Loan spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Jul 2026 04:28:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wm7hE-00000000B5v-2Y7P
for dave@doctor.nl2k.ab.ca;
Tue, 21 Jul 2026 04:27:32 -0600
Resent-From: The Doctor
Resent-Date: Tue, 21 Jul 2026 04:27:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mta-sp-e03.commufa.jp ([106.153.250.13]:51265)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wm6yb-000000006SC-20bo
for root@nl2k.ab.ca;
Tue, 21 Jul 2026 03:41:34 -0600
Received: from mta-snd-e03.commufa.jp by mta-sp-e03.commufa.jp with ESMTP
id <20260721094024636.PHFW.101124.mta-snd-e03.commufa.jp@commufa.jp>
for; Tue, 21 Jul 2026 18:40:24 +0900
Received: from qc.commufa.jp by mta-snd-e03.commufa.jp with ESMTP
id <20260721094023904.WZDN.68996.qc.commufa.jp@commufa.jp>
for; Tue, 21 Jul 2026 18:40:23 +0900
Reply-To: Georgeharry@arabianlnvestmentgroup.com
From: Fast & Easy Loan Opportunities Available
To: root@nl2k.ab.ca
Subject: Re: Fast & Easy Loan Opportunities Available
Date: 21 Jul 2026 04:40:23 -0500
Message-ID: <20260720174156.8746E14B017214A6@qc.commufa.jp>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Authentication-Info: rtiz76wo
X-VirusCheck: Tue, 21 Jul 2026 18:40:24 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qc.commufa.jp; s=default-1th84yt82rvi; t=1784626824;
bh=vAYKdvPygoQEMxvgPtf0Q/4JGCQQ7wN+n3tJPlmCTws=;
h=Reply-To:From:To:Subject:Date;
b=AwQt2vRK0dBeokRm5JpGc9azuJU76MsjBCal31E5Md9ZRMBhQvoDDi3TAFm0xxVB6lSN0hrF
tLMQEI428nDXAj/5B7Grpj8Yqbvrp++eJrrFRob6DAMv/6W+kM8NZRuoJU+NBW93hUz/Sak7Ir
VYtjKeefwcmPriCPnrexl1beKtvFy0RdIv01FyDXJp2RjpyINHfnqakImDSCtxkHXCVc351rC4
gS4MhwItIZQURSu/+rSqEBE/0ZUGl0Uh6LBek9vLrubULK4EnU5btwldAxEWpzz+q66ufiuEf8
b/SDVG4Kq53LKfl74sz/tZiBnzL07mCg/T7bOlKssRTUrd3A==
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Need a Loan? Fast. Simple. Reliable. Get the financial support
you need for your personal or business goals.
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[106.153.250.13 listed in bb.barracudacentral.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[106.153.250.13 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_FROM From username looks random
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re: Fast & Easy Loan Opportunities Available
LY: Verdana; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-=
TRANSFORM: none; FONT-WEIGHT: 700; COLOR: rgb(58,58,58); FONT-STYLE: normal=
; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEI=
GHT: 1.2; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=
ial; text-decoration-style: initial;=20
text-decoration-color: initial">
r=3D#a8b9c6>
Fast. Simple. Reliable.
Get the financial=
support you need for your personal or business goals.
Contact Arabi=
an Investment Group today to apply.
Terms and eligibility requiremen=
ts apply
Best wishes,
Mr.George =20
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Jul 2026 04:28:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wm7hE-00000000B5v-2Y7P
for dave@doctor.nl2k.ab.ca;
Tue, 21 Jul 2026 04:27:32 -0600
Resent-From: The Doctor
Resent-Date: Tue, 21 Jul 2026 04:27:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mta-sp-e03.commufa.jp ([106.153.250.13]:51265)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wm6yb-000000006SC-20bo
for root@nl2k.ab.ca;
Tue, 21 Jul 2026 03:41:34 -0600
Received: from mta-snd-e03.commufa.jp by mta-sp-e03.commufa.jp with ESMTP
id <20260721094024636.PHFW.101124.mta-snd-e03.commufa.jp@commufa.jp>
for
Received: from qc.commufa.jp by mta-snd-e03.commufa.jp with ESMTP
id <20260721094023904.WZDN.68996.qc.commufa.jp@commufa.jp>
for
Reply-To: Georgeharry@arabianlnvestmentgroup.com
From: Fast & Easy Loan Opportunities Available
To: root@nl2k.ab.ca
Subject: Re: Fast & Easy Loan Opportunities Available
Date: 21 Jul 2026 04:40:23 -0500
Message-ID: <20260720174156.8746E14B017214A6@qc.commufa.jp>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Authentication-Info: rtiz76wo
X-VirusCheck: Tue, 21 Jul 2026 18:40:24 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qc.commufa.jp; s=default-1th84yt82rvi; t=1784626824;
bh=vAYKdvPygoQEMxvgPtf0Q/4JGCQQ7wN+n3tJPlmCTws=;
h=Reply-To:From:To:Subject:Date;
b=AwQt2vRK0dBeokRm5JpGc9azuJU76MsjBCal31E5Md9ZRMBhQvoDDi3TAFm0xxVB6lSN0hrF
tLMQEI428nDXAj/5B7Grpj8Yqbvrp++eJrrFRob6DAMv/6W+kM8NZRuoJU+NBW93hUz/Sak7Ir
VYtjKeefwcmPriCPnrexl1beKtvFy0RdIv01FyDXJp2RjpyINHfnqakImDSCtxkHXCVc351rC4
gS4MhwItIZQURSu/+rSqEBE/0ZUGl0Uh6LBek9vLrubULK4EnU5btwldAxEWpzz+q66ufiuEf8
b/SDVG4Kq53LKfl74sz/tZiBnzL07mCg/T7bOlKssRTUrd3A==
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Need a Loan? Fast. Simple. Reliable. Get the financial support
you need for your personal or business goals.
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
[106.153.250.13 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[106.153.250.13 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[106.153.250.13 listed in bb.barracudacentral.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[106.153.250.13 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
[106.153.250.13 listed in will-spam-for-food.eu.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_FROM From username looks random
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re: Fast & Easy Loan Opportunities Available
LY: Verdana; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-=
TRANSFORM: none; FONT-WEIGHT: 700; COLOR: rgb(58,58,58); FONT-STYLE: normal=
; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEI=
GHT: 1.2; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=
ial; text-decoration-style: initial;=20
text-decoration-color: initial">
r=3D#a8b9c6>
Need a Loan?
Fast. Simple. Reliable.
Get the financial=
support you need for your personal or business goals.
Contact Arabi=
an Investment Group today to apply.
Terms and eligibility requiremen=
ts apply
Best wishes,
Mr.George =20
Senior Consultant
![](3D"https://ci3.googleusercontent.com/mail-=<br)