Proding spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Apr 2026 10:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wFE4L-0000000086Q-1BSM
for dave@doctor.nl2k.ab.ca;
Tue, 21 Apr 2026 10:35:25 -0600
Resent-From: The Doctor
Resent-Date: Tue, 21 Apr 2026 10:35:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vk1-f171.google.com ([209.85.221.171]:42349)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wFCf1-000000004Ja-25q3
for root@nk.ca;
Tue, 21 Apr 2026 09:05:21 -0600
Received: by mail-vk1-f171.google.com with SMTP id 71dfb90a1353d-56eee0ba462so2678017e0c.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1776783857; cv=none;
d=google.com; s=arc-20240605;
b=ShbOk4SgLpBL/03OfqFu1oeNA9irui4TEPysC9FNDbW0bne+8tqxOSKzaOSjF8+lOu
ROVqeQQaGpy/jjaBJUyWoiITjpVbOEINY0by1BOa5DaFfaQNH1agoRqrItHdwsKEGvpn
mBQfOw8NIeZNg+yMaQAR83bLKAJjIMnzU1/a/cQppXvxwPVByG+Zb0KtanhsGHfGQ0UY
lyp2Qd2tiBa1vCJBNAuDfZVweXZf6mUuWN7SVxnM/mmod+yg8fqjKw7dinwBTJNM8MiH
iXW8QUuxbDBA9cQXKrmEYmNXl2BTk9jzpFGFEo5iHfL8C/qR+3nnQmqUQLhI/m02EeOj
SpGg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=NDXJrPggB3Nie86hYvP4r3+3O8PiTDf4sE+e1yuJSWM=;
fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;
b=TtYzb1xpByidXqul5kOMJ3XwJwr1AaqU8AnmMkF/yrFOUmaJm9A05o3VDMwfIYdO1b
ik2OmujhlZf7pcLbeXeqC/r1aMs/tFGGtW/B3lXjzeXWeERJKXkAX2JCIliubIvfFQEK
a080yOlJblkDkXt7thRc2imSOEgNPFwHUO5580n38mn9qyI8lKmtZmxVzRg3GSfBHwsW
HsiQ+H3ndcp2oxH3UsZJ2LZKTw0kvRRgZeXVFDJ9GUEbW3qOs5kMLCi3t25VGOZUE03d
ABhRaStyo8BCHnPXrLzmjCV4DGAlzbvJICOGTTC43Ul5K4+6TwSIu13YS9XxtzeqI1so
paHg==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1776783857; x=1777388657; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=NDXJrPggB3Nie86hYvP4r3+3O8PiTDf4sE+e1yuJSWM=;
b=qwWE5sDt+V1sNPDz1xoHB9hWMR7NyPXodlyQOrtP1d5mo9R4GOyXg4a0mPYOY/To3W
pp8h7g/4n19nirQZM9uJzxo0R8YCRZn0v8ZLv26ICK4w5licHFDtOG2Ij7NaFVuPUf7a
CU0fhiBeQa/uQ9gFrik6nIHtb9HlVUkYOUPTp8uNG4AOJL6qNISuH3PkJnaIeXxHlHuZ
mNe28QGB5o/VDAqKRMgNu2SFqpwQxNs9IGEvSu8kE2+eRp6fZ8Te4C9Ie/p6k9ExBQl7
6gt/Qdt73TM+s7u5oWQ4vhUweiM5O09tgB4pCgznKTjlW6bHi7+6vLZcSTrAiTbXFNUM
taGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1776783857; x=1777388657;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=NDXJrPggB3Nie86hYvP4r3+3O8PiTDf4sE+e1yuJSWM=;
b=R3a7k8NICY1/49t4REUbi1dHyc65wePG4SpYwlMbx4vHOCU46/EgcBcvoHyIqjQjuZ
oVo72f7UxFMXOrdH55Wcd6mDSD5wt81ByB+S4XxflzJN30BNHNsZnP7H73cFhDcMMlbP
6jiI1C69sBPbNi4VO4YkjlhU9k08FaOJoFqM63Y0W/CAu7QN8IEsEIVweoE+FjHIdXAZ
JtnYkihkWgDpT9mwXs4itYU1a7sPRoaFDVWOz8NysOt7+E5DGA9tzwwHSFGY/cusQnc8
CPa3KiLaf/byCi9r5DN9DvYxy84K6V6rUbMHKMTDMB4RhmEmqHpStzqcN77oCcIrh5ch
TYcQ==
X-Gm-Message-State: AOJu0YzjF4DDfHkFy95H6oGn0ToSb7JZl1ZqfOwBJn99N9HH3KyXWAtE
GMpFZ+rsNyHlb+8dwWB+zEL/lWU7KU6Az0ZIHSkkqgdadlAkWyk82vkUoB/Dqgb1jmw6HCre+27
vuQiiY+idoTjnDzWVtnMV3x4HP0SLHsE+tmjleF8=
X-Gm-Gg: AeBDiesMypDBvt+wAmEOwNPfcUr865hcNsfYhV02lRv2oRYsMoDZ4PuCmIU1Nmug2Gk
vhR+Xxfj13EeV8IcQ/v/9wVRO9kPqJJ0zktR3xDMxTVccmKswof92elFfd65HBrvLhwoMClp9+/
uYX21fSXdrAjNWRaX523FiAN4leLwPw3eCxE2d2GnYGeINLU6mbFw40UiR0qIesbg4l1PSsvbvD
PTFy01Vul16Xh0QH4XknYOApuM4FoVvfnvWFvYp3c5WUo2emJ1uYXfCNfxH6Z6uiI4LLHX3JMQ1
MsRDVbdauAadllvX8369h0chK7+fe3mG8/qA9gGGXeEnf0dlZsBgjTLn
X-Received: by 2002:a05:6123:102:b0:56d:3451:4cc0 with SMTP id
71dfb90a1353d-56fa66fd956mr6015635e0c.7.1776783857016; Tue, 21 Apr 2026
08:04:17 -0700 (PDT)
MIME-Version: 1.0
From: Farhan Faruqui
Date: Tue, 21 Apr 2026 17:04:05 +0200
X-Gm-Features: AQROBzBgvlgJXYzFQ1InTzVV8pY3Z1cWGk2tX5EafN3PwVxoDIPgysfhF1VqELM
Message-ID:
Subject:
To: root@nk.ca
Content-Type: multipart/alternative; boundary="000000000000a3e467064ff9baba"
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Can I continue to email you at this address? Can I continue
to email you at this address?
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.221.171 listed in dnsbl.ahbl.org]
[209.85.221.171 listed in dnsbl.ahbl.org]
[209.85.221.171 listed in dnsbl.ahbl.org]
[209.85.221.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.221.171 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.221.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.221.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.221.171 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
[209.85.221.171 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.171 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[faruquifarhan746(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kristinelandmark002(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.171 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?}
--000000000000a3e467064ff9baba
Content-Type: text/plain; charset="UTF-8"
Can I continue to email you at this address?
--000000000000a3e467064ff9baba
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"gmail_signature" data-smartmail=3D"gmail_signature">
iv dir=3D"ltr">
=3D"ltr">
">
dir=3D"ltr">
ltr">
iv dir=3D"ltr">
=3D"ltr">
">
dir=3D"ltr">
ltr">
iv dir=3D"ltr">
=3D"ltr">
">
dir=3D"ltr">
ltr">Can I continue to email you at this address?
v>
/div>
v>
/div>
v>
--000000000000a3e467064ff9baba--