Web/SEO/App Spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Dec 2025 02:10:00 -0700
Received: from mail-ot1-f71.google.com ([209.85.210.71]:61923)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vTGCI-00000000DmF-05Jt
for dave@doctor.nl2k.ab.ca;
Wed, 10 Dec 2025 02:09:32 -0700
Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-7cacaa675feso2164564a34.3
for; Wed, 10 Dec 2025 01:08:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1765357708; x=1765962508; darn=doctor.nl2k.ab.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=MxupQGuYJGmt9TGNY8P3aNNk07GZhd3yQyQN1NS5Tx0=;
b=E5DIloUuzK0zh5LJ+zPC7RkLsbtVFewiACvt7UbTCK3P7a4NntYnSKxc/h9TvXjYbB
icHjdkl9zmqjodclJ93+5gDgGVJ9kGW3ORhsQJF8uXG59+OyH0O8LBnXPC1tcXJ0wVkp
CTbCO3OX1VCZyzyZpaE6BuWrEwAoZrNQGRCrqkwHi83fKLOiQV53a0vWrEgblXArKiCp
l7AhtP3AuhLCHyO6DOmrm7PmPRvN3DiHWLxaBRPbqhLUlih6AWlpuhP60TmmC9Fcj5Ac
v7M7q/egbvOs/hQDoEF78U6caadKyvm+5pI8PVTswaymNrL5y/+zkTH3evxY45mOM/TE
Rn0w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1765357708; x=1765962508;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=MxupQGuYJGmt9TGNY8P3aNNk07GZhd3yQyQN1NS5Tx0=;
b=riza33De7fvK1oDYv7rbqTqUy9u5N8GSvI4z1Et/NardzjmQfAwMLo5Fblu9vkcgV+
yHKw4nWyuuOsAOSTj938TIDa5RhyHARP7WtiYj5kAKSefvuPBdNtQwLnsrgG/XQWH2iB
UB2eDR5NEU02glk7DNqRkFmpDGs8cPgo5BTEB9vIbbC0/J7BmWCDrRmF0hWbEyxtM3El
85Vi99ejZI2HoKIKxEO+FX/pbxx+CLfGAvp1D8Y/nvsJ19WXADiuVbtaAC0JtTVGzFHa
EaSRWGoOecDCXLwXKUyg6Wj/08hbJkG8J5u/DgyZ+4SUvPYuWGikfg+1+HG0An+hE1cx
HirQ==
X-Gm-Message-State: AOJu0YwnFdRj97YzVTBAelzpHe18f3mpEK1IHpU91PdaYDzfdLwuQDTW
mxOYm1Rerzg2K+TH1Ouyh8B7rWDuNN7JgInQGmM9mI1fHObJ6c96ufYYhs9uZ1s+aesytAlltVB
b7jc=
X-Google-Smtp-Source: AGHT+IEq3o90MtQi6wmmjJItpc+ZOTaYz6usk4w6DgWYa5D6J/AN9zjwMA6moO2O5EeqzqTZLqUTpCynyA==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:1523:b0:659:9a49:9070 with SMTP id
006d021491bc7-65b2ad095d6mr1076498eaf.59.1765357708031; Wed, 10 Dec 2025
01:08:28 -0800 (PST)
Message-ID:
Date: Wed, 10 Dec 2025 09:08:28 +0000
Subject: =?UTF-8?B?8J+TseKYju+4jyBSZTotIEZvbGxvdyB1cCA6LSBTdGFydCBZZWFyIFdpdGggVXBncmFkZQ==?=
=?UTF-8?B?IA==?=
From: megazaxwebseo77425@gmail.com
To: dave@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="00000000000016be140645955f37"
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi there, dave@doctor.nl2k.ab.ca Please reply to my last email.
May I send you a quote for website design or redesign? If you are interested.
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.71 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[megazaxwebseo77425(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[megazaxwebseo77425(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.71 listed in wl.mailspike.net]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} =?UTF-8?B?8J+TseKYju+4jyBSZTotIEZvbGxvdyB1cCA6LSBTdGFydCBZZWFyIFdpdGggVXBncmFkZQ==?=
=?UTF-8?B?IA==?=
--00000000000016be140645955f37
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hi there, dave@doctor.nl2k.ab.ca
Please reply to my last email.
May I send you a quote for website design or redesign? If you are
interested.
Thank you.
From: Mega
Sent: 15 November, 2025 15:16
To: 'dave@doctor.nl2k.ab.ca'
Subject: Redesign Scope and Pricing Info
Hi there,
We are a web development company.
Are you looking for a cost-effective WordPress website?
Can I send a proposal with pricing? If you are interested.
Best regards,
Mega
--00000000000016be140645955f37
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi there, dave@doctor.nl2k.ab.ca
Please reply to my last email.
<=
br>May I send you a quote for website design or redesign? If you are intere=
sted.
Thank you.
From: Mega
Sent: 15 November, 2025 15=
:16
To: 'dave@doctor.nl2k.ab.ca'
Subject: Redesign Scope and Pricing =
Info
Hi there,
We are a web development company.
Are =
you looking for a cost-effective WordPress website?
Can I send a pro=
posal with pricing? If you are interested.
Best regards,
Mega
--00000000000016be140645955f37--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Dec 2025 02:10:00 -0700
Received: from mail-ot1-f71.google.com ([209.85.210.71]:61923)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vTGCI-00000000DmF-05Jt
for dave@doctor.nl2k.ab.ca;
Wed, 10 Dec 2025 02:09:32 -0700
Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-7cacaa675feso2164564a34.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1765357708; x=1765962508; darn=doctor.nl2k.ab.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=MxupQGuYJGmt9TGNY8P3aNNk07GZhd3yQyQN1NS5Tx0=;
b=E5DIloUuzK0zh5LJ+zPC7RkLsbtVFewiACvt7UbTCK3P7a4NntYnSKxc/h9TvXjYbB
icHjdkl9zmqjodclJ93+5gDgGVJ9kGW3ORhsQJF8uXG59+OyH0O8LBnXPC1tcXJ0wVkp
CTbCO3OX1VCZyzyZpaE6BuWrEwAoZrNQGRCrqkwHi83fKLOiQV53a0vWrEgblXArKiCp
l7AhtP3AuhLCHyO6DOmrm7PmPRvN3DiHWLxaBRPbqhLUlih6AWlpuhP60TmmC9Fcj5Ac
v7M7q/egbvOs/hQDoEF78U6caadKyvm+5pI8PVTswaymNrL5y/+zkTH3evxY45mOM/TE
Rn0w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1765357708; x=1765962508;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=MxupQGuYJGmt9TGNY8P3aNNk07GZhd3yQyQN1NS5Tx0=;
b=riza33De7fvK1oDYv7rbqTqUy9u5N8GSvI4z1Et/NardzjmQfAwMLo5Fblu9vkcgV+
yHKw4nWyuuOsAOSTj938TIDa5RhyHARP7WtiYj5kAKSefvuPBdNtQwLnsrgG/XQWH2iB
UB2eDR5NEU02glk7DNqRkFmpDGs8cPgo5BTEB9vIbbC0/J7BmWCDrRmF0hWbEyxtM3El
85Vi99ejZI2HoKIKxEO+FX/pbxx+CLfGAvp1D8Y/nvsJ19WXADiuVbtaAC0JtTVGzFHa
EaSRWGoOecDCXLwXKUyg6Wj/08hbJkG8J5u/DgyZ+4SUvPYuWGikfg+1+HG0An+hE1cx
HirQ==
X-Gm-Message-State: AOJu0YwnFdRj97YzVTBAelzpHe18f3mpEK1IHpU91PdaYDzfdLwuQDTW
mxOYm1Rerzg2K+TH1Ouyh8B7rWDuNN7JgInQGmM9mI1fHObJ6c96ufYYhs9uZ1s+aesytAlltVB
b7jc=
X-Google-Smtp-Source: AGHT+IEq3o90MtQi6wmmjJItpc+ZOTaYz6usk4w6DgWYa5D6J/AN9zjwMA6moO2O5EeqzqTZLqUTpCynyA==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:1523:b0:659:9a49:9070 with SMTP id
006d021491bc7-65b2ad095d6mr1076498eaf.59.1765357708031; Wed, 10 Dec 2025
01:08:28 -0800 (PST)
Message-ID:
Date: Wed, 10 Dec 2025 09:08:28 +0000
Subject: =?UTF-8?B?8J+TseKYju+4jyBSZTotIEZvbGxvdyB1cCA6LSBTdGFydCBZZWFyIFdpdGggVXBncmFkZQ==?=
=?UTF-8?B?IA==?=
From: megazaxwebseo77425@gmail.com
To: dave@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="00000000000016be140645955f37"
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi there, dave@doctor.nl2k.ab.ca Please reply to my last email.
May I send you a quote for website design or redesign? If you are interested.
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
[209.85.210.71 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
[209.85.210.71 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.71 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.71 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[megazaxwebseo77425(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[megazaxwebseo77425(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.71 listed in wl.mailspike.net]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} =?UTF-8?B?8J+TseKYju+4jyBSZTotIEZvbGxvdyB1cCA6LSBTdGFydCBZZWFyIFdpdGggVXBncmFkZQ==?=
=?UTF-8?B?IA==?=
--00000000000016be140645955f37
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hi there, dave@doctor.nl2k.ab.ca
Please reply to my last email.
May I send you a quote for website design or redesign? If you are
interested.
Thank you.
From: Mega
Sent: 15 November, 2025 15:16
To: 'dave@doctor.nl2k.ab.ca'
Subject: Redesign Scope and Pricing Info
Hi there,
We are a web development company.
Are you looking for a cost-effective WordPress website?
Can I send a proposal with pricing? If you are interested.
Best regards,
Mega
--00000000000016be140645955f37
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi there, dave@doctor.nl2k.ab.ca
Please reply to my last email.
<=
br>May I send you a quote for website design or redesign? If you are intere=
sted.
Thank you.
From: Mega
Sent: 15 November, 2025 15=
:16
To: 'dave@doctor.nl2k.ab.ca'
Subject: Redesign Scope and Pricing =
Info
Hi there,
We are a web development company.
Are =
you looking for a cost-effective WordPress website?
Can I send a pro=
posal with pricing? If you are interested.
Best regards,
Mega
--00000000000016be140645955f37--