Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 05:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPfU3-000000007is-2TVn
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 05:53:07 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 05:53:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f200.google.com ([209.85.214.200]:44218)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPfAl-00000000Mg9-02lp
for doctor@nl2k.ab.ca;
Wed, 20 May 2026 05:33:21 -0600
Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-2bc7f9b2213so36218575ad.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779276737; x=1779881537; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=RuFEez9I/rHYgiiTgreDZodrbhWAylhuPvwf8GLMqKA=;
b=F9GB2GM6YjMKhughxF+LO/1pd0hMA7L5gfOKfkMDGBJRQkLZZBoOs4yvShljAwjvem
kDw8FL6ISX+21S8IhYBZzZ1iduFujMfYVz8CRnf19T3vtHfwIKP3yZNi1tQIE6jrXIuA
SHQzcbBOVLIDjmqBj4q467Pgzg3qGXCZYJIhOluo1rHR7UFLRwjajimJmfiipBRcqib8
5BjtORyiSnAZvN2F4RQfiWGByLDnIb3LHUHbkVTmxkzWy5HiLD5kMMCo1qyTAN3AnYto
QEaIkznQwuGoBtR1e8mfHSL/EMD/qpEoYTEuCKDlx+NgTjSy4H03AJN/sH+CUShB5T21
JaaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779276737; x=1779881537;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=RuFEez9I/rHYgiiTgreDZodrbhWAylhuPvwf8GLMqKA=;
b=clF9eqQIby4Ety0Sz+PksDCPGNeSab83bg7Xh+0Jp2Xd5CZWDUMFqkkPbVqgIvzQeK
8zEhDiQDHhc0o/YnzG+NKDAq9CRhjEwWBsbzcWCDWuCWAwAj5csbL/hm5x98OOWiak9D
AZqipp44PRAGqa5RXLXOUrVEUTbyP6Y3EWNnhuiM6jjaJTCbLKUrBcNEOqr5lAy7mIoN
/yedasPJ27sL3eD5DpAsARbHfZa6kqmv2oCJ3h2oOeOt9UE7yfKs8J/VUXeOVXEa0pTF
suSVmt/oKMhbBz1LVXJOalFDKXb9afqjKav6Hoa3R2kkh/V66niuBp8QinXuNkviy5zN
OWUQ==
X-Gm-Message-State: AOJu0YyM4bWi0HgjM/pcUxc4iygDIDOQNQkc4/3QtyYtF0PdnHVfdoby
5Yab/Szt/8QV7Oqlz6RGJthbd8mF/IkXFucqLAODzpJONPpaGsm6lrHL/qQHNpfu1xNDZPMqUiD
xz8M=
MIME-Version: 1.0
X-Received: by 2002:a17:903:1aad:b0:2b2:ebed:7afc with SMTP id
d9443c01a7336-2bd7e936549mr264180815ad.27.1779276737197; Wed, 20 May 2026
04:32:17 -0700 (PDT)
Message-ID:
Date: Wed, 20 May 2026 11:32:17 +0000
Subject: Packages at cost which is much lower
From: habsksnoskdksbs@gmail.com
To: doctor@nl2k.ab.ca
Content-Type: multipart/alternative; boundary="000000000000e0ba6e06523e259e"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello doctor@nl2k.ab.ca, I am reaching out to you to provide
a little help with your website's interface. I am a professional web designer
with over 10 years of experience and I can do just about anything you can
imagine, and [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.214.200 listed in dnsbl.ahbl.org]
[209.85.214.200 listed in dnsbl.ahbl.org]
[209.85.214.200 listed in dnsbl.ahbl.org]
[209.85.214.200 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.214.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.214.200 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.214.200 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.214.200 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
[209.85.214.200 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.200 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[habsksnoskdksbs(at)gmail.com]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.214.200 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.200 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} Packages at cost which is much lower
--000000000000e0ba6e06523e259e
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Hello doctor@nl2k.ab.ca,
I am reaching out to you to provide a little help with your website's
interface. I am a professional web designer with over 10 years of
experience and I can do just about anything you can imagine, and do it all
for an easily affordable price.
If you are interested in any website to Renovation, re-design and
development? I will forward you our website design (Prices/ past work
/Sample)
Thanks,
Business Development Manager
--000000000000e0ba6e06523e259e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello doctor@nl2k.ab.ca,
I am reaching out to you to provide a litt=
le help with your website's interface. I am a professional web designer wit=
h over 10 years of experience and I can do just about anything you can imag=
ine, and do it all for an easily affordable price.
If you are intere=
sted in any website to Renovation, re-design and development? I will forwar=
d you our website design (Prices/ past work /Sample)
Thanks,
Busi=
ness Development Manager
--000000000000e0ba6e06523e259e--