Return-Path: Delivered-To: admin+spam@creativebajjar.com Received: from turbo.rebootns.com by turbo.rebootns.com with LMTP id QTpfFJvCsWnnIQAA0POSBQ (envelope-from ) for ; Wed, 11 Mar 2026 19:29:31 +0000 Return-path: Envelope-to: admin@creativebajjar.com Delivery-date: Wed, 11 Mar 2026 19:29:31 +0000 Received: from [81.161.236.59] (port=57375 helo=81-161-236-59.serverbike.com) by turbo.rebootns.com with esmtp (Exim 4.99.1) (envelope-from ) id 1w0PFJ-000000001tc-1cve for admin@creativebajjar.com; Wed, 11 Mar 2026 19:29:31 +0000 From: "creativebajjar.com via Docu" To: admin@creativebajjar.com Date: 11 Mar 2026 12:28:46 -0700 Message-ID: <20260311122846.192F92B9841C6C96@notification.intuit.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=26.6 X-Spam-Score: 266 X-Spam-Bar: ++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "turbo.rebootns.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: DocuSign Finance Department sent you a document to review and sign. DOCUMENT 7364746587Deposit.pdf Content analysis details: (26.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: amazonaws.com] [URI: creativebajjar.com] [URI: brandreward.com] 0.8 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [81.161.236.59 listed in bl.score.senderscore.com] 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [81.161.236.59 listed in zen.spamhaus.org] 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URI: creativebajjar.com] [URI: r.brandreward.com] [URI: lolsholebolol.s3.us-east-1.amazonaws.com] 0.9 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [81.161.236.59 listed in sa-accredit.habeas.com] 0.4 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [81.161.236.59 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [81.161.236.59 listed in wl.mailspike.net] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [81.161.236.59 listed in hostkarma.junkemailfilter.com] 0.5 RCVD_IN_HOSTKARMA_BR RBL: Sender listed in HOSTKARMA-BROWN [81.161.236.59 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [81.161.236.59 listed in list.dnswl.org] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty lines 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 2.0 PDS_DBL_URL_TNB_RUNON Double-url and To no arrows, from runon 1.6 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain 2.0 FROM_MISSPACED From: missing whitespace 1.4 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL 0.5 GB_GEN_REDIR_URL Redirector found in href link 0.9 FROM_MISSP_SPF_FAIL No description available. 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 1.5 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays 0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address X-Spam-Flag: YES Subject: ***SPAM*** Financial Document: - 3/11/2026 12:28:46 p.m. Contact - admin@creativebajjar.com
<= /tr>
DocuSign

Finance Departme= nt sent you a document to review and sign.

DOCUMENT

7364746587Deposit.pdf

NOTE: Enter the required code to unlock and acces= s the file.. This request expires in 3 days.

REVIEW DOCUMENT

REF-937411 creativebajj= ar.com

Do not share this email. It contains a se= cure link to DocuSign.

© 2026 DocuSign, Inc. All rights reserved. 2= 21 Main Street, Suite 1550, San Francisco, CA 94105