Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Mar 2026 06:43:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w2Tlm-000000005dl-2FiY
for dave@doctor.nl2k.ab.ca;
Tue, 17 Mar 2026 06:43:34 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 Mar 2026 06:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f72.google.com ([209.85.160.72]:52652)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w2QTZ-00000000MGr-1d9c
for root@nk.ca;
Tue, 17 Mar 2026 03:12:43 -0600
Received: by mail-oa1-f72.google.com with SMTP id 586e51a60fabf-4172c136f7bso57257376fac.1
for; Tue, 17 Mar 2026 02:11:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1773738699; x=1774343499; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=FgeHbR3Pgz+fZxbc7KBdBcjxeoJP3Egzn+qW9GkfHI0=;
b=J6K6BkWkwOBokPX1sv3FBQit5S6gMNA/rUqTLwg1hWkUUVMHrm7sS1PfJtO6BM8/g1
+hJPF8OeE4EKAoFoLA/h3JUvGCZDdU2lEuz4vLFPfxY2qVBuFmsyFswGbhHjxkPv1LbI
h+EenBs2rRP7fP66foPBnjowF3RBu84yiWwWadrKkvR42MhKK610sAVEiRfu10g2N4QV
MQtPxXT3fzf2ruU4DXUNZ6LdTZO15WJUfSd0N8E2h3DRfau5mCPOEdTpU5jPU7pqQvsk
zNeIaos4mKR528Z5lSyVMRm2wFhxxHPhbRRDZNXR7x8KwNSJj+rBMM467StwnBDSVLxY
BVUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773738699; x=1774343499;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=FgeHbR3Pgz+fZxbc7KBdBcjxeoJP3Egzn+qW9GkfHI0=;
b=AT7ScAFd/sOsPi+C8cPmENBxMxmYUvivOXJOGf9hyGpUnU9KQJWIkBWN+IIcxjx2ze
6v4Va0x5fuQgeEtwN10zYvqHlT0+alQKLwEVuMLxr1yqrXNWE3MjwT72SEOKkciIHuiM
eLXIp/nnGmfoevVnURIU8QsLS48CClEnpfsv8nS+pq7aWOPWCWP3VxqSL5LMYlxy78gv
0RdVBj20TgTU9VtEDburIDr9XrzFRzh35sZ4DXZDjmDgoNXUwLJu+tFE2cO7AAc8lRQ+
9rJPKYAXLiAsEAxCbCitXw3xNXSjbOrWKp8nmeL2PXCpZAvMo/3h+E4QAvL7rCGjDj9L
B6RQ==
X-Gm-Message-State: AOJu0Yz0DEmM6SktNavJNagj2DggYJp5xAKpQQDIKWPDxxhDFRck/YsJ
ZKlXo4Ht0Z5cwy2tgAVIOxXu+h5iCU/PoGRJz/+mAzWYdWD7zcM/bLFp4apXuiq0Y5aPutFaVnZ
v8OWxGA==
MIME-Version: 1.0
X-Received: by 2002:a05:690e:16db:b0:64c:f153:5489 with SMTP id
956f58d0204a3-64e630b3d07mr11846428d50.67.1773738281599; Tue, 17 Mar 2026
02:04:41 -0700 (PDT)
Message-ID:
Date: Tue, 17 Mar 2026 09:04:41 +0000
Subject: Re: New Website Design, Re-design, website design!!
From: jameslim64456@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="000000000000330801064d34a015"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, root@nk.ca I hope you are doing well. Do you need any
technical help like: - SEO Services, Mobile App, New Website Design, Re-design,
website design, E-Commerce Solutions, Word press Websites & XHTML, PHP development
and revamping your ol [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.72 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jameslim64456(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jameslim64456(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.72 listed in wl.mailspike.net]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Re: New Website Design, Re-design, website design!!
--000000000000330801064d34a015
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hello, root@nk.ca
I hope you are doing well.
Do you need any technical help like: - SEO Services, Mobile App, New
Website Design, Re-design, website design, E-Commerce Solutions, Word press
Websites & XHTML, PHP development and revamping your old one?
If you are interested, please share your requirements.
Thanks.
James
--000000000000330801064d34a015
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello, root@nk.ca
I hope you are doing well.
Do you need any =
technical help like: - SEO Services, Mobile App, New Website Design, Re-des=
ign, website design, E-Commerce Solutions, Word press Websites & XHTML, PHP=
development and revamping your old one?
If you are interested, plea=
se share your requirements.
Thanks.
James
--000000000000330801064d34a015--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Mar 2026 06:43:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w2Tlm-000000005dl-2FiY
for dave@doctor.nl2k.ab.ca;
Tue, 17 Mar 2026 06:43:34 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 Mar 2026 06:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f72.google.com ([209.85.160.72]:52652)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w2QTZ-00000000MGr-1d9c
for root@nk.ca;
Tue, 17 Mar 2026 03:12:43 -0600
Received: by mail-oa1-f72.google.com with SMTP id 586e51a60fabf-4172c136f7bso57257376fac.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1773738699; x=1774343499; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=FgeHbR3Pgz+fZxbc7KBdBcjxeoJP3Egzn+qW9GkfHI0=;
b=J6K6BkWkwOBokPX1sv3FBQit5S6gMNA/rUqTLwg1hWkUUVMHrm7sS1PfJtO6BM8/g1
+hJPF8OeE4EKAoFoLA/h3JUvGCZDdU2lEuz4vLFPfxY2qVBuFmsyFswGbhHjxkPv1LbI
h+EenBs2rRP7fP66foPBnjowF3RBu84yiWwWadrKkvR42MhKK610sAVEiRfu10g2N4QV
MQtPxXT3fzf2ruU4DXUNZ6LdTZO15WJUfSd0N8E2h3DRfau5mCPOEdTpU5jPU7pqQvsk
zNeIaos4mKR528Z5lSyVMRm2wFhxxHPhbRRDZNXR7x8KwNSJj+rBMM467StwnBDSVLxY
BVUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773738699; x=1774343499;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=FgeHbR3Pgz+fZxbc7KBdBcjxeoJP3Egzn+qW9GkfHI0=;
b=AT7ScAFd/sOsPi+C8cPmENBxMxmYUvivOXJOGf9hyGpUnU9KQJWIkBWN+IIcxjx2ze
6v4Va0x5fuQgeEtwN10zYvqHlT0+alQKLwEVuMLxr1yqrXNWE3MjwT72SEOKkciIHuiM
eLXIp/nnGmfoevVnURIU8QsLS48CClEnpfsv8nS+pq7aWOPWCWP3VxqSL5LMYlxy78gv
0RdVBj20TgTU9VtEDburIDr9XrzFRzh35sZ4DXZDjmDgoNXUwLJu+tFE2cO7AAc8lRQ+
9rJPKYAXLiAsEAxCbCitXw3xNXSjbOrWKp8nmeL2PXCpZAvMo/3h+E4QAvL7rCGjDj9L
B6RQ==
X-Gm-Message-State: AOJu0Yz0DEmM6SktNavJNagj2DggYJp5xAKpQQDIKWPDxxhDFRck/YsJ
ZKlXo4Ht0Z5cwy2tgAVIOxXu+h5iCU/PoGRJz/+mAzWYdWD7zcM/bLFp4apXuiq0Y5aPutFaVnZ
v8OWxGA==
MIME-Version: 1.0
X-Received: by 2002:a05:690e:16db:b0:64c:f153:5489 with SMTP id
956f58d0204a3-64e630b3d07mr11846428d50.67.1773738281599; Tue, 17 Mar 2026
02:04:41 -0700 (PDT)
Message-ID:
Date: Tue, 17 Mar 2026 09:04:41 +0000
Subject: Re: New Website Design, Re-design, website design!!
From: jameslim64456@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="000000000000330801064d34a015"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, root@nk.ca I hope you are doing well. Do you need any
technical help like: - SEO Services, Mobile App, New Website Design, Re-design,
website design, E-Commerce Solutions, Word press Websites & XHTML, PHP development
and revamping your ol [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
[209.85.160.72 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
[209.85.160.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.72 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.72 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jameslim64456(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jameslim64456(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.72 listed in wl.mailspike.net]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Re: New Website Design, Re-design, website design!!
--000000000000330801064d34a015
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hello, root@nk.ca
I hope you are doing well.
Do you need any technical help like: - SEO Services, Mobile App, New
Website Design, Re-design, website design, E-Commerce Solutions, Word press
Websites & XHTML, PHP development and revamping your old one?
If you are interested, please share your requirements.
Thanks.
James
--000000000000330801064d34a015
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello, root@nk.ca
I hope you are doing well.
Do you need any =
technical help like: - SEO Services, Mobile App, New Website Design, Re-des=
ign, website design, E-Commerce Solutions, Word press Websites & XHTML, PHP=
development and revamping your old one?
If you are interested, plea=
se share your requirements.
Thanks.
James
--000000000000330801064d34a015--