Catalogue request spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 28 Sep 2026 15:21:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xBIm8-00000000ANH-1dEN
for dave@doctor.nl2k.ab.ca;
Mon, 28 Sep 2026 15:20:40 -0600
Resent-From: The Doctor
Resent-Date: Mon, 28 Sep 2026 15:20:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f229.google.com ([209.85.128.229]:51491)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xBGDg-000000009nr-0yuk
for sales@nk.ca;
Mon, 28 Sep 2026 12:37:05 -0600
Received: by mail-yw1-f229.google.com with SMTP id 00721157ae682-8ab38a051aaso778797b3.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=alindocareers.com; s=google; t=1790620562; x=1791225362; darn=nk.ca;
h=message-id:date:reply-to:mime-version:content-type:to:subject:from
:from:to:cc:subject:date:message-id:reply-to:content-type;
bh=x8oxCfho5Z1XjQIcEzXRkHrtarVw4q3kmANju8GbQ1I=;
b=FjZNb/L5GIpii5pktAxVAeXDt1vNBzM+HLiIL602DyugbAbLu7XK8W3kBxgWi64iFM
AVYtGL4lv045P/bVikGPBu3lWndPlLezu28UVUqQUn2gx4ilNsaoOOwDAXrKO7oHAm34
ZkZFacKtRjYSDFDqhgJEImEqIT1wClgPouJi89dn+Ejf/C7diy0LNt8+lCp9XMUXnvXV
IagHuiHx6jSmqBmC/qe7OLiUMIendtq42m/FA62Hucf9b+8n0Bg+39Oapc0oL4zm8KWA
YP2tAtcK94NUNuKciRkCS58o44Fxwy3Zrbz55L1tFUV5yq3ihW2n1WE7MiFSmWTqEgvZ
awcA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790620562; x=1791225362;
h=message-id:date:reply-to:mime-version:content-type:to:subject:from
:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=x8oxCfho5Z1XjQIcEzXRkHrtarVw4q3kmANju8GbQ1I=;
b=xGme6uKcE7OKKh/ofpUq/gQBA1hmUiFWTAognAmjXHaf1cQ27EEWUYj43ytfUOEZNc
OTo6uDN4lS0EGst3504lChKS8JBmVexbbliHTtwmtzVtmeI3PqZgpFhBSgfzu7bOq7IW
GL58c++ZX75abrsh0pHSx7Xu0cghdHmjN3QOnJRPSAflZ2MpAZ14sfcV+GtqfUWZvEbz
6vOjOyIBdUf8Vls6Hh1Y5f8QATe5j6ng0zCeXsFjzepxjDBe5kwHeeYf4HRfN7lb4myb
6r0jiIr+9gmPIlkYWkMJhEcbMGGq5MlOzr0lhXnXLl7dPV8KX1i9nbe+5M9M+qBpd9Fw
75Rw==
X-Gm-Message-State: AFq9FYJarBpxZOEY5qSbtrBHTnB/g744VSBcO9aXAA+0ipxebkgr7+fk
v6gpUk047LwhcC2Ed8LiUHEPQt2fh6HGpoFxoP0/cGkju4LIq1bfVRiqxd+x90qFIE7KHeKw2eV
RxXuEwP12o3l5X7Go8IAWdc8sIqRSIWOBF0c9po/ywzf8lg==
X-Gm-Gg: AYBFou1i/OSPLkUnqiz1GqVk9z8rY8WXn0S93e7S4wq4n2NRjlVGpF0vsO7EsUYBiUH
9K1f08ScVvlTteNda9tmZHke+mIlvohQpSNCFA9QRY02tsbT4MohmKQxtYytmwHuicyRSU1ul01
47brLrZE+YO4Nq53oPCv6uAnENKbY1PTM1vL5K9wYxo/J777ACTlgIEQ9kRs6DfMV5McVkwXB0N
DkE/Wgy6Y4ibtVP3IzW6x9S5oI+F9sDYohI4tibL05BELfgmOn81RdFD+3KvzTu+V4QtwINlEgO
ObaGLBODVdGTmbKTwh0X+LlXCWzEtcwknb43FL4HeC5kvRfDOz2+56UHe5NVA7LlhMQhTasWcFA
H1gKJ9yrWT1I59ja4eSitPoyOlUkWlLBCcw==
X-Received: by 2002:a05:690e:118b:b0:674:e730:f133 with SMTP id 956f58d0204a3-674e74f7de1mr3151340d50.6.1790620562278;
Mon, 28 Sep 2026 11:36:02 -0700 (PDT)
Received: from VPS-398404 ([95.133.230.23])
by smtp-relay.gmail.com with ESMTP id 956f58d0204a3-6740ef370e1sm1495726d50.19.2026.09.28.11.36.02
for
Mon, 28 Sep 2026 11:36:02 -0700 (PDT)
X-Relaying-Domain: alindocareers.com
From: "JAMES DENNIS"
Subject: ENQUIRY !!!
To:
Content-Type: multipart/alternative; boundary="fJsmF3M40QtABuGFpJNUTAB2qot6IQiz=_"
MIME-Version: 1.0
Reply-To:
Date: Mon, 28 Sep 2026 18:36:02 +0000
Message-Id: <20262809183602B00D590360-9C74CE7CF3@alindocareers.com>
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi We are interested in your product. Kindly send us your
price and catalogue..
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[95.133.230.23 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
[209.85.128.229 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.229 listed in dnsbl.ahbl.org]
[209.85.128.229 listed in dnsbl.ahbl.org]
[209.85.128.229 listed in dnsbl.ahbl.org]
[209.85.128.229 listed in dnsbl.ahbl.org]
[95.133.230.23 listed in dnsbl.ahbl.org]
[95.133.230.23 listed in dnsbl.ahbl.org]
[95.133.230.23 listed in dnsbl.ahbl.org]
[95.133.230.23 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.229 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.229 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.229 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.229 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[thegoodlife199707(at)outlook.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.229 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.229 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 MIXED_HREF_CASE Has href in mixed case
Subject: {SPAM?} ENQUIRY !!!
This is a multi-part message in MIME format
--fJsmF3M40QtABuGFpJNUTAB2qot6IQiz=_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi
We are interested in your product.
Kindly send us your price and catalogue..
I am awaiting your response.
Thanks
Best Regards
J mailto:thegoodlife199707@outlook.com
ames Dennis
--fJsmF3M40QtABuGFpJNUTAB2qot6IQiz=_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1">
itle>ENQUIRY !!!
=3Dleft>Hi
size=3D3 face=3DArial>We are interested in your product.
align=3Dleft>Kindly send us your price an=
d catalogue..
I =
am awaiting your response.
ce=3DArial>Thanks
l>Best Regards
<=
A href=3D"mailto:thegoodlife199707@outlook.com">James Dennis
>
--fJsmF3M40QtABuGFpJNUTAB2qot6IQiz=_--