Help from Russia spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Tue, 07 Apr 2026 14:07:00 -0600
Received: from relay.cit-td.ru ([217.23.69.114]:35982 helo=relay.cit-plus.ru)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wACgV-00000000A9v-2R39
for dave@nl2k.ab.ca;
Tue, 07 Apr 2026 14:06:12 -0600
Received: from localhost (localhost [127.0.0.1])
by relay.cit-plus.ru (Postfix) with ESMTP id C560A154E2FB
for
X-Virus-Scanned: Debian amavisd-new at relay.cit-td.ru
Received: from relay.cit-plus.ru ([127.0.0.1])
by localhost (relay.cit-td.ru [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id pCsZYz3NQWDn for
Wed, 8 Apr 2026 00:05:07 +0400 (+04)
Received: from cit-plus.ru (unknown [172.94.9.71])
by relay.cit-plus.ru (Postfix) with ESMTPSA id 4CC42154E2FA
for
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-ID:
Feedback-ID: campaign-1775591:cit-plus.ru:mta:sx
Date: Wed, 8 Apr 2026 04:04:36 +0800
X-Mailer: Microsoft Outlook 16.0.16827.20130
X-Entity-Ref-ID: 3fba3b3f-37ec-47b7-92a9-32d93ab31e6f
Organization: cit-plus.ru
Thread-Index: AWBhFcnJ
Content-Language: en-US
Importance: Normal
From: "Paul S. Maxi"
To: dave@nl2k.ab.ca
Reply-To: paulmaxi109@gmail.com
Subject: dave@nl2k.ab.ca, quick follow-up
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_-309e4aae0cf2352e-Part_1"
X-Spam_score: 14.4
X-Spam_score_int: 144
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello dave@nl2k.ab.ca, Based on your activity on 4/7/2026,
8:04:47 PM, we can provide further details if needed. Please reply if you
wish to continue.
Content analysis details: (14.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[217.23.69.114 listed in dnsbl.ahbl.org]
[217.23.69.114 listed in dnsbl.ahbl.org]
[217.23.69.114 listed in dnsbl.ahbl.org]
[217.23.69.114 listed in dnsbl.ahbl.org]
[172.94.9.71 listed in dnsbl.ahbl.org]
[172.94.9.71 listed in dnsbl.ahbl.org]
[172.94.9.71 listed in dnsbl.ahbl.org]
[172.94.9.71 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[217.23.69.114 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[217.23.69.114 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[217.23.69.114 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[217.23.69.114 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[172.94.9.71 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
[217.23.69.114 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[172.94.9.71 listed in sbl-xbl.spamhaus.org]
[172.94.9.71 listed in sbl-xbl.spamhaus.org]
[172.94.9.71 listed in sbl-xbl.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[172.94.9.71 listed in zen.spamhaus.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[paulmaxi109(at)gmail.com]
1.0 OPT_OUT BODY: No description available.
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
Subject: {SPAM?} dave@nl2k.ab.ca, quick follow-up
------=_NextPart_-309e4aae0cf2352e-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hello dave@nl2k.ab.ca,
Based on your activity on 4/7/2026, 8:04:47 PM, we =
can provide further details
if needed.
Please reply if you wish to =
continue.
Leading regards,
Paul Samaniego Maxi
Opt-out here:
https://cit-plus.ru/unsubscribe?e=3Ddave%40nl2k.ab.ca&c=3Dcampaign-17755915=
94372-56095ip7y&h=3Df29682ca87746b66
=E2=80=8D=E2=80=8D=E2=80=8C=E2=80=8C=
=E2=80=8C=E2=80=8D=E2=80=8D=E2=80=8D=E2=80=8D=E2=80=8C=E2=80=8C=E2=80=8D=
=E2=80=8D=E2=80=8C=E2=80=8D=E2=80=8D
------=_NextPart_-309e4aae0cf2352e-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
sans-serif; color:#333;">
Hello dave@nl2k.ab.ca,
Based on your activity on 4/7/2026, 8:04:47 PM, we can provide further =
details if needed.
Please reply if you wish to continue.
Leading regards,
Paul Samaniego Maxi
style=3D"font-size:12px; color:#777;">
Opt-out here: https://cit-plus.=
ru/unsubscribe?e=3Ddave%40nl2k.ab.ca&c=3Dcampaign-1775591594372-56095ip7y&h=
=3Df29682ca87746b66
------=_NextPart_-309e4aae0cf2352e-Part_1--