Urgency spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 24 May 2026 12:23:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wRDSo-00000000A51-3X9d
for dave@doctor.nl2k.ab.ca;
Sun, 24 May 2026 12:22:14 -0600
Resent-From: The Doctor
Resent-Date: Sun, 24 May 2026 12:22:14 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from newfau.fau.unlp.edu.ar ([163.10.28.130]:44611)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wRCXN-00000000071-34mx
for mailer-daemon@nl2k.ab.ca;
Sun, 24 May 2026 11:23:02 -0600
Received: from localhost (localhost.localdomain [127.0.0.1])
by newfau.fau.unlp.edu.ar (Postfix) with ESMTP id CBF3F1E7133;
Sun, 24 May 2026 14:20:35 -0300 (ART)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fau.unlp.edu.ar;
s=mail; t=1779643235;
bh=tP7J5R1Ni2d64aEqKZMcXRzc3l6m9h5Kl25BufhUPMw=;
h=Date:To:From:Reply-To:Subject:From;
b=WF3+pfQwEenWdwKKOs91z0gObGiMIs7UaztUWI9l+MpVI3aUqpLk4v3ZDHzYM4+XI
aM1qSyp5lOIiia+Zrv+1JfTYJLdfbVEqOe/ZSqosRCpkAegxD4s4qlArDdkMTKCcYC
bUTz4bOGON0ICaFmxuK3ARiKgOXPTlWCvFC0iQtc=
X-Virus-Scanned: by amavisd-new-2.6.5 (20110407) (Debian) at fau.unlp.edu.ar
Received: from newfau.fau.unlp.edu.ar ([127.0.0.1])
by localhost (newfau.fau.unlp.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 8hYfrRIuxM+y; Sun, 24 May 2026 14:20:26 -0300 (ART)
Received: from 127.0.0.1 (unknown [89.249.73.40])
by newfau.fau.unlp.edu.ar (Postfix) with ESMTPSA id E44361E711D;
Sun, 24 May 2026 14:19:57 -0300 (ART)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fau.unlp.edu.ar;
s=mail; t=1779643210;
bh=tP7J5R1Ni2d64aEqKZMcXRzc3l6m9h5Kl25BufhUPMw=;
h=Date:To:From:Reply-To:Subject:From;
b=lv7mg+3hAbXeQ1nbdiTnBKvRiyCm9bzPxLvttzK244RuJCrwWiqDFqIvSAoKWKsh+
YJCZadGyCgd7pLXeQr57liCQBzy5S/+G2oS2sUxFa5szh+JgpsWlkS+MHf560FnWA8
DPj4KhWQ9wFzhnTJUlpbQXN+S4qjcEENLdCtd4NM=
Date: Sun, 24 May 2026 13:55:45 +0200
To: undisclosed-recipients:;
From: FaisalA
Reply-To: falhamad55@zohomail.com
Subject: Hello
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="19c141c683b2d1bd5e460ce68daa0f0eb"
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.2
X-Spam_score_int: 102
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I have an important business matter I would like to
discuss with you. Contact me now via my email for more information Email:
falhamad55@zohomail.com Looking forward to hearing from you. Faisal Al-Hamad
CEO Global Wealth Management
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[163.10.28.130 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[falhamad55(at)zohomail.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 US_8BIT US-ASCII isn't an eight bit charset
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.10.28.130 listed in bl.score.senderscore.com]
Subject: {SPAM?} Hello
This is a multi-part message in MIME format.
--19c141c683b2d1bd5e460ce68daa0f0eb
Content-Type: text/plain; charset=us-ascii
Hello,
I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com
Looking forward to hearing from you.
Faisal Al-Hamad
CEO Global Wealth Management
--19c141c683b2d1bd5e460ce68daa0f0eb
Content-Type: text/html; charset=us-ascii
Hello,
I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com
Looking forward to hearing from you.
Faisal Al-Hamad
CEO Global Wealth Management
--19c141c683b2d1bd5e460ce68daa0f0eb--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 24 May 2026 12:23:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wRDSo-00000000A51-3X9d
for dave@doctor.nl2k.ab.ca;
Sun, 24 May 2026 12:22:14 -0600
Resent-From: The Doctor
Resent-Date: Sun, 24 May 2026 12:22:14 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from newfau.fau.unlp.edu.ar ([163.10.28.130]:44611)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wRCXN-00000000071-34mx
for mailer-daemon@nl2k.ab.ca;
Sun, 24 May 2026 11:23:02 -0600
Received: from localhost (localhost.localdomain [127.0.0.1])
by newfau.fau.unlp.edu.ar (Postfix) with ESMTP id CBF3F1E7133;
Sun, 24 May 2026 14:20:35 -0300 (ART)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fau.unlp.edu.ar;
s=mail; t=1779643235;
bh=tP7J5R1Ni2d64aEqKZMcXRzc3l6m9h5Kl25BufhUPMw=;
h=Date:To:From:Reply-To:Subject:From;
b=WF3+pfQwEenWdwKKOs91z0gObGiMIs7UaztUWI9l+MpVI3aUqpLk4v3ZDHzYM4+XI
aM1qSyp5lOIiia+Zrv+1JfTYJLdfbVEqOe/ZSqosRCpkAegxD4s4qlArDdkMTKCcYC
bUTz4bOGON0ICaFmxuK3ARiKgOXPTlWCvFC0iQtc=
X-Virus-Scanned: by amavisd-new-2.6.5 (20110407) (Debian) at fau.unlp.edu.ar
Received: from newfau.fau.unlp.edu.ar ([127.0.0.1])
by localhost (newfau.fau.unlp.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 8hYfrRIuxM+y; Sun, 24 May 2026 14:20:26 -0300 (ART)
Received: from 127.0.0.1 (unknown [89.249.73.40])
by newfau.fau.unlp.edu.ar (Postfix) with ESMTPSA id E44361E711D;
Sun, 24 May 2026 14:19:57 -0300 (ART)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fau.unlp.edu.ar;
s=mail; t=1779643210;
bh=tP7J5R1Ni2d64aEqKZMcXRzc3l6m9h5Kl25BufhUPMw=;
h=Date:To:From:Reply-To:Subject:From;
b=lv7mg+3hAbXeQ1nbdiTnBKvRiyCm9bzPxLvttzK244RuJCrwWiqDFqIvSAoKWKsh+
YJCZadGyCgd7pLXeQr57liCQBzy5S/+G2oS2sUxFa5szh+JgpsWlkS+MHf560FnWA8
DPj4KhWQ9wFzhnTJUlpbQXN+S4qjcEENLdCtd4NM=
Date: Sun, 24 May 2026 13:55:45 +0200
To: undisclosed-recipients:;
From: FaisalA
Reply-To: falhamad55@zohomail.com
Subject: Hello
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="19c141c683b2d1bd5e460ce68daa0f0eb"
Content-Transfer-Encoding: 8bit
X-Spam_score: 10.2
X-Spam_score_int: 102
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I have an important business matter I would like to
discuss with you. Contact me now via my email for more information Email:
falhamad55@zohomail.com Looking forward to hearing from you. Faisal Al-Hamad
CEO Global Wealth Management
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[89.249.73.40 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
[163.10.28.130 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[89.249.73.40 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[163.10.28.130 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[89.249.73.40 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
[163.10.28.130 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[falhamad55(at)zohomail.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 US_8BIT US-ASCII isn't an eight bit charset
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[163.10.28.130 listed in bl.score.senderscore.com]
Subject: {SPAM?} Hello
This is a multi-part message in MIME format.
--19c141c683b2d1bd5e460ce68daa0f0eb
Content-Type: text/plain; charset=us-ascii
Hello,
I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com
Looking forward to hearing from you.
Faisal Al-Hamad
CEO Global Wealth Management
--19c141c683b2d1bd5e460ce68daa0f0eb
Content-Type: text/html; charset=us-ascii
Hello,
I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com
Looking forward to hearing from you.
Faisal Al-Hamad
CEO Global Wealth Management
--19c141c683b2d1bd5e460ce68daa0f0eb--