Web/SEO/APP spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 12 Oct 2026 14:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xGMmT-00000000FCy-3Gpd
for dave@doctor.nl2k.ab.ca;
Mon, 12 Oct 2026 14:37:57 -0600
Resent-From: The Doctor
Resent-Date: Mon, 12 Oct 2026 14:37:57 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-dl1-f44.google.com ([74.125.82.44]:56331)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xGLDh-00000000PaE-21Qy
for sales@nk.ca;
Mon, 12 Oct 2026 12:58:07 -0600
Received: by mail-dl1-f44.google.com with SMTP id a92af1059eb24-1419d3416ceso3072126c88.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=bestappa2zsolution-info.20251104.gappssmtp.com; s=20251104; t=1791831423; x=1792436223; darn=nk.ca;
h=content-type:mime-version:date:message-id:subject:reply-to:to:from
:from:to:cc:subject:date:message-id:reply-to:content-type;
bh=cfsufuDYjUBspt9QCJlPhs/3aftWc73kQo5opi4oivk=;
b=iLTNYj1CEO0mLy+kHtkOWDBvF6zI1leZpqAGxDYfhy2kS5EcdSZm2h5NgLj+t3ILQF
6OpD8tNDEG6HoRNeRZAx02tRF05jk+2v2/+dBcEndWiJy8fEfz7APtk4MOp+LklHneAK
kE9sNW7HOTkIx0opRlFIMvlOV2eL1bejBcmCsEJvYNEtt5d05nmED8+BWjTcbCCogJgo
ijlr0qNJ8hQ3vGvl2qCOrFA1IEWTb+zKyPNbcJgdoHJosN6HsNo/n8YqrNnWx+7m8Zhu
HI0xfnYLUgxLA6No2HmO1cKidSPr84++uzhDFkGlVlNdMn+Vd7UNJDlVtJP8tDwPPEUL
Ba8A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1791831423; x=1792436223;
h=content-type:mime-version:date:message-id:subject:reply-to:to:from
:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=cfsufuDYjUBspt9QCJlPhs/3aftWc73kQo5opi4oivk=;
b=kV7p9Vf3/wWHq/U9MzMap/kpgUbKUUxdO6KuJqZ2dG0kw5yJzq/ppAbyb9qkKw9FQi
YmLIucTrwtMYQsSYz70wAJeYms8CnWre+OjZQgPqU1XP/CF0adR605674lPEFO3bONdv
i6er4uR6UqCaV6F7P1QbPNWz0CXs373hBmbPnX/daZms5LnehkzHdD4SPx94yCpY4rmt
NqlM+bjGZZNqFa4psNC44eHCn/zdyhVJx3wVrJDo4lPOSlh2bvnoMcVhhHV+MkFL7c+m
fgg+rdIACYWPcTISqhdTeaIutfT49HrRJ6zxoyesA9v0wBdw2VUYs2o138meTaLbcZKf
eA8g==
X-Gm-Message-State: AFq9FYKM8rooAgLrfjVilFEmAr5SPmXncgwrvU+bjH6aoxMMcULB+gso
HS1N2P0k1TllM3QS5IwHRVIBR/lIQreFhF52mUnNxKI4ABLgkB/m2gTRWimMap9drmfyqDIFcyT
8ik6amMk=
X-Gm-Gg: AYBFou3dzlFjb90g7o7Gizdh1wusiSU/I/mAxgZ8MkgEIR4jV7IiqvZLCtZM+NJPh+Z
Vk299TUX0tI5u0tFkelBmbpjZSQn6mA/AuH/I+0y6Ug1KMiydgQSrRnCqmkkIpsAOJ/qY4bdv/p
cf0JLvqQqq2skCpdnDM3yk8LVtPwMRV4NOEcE6sSnhkkdNwy3sACD5WP4Z3zqA2xiP5Pb2GwIQW
Mon/D+0J36d2SE0OG5u8K4/pr3KziNO5zKTfGG2R7hDBP5ru0HPZpi0jrOaddEUjPPcHIBaJ0jm
Nv3ra6uPfskaNjXstY6tzUicYIaSq7mRntYxPC6hK1KPR8CmLPgGTWRcgp1khLNkaWeC+046Rq+
Drm8B2NBYD+3BDH8/ftqmjbdCKSkezsshMJYbMjDQpUHU7fZKvWYqzIvWJiDSVSrUyxffzSfOng
99ftq2gvzKLdNKbSRFmPQOTXEBV7jJ4nArAH220x3/fVcoysp9L3RSDF7wMX+arsBXfm/e8qvMU
D6BRDRmcV8uOtp0BH2jY77En/Y8jKlV9X0=
X-Received: by 2002:a05:7022:7f13:b0:14d:3930:647d with SMTP id a92af1059eb24-16a5faa76bdmr16085421c88.9.1791831422707;
Mon, 12 Oct 2026 11:57:02 -0700 (PDT)
Received: from [127.0.0.1] ([122.161.50.247])
by smtp.gmail.com with ESMTPSA id a92af1059eb24-169a1becb11sm29668116c88.4.2026.10.12.11.57.00
for
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Mon, 12 Oct 2026 11:57:02 -0700 (PDT)
From: Khushi
To: sales@nk.ca
Reply-To: khushi@bestappa2zsolution.info
Subject: Hello - sales@nk.ca
Message-ID: <7d804076-2220-47f3-bab9-9f5d64e6e6da@bestappa2zsolution.info>
Date: Mon, 12 Oct 2026 18:57:00 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_NmP-a9644a3ef06682ae-Part_1"
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi sales@nk.ca I sent you an email a few days ago regarding
mobile app/Redesign/update/add new features. If you are interested?
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[122.161.50.247 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
[74.125.82.44 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[122.161.50.247 listed in dnsbl.ahbl.org]
[122.161.50.247 listed in dnsbl.ahbl.org]
[122.161.50.247 listed in dnsbl.ahbl.org]
[122.161.50.247 listed in dnsbl.ahbl.org]
[74.125.82.44 listed in dnsbl.ahbl.org]
[74.125.82.44 listed in dnsbl.ahbl.org]
[74.125.82.44 listed in dnsbl.ahbl.org]
[74.125.82.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[122.161.50.247 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[122.161.50.247 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[122.161.50.247 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[122.161.50.247 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.44 listed in list.dnswl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[122.161.50.247 listed in sbl-xbl.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.82.44 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.44 listed in wl.mailspike.net]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
Subject: {SPAM?} Hello - sales@nk.ca
X-Antivirus: AVG (VPS 261012-4, 10/12/2026), Inbound message
X-Antivirus-Status: Clean
----_NmP-a9644a3ef06682ae-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hi sales@nk.ca
I sent you an email a few days ago regarding mobile =
app/Redesign/update/add new features.
If you are interested?
PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.
Thanks,=20
---------------------------------------
From: Khushi
Sent: Tue, 29 Sept 2026
To: sales@nk.ca
Subject: Mobile Apps!
=20
Hi, sales@nk.ca
=20
My name is Khushi, Marketing Manager at an =
international mobile apps development company in India.
=20
We create various types of apps including radio/podcast apps, retail apps, =
delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =
wedding apps, taxi apps, restaurant apps, etc.
=20
If interested, I can send you samples, our portfolio, and company details.
=20
Thanks,
Khushi
----_NmP-a9644a3ef06682ae-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hi sales@nk.ca
I sent you an email a few days ago regarding =
mobile app/Redesign/update/add new features.
If you are interested?=
PLEASE SEND ME YOUR CONTACT & =
WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.
Thanks,=
---------------------------------------
From: =
Khushi
Sent: Tue, 29 Sept 2026
g>To: sales@nk.ca
Subject: Mobile Apps!=
Hi, sales@nk.ca
My =
name is Khushi, Marketing Manager at an international mobile apps =
development company in India.
We create various types of=
apps including radio/podcast apps, retail apps, delivery apps, booking =
apps, fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps,=
restaurant apps, etc.
If interested, I can send you =
samples, our portfolio, and company details.
Thanks,=
Khushi
----_NmP-a9644a3ef06682ae-Part_1--