Web/SEO/App spam from Google Gmail Part 1
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 31 Dec 2025 07:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vaxFt-00000000LYE-2BOg
for dave@doctor.nl2k.ab.ca;
Wed, 31 Dec 2025 07:32:53 -0700
Resent-From: The Doctor
Resent-Date: Wed, 31 Dec 2025 07:32:53 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f195.google.com ([209.85.210.195]:55514)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vas42-000000008jp-3yy2
for root@nk.ca;
Wed, 31 Dec 2025 02:00:29 -0700
Received: by mail-pf1-f195.google.com with SMTP id d2e1a72fcca58-8035e31d834so8200342b3a.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=wordpressconsultants-net.20230601.gappssmtp.com; s=20230601; t=1767171564; x=1767776364; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=pIkTEiwgVAyWEYwX2TLsuvufpiEwt/rWZoRgMD7/gw8=;
b=LQ0oREVcV0macjOqLk+uuH+LAYROIB+frToI3E1tST6MeLZ23dUXm+ibd9B5kXd3Cf
Aw/9j25zsW5dSVu1MOypxtj/iMDHpDCN9XrSXUz+3ofEVo/TCJ/V6dNWC490Lu8hjD9c
jfKbdA6uwbBHNebdQkcLVjkarD5om8EByhYGVJAIiNdRPCIeTRsnLTwzeQdx0rcb6UIF
OUrTob4Af51RGwgG2kfK7aLIKuJ/OvxTW3UByteH2xrtt9MLzjmeTgASym8ArNWMX2+S
3bjDh1sRxLr0waWV5DWR0SoS1qKliQ6QVc2vpMSLNf44L82qpK7Ke1lkDx4XzJiPf2Fk
xhWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1767171564; x=1767776364;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=pIkTEiwgVAyWEYwX2TLsuvufpiEwt/rWZoRgMD7/gw8=;
b=VHVxHucW6OzP1IA4bLaZoC3ZNqHcEYfVD7IlnAfZPzPk8hMtl14qagTOOVVtLcDaCq
o6S9X+/rnB5de1n64FKw2ih2MLnbfxoCl7eZOvvfebt1gl7KXTyDtldaVA2bzNqRQdIS
KmCWZRDHmYXRBwEAiZBp4MIIxuVKmUywznn/+TJHddlewrOz4i6tWGOOMqrNEDKYWNDX
2XkywCBnp0zcdByDPR2cXxZMVaidSxRF2g7afvzIKt8Vy4rUiXb8j0vLvq89QSuABjLM
Sy1YTZfjp05n4qlAf9fZZcYYISFX6tJgH0+rMjxOgAGL7GFv5240v0l31oeOPQhGb6Pt
Altg==
X-Gm-Message-State: AOJu0YxJO2WW7HL1s72djcdBXz/IuPGwltl3TAujb2L45MNWaCwwy44h
ckdwDBvGJDYpjq/6drLQpOpsF7W5m6rZbvc7u39SWVolQXYgdsxDTXukYwgxWwuUUbTBm2K2T4o
5BwzZCEo=
X-Gm-Gg: AY/fxX7vWW4UIridWFV3a7uOyAMbTmV8F10c5y4kw7SH74e9xapdsv5Ud4LmlAXBmQE
9/iGq266XRJj0b6Xy2vlrNQVFM+B75VeKtbWYlTEk8SAz8eqzUhg5agCLoItKiuLv+QY7qF0iQU
mIiJPFLCM3is2olSUcMavXOl4bG2QOGAnQp8oZN/KqEywxzn/43CX3kR8zxR03O0PpZp0ZPloT4
DBfD9RfAZK6QVypqUDdEwHA5qHKZWhKVZDjFlujfJ/s52Pud+8x/c2t89s8MliJpi7E7n1F6888
pU3nuvL/M9SFPmT50AMFhNJd7OTXY/OIy5UvVoipUM8A+wI0wDp95lPR34EYHVRDPm3GVzS2/i7
2+HYHXKIJgF3uYcb+aXE1olZomxpG4IekKLc6sDOdiVNkMPFjXTpkbnpgREF3kW/BCfcY8mkz+F
tdNHC0VaKYOqlFS5q8g7j+Ln304AMpPPKsLf5Qxjbp5as1
X-Google-Smtp-Source: AGHT+IEgnN+CiCMiRhkuzOV123226nFhohXsAaH+jN66cb1C7T/uTqYxoVbTfU4BgGxbnuQ3mSEaOw==
X-Received: by 2002:a05:6a00:158c:b0:806:12ff:3877 with SMTP id d2e1a72fcca58-80612ff38b5mr20807777b3a.4.1767171564400;
Wed, 31 Dec 2025 00:59:24 -0800 (PST)
Received: from Kanhaiya ([2401:4900:1c64:6ee1:295b:5f9:c613:cf0b])
by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7ff7e797ab9sm34582890b3a.59.2025.12.31.00.59.23
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 31 Dec 2025 00:59:23 -0800 (PST)
From: "Malti"
To:
Subject: Designer\Developer ?
Date: Wed, 31 Dec 2025 14:18:58 +0530
Message-ID: <1493d01dc7a33$c2760ef0$47622cd0$@net>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_1493E_01DC7A61.DC2E4AF0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Adx4xFw7Ltrw58fRQgC+GAa86HdPUA==
Content-Language: en-us
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm reaching out to see if there is anything that would
like to create Shopify & Wordpress, upgrade, repair, or redesign on your
website or Mobile App. I am a web designer/developer that can do just about
anything you can imagine at very affordable prices.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.195 listed in dnsbl.ahbl.org]
[209.85.210.195 listed in dnsbl.ahbl.org]
[209.85.210.195 listed in dnsbl.ahbl.org]
[209.85.210.195 listed in dnsbl.ahbl.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[dnsbl.ahbl.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[dnsbl.ahbl.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[dnsbl.ahbl.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.195 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.195 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.195 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.195 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[2401:4900:1c64:6ee1:295b:5f9:c613:cf0b listed in]
[will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
[209.85.210.195 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.195 listed in list.dnswl.org]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.195 listed in wl.mailspike.net]
0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too
expensive
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Designer\Developer ?