Investment spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Oct 2026 17:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xLqU1-000000006Xz-0iOe
for dave@doctor.nl2k.ab.ca;
Tue, 27 Oct 2026 17:21:33 -0600
Resent-From: The Doctor
Resent-Date: Tue, 27 Oct 2026 17:21:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:46808)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xLoSM-000000008pW-0T8P
for support@nk.ca;
Tue, 27 Oct 2026 15:11:47 -0600
Received: from nexpa.co.kr ([::ffff:178.83.19.78])
(AUTH: LOGIN sour5406@nexpa.co.kr)
by bsgw-00000288.cafe24.com with esmtp; Wed, 28 Oct 2026 06:10:36 +0900
id 000000000867B5F3.000000006AE1134D.00019460
Reply-To: info@doha-consultant.com
From: doha consultant
To: support@nk.ca
Subject: Re: Re:Investment partnership
Date: 28 Oct 2026 06:10:37 +0900
Message-ID: <20261028061037.9D4B970681350B58@nexpa.co.kr>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Received-SPF: fail (Address does not pass the Sender Policy Framework)
SPF=FROM;
sender=sour5406@nexpa.co.kr;
remoteip=::ffff:178.83.19.78;
remotehost=;
helo=nexpa.co.kr;
receiver=bsgw-00000288.cafe24.com;
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings How are you doing? Do you need an investment partner
for any of your projects? I have many investors who are willing and able
to invest in your project.
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[178.83.19.78 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
[118.219.235.58 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[118.219.235.58 listed in dnsbl.ahbl.org]
[118.219.235.58 listed in dnsbl.ahbl.org]
[118.219.235.58 listed in dnsbl.ahbl.org]
[118.219.235.58 listed in dnsbl.ahbl.org]
[178.83.19.78 listed in dnsbl.ahbl.org]
[178.83.19.78 listed in dnsbl.ahbl.org]
[178.83.19.78 listed in dnsbl.ahbl.org]
[178.83.19.78 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[118.219.235.58 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[118.219.235.58 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[118.219.235.58 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[118.219.235.58 listed in dnsbl.ahbl.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[178.83.19.78 listed in zen.spamhaus.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[178.83.19.78 listed in sbl-xbl.spamhaus.org]
[178.83.19.78 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[118.219.235.58 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[118.219.235.58 listed in wl.mailspike.net]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Subject: {SPAM?} Re: Re:Investment partnership
Greetings
How are you doing? Do you need an investment partner fo=
r any of your projects? I have many investors who are willing and able to i=
nvest in your project.
Send me your WhatsApp number or Mobile number=
for faster communications
Warm regards,
Ahmed Ahn Abudadi
inv=
estment consultant