Web/SEO/App spam from OVH.net
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 25 Jul 2026 08:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wndRv-00000000O4L-2xkm
for dave@doctor.nl2k.ab.ca;
Sat, 25 Jul 2026 08:33:59 -0600
Resent-From: The Doctor
Resent-Date: Sat, 25 Jul 2026 08:33:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from seoserviceweb.com ([79.137.75.80]:47769)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wnc1B-00000000FyK-1vZg
for sales@nk.ca;
Sat, 25 Jul 2026 07:02:25 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=seoserviceweb.com; s=mail; h=List-Id:List-Unsubscribe:Content-Type:
MIME-Version:To:Reply-To:From:Subject:Date:Message-ID:Sender:Cc:
Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:
Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:
References:List-Help:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=26z/8rOgd0FGwyhO964lIkzjeepz01Q6pLEPef/EflE=; b=bgkPn+sd9amH2M7hYmS5zpaZWv
mvzWk5sR0gbtiC+2F01eL8ocDXE7H3QJVagUxdKXGhv00Fx1jK4Y96nUDcoz5n9oDeOiGhNY7Ncbj
vcQTbZwoyHjX3eiVI1vsDBOVQiphxjkTlc7ycl0RpR8yhkbTZLO45fPkAEMQg+fNmROQ3xf34Q8K3
7Eg8crKZsvB33jys9GRM9NZK/UUYVi/fDHqO00QncEVCUZFGFCoXo/Sxr3R2+wXWkjDmW2P/5FkrR
NjC3rcy95V8yxh1dq9KSFirDvNX71Wqb8kR44kKEdmPLy5VVfv5RJm53QvL34eDIaIKyYa0hA/giP
xaX5zkMw==;
Received: from localhost ([127.0.0.1] helo=seoserviceweb.com)
by mail.seoserviceweb.com with esmtpa (Exim 4.95)
(envelope-from
id 1wnc0I-00B7x2-VI
for sales@nk.ca;
Sat, 25 Jul 2026 13:01:23 +0000
Message-ID:
Date: Sat, 25 Jul 2026 13:01:22 +0000
Subject: Why your competitor is out ranking you
From: Asish Sahoo
Reply-To: Asish Sahoo
To: "sales@nk.ca"
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_swift_1784984482_65fd3fa59f59002bf4c077c726dde855_=_"
X-Tracking-Did: 0
X-Subscriber-Uid: gt864eomgv6dd
X-Report-Abuse: Please report abuse for this campaign here:
http://seoserviceweb.com/index.php/campaigns/cl020d5tw43a2/report-abuse/mz228jhl635d4/gt864eomgv6dd
X-Mailer: SwiftMailer - 5.4.x
X-EBS: http://seoserviceweb.com/index.php/lists/block-address
X-Delivery-Sid: 1
X-Customer-Uid: bd766a7grddaa
X-Customer-Gid: 0
X-Campaign-Uid: cl020d5tw43a2
Precedence: bulk
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
Subscriber-Uid:gt864eomgv6dd - Unsubscribe request&body=Please unsubscribe
me!>
List-Id: mz228jhl635d4
Feedback-ID: cl020d5tw43a2:gt864eomgv6dd:mz228jhl635d4:bd766a7grddaa
X-Spam_score: 8.6
X-Spam_score_int: 86
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Team, I am Asish, a Search Engine Optimization (SEO)
expert. I searched keywords for your website nk.ca on Google and noticed
that you aren’t on the first page. Your website looks pretty good, [...]
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[79.137.75.80 listed in dnsbl.ahbl.org]
[79.137.75.80 listed in dnsbl.ahbl.org]
[79.137.75.80 listed in dnsbl.ahbl.org]
[79.137.75.80 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[79.137.75.80 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[79.137.75.80 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[79.137.75.80 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[79.137.75.80 listed in dnsbl.ahbl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: seoserviceweb.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: seoserviceweb.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: seoserviceweb.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.3 LONGWORD BODY: Uses overlong words
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[79.137.75.80 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
[79.137.75.80 listed in will-spam-for-food.eu.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
Subject: {SPAM?} Why your competitor is out ranking you
--_=_swift_1784984482_65fd3fa59f59002bf4c077c726dde855_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hello Team,
I am Asish, a Search Engine Optimization (SEO) expert. I sear=
ched
keywords for your website=C2=A0nk.ca=C2=A0on Google and noticed that=
you
aren=E2=80=99t on the first page. Your website looks pretty good, bu=
t you
are missing out on many calls and business by being back on a good=
Page Rank. I=E2=80=99ve had lots of good rankings and generated addition=
al
leads for others worldwide.
Because as per your website keywords and=
design, you are a prime
candidate to outrank your competitors, and I=
=E2=80=99ve made a plan for how
you can do that.
If you=E2=80=99re the =
right person to send this plan to, and you would like
to speak, just resp=
ond to this email that you=E2=80=99re interested and
I=E2=80=99ll send it=
over to you right away.
If I need to be talking to someone else, let me =
know!
Asish Sahoo | SEO Expert
Building No - 430
Bhubaneswar 751006=
India
https://linktr.ee/asish.sahoo,
=C2=A0
Unsubscribe=C2=A0[http=
://seoserviceweb.com/index.php/campaigns/cl020d5tw43a2/track-url/gt864eomgv=
6dd/ef51c402c9233f468e4875c1ffaef7534e5a9bfe]
--_=_swift_1784984482_65fd3fa59f59002bf4c077c726dde855_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=09
Hello Team,
I am Asish, a Search Engine Optimization (SEO) expert. I searched keywords =
for your website=C2=A0nk.ca=C2=A0on Google and noticed that you aren=
=E2=80=99t on the first page. Your website looks pretty good, but you are m=
issing out on many calls and business by being back on a good Page Rank. I=
=E2=80=99ve had lots of good rankings and generated additional leads for ot=
hers worldwide.
Because as per your website keywords and design, you are a prime candidate =
to outrank your competitors, and I=E2=80=99ve made a plan for how you can d=
o that.
If you=E2=80=99re the right person to send this plan to, and you would like=
to speak, just respond to this email that you=E2=80=99re interested and I=
=E2=80=99ll send it over to you right away.
If I need to be talking to someone else, let me know!
Asish Sahoo | SEO Expert
Building No - 430
Bhubaneswar 75=
1006
India
https://linktr.ee/asish.sahoo,
=C2=A0
om/index.php/campaigns/cl020d5tw43a2/track-url/gt864eomgv6dd/ef51c402c9233f=
468e4875c1ffaef7534e5a9bfe">Unsubscribe
paigns/cl020d5tw43a2/track-opening/gt864eomgv6dd" alt=3D"" />
--_=_swift_1784984482_65fd3fa59f59002bf4c077c726dde855_=_--