File: /home/vslw/mail/.spam/new/1667806484.M305541P578561.dal1.hostclusters.com,S=3962,W=4042
Return-Path: <webmaster@gxb.io>
Delivered-To: vslw+spam@dal1.hostclusters.com
Received: from dal1.hostclusters.com
by dal1.hostclusters.com with LMTP
id 6JelERS1aGMB1AgAaFRWGw
(envelope-from <webmaster@gxb.io>)
for <vslw+spam@dal1.hostclusters.com>; Mon, 07 Nov 2022 01:34:44 -0600
Return-path: <webmaster@gxb.io>
Envelope-to: info@vslw.org
Delivery-date: Mon, 07 Nov 2022 01:34:44 -0600
Received: from [47.243.140.251] (port=33712 helo=mail.gxb.io)
by dal1.hostclusters.com with esmtp (Exim 4.95)
(envelope-from <webmaster@gxb.io>)
id 1orweX-002QrI-HP
for info@vslw.org;
Mon, 07 Nov 2022 01:34:44 -0600
Received: from 47.243.140.251 (unknown [45.139.105.140])
by mail.gxb.io (Postfix) with ESMTPA id 44121907A8
for <info@vslw.org>; Wed, 2 Nov 2022 11:44:48 +0800 (CST)
Reply-To: info@gulfassuredfinanceltd.com
From: Ken Christie <lnfo@gulfassuredfinanceltd.com>
To: info@vslw.org
Date: 01 Nov 2022 20:44:47 -0700
Message-ID: <20221101204447.40239CBEFC738913@gulfassuredfinanceltd.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=11.1
X-Spam-Score: 111
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dal1.hostclusters.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, I write to know if your company is open for investors,
as we are currently providing financial support to companies and individuals
for start-up or business expansion. Our Investors can fund up to fiv [...]
Content analysis details: (11.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[47.243.140.251 listed in bl.score.senderscore.com]
1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but
should
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.8 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** <Investment>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19003"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P>Greetings,</P>
<P>I write to know if your company is open for investors, as we are current=
ly providing financial support to companies and individuals for start-up or=
business expansion. Our Investors can fund up to five billion USD fo=
r a project with viable R.O.l.</P>
<P>We also pay 5% commission to individuals who direct clients to us for fi=
nancing.<BR> <BR>Thank you in advance as I anticipate your kind respon=
se<BR> <BR>Regards<BR> <BR>Mr. Ken Christie<BR>Gulf Assured Finan=
ce Ltd<BR>Business Bay<BR>P.O. BOX 17834,<BR>Dubai, UAE.<BR>Whatsapp : +971=
559617208<BR><BR><BR>Sent to info@vslw.org</P></BODY></HTML>