Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Mar 2026 05:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w0I4Z-00000000PKy-420j
for dave@doctor.nl2k.ab.ca;
Wed, 11 Mar 2026 05:49:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 11 Mar 2026 05:49:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f200.google.com ([209.85.128.200]:44327)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w0CQm-00000000MIb-1noG
for root@nk.ca;
Tue, 10 Mar 2026 23:48:38 -0600
Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-79885818011so221231987b3.1
for; Tue, 10 Mar 2026 22:46:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1773208008; x=1773812808; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YXlQM/SHJuj7Y9nqlK3GIU0uUyj3V5Aa75PtvpqmArk=;
b=eE0Msmeu1bMDcFoBK6boszWlww2nh+DqXcHsWwf0iXXkRmvFKST6FBkM33lWPKfYpw
Wy0yiNXAVK6mUrFiNy87K4h5/S+CwLmkZrjQNloUOuhF3AAyHQbGJ1d4UvaO4kLYKjc5
aXWwz2TyCW7VDllC3kwvSOHOfJco7zu2Rk7y4XWUGLJoeBA+dB33D1m1V+qzjXPeOSVS
YXHXla1MrfOVF7RwConwgWGNFfQtAkbIRWgh+0eikxJtzOgpSxi+s2qBWLP1enU6WsAx
EgPnaTWNX53HQ2M4/7pruJ2Gr0PBcu6J8dk9k4EtPhJH4p1w/CMvU2y+0CJXzjHs/BX0
1a2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1773208008; x=1773812808;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=YXlQM/SHJuj7Y9nqlK3GIU0uUyj3V5Aa75PtvpqmArk=;
b=o8Iz6/R7+AVeuUqL8AKC4+4EDvLNgxBvR1TY0tj/VQ+o2Xax9s87hFEHf+HfYadPhC
eiKWU0JFPyHxzeRG/yImdJ8vV43rUe+xtv3JDX0oIceYagUcdLuys0DpmvJ2vmFCzhzq
Qb624zazqz3bRXXWQGrH3Tc9XzxTNGDxS6ZQ0m17/TYOUAwj4LwERmFgyhqzP7bPkPa7
Lu/aUa3bHfCwehi/P3TfpBpA617t/0ZU63YIIc68u14DKMdTpczD4NqFwRGwWwXOZzJz
2q1xwPtOGjGuz77fsdeUjR/dnn3IIoJttAU6/hEL+n3/328n90BHCHJ6wW2Be3BvMH0c
rdmw==
X-Gm-Message-State: AOJu0YwqUaOXrazoBdNALu1D1AEMAau9th8Li4TxAQVep2+v7OsXGy9j
vz67DSbl5/8YmKQ4TtF0xHYVCJelPRmKV+kTfjEcwEhv7uuQlM+zxjVSUrhfPqAWBJSsP4MvHiz
tyRz3zQ==
MIME-Version: 1.0
X-Received: by 2002:a05:690c:f08:b0:798:e620:c4c9 with SMTP id
00721157ae682-79917faed04mr12322847b3.50.1773208008206; Tue, 10 Mar 2026
22:46:48 -0700 (PDT)
Message-ID:
Date: Wed, 11 Mar 2026 05:46:48 +0000
Subject: Re: Quick SEO Cost.
From: happysinghidhdkd@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="000000000000713065064cb92945"
X-Spam_score: 6.2
X-Spam_score_int: 62
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Morning, I sent you an email on Friday, but didn't get
any response from your side Please let me know if you are interested so that
I can share some of our price list.
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.200 listed in list.dnswl.org]
1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 SPF_PASS SPF: sender matches SPF record
0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.200 listed in wl.mailspike.net]
0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.200 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[happysinghidhdkd(at)gmail.com]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re: Quick SEO Cost.
--000000000000713065064cb92945
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Good Morning,
I sent you an email on Friday, but didn't get any response from your side
Please let me know if you are interested so that I can share some of our
price list.
Thanks,
Happy,
On Fri, Dec 26, 2025, at 9:51 AM < > wrote:
Hello,root@nk.ca
Are you interested in growing your business with SEO? Let us help you get
on Google's 1st page.
Share your website and target city for a proposal and quote.
Sincerely,
Happy,
--000000000000713065064cb92945
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Good Morning,
I sent you an email on Friday, but didn't get any resp=
onse from your side
Please let me know if you are interested so that=
I can share some of our price list.
Thanks,
Happy,
On=
Fri, Dec 26, 2025, at 9:51=E2=80=AFAM < > wrote:
Hello,root@nk.ca =
Are you interested in growing your business with SEO? Let us help y=
ou get on Google=E2=80=99s 1st page.
Share your website and target c=
ity for a proposal and quote.
Sincerely,
Happy,
--000000000000713065064cb92945--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Mar 2026 05:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w0I4Z-00000000PKy-420j
for dave@doctor.nl2k.ab.ca;
Wed, 11 Mar 2026 05:49:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 11 Mar 2026 05:49:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f200.google.com ([209.85.128.200]:44327)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w0CQm-00000000MIb-1noG
for root@nk.ca;
Tue, 10 Mar 2026 23:48:38 -0600
Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-79885818011so221231987b3.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1773208008; x=1773812808; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YXlQM/SHJuj7Y9nqlK3GIU0uUyj3V5Aa75PtvpqmArk=;
b=eE0Msmeu1bMDcFoBK6boszWlww2nh+DqXcHsWwf0iXXkRmvFKST6FBkM33lWPKfYpw
Wy0yiNXAVK6mUrFiNy87K4h5/S+CwLmkZrjQNloUOuhF3AAyHQbGJ1d4UvaO4kLYKjc5
aXWwz2TyCW7VDllC3kwvSOHOfJco7zu2Rk7y4XWUGLJoeBA+dB33D1m1V+qzjXPeOSVS
YXHXla1MrfOVF7RwConwgWGNFfQtAkbIRWgh+0eikxJtzOgpSxi+s2qBWLP1enU6WsAx
EgPnaTWNX53HQ2M4/7pruJ2Gr0PBcu6J8dk9k4EtPhJH4p1w/CMvU2y+0CJXzjHs/BX0
1a2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1773208008; x=1773812808;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=YXlQM/SHJuj7Y9nqlK3GIU0uUyj3V5Aa75PtvpqmArk=;
b=o8Iz6/R7+AVeuUqL8AKC4+4EDvLNgxBvR1TY0tj/VQ+o2Xax9s87hFEHf+HfYadPhC
eiKWU0JFPyHxzeRG/yImdJ8vV43rUe+xtv3JDX0oIceYagUcdLuys0DpmvJ2vmFCzhzq
Qb624zazqz3bRXXWQGrH3Tc9XzxTNGDxS6ZQ0m17/TYOUAwj4LwERmFgyhqzP7bPkPa7
Lu/aUa3bHfCwehi/P3TfpBpA617t/0ZU63YIIc68u14DKMdTpczD4NqFwRGwWwXOZzJz
2q1xwPtOGjGuz77fsdeUjR/dnn3IIoJttAU6/hEL+n3/328n90BHCHJ6wW2Be3BvMH0c
rdmw==
X-Gm-Message-State: AOJu0YwqUaOXrazoBdNALu1D1AEMAau9th8Li4TxAQVep2+v7OsXGy9j
vz67DSbl5/8YmKQ4TtF0xHYVCJelPRmKV+kTfjEcwEhv7uuQlM+zxjVSUrhfPqAWBJSsP4MvHiz
tyRz3zQ==
MIME-Version: 1.0
X-Received: by 2002:a05:690c:f08:b0:798:e620:c4c9 with SMTP id
00721157ae682-79917faed04mr12322847b3.50.1773208008206; Tue, 10 Mar 2026
22:46:48 -0700 (PDT)
Message-ID:
Date: Wed, 11 Mar 2026 05:46:48 +0000
Subject: Re: Quick SEO Cost.
From: happysinghidhdkd@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="000000000000713065064cb92945"
X-Spam_score: 6.2
X-Spam_score_int: 62
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Morning, I sent you an email on Friday, but didn't get
any response from your side Please let me know if you are interested so that
I can share some of our price list.
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
[209.85.128.200 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
[209.85.128.200 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.200 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.200 listed in list.dnswl.org]
1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.200 listed in wl.mailspike.net]
0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.200 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.200 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[happysinghidhdkd(at)gmail.com]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re: Quick SEO Cost.
--000000000000713065064cb92945
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Good Morning,
I sent you an email on Friday, but didn't get any response from your side
Please let me know if you are interested so that I can share some of our
price list.
Thanks,
Happy,
On Fri, Dec 26, 2025, at 9:51 AM < > wrote:
Hello,root@nk.ca
Are you interested in growing your business with SEO? Let us help you get
on Google's 1st page.
Share your website and target city for a proposal and quote.
Sincerely,
Happy,
--000000000000713065064cb92945
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Good Morning,
I sent you an email on Friday, but didn't get any resp=
onse from your side
Please let me know if you are interested so that=
I can share some of our price list.
Thanks,
Happy,
On=
Fri, Dec 26, 2025, at 9:51=E2=80=AFAM < > wrote:
Hello,root@nk.ca =
Are you interested in growing your business with SEO? Let us help y=
ou get on Google=E2=80=99s 1st page.
Share your website and target c=
ity for a proposal and quote.
Sincerely,
Happy,
--000000000000713065064cb92945--
