Web/SEO/App Spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 09 Dec 2025 14:58:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vT5ho-00000000Lsr-3yi2
for dave@doctor.nl2k.ab.ca;
Tue, 09 Dec 2025 14:57:12 -0700
Resent-From: The Doctor
Resent-Date: Tue, 9 Dec 2025 14:57:12 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f176.google.com ([209.85.167.176]:52388)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vT4Yg-00000000IRT-25dZ
for sales@nk.ca;
Tue, 09 Dec 2025 13:43:51 -0700
Received: by mail-oi1-f176.google.com with SMTP id 5614622812f47-450be85b7d9so2773109b6e.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=groupacclaim.co; s=google; t=1765312970; x=1765917770; darn=nk.ca;
h=mime-version:date:message-id:subject:to:from:from:to:cc:subject
:date:message-id:reply-to;
bh=XNnHItT+IqKbf12xIof0EhDk4utDtvAvaU4aDbGhghA=;
b=LYoBrPMTXrCkZEdvHdhsiv4DFo1dDbdZ5cDfXbM1T8IzrWXRi07oNP5fQ27LMcekvc
lJ9P+Kz0GCI8YvepXSfwFbPJE14gER80ttrvocE6UzL4rI69jx2mWhoD2XTQRK5E1dup
pORTpA/PcOEIf1GbYHHXbYWavFTUjzBt9R+wswkY2kcrcMsQCi2JUcev/xZ4V0l14zk9
2fxGbuFwd2DOaj88vUxaFJmstDB+6Epvuchjb/tmmmnh8KqQ2ia1wfhBBXSjgLjKs612
gFwi0WMkVfWNBiCF0WwVXR5Z6uwvT1aNRKLpcgdRXupOsTN+6stgBhMbFAtyTdjH8fA9
5Htw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1765312970; x=1765917770;
h=mime-version:date:message-id:subject:to:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=XNnHItT+IqKbf12xIof0EhDk4utDtvAvaU4aDbGhghA=;
b=fZcxnfjfGddTY1SAbAX56xlAvgahblHXVlDDA3buZUjUef/avda0NDJ4T/rrW6qM+P
y7S5sxch9KVWxmS9MhmSDOnOPfBjPJgBIqndU0YQVXbEoBNBoCTt4Fl+Q07uuY3QRpl4
JGTnZgS6XT/DP62QMPB0StR2inpmjZPBicPIPfOUcsV6rS/26l0W7ZGZlUvB9zWp3Yog
VpfAtRLnrPF8h31789RYpq+4dNLSLBQlUh8q1XiUCPi4uSJVokd54XIbFDDIvH9dqkx0
LsvsWfRdrKqHtafYCWoPsZdRGowJd9l9Ufx3wNfbTRSOZx+p7QVBn5w3rpCZ3ngnDBUb
bDZA==
X-Gm-Message-State: AOJu0YwKjSqOCieqpAD935Feq0zuHoB11T1mZXeeBg4PtBggn86UcSBM
Vdh54zocykS3ZpZCpxdqUqGaWTlPUi6fVvBmOjzYcLG9RFkeRPFBOj1+8PJ2JJeSQ1+qVJxoDMg
QFIzXeg==
X-Gm-Gg: ASbGncuk4tvQwxMbY8Ck69OJYS8GtcYHyMFOQI7jWprmkJURWDa14/EipMbkrXGZ3oj
qUgfJxTRWWnbqrQvBDVzkNAMBDxouApQ32NG0cNKJF6RNBsifOC7Ft5nIHtiLMGM7O/BfgvKWW/
f1hmHeMqWqe4f9AFblU2fa6r91NtrNsukcDM0vXS+oJK56L80UBTWfELsLlv7jrRGiNGIkVSAse
tpLkuQe0rioA2dCM0jZu0SM4y7fG5bx/BZyjtx8y4sPhLBYcBoZMvBKapQbES9elCgsNdkHX/b0
O6+kPlVRy8YQ0tI4w3Ops0ZT/5Intyj7sSIIxDP3HFiNmXRnf9RHOzG8M0PCZ2cO0uFNLenOI9Q
3K+fYCUQ31qj0SRmBPI7zUwvcU6+VymGvJCPW6dot9Wr3sGkyCzQG9iW4mFbaHULiSpLfR8DHnT
rwmC1MHfqaery1Xn5slEunINTfJv6eIu15TCI8UKwOsfhmYeXOUE5JudvvpzZ3WgikCYIh3JEaL
zxRqbiSF8ZZV+mZrtmiNj9fWculLYXYDg==
X-Google-Smtp-Source: AGHT+IFb+f+BvJVibxa7oDSNZ18Ups7g4l5XlYn7aWSqFXwbUb8I0xbGgSZEKNRfAbN3vCmPEoNYLQ==
X-Received: by 2002:a05:620a:29d2:b0:8b9:a134:90e0 with SMTP id af79cd13be357-8ba38a7663amr4065085a.16.1765305801801;
Tue, 09 Dec 2025 10:43:21 -0800 (PST)
Received: from ip-172-31-7-170.ec2.internal (ec2-13-218-114-168.compute-1.amazonaws.com. [13.218.114.168])
by smtp.gmail.com with ESMTPSA id af79cd13be357-8b62529e75csm1392648085a.9.2025.12.09.10.43.21
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 09 Dec 2025 10:43:21 -0800 (PST)
From: =?UTF-8?Q?Natalia_J=C3=B3zefara?=
To: sales@nk.ca
Subject: Hey
Message-ID: <39327c5a-da83-sl92-40aa-a8f1-fbd3b81d6889@groupacclaim.co>
Date: Tue, 09 Dec 2025 18:43:21 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_NmP-e50ca364b95bcbba-Part_1"
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I’ve seen you guys at Netknow do impressive work in web
development. We’re a Polish agency and we often assist companies like yours
with developing websites in Webflow and WordPress when they need extra hands.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[13.218.114.168 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
[209.85.167.176 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.176 listed in dnsbl.ahbl.org]
[209.85.167.176 listed in dnsbl.ahbl.org]
[209.85.167.176 listed in dnsbl.ahbl.org]
[209.85.167.176 listed in dnsbl.ahbl.org]
[13.218.114.168 listed in dnsbl.ahbl.org]
[13.218.114.168 listed in dnsbl.ahbl.org]
[13.218.114.168 listed in dnsbl.ahbl.org]
[13.218.114.168 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.176 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.176 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.176 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.176 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.176 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} Hey
----_NmP-e50ca364b95bcbba-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
I=E2=80=99ve seen you guys at Netknow do impressive work in web development=
.
We=E2=80=99re a Polish agency and we often assist companies like yours =
with developing websites in Webflow and WordPress when they need extra =
hands.
Would you like to take a look at a few websites we recently =
created for another agency in Canada?
Be Well,=C2=A0
Natalia J=C3=B3zefara =C2=A0
The Acclaim Agency
acclaim.agency
----_NmP-e50ca364b95bcbba-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
content=3D"text/html; charset=3Dutf-8">
initial-scale=3D1">
=20
you guys at Netknow do impressive work in web development.=
companies like yours with developing websites in Webflow and WordPress when=
they need extra hands.
a few websites we recently created for another agency in Canada?=
=20
----_NmP-e50ca364b95bcbba-Part_1--