Web/SEo/App spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 Nov 2026 05:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xQ1D3-00000000MI6-2GmR
for dave@doctor.nl2k.ab.ca;
Sun, 08 Nov 2026 05:37:17 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 Nov 2026 05:37:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.floevora.site ([157.173.96.35]:53735)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xPwHr-000000003co-1w96
for sales@nk.ca;
Sun, 08 Nov 2026 00:21:58 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=enterprise-automation.online; s=mail; h=Content-Type:MIME-Version:Date:
Content-Transfer-Encoding:Message-ID:Subject:Reply-To:To:From:Sender:Cc:
Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=FNPqfzzIDY4ceibeDRvHWvLi5GUxtsXXL8sDCsV8XU8=; b=d4MbO7KmkMF7GXf+/UvDJAdscP
sxLBpjWMtkDP8ElUXlFzMw96T+gc/m50aSG0JuYkulZQeePCJmp7HXjoRyEKjTy6k6J4NWuaIler1
SuKIKueVh/veIgfFB4AgyBaYYQnXv00JfN0i0fQmXZ2noQF1cFQeKO56uvQG2qP1yCYKN1Jg8O6gd
Krd9vNwb6ClIp4L2D0Fb7+HBeoW92SKrMtJlZnVSjRleOlXopEwZ8Ah1Hk02kCmp1Ylbp6b615GaO
MOT9W4TC2frcR3Rg0KcOuEpxWWQULKAq3bqVVu0blx0/VJxIDp52f1ZeBxeDGMtihNdPUxZQX7INM
yq0FG8Aw==;
Received: from vmi3709368.contaboserver.net ([158.220.103.179] helo=vmi3290513.contaboserver.net)
by mail.floevora.site with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.97)
(envelope-from
id 1xPwCg-00000008EYI-2GYC
for sales@nk.ca;
Sun, 08 Nov 2026 07:16:34 +0100
From: Salman
To: sales@nk.ca
Reply-To: executive@enterprise-automation.online
Subject: A website idea for nk.ca
Message-ID:
<5bfd41df-5363-e686-77b3-2350854e9550@enterprise-automation.online>
Content-Transfer-Encoding: quoted-printable
Date: Sun, 08 Nov 2026 06:16:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi Team, We design and redesign websites. I assembled a clean
layout for nk.ca. Should I forward it for a quick review? If you like it,
we can go from there. Best regards, Salman
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[157.173.96.35 listed in dnsbl.ahbl.org]
[157.173.96.35 listed in dnsbl.ahbl.org]
[157.173.96.35 listed in dnsbl.ahbl.org]
[157.173.96.35 listed in dnsbl.ahbl.org]
[158.220.103.179 listed in dnsbl.ahbl.org]
[158.220.103.179 listed in dnsbl.ahbl.org]
[158.220.103.179 listed in dnsbl.ahbl.org]
[158.220.103.179 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[157.173.96.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[157.173.96.35 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[157.173.96.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[157.173.96.35 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: enterprise-automation.online]
[(online)]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[157.173.96.35 listed in bl.score.senderscore.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} A website idea for nk.ca
Hi Team,
We design and redesign websites. I assembled a clean layout for =
nk.ca. Should I forward it for a quick review? If you like it, we can go =
from there.
Best regards,
Salman