Web/SEO/App spam from Google Gmail Part 1
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Jan 2026 21:28:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1veQZa-000000003XE-2dhp
for dave@doctor.nl2k.ab.ca;
Fri, 09 Jan 2026 21:27:34 -0700
Resent-From: The Doctor
Resent-Date: Fri, 9 Jan 2026 21:27:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f194.google.com ([209.85.214.194]:47503)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1veNbS-00000000Cgk-3L0y
for sales@nk.ca;
Fri, 09 Jan 2026 18:17:30 -0700
Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-29f0f875bc5so40574635ad.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=betawebsite-co-uk.20230601.gappssmtp.com; s=20230601; t=1768007784; x=1768612584; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=Ot9IAUcQfETPoGxO2d3He/H5YxXbyi/kD7TivrEeQXs=;
b=RX1QzrFHeZNx5VG6p9Wu/TrTK3VUW+NPqaia+4f54ccODwJ8iq+jCCdoaoaWGkA/gq
sJqkBkgCjpYHLSh4dtYFDIR991mtkmrpN0OWtvYUSkcjK1OHVeaZc4ly/fqaP08+q6fZ
4wmoeE74oHqPK1Q5g2xxLO4xyeMrXB5U7Ii319TBaW0wUfeHfMfZQSReazN+mbAJuZP1
rpHd2TngqmkM1gMBx8+c4bSIIxIXlRzJuJboPUiSFXA6Yoa6Z1XkHKyGC2f1biBtk9+P
9rzRgj+pUxwzLnD6tW1OhfWB8hthJ08vt4LEQzfzgFK7+SvkgHgik5+Md2Y4IT2MOS1H
Dj7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1768007784; x=1768612584;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=Ot9IAUcQfETPoGxO2d3He/H5YxXbyi/kD7TivrEeQXs=;
b=j6zjN1ENd3ZwFbbDhfBWAbBaG7CHMSQ+ji8YOZo2lMHzrIb/bNSUPj/IyaUB7twJv3
snXFh4YqKg9s62r0jqXgF5NE9/LD3JhVkcZ5DTJ/PCzLI8DNHCGMtcFsJLVu2nlskdNP
6r1VPM5nKFANmU/dplWEwSWkdLlpvv7apOyAndX646FibbT8MRwhR8cay3xb25rmxmbn
M6kFW8N16W00ja0L97pMDxrXW+x49wm35Q3T4wox0CoNeGE17YpNtmYFdTYQ5rKH3Jc+
j6iIutH1xbqhl+z+T5f612u18jzlWv/3Ol6d8VU3G/QC5NXvKff46h038QgRtgYTq0n2
zxWw==
X-Gm-Message-State: AOJu0YzdtaQVXRflEx2IsWaSc2r73yHCx2srsan32rc1tl9iImTSOpy5
/Uu7o2GpWY4CrcwJOa0hxGkBOZ1VzmuLV58BGdqeN7u7j8sXXCAwKK4e4EuxjuxaEvv19Qs9hTI
9Kmep
X-Gm-Gg: AY/fxX7T8Bx3EdYoNXjNkTSBdnqylMz6lAJirgOAt7wYioOfJr3MVPLnTlo1GNr5Hhe
RlM4uGgyD07Fpy2+US3GU8cRXToCyOBvC5dbLDwqHnEx67Ol20rBccvHW4TlmqxIsTJi7iXx1f1
LXG27yUaujlYduVHZ5yk8cK+9CFTIQ8C1fpexYzgGNo8/FJvie8pZBZPnRtBGgB5/a9aQGJ/jnM
AdpVvfZSLcAbBM00I0tv+gqK4aKn25J86HMvxAMV4UsAiceTs8qlCodwGMRZMd++AIq9UPOax2E
I6Iji+xtDp5nK2JwNbaOJdj/THJJ8dS0K81XBWzC9auHdhhi9+DxDMND2RLQkedrcgiLCqXYscK
33D46N0oYDG7wVHYN9a4NToHUvDoy3LZA3Y6IEFTPuhZ9lBuFvv6vNLF/PKIEUeZTxuUAKgmqF3
V6GDypAR8IoIQU28WqvjCJ8MC/uM6CyhA=
X-Google-Smtp-Source: AGHT+IFpjl2VQ7OBvQWiXSq3pxqIrD0QVe7G23VPipq8f4fhCOhuWza46HOzT0Z2ak9ACbIQQsDsrw==
X-Received: by 2002:a17:902:dac3:b0:2a3:e6f9:be2a with SMTP id d9443c01a7336-2a3ee468432mr105920215ad.7.1768007784038;
Fri, 09 Jan 2026 17:16:24 -0800 (PST)
Received: from Vikas ([2409:40d2:1163:4fc9:8128:5f66:f314:abc9])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a3e3cb2c5bsm116879795ad.58.2026.01.09.17.16.22
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Fri, 09 Jan 2026 17:16:23 -0800 (PST)
From: "Ravi"
To:
Subject: Designer / Developer
Date: Sat, 10 Jan 2026 06:41:37 +0530
Message-ID: <2114201dc81ce$bed309e0$3c791da0$@co.uk>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_21143_01DC81FC.D88B45E0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdyBQRLyfvEq8Rl/RoyqZqj02HzOLg==
Content-Language: en-us
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm reaching out regarding website or app development
support. We work with Shopify, WordPress, Wix, React, and PHP. India-based
team, flexible pricing, global experience.
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.214.194 listed in dnsbl.ahbl.org]
[209.85.214.194 listed in dnsbl.ahbl.org]
[209.85.214.194 listed in dnsbl.ahbl.org]
[209.85.214.194 listed in dnsbl.ahbl.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in dnsbl.ahbl.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in dnsbl.ahbl.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in dnsbl.ahbl.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.214.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.214.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.214.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.214.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
[209.85.214.194 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.194 listed in list.dnswl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[2409:40d2:1163:4fc9:8128:5f66:f314:abc9 listed]
[in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.194 listed in wl.mailspike.net]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Designer / Developer
This is a multi-part message in MIME format.
------=_NextPart_000_21143_01DC81FC.D88B45E0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hello,
I'm reaching out regarding website or app development support. We work with
Shopify, WordPress, Wix, React, and PHP.
India-based team, flexible pricing, global experience.
Can I send you our portfolio?
Kind Regards,
Ravi
Business Consultant (INDIA)