|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /home/nandedex/mail/.spam/new/ |
Return-Path: <info@investor.gov>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id tgU4Le4UZGhPTRoA+TbXxA
(envelope-from <info@investor.gov>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 01 Jul 2025 17:03:42 +0000
Return-path: <info@investor.gov>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 01 Jul 2025 17:03:42 +0000
Received: from [86.54.42.197] (port=56459 helo=investor.gov)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@investor.gov>)
id 1uWeOP-00000007ECK-12to
for info@nandedexpress.com;
Tue, 01 Jul 2025 17:03:42 +0000
Reply-To: a25035945@gmail.com
From: Aron Roman <info@investor.gov>
To: info@nandedexpress.com
Date: 01 Jul 2025 10:02:56 -0700
Message-ID: <20250701100256.E631C4B6A0A5BB04@investor.gov>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 3 Attn: Sir/Madam,
Content analysis details: (17.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.197 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-trusted.bondedsender.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investor.gov;ip=86.54.42.197;r=server51.dnsbootclub.com]
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[a25035945(at)gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
FREEMAIL
1.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** We Offer You Great Opportunity To Complete Your Projects
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 3</title>
</head>
<body>
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Aron Roman</p>
</body>
</html>