File: /home/roshanchandy/mail/.spam/new/1740607439.M313537P2854601.65-254-81-60.cprapid.com,S=6714,W=6839
Return-Path: <pjacksw@qwestoffice.net>
Delivered-To: roshanchandy+spam@65-254-81-60.cprapid.com
Received: from 65-254-81-60.cprapid.com
by 65-254-81-60.cprapid.com with LMTP
id ThhdEc+Pv2fJjisAxNIrUA
(envelope-from <pjacksw@qwestoffice.net>)
for <roshanchandy+spam@65-254-81-60.cprapid.com>; Wed, 26 Feb 2025 17:03:59 -0500
Return-path: <pjacksw@qwestoffice.net>
Envelope-to: info@roshanchandy.com
Delivery-date: Wed, 26 Feb 2025 17:03:59 -0500
Received: from 5593791.transaxgroup.com ([162.240.40.139]:46534)
by 65-254-81-60.cprapid.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <pjacksw@qwestoffice.net>)
id 1tnPVU-0000000Byba-2aSe
for info@roshanchandy.com;
Wed, 26 Feb 2025 17:03:59 -0500
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=symsal.com;
s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Subject
:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=yJnzukoZDk8VrqebRYpNm1oYl6ur8Ry0o0s/+xFq4Qs=; b=ikrofZEIxuTFOUm0BCw3sT8re8
sd0c2tjSFa4P7skRDWiDLvFqdYpZZIKZEyYdkw1xUoqWzxa6FPG2q1BRw6omVhvMZkbOt0izj4yP5
dXGaJ6MLk6aZcAaVGibfgKuokoivvNEbnQJyX25fJHxqqXd8UZ6kv9FfSh2N5gQoICMOu43U5RtYh
y8eYLzMHQDKnK9zxD1sYJogAR3KRKlLjMqBb5fq5x0sYpz/j90vVSChiZODhNxseUPYWjTZTHsqoc
4mS7ryGhgFQmPUnWfQKejqCOA+exV/0Mvy9BuonYUNaNYeNkclttf6WZuWqcaIRMcPQSALOF/x/Qf
HJNLG9Fg==;
Received: from [45.63.53.238] (port=55307 helo=User)
by 5593791.transaxgroup.com with esmtpa (Exim 4.96.2)
(envelope-from <pjacksw@qwestoffice.net>)
id 1tnPUQ-0007v7-1S;
Wed, 26 Feb 2025 16:02:50 -0600
Reply-To: <pjackson@emailn.at>
From: "Paul Jackson"<pjacksw@qwestoffice.net>
Date: Wed, 26 Feb 2025 14:02:53 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5593791.transaxgroup.com
X-AntiAbuse: Original Domain - roshanchandy.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - qwestoffice.net
X-Get-Message-Sender-Via: 5593791.transaxgroup.com: authenticated_id: info@symsal.com
X-Authenticated-Sender: 5593791.transaxgroup.com: info@symsal.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=22.4
X-Spam-Score: 224
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "65-254-81-60.cprapid.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary This is to inform you that the united nations
has approved $20,000,000 to be paid to you as compensation/Donations. You
are advised to send us your full name and phone number to enable your funds
to be transferred to you.
Content analysis details: (22.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: symsal.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.9 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.0 T_US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[162.240.40.139 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[162.240.40.139 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[162.240.40.139 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** REPLY IMMEDIATELY
Dear Beneficiary
This is to inform you that the united nations has approved $20,000,000 to be paid to you as compensation/Donations.
You are advised to send us your full name and phone number to enable your funds to be transferred to you.
Please reply as soon as possible
Regards
Paul Jackson