Web//SEO/App spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Oct 2026 08:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xLiL9-000000004Cr-2akr
for dave@doctor.nl2k.ab.ca;
Tue, 27 Oct 2026 08:39:51 -0600
Resent-From: The Doctor
Resent-Date: Tue, 27 Oct 2026 08:39:51 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f180.google.com ([209.85.215.180]:47548)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1xLg43-00000000AmF-0Sd0
for sales@nk.ca;
Tue, 27 Oct 2026 06:14:05 -0600
Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so1726093a12.3
for; Tue, 27 Oct 2026 05:13:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1793103183; x=1793707983; darn=nk.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;
b=sAl825XOShueGAK8RDoGifqfvDedkBrTjFpMx3mJh3Ha+x+OROVjgrW9uy+pvD9rP6
1fYWuDWfSKFSGtr5GZzLBOboh0EB7KpT499B2vBHxlhGqjLESfNJrHaqfofVH7Bt5lhE
3Cdin/pqsTN3gPQpMbVG34QbETKFEr6zXvSMzu2FMvcG1YjaxJdtmGbraLSTdOQGDCy4
OL4B6rj+ulYTX5VXGYdPhkAu9MML3ZJt2nzds4+j8NXtIESVRo5i4zoX4TGv6VUDjins
G/jwYiuinnian+IKXg63uEHSj5JRDEhOWaLs9XIDS4kOMsGJJazgbdv2sz2d5C4TP42N
8HIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1793103183; x=1793707983;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;
b=X2UyzzWtH5EudORYbgWDdwM0A4g4hByI90yxNkP/MGtAdpkkyTCPr03/0wwhFbT+Ne
ptZkKU5PqjCEw7s+iyHLep21C0eRG3DdYouLVME3mS00F/d85L2zWW7IsUq3JoJqSvfk
9yugX+eZOmWaBVX49+Pw0rsyIAx1B7UPEoe///e63KcGpBVXJziYqWyWZNY7rvufGOjD
wqjkPd5DxAabopX9j1y2N73hvCmDiKW2XgCIQ3JrX3I6qkxfDrkXRF6+NfF5QYnI3nYX
Ul6q85asMAp52n929zxu0ctHQGkh472Bf39mPOjtyV6Tb7ZYopDFO0pmpzgU8zlwV0so
g69A==
X-Gm-Message-State: AFq9FYKE+F4B12+u/CwBOIULqYnAif6qrIt9ZKnCbyV/A4hATRVR8bnV
5FcG/wiGjth93FSRDnFJWk78kr0sLjSsXtOY1cJmid7h1Sxg+ReodUtHHEBTBnMTFhTufnkgIxy
iaY7rwv8=
X-Gm-Gg: AYBFou1qJRswC3Q2dkTBDq0CfYJ3lylSWlOeKtnsgG7RCpfkxsqcNbaL8WPhG9tROOh
Ojc46ts2QShdJEhlnTJ8RD4TYs9iu/nJoLehOkG6927xTe21WUYX1RB2z8LBDjZIlx8AgKwsfIQ
Rx9Rc9J6e+RUWrJMIJsWERog3A2KWtC+zR4HYJS8Zc5FP3HavEmhRsY9iNYY4gVplGeztZpimqR
Oh2pBzuaIi2niR5qvXq6UhAaBCmBHruQqGRcc6ShnJnovpA1HmFG3UmaXgc31enCRvMiowPfKUk
MMwGl+OfxaGZdaxOTxb39AVe2v4Vf1xd/E0jgmi7yl2SgwEqFUkwXBWjz5fngvPFIV2S+4POS6I
xHCtmaxpDrCj0brVB5NiGBg/M62D5hXHns2wNV2TklO62oas5xQJJuJKG59tujDJ3OSZeYfZJH3
JkWq2H+3f8O3aL8AcvBCasPs1SuvhxbqFn/JNEi0kxzLK3gmvN5+UTXjcSMR/gtdZy0zeS4CO6z
RfJauddKYU6Vh3QzIiqeAfSjmYMp40vTsj3tlDsbDDBV4OLDO27Qw3a8EYsNPS85fozRc6DcImf
GXrpCz2LXDffYSWB2WqpXsL3SZ8Q37OGUeLrwE6rKRMDe3fD
X-Received: by 2002:a17:90b:2e10:b0:3ac:7c52:faf6 with SMTP id 98e67ed59e1d1-3adea0b18dfmr7366198a91.1.1793103182838;
Tue, 27 Oct 2026 05:13:02 -0700 (PDT)
Received: from [127.0.0.1] ([103.106.232.8])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-2eae6b7a216sm8173385ad.16.2026.10.27.05.13.01
for
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Tue, 27 Oct 2026 05:13:02 -0700 (PDT)
From: Lindy
To: sales@nk.ca
Subject: SEO Audit - www.nk.ca?
Message-ID:
Content-Transfer-Encoding: quoted-printable
Date: Tue, 27 Oct 2026 12:13:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 8.2
X-Spam_score_int: 82
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Want to get your business on the 1st page of Google?
We specialize in grow your online presence.
Content analysis details: (8.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.106.232.8 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.180 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.180 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.180 listed in bl.score.senderscore.com]
Subject: {SPAM?} SEO Audit - www.nk.ca?
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Oct 2026 08:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xLiL9-000000004Cr-2akr
for dave@doctor.nl2k.ab.ca;
Tue, 27 Oct 2026 08:39:51 -0600
Resent-From: The Doctor
Resent-Date: Tue, 27 Oct 2026 08:39:51 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f180.google.com ([209.85.215.180]:47548)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xLg43-00000000AmF-0Sd0
for sales@nk.ca;
Tue, 27 Oct 2026 06:14:05 -0600
Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so1726093a12.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1793103183; x=1793707983; darn=nk.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;
b=sAl825XOShueGAK8RDoGifqfvDedkBrTjFpMx3mJh3Ha+x+OROVjgrW9uy+pvD9rP6
1fYWuDWfSKFSGtr5GZzLBOboh0EB7KpT499B2vBHxlhGqjLESfNJrHaqfofVH7Bt5lhE
3Cdin/pqsTN3gPQpMbVG34QbETKFEr6zXvSMzu2FMvcG1YjaxJdtmGbraLSTdOQGDCy4
OL4B6rj+ulYTX5VXGYdPhkAu9MML3ZJt2nzds4+j8NXtIESVRo5i4zoX4TGv6VUDjins
G/jwYiuinnian+IKXg63uEHSj5JRDEhOWaLs9XIDS4kOMsGJJazgbdv2sz2d5C4TP42N
8HIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1793103183; x=1793707983;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=WUZtj/koPLpYC+faVqVzkk7ln9Gu9VzSgP7r4hS7I9Q=;
b=X2UyzzWtH5EudORYbgWDdwM0A4g4hByI90yxNkP/MGtAdpkkyTCPr03/0wwhFbT+Ne
ptZkKU5PqjCEw7s+iyHLep21C0eRG3DdYouLVME3mS00F/d85L2zWW7IsUq3JoJqSvfk
9yugX+eZOmWaBVX49+Pw0rsyIAx1B7UPEoe///e63KcGpBVXJziYqWyWZNY7rvufGOjD
wqjkPd5DxAabopX9j1y2N73hvCmDiKW2XgCIQ3JrX3I6qkxfDrkXRF6+NfF5QYnI3nYX
Ul6q85asMAp52n929zxu0ctHQGkh472Bf39mPOjtyV6Tb7ZYopDFO0pmpzgU8zlwV0so
g69A==
X-Gm-Message-State: AFq9FYKE+F4B12+u/CwBOIULqYnAif6qrIt9ZKnCbyV/A4hATRVR8bnV
5FcG/wiGjth93FSRDnFJWk78kr0sLjSsXtOY1cJmid7h1Sxg+ReodUtHHEBTBnMTFhTufnkgIxy
iaY7rwv8=
X-Gm-Gg: AYBFou1qJRswC3Q2dkTBDq0CfYJ3lylSWlOeKtnsgG7RCpfkxsqcNbaL8WPhG9tROOh
Ojc46ts2QShdJEhlnTJ8RD4TYs9iu/nJoLehOkG6927xTe21WUYX1RB2z8LBDjZIlx8AgKwsfIQ
Rx9Rc9J6e+RUWrJMIJsWERog3A2KWtC+zR4HYJS8Zc5FP3HavEmhRsY9iNYY4gVplGeztZpimqR
Oh2pBzuaIi2niR5qvXq6UhAaBCmBHruQqGRcc6ShnJnovpA1HmFG3UmaXgc31enCRvMiowPfKUk
MMwGl+OfxaGZdaxOTxb39AVe2v4Vf1xd/E0jgmi7yl2SgwEqFUkwXBWjz5fngvPFIV2S+4POS6I
xHCtmaxpDrCj0brVB5NiGBg/M62D5hXHns2wNV2TklO62oas5xQJJuJKG59tujDJ3OSZeYfZJH3
JkWq2H+3f8O3aL8AcvBCasPs1SuvhxbqFn/JNEi0kxzLK3gmvN5+UTXjcSMR/gtdZy0zeS4CO6z
RfJauddKYU6Vh3QzIiqeAfSjmYMp40vTsj3tlDsbDDBV4OLDO27Qw3a8EYsNPS85fozRc6DcImf
GXrpCz2LXDffYSWB2WqpXsL3SZ8Q37OGUeLrwE6rKRMDe3fD
X-Received: by 2002:a17:90b:2e10:b0:3ac:7c52:faf6 with SMTP id 98e67ed59e1d1-3adea0b18dfmr7366198a91.1.1793103182838;
Tue, 27 Oct 2026 05:13:02 -0700 (PDT)
Received: from [127.0.0.1] ([103.106.232.8])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-2eae6b7a216sm8173385ad.16.2026.10.27.05.13.01
for
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Tue, 27 Oct 2026 05:13:02 -0700 (PDT)
From: Lindy
To: sales@nk.ca
Subject: SEO Audit - www.nk.ca?
Message-ID:
Content-Transfer-Encoding: quoted-printable
Date: Tue, 27 Oct 2026 12:13:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 8.2
X-Spam_score_int: 82
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Want to get your business on the 1st page of Google?
We specialize in grow your online presence.
Content analysis details: (8.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[103.106.232.8 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
[103.106.232.8 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.106.232.8 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.180 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.180 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.180 listed in bl.score.senderscore.com]
Subject: {SPAM?} SEO Audit - www.nk.ca?
Hi,
Want to get your business on the 1st page of Google? We =
specialize in grow your online presence.
We offer affordable packages=
and proven results.
Contact us today for a cost and =
proposal
Sincerely,
Lindy,
![](3D"https://d28aad442jeoqz.cloudfront.net/564fsdfsdgsghsdhfhfdhjf=<br)
![](3D"https://cloudfront.net/track/o/mRyc9PTDhtOgkTFLqY1rX8OublCW=<br)