← statichum.studio

Inbox-level intent filter for authenticated cold outreach — SEO link-builders and AI recruiter spam that passes SPF/DKIM and beats Gmail

saas weekend hack •• multiple requests

Two communities hit the same wall in the past two weeks: bloggers drowning in SEO/link-building solicitations (lobste.rs), and job seekers flooded by LLM-personalized recruiting spam harvested from HN hiring threads (969-point thread). Both report that this mail comes from properly authenticated servers and sails past spam filters, leaving crude keyword rules as the only defense. The want: something that classifies sender intent on top of an existing Gmail/IMAP inbox instead of requiring a new email provider.

builder note

Protocol-level signals are exhausted — the spam IS well-authenticated, so the classifier has to read intent (link-building, guest-post, templated recruiting) the way a human does; ship it as a Gmail filter/label layer first, because HEY already proved the screening model and also proved that 'switch your email provider' is the adoption killer.

landscape (3 existing solutions)

Email authentication standards authenticate the sending domain and pass SPF/DKIM/DMARC checks, which is enough to clear most spam filters — but authentication is not delivery, and providers can still apply reputation and content signals on top of it. The practical effect is that LLM-personalized outreach from real authenticated domains sails past content filters, leaving intent classification as the only remaining defense. LLMs made it cheap to personalize at scale; nothing consumer-grade classifies sender intent on top of an existing inbox, leaving a gap between switching providers entirely (HEY) and hand-written keyword filters.

HEY Screener Approve-first screening solves exactly this — but only inside HEY; verified on its feature page that it works as part of the HEY service, not on existing Gmail/IMAP accounts, so adoption means migrating your address.
Gmail / standard spam filters Authenticated, LLM-personalized outreach passes SPF/DKIM/DMARC and content filtering; thread participants fall back to keyword rules ('anything with SEO straight into spam') — whack-a-mole that breaks on the next template.
Greylisting / SpamCop reporting Mail-server-admin tooling suggested in the lobste.rs thread; cuts automated bulk volume but not persistent sequenced outreach, and is unavailable to ordinary hosted-inbox users.

sources (2)

other https://lobste.rs/s/3g02jc/how_do_i_get_seo_email_spam_stop "they still come from legitimate-looking email servers with proper SPF/DKIM/DMARC" 2026-06-08
hn https://news.ycombinator.com/item?id=48370330 "hundreds of emails which are infeasible for a single human" 2026-06-02
emailspam-filteringllm-classifiergmailcold-outreach