Virtual Assistant spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Dec 2025 06:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vVrc6-000000008tz-1eiA
for dave@doctor.nl2k.ab.ca;
Wed, 17 Dec 2025 06:30:46 -0700
Resent-From: The Doctor
Resent-Date: Wed, 17 Dec 2025 06:30:46 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vVo1q-00000000HPP-1Y2x
for root@nk.ca;
Wed, 17 Dec 2025 02:41:16 -0700
Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2
for; Wed, 17 Dec 2025 01:40:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;
b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E
MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN
UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8
AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/
28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1
K3dA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1765964413; x=1766569213;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;
b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf
PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg
PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn
e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA
RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns
udWg==
X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N
ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl
hnoc=
X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id
006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025
01:40:13 -0800 (PST)
Message-ID:
Date: Wed, 17 Dec 2025 09:40:13 +0000
Subject: Re: Follow Up / Remote Support ? root@nk.ca
From: kundankumarheadfield@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Just following up on my email from Friday. Limited-time
Christmas offer: Save 20% on Virtual Assistant & Remote Support services.
Would you be available for a quick call this week/ next? Thank you [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.69 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kundankumarheadfield(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.69 listed in wl.mailspike.net]
1.0 SAVE_PERCENT BODY: Save some percentage
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca
--00000000000087be90064622a1df
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hi,
Just following up on my email from Friday. Limited-time Christmas offer:
Save 20% on Virtual Assistant & Remote Support services.
Would you be available for a quick call this week/ next?
Thank you,
Kundan
VA Team!!
On Fri, Dec 5, 2025, at 9:43 AM < > wrote:
Hi root@nk.ca,
Are you looking to hire an affordable Remote Virtual Assistant?
We support bookkeeping, CRM, lead generation, calls, email management, SEO,
digital marketing, design, and more.
May I share our pricing or schedule a quick call?
Best regards,
Kundan
VA Team!!
--00000000000087be90064622a1df
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Just following up on my email from Friday. Limited-time Christmas of=
fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =
be available for a quick call this week/ next?
Thank you,
Kundan
V=
A Team!!
On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:
H=
i root@nk.ca,
Are you looking to hire an affordable Remote Virtual A=
ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=
agement, SEO, digital marketing, design, and more.
May I share our p=
ricing or schedule a quick call?
Best regards,
Kundan
VA Team!=
!
--00000000000087be90064622a1df--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Dec 2025 06:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vVrc6-000000008tz-1eiA
for dave@doctor.nl2k.ab.ca;
Wed, 17 Dec 2025 06:30:46 -0700
Resent-From: The Doctor
Resent-Date: Wed, 17 Dec 2025 06:30:46 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vVo1q-00000000HPP-1Y2x
for root@nk.ca;
Wed, 17 Dec 2025 02:41:16 -0700
Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;
b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E
MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN
UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8
AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/
28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1
K3dA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1765964413; x=1766569213;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;
b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf
PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg
PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn
e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA
RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns
udWg==
X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N
ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl
hnoc=
X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id
006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025
01:40:13 -0800 (PST)
Message-ID:
Date: Wed, 17 Dec 2025 09:40:13 +0000
Subject: Re: Follow Up / Remote Support ? root@nk.ca
From: kundankumarheadfield@gmail.com
To: root@nk.ca
Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Just following up on my email from Friday. Limited-time
Christmas offer: Save 20% on Virtual Assistant & Remote Support services.
Would you be available for a quick call this week/ next? Thank you [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
[209.85.210.69 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
[209.85.210.69 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.69 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.69 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kundankumarheadfield(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.69 listed in wl.mailspike.net]
1.0 SAVE_PERCENT BODY: Save some percentage
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca
--00000000000087be90064622a1df
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hi,
Just following up on my email from Friday. Limited-time Christmas offer:
Save 20% on Virtual Assistant & Remote Support services.
Would you be available for a quick call this week/ next?
Thank you,
Kundan
VA Team!!
On Fri, Dec 5, 2025, at 9:43 AM < > wrote:
Hi root@nk.ca,
Are you looking to hire an affordable Remote Virtual Assistant?
We support bookkeeping, CRM, lead generation, calls, email management, SEO,
digital marketing, design, and more.
May I share our pricing or schedule a quick call?
Best regards,
Kundan
VA Team!!
--00000000000087be90064622a1df
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Just following up on my email from Friday. Limited-time Christmas of=
fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =
be available for a quick call this week/ next?
Thank you,
Kundan
V=
A Team!!
On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:
H=
i root@nk.ca,
Are you looking to hire an affordable Remote Virtual A=
ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=
agement, SEO, digital marketing, design, and more.
May I share our p=
ricing or schedule a quick call?
Best regards,
Kundan
VA Team!=
!
--00000000000087be90064622a1df--