-space: normal;">
amily: "times new roman"; font-size: 16px;">
ariant-numeric: normal; font-variant-east-asian: normal; letter-spacing: 0p=

t; line-height: 22.4px; text-align: justify; widows: 1; font-family: "=

Times New Roman"; color: rgb(51, 51, 51); font-size: 12pt;">This is Gr=

ace from Qingdao New Hope Industry & Trade Co.,Ltd., a professional man=

ufacturer specializing in  Mirrors. And
iant-numeric: normal; font-variant-east-asian: normal; letter-spacing: 0pt;=

text-align: justify; widows: 1; color: rgb(51, 51, 51); font-size: 12pt; f=

ont-family: "Times New Roman"; line-height: 1.6;"> mirror product=

s such as wall mirrors, arch mirrors and mirror candle plates  are
pan>
ormal; letter-spacing: 0pt; line-height: 22.4px; text-align: justify; widow=

s: 1; font-family: "Times New Roman"; color: rgb(51, 51, 51); fon=

t-size: 12pt;">our company's popular product. Besides, We have more tha=

n 9 years' experience in exporting. All our products are manufactured s=

trictly and sold to over 30 countries already.  

Our company =

tenet is
=E8=BD=AF=E9=9B=85=E9=BB=91, Verdana, "Microsoft Yahei", SimSun, =

sans-serif; font-variant-numeric: normal; font-variant-east-asian: normal; =

line-height: 22.4px; text-align: justify; widows: 1;">
amily: "Times New Roman"; color: rgb(51, 51, 51); letter-spacing:=

0pt; font-size: 12pt;">BE YOUR BEST PARTNER IN GLASS
e=3D"font-variant-numeric: normal; font-variant-east-asian: normal; letter-=

spacing: 0pt; line-height: 22.4px; text-align: justify; widows: 1; font-fam=

ily: "Times New Roman"; color: rgb(51, 51, 51); font-size: 12pt;"=

>. I believe,the relations between us are not only supplier and consumer, b=

ut also win-win partners. We have been devoting to saving energy and improv=

ing our products=E2=80=99 quality , so as to provide customers with product=

s which have good quality and
rmal; font-variant-east-asian: normal; letter-spacing: 0pt; text-align: jus=

tify; widows: 1; color: rgb(51, 51, 51); font-size: 12pt; font-family: =E5=

=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91; line-height: 1.6;">
=3D"font-variant-numeric: normal; font-variant-east-asian: normal; letter-s=

pacing: 0pt; line-height: 22.4px; text-align: justify; widows: 1; font-fami=

ly: "Times New Roman"; color: rgb(51, 51, 51); font-size: 12pt;">=

suitable price. It means that our products can help you increase product co=

mpetitiveness and market share.
meric: normal; font-variant-east-asian: normal; letter-spacing: 0pt; line-h=

eight: 22.4px; text-align: justify; widows: 1; font-family: "Times New=

Roman"; color: rgb(51, 51, 51); font-size: 12pt;">


=3D"margin-top: 2px; margin-bottom: 2px; white-space: normal;">
=3D"font-family: "times new roman"; font-size: 16px;">
=3D"font-variant-numeric: normal; font-variant-east-asian: normal; letter-s=

pacing: 0pt; line-height: 22.4px; text-align: justify; widows: 1; font-fami=

ly: "Times New Roman"; color: rgb(51, 51, 51); font-size: 12pt;">=



te-space: normal;">
font-size: 16px;">
t-east-asian: normal; letter-spacing: 0pt; line-height: 22.4px; text-align:=

justify; widows: 1; font-family: "Times New Roman"; color: rgb(5=

1, 51, 51); font-size: 12pt;">


; margin-bottom: 2px; font-variant-numeric: normal; font-variant-east-asian=

: normal; white-space: normal; color: rgb(49, 53, 59); font-family: =E5=BE=

=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Verdana, "Microsoft Yahei", SimSu=

n, sans-serif; line-height: 22px; widows: 1; text-align: justify;">
yle=3D"font-family: "Times New Roman"; color: rgb(51, 51, 51); le=

tter-spacing: 0px; font-size: 16px;">Finally, our company will have some di=

scount in t
x; font-size: 16px;">
;; line-height: 1.6;">his month
uot;Times New Roman"; color: rgb(51, 51, 51); letter-spacing: 0px; fon=

t-size: 16px;">. So we can provide you with the excellent products at the l=

owest price. We will be honored to cooperate with u. Thank u.


style=3D"margin-top: 2px; margin-bottom: 2px; font-variant-numeric: normal;=

font-variant-east-asian: normal; white-space: normal; color: rgb(49, 53, 5=

9); font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Verdana, "Micro=

soft Yahei", SimSun, sans-serif; line-height: 22px; widows: 1; text-al=

ign: justify;">


nt-variant-numeric: normal; font-variant-east-asian: normal; white-space: n=

ormal; color: rgb(49, 53, 59); font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=

=BB=91, Verdana, "Microsoft Yahei", SimSun, sans-serif; line-heig=

ht: 22px; widows: 1; text-align: justify;">
t;Times New Roman"; color: rgb(51, 51, 51); letter-spacing: 0px; font-=

size: 16px;">Please feel free to contact me if you need further information=

. Thank you.


te-space: normal;">
font-size: 16px;">
t-east-asian: normal; letter-spacing: 0pt; line-height: 22.4px; text-align:=

justify; widows: 1; font-family: "Times New Roman"; color: rgb(5=

1, 51, 51); font-size: 12pt;">
Best Regards,


style=3D"margin-top: 2px; margin-bottom: 2px; white-space: normal;">

p>

Gr=

ace