HEX
Server: Apache
System: Linux fan.fanlow.com 3.10.0-1160.144.1.el7.tuxcare.els9.x86_64 #1 SMP Fri Jul 10 17:06:31 UTC 2026 x86_64
User: ssiacademy (1163)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/ssiacademy/mail/.spam/new/1723921686.M658079P23387.fan.fanlow.com,S=4554,W=4646
Return-Path: <Walsh.philip@natwest.co.uk>
Delivered-To: ssiacademy+spam@fan.fanlow.com
Received: from fan.fanlow.com
	by fan.fanlow.com with LMTP
	id Qb12Jhb1wGZbWwAA3d0vlg
	(envelope-from <Walsh.philip@natwest.co.uk>)
	for <ssiacademy+spam@fan.fanlow.com>; Sat, 17 Aug 2024 14:08:06 -0500
Return-path: <Walsh.philip@natwest.co.uk>
Envelope-to: info@ssiacademy.com
Delivery-date: Sat, 17 Aug 2024 14:08:06 -0500
Received: from [159.203.190.246] (port=44706 helo=natwest.co.uk)
	by fan.fanlow.com with esmtp (Exim 4.96.2)
	(envelope-from <Walsh.philip@natwest.co.uk>)
	id 1sfOmL-000611-0S
	for info@ssiacademy.com;
	Sat, 17 Aug 2024 14:08:06 -0500
Reply-To: taofei6666@hotmail.com
From: Walsh Philip <Walsh.philip@natwest.co.uk>
To: info@ssiacademy.com
Date: 17 Aug 2024 12:07:15 -0700
Message-ID: <20240817120714.C5D25EB09C2DF37D@natwest.co.uk>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=22.8
X-Spam-Score: 228
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "fan.fanlow.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good Day, How are you doing today? My name is Walsh Philip,
    I live in the United Kingdom and work with NatWest Bank UK. I am glad to
   be connected with you. I have a business proposal I would like to discuss
   with you in private. It involves a business opportunity that will be of huge
    financial benefit to both of us. Fur [...] 
 Content analysis details:   (22.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 KAM_COUK               Scoring .co.uk emails higher due to poor registry
                             security.
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [159.203.190.246 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [159.203.190.246 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [159.203.190.246 listed in bl.score.senderscore.com]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=walsh.philip%40natwest.co.uk;ip=159.203.190.246;r=fan.fanlow.com]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=159.203.190.246;r=fan.fanlow.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [taofei6666[at]hotmail.com]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.0 FROM_BANK_NOAUTH       From Bank domain but no SPF or DKIM
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:    MY PROPOSAL

Good Day,

How are you doing today? My name is Walsh Philip, I live in the
United Kingdom and work with NatWest Bank UK.

I am glad to be connected with you. I have a business proposal I
would like to discuss with you in private. It involves a business
opportunity that will be of huge financial benefit to both of us.
Further details will be shared after I receive your response.

Kindly reply with your full name and your country of
Origin/residence.

Yours Truly,

Walsh Philip.
Operational Manager