link building spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Apr 2023 14:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1psUQb-000BY6-Ev

for dave@doctor.nl2k.ab.ca;

Fri, 28 Apr 2023 14:10:49 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Apr 2023 14:10:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f49.google.com ([209.85.219.49]:55675)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1psTAc-000Ohm-8W

for sales@nk.ca;

Fri, 28 Apr 2023 12:50:19 -0600

Received: by mail-qv1-f49.google.com with SMTP id 6a1803df08f44-5ef8af5d211so2605566d6.3

for ; Fri, 28 Apr 2023 11:48:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682707689; x=1685299689;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Ufc/Yo+6CAne+bwTe+6GbabxOSAVWVKbXLO6Kzflv7U=;

b=d5DbRnU6F+hg1I68RdWLG616gI17WGdsYNh5skp9M8YupojJcUgsql03FKDrKgUodV

LsRMyKxetzurYeybFPq+AZP0zwYFkS51We8UvXvRFAU37MTKsAfLHihhFjcBwj23FiFf

F6YjlDA2/nsMTWWXka+H2IojF2CsnYDjl4FM+/bjXrxWioz9T6DW/IANZE1tQDmbPD5J

l5IWfPibFha9xaEbxIDTjkOSVL17epZJhP6KqekUmELVUyhVR1SyrsliGKluWhaTioRM

2kkR/lTYvS2bvX72WMw3LmI4T4gSH2QvmwXq9tw5XvbmFLtCVbvxRhL/ZL1AgvwVhyhk

xx1g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682707689; x=1685299689;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Ufc/Yo+6CAne+bwTe+6GbabxOSAVWVKbXLO6Kzflv7U=;

b=F737A77d67IyUecorr00u0kbdiTLIkNVJdUuUUK396gjCcP7YWAoOG9mMx5J73t33a

IG8lssXf+hNmSZnrHTG8vhYUhQ//p+EKnUp6ehaoHwqNgiDbweYn2pBhGIuwo4mzbyfH

Enfugob0+I7XKviELRiERzr4aO01aL7IhXb1SHjFvpr2EitM2IBMneNnO99+xztoaJD/

q7KIwGqKSI8XDOr3U4WYAVYfklC7OFwnOEV+3rPs3yrQx1oRCqz6yU7YhJ+QtLwwL/WZ

sfGLG1PiVOPLhfXxgzs2yF2GclstyMqIK+5oJ2wbNkFMEalPXV/fNzX1D5GLxajJdadU

t3cg==

X-Gm-Message-State: AC+VfDxUfzLvJHbQhica3gzkMQWX2t8qaTBOYIawCO2GrK/eC/Yg+Sx0

/jA/pCrZdBnpYD2pOmh80myXZShjNiZ49/ZeEo6gLYI2O9Q=

X-Google-Smtp-Source: ACHHUZ7OU0MUo3i+Uar4bWXad7tTMjMoBxmT3JhLbFqoHFoL9U3uOWJkQ9yyxEXRfIoKBLrD9DVyqnNkvH8Y2oWqMeY=

X-Received: by 2002:ad4:5bc9:0:b0:5ef:6185:2e53 with SMTP id

t9-20020ad45bc9000000b005ef61852e53mr9027805qvt.23.1682707688812; Fri, 28 Apr

2023 11:48:08 -0700 (PDT)

MIME-Version: 1.0

From: Henry Boucher

Date: Sat, 29 Apr 2023 00:17:56 +0530

Message-ID:

Subject: Link Building Service Provider.

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000000d73ad05fa69ea24"



--0000000000000d73ad05fa69ea24

Content-Type: text/plain; charset="UTF-8"



Hello,



I'm Link Builder. I have been doing link building business for the last

five Years.



Below is some example of sites I added where you can publish your new

articles and get High-Quality Backlinks for your sites which is very

helpful to you.



Examples:



https://www.imcgrupo.com DA 68 DR 71 Traffic 2126

https://widetopics.com/ DA 40 DR 35 Traffic 3919

https://www.architectureartdesigns.com DA 65 DR 72 Traffic 263856

https://www.techolac.com DA 66 DR 71 Traffic 252644

https://www.aspirantsg.com DA 62 DR 71 Traffic 28060



Waiting for your response.



--

Thanks and regards,

Henry Boucher



--0000000000000d73ad05fa69ea24

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

I'm Link Builder. I have been doing link=

building business for the last five Years.

Below is some example of=

sites I added where you can publish your new articles and get High-Quality=

Backlinks for your sites which is very helpful to you.

Examples:
>
https://www.imcgrupo.com DA 6=

8 DR 71 Traffic 2126
https://wideto=

pics.com/ =C2=A0 =C2=A0 =C2=A0 =C2=A0DA 40 DR 35 Traffic 3919

ef=3D"https://www.architectureartdesigns.com">https://www.architectureartde=

signs.com DA 65 DR 72 Traffic 263856

https://www.techolac.com">https://www.techolac.com DA 66 DR 71 Traffic=

252644
https:=

//www.aspirantsg.com DA 62 DR 71 Traffic 28060

Waiting for your=

response.


refix">--

ail=3D"gmail_signature">
T=

hanks and regards,
=C2=A0<=

span style=3D"font-family:"Google Sans",Roboto,Helvetica,Arial,sa=

ns-serif;font-size:16px;letter-spacing:0.1px;text-align:center;white-space:=

nowrap">Henry Boucher

email-signature.link/signature.gif?u=3D2367357&e=3D354861193&v=3D7e=

e4c3a1c97c0b87d8684c7f00a5f7ec2fba04014b05879e3783e3736a8ac909" alt=3D"" wi=

dth=3D"0" height=3D"0" style=3D"width:2px;max-height:0;overflow:hidden">



--0000000000000d73ad05fa69ea24--

Nigerian Google spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Apr 2023 23:08:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1psGKh-0006Aw-0t

for dave@doctor.nl2k.ab.ca;

Thu, 27 Apr 2023 23:07:47 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Apr 2023 23:07:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f194.google.com ([209.85.219.194]:53262)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1psE5T-000JhR-WD

for sales@nk.ca;

Thu, 27 Apr 2023 20:44:00 -0600

Received: by mail-yb1-f194.google.com with SMTP id 3f1490d57ef6-b8f599b9277so14012014276.2

for ; Thu, 27 Apr 2023 19:41:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1682649711; x=1685241711;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=3o/eQJCVtgRb9sKEtAQov1Q4YvDcZhslndOjdqyYV/E=;

b=hh63dim5I6KA/Xs+raXUL6usgYr9lHcUGqcKdJPy8z6OjbbBgEWIKsrT9m6ZZlqOD9

TkYrPZG6vX6Ykav7Y0sIByXluVaelxgBJBEdXS6JEPSYrYSkkPPY7PQeln1zGnpeWpf4

xd/Et4mzGDnixh6weR80wOyHosLu/YsaIMA3OSnbWgdb2q1o4c52cl5l/lHRMc6zzCJd

Pw2LnMSgd3BrgjYGBJncwiO/ajSlkU2Vx1aiuVV19LVNz5ZAQXg+IxiOqdT90BN1Umby

8wnYkBfOA2I90gnW2ql4YJp/zRzKsC9/lm36/EJE4cwDxpMmU4tPH2S5EbhCQH6CGNPQ

JkZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1682649711; x=1685241711;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=3o/eQJCVtgRb9sKEtAQov1Q4YvDcZhslndOjdqyYV/E=;

b=e3c5hJL8dCeE23IGQ2D9v2f/bYNep9Za9Y6AkjcFVj/CsLwPx79GUbsfcipO7MINVi

vvwT7zh6Qg4B3MrohJbmjPUpdxAe8EZpQoWS1sOGcDUxfIxu9GY6/+G5N+pIof3hXLwp

JFg/thFMIqnqv8UF7velyRJx4s4DHe8zNHFQ6ewR+qSB/CDLufjnZDx2KNb42qbg34mL

VHArk2cgIABwrnHjebj4A3B3OlfGShc/Bv+9EGUqDoHVGSKbzt3gLXdcV+4lrSp2iH0U

OhjKw5Ny29tQWlS6271eWNqkR0s2xlfQfAfQAQF+C3Cok3NzhLdkpf0tO3JaAd1Ct44V

Hiyw==

X-Gm-Message-State: AC+VfDzJC04oonLPHFIYVGV+6QU3RmkPLBLyCx2lzHsEix8gbFRRCQfe

k+0LQe3Uxmay1VPd5Kz7uYapb9r3e69zhML7G4g=

X-Google-Smtp-Source: ACHHUZ4r3BSlk5AYdEwgu2CMns3B4RjWfOaA70AbJ1UUwkLfSl2z65C9X++vmSwUNhXU84zg3246tRdO/XzXS8/aY34=

X-Received: by 2002:a05:6902:120e:b0:b92:6110:dd9f with SMTP id

s14-20020a056902120e00b00b926110dd9fmr3149790ybu.51.1682649710715; Thu, 27

Apr 2023 19:41:50 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6918:5305:b0:15c:3e1d:ad1f with HTTP; Thu, 27 Apr 2023

19:41:49 -0700 (PDT)

Reply-To: thajxoa@gmail.com

From: Thaj Xoa

Date: Thu, 27 Apr 2023 19:41:49 -0700

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: sales@nk.ca

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear Friend, I am Mr Thaj Xoa From Vietnam and I have an

important message for you just get back for further details. Regards Mr Thaj

Xoa



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rw5455090(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rw5455090(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.194 listed in list.dnswl.org]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?}



--

Dear Friend,



I am Mr Thaj Xoa From Vietnam and I have an important message for you

just get back for further details.



Regards

Mr Thaj Xoa