HEX
Server: Apache
System: Linux fan.fanlow.com 3.10.0-1160.144.1.el7.tuxcare.els9.x86_64 #1 SMP Fri Jul 10 17:06:31 UTC 2026 x86_64
User: ssiacademy (1163)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/ssiacademy/mail/.spam/new/1708499793.M484380P2920.fan.fanlow.com,S=3742,W=3823
Return-Path: <philip@natwest.co.uk>
Delivered-To: ssiacademy+spam@fan.fanlow.com
Received: from fan.fanlow.com
	by fan.fanlow.com with LMTP
	id zJP+G1Gj1WVoCwAA3d0vlg
	(envelope-from <philip@natwest.co.uk>)
	for <ssiacademy+spam@fan.fanlow.com>; Wed, 21 Feb 2024 01:16:33 -0600
Return-path: <philip@natwest.co.uk>
Envelope-to: info@ssiacademy.com
Delivery-date: Wed, 21 Feb 2024 01:16:33 -0600
Received: from [103.241.66.237] (port=57962 helo=natwest.co.uk)
	by fan.fanlow.com with esmtp (Exim 4.96.2)
	(envelope-from <philip@natwest.co.uk>)
	id 1rcgqC-0000iv-1i
	for info@ssiacademy.com;
	Wed, 21 Feb 2024 01:16:33 -0600
Reply-To: hfheirwig@hotmail.com
From: Walsh Philip <walsh philip@natwest.co.uk>
To: info@ssiacademy.com
Date: 21 Feb 2024 09:15:45 +0200
Message-ID: <20240221091545.0D2EE9F161F1FE1D@natwest.co.uk>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "fan.fanlow.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good Day, How are you doing today? My name is Walsh Philip,
    I live in the United Kingdom and work with NatWest Bank UK. I am glad to
   be connected with you. I have a business proposal I would like to discuss
   with you in private. It involves a business opportunity that will be of huge
    financial benefit to both of us.Furt [...] 
 Content analysis details:   (19.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 KAM_COUK               Scoring .co.uk emails higher due to poor registry
                             security.
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=philip%40natwest.co.uk;ip=103.241.66.237;r=fan.fanlow.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?103.241.66.237>]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=103.241.66.237;r=fan.fanlow.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 FROM_BANK_NOAUTH       From Bank domain but no SPF or DKIM
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.4 FROM_ADDR_WS           Malformed From address
X-Spam-Flag: YES
Subject:    MY PROPOSAL

Good Day,

How are you doing today? My name is Walsh Philip, I live in the=20
United Kingdom and work with NatWest Bank UK.

I am glad to be connected with you. I have a business proposal I=20
would like to discuss with you in private. It involves a business=20
opportunity that will be of huge financial benefit to both of=20
us.Further details will be shared after I receive your response.

Kindly reply with your full name and your country of=20
Origin/residence.

Yours Truly,

Walsh Philip.
Operational Manager.