|
Server : LiteSpeed System : Linux server51.dnsbootclub.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : nandedex ( 1060) PHP Version : 8.1.33 Disable Function : NONE Directory : /home/nandedex/www/s.nandedexpress.com/ |
PK L�[´�Y� � dovecot-uidlistnu �[��� 3 V1744710811 N14 G780c04361ad53168ab473600f936d7c4
1 :1748096282.M906235P3557291.server51.dnsbootclub.com,S=7489,W=7651
2 :1748861383.M656037P256307.server51.dnsbootclub.com,S=6821,W=6967
3 :1749261884.M538884P829238.server51.dnsbootclub.com,S=6626,W=6738
4 :1749597182.M398429P3499847.server51.dnsbootclub.com,S=7486,W=7658
5 :1749634830.M669769P115211.server51.dnsbootclub.com,S=6811,W=6924
6 :1749772845.M616372P3253273.server51.dnsbootclub.com,S=7038,W=7177
7 :1749781056.M361086P3433886.server51.dnsbootclub.com,S=6901,W=7038
8 :1751389422.M764702P1723727.server51.dnsbootclub.com,S=6609,W=6756
9 :1752311638.M156572P186905.server51.dnsbootclub.com,S=6928,W=7044
10 :1752499470.M268157P141454.server51.dnsbootclub.com,S=9811,W=9996
11 :1752587286.M789984P1958366.server51.dnsbootclub.com,S=9811,W=9996
12 :1757630642.M684477P2428306.server51.dnsbootclub.com,S=4983,W=5083
13 :1757993072.M201171P2087149.server51.dnsbootclub.com,S=9897,W=10083
14 :1765254070.M85322P3364791.server51.dnsbootclub.com,S=6418,W=6526
PK L�[- � | | dovecot.index.cachenu ��٘� �1h�1h � ���� � �1h ��7i��7i��7i ���������������� �������������������������������� � flags date.sent date.received date.save size.virtual size.physical imap.body imap.bodystructure imap.envelope pop3.uidl pop3.order guid mime.parts binary.parts body.snippet hdr.From hdr.Message-ID hdr.Subject hdr.Date � C Message-ID: <20250524071720.79E4B44543D044FF@treasury.gov>
E M Subject: ***SPAM*** Payment Approval ( Signature Request )
6 From: George Wallace <signature@treasury.gov>
$ 9 From: 0Peter Bernstein <info@investmentbank.com>
I Message-ID: <20250602124901.960CC62DAAB1FCDE@investmentbank.com>
r S Subject: ***SPAM*** LOAN / INVESTMENT REQUEST ( from US$ 10 Million to US$ 10 Billion for your project)
8 From: Peter Bernstein <info@investmentbank.com>
I Message-ID: <20250606190401.7DE40C996C825E07@investmentbank.com>
p O Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
� 6 From: George Wallace <signature@treasury.gov>
C Message-ID: <20250610161216.03A690630CF0D36B@treasury.gov>
E N Subject: ***SPAM*** Payment Approval ( Signature Request )
8 From: Peter Bernstein <info@investmentbank.com>
I Message-ID: <20250611023948.F23C9CB034F11566@investmentbank.com>
p S Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
8 From: Peter Bernstein <info@investmentbank.com>
I Message-ID: <20250612170003.E278E106F2424840@investmentbank.com>
p W Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
8 From: Peter Bernstein <info@investmentbank.com>
I Message-ID: <20250612191654.87A8480AC58A13D6@investmentbank.com>
p U Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
� - From: Aron Roman <info@investor.gov>
C Message-ID: <20250701100256.E631C4B6A0A5BB04@investor.gov>
X Q Subject: ***SPAM*** We Offer You Great Opportunity To Complete Your Projects
: From: Leonard Bernstein <info@investmentbank.com>
I Message-ID: <20250712021315.50363680C0E9CDF6@investmentbank.com>
p S Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
� From: info@0-0szd.com
A Message-ID: <20250714062343.567E4B152258C7E2@0-0szd.com>
( O Subject: ***SPAM*** Investor.
� From: info@0-0szd.com
A Message-ID: <20250715064720.EF25A5A708F5EBCB@0-0szd.com>
( O Subject: ***SPAM*** Investor.
� - From: Blair E.Ross <Ross@isagro.com>
A Message-ID: <20250911154320.50ED28DAB08FE996@isagro.com>
- M Subject: ***SPAM*** WE OFFER LOAN!
N From: nandedexpress.com Hosting provider<no-reply@nandedexpress.com>
H Message-ID: <20250916052345.67DD4A2B1FEADEDD@nandedexpress.com>
G T Subject: ***SPAM*** Verify your email info@nandedexpress.com
� 0 From: Penelope <penelope@domainksa.com>
E Message-Id: <ca5cdb8c8d774c299762156e3d023d1c@domainksa.com>
Y _ Subject: ***SPAM*** =?utf-8?b?TGV04oCZcw==?= start getting to know each other.
PK L�[
maildirfoldernu ��٘� PK L�[�� Rx x dovecot.index.lognu ��٘� ( �1h �1h ���� x ����@ ���� $ maildir ���� $ �1h�1h(V�5�1hij�6x ���� �,�gL �������� @ ����@ ���� cache ����� �1h ���� x ���� ����@ �1h ���� � ���� T $ 1h ���� X ����@ $ ���� $ ǁ=h�1h(V�5ǁ=h�I='� ���� x ���� ����@ �1h ���� � ���� T $ ��<h ���� X ����@ $ ���� $ <�Ch�1h(V�5<�Ch96t ���� @ � ���� x ���� ����@ �1h ���� � ���� T $ �Ch ���� X ����@ $ ���� $ ��Hh�1h(V�5��Hh��E ���� @ p ���� x ���� ����@ �1h ���� � ���� T $ �uGh ���� X ����@ $ ���� $ OIh�1h(V�5OIh|�7(� ���� @ P ���� x ���� ����@ �1h ���� � ���� T $ �Hh ���� X ����@ $ ���� $ -jKh�1h(V�5-jKhV��$� ���� @ 0 ���� x ���� ����@ �1h ���� � ���� T $ jKh ���� X ����@ $ ���� $ @�Kh�1h(V�5@�Khmd� ���� @ ���� H ���� ����@ �1h ���� ���� X ����@ $ ���� $ �dh�1h(V�5�dhK2�-X ���� @ � ���� x ���� ����@ �1h ���� 0 ���� T $ %ch ���� X ����@ $ ���� $ V'rh�1h(V�5V'rh#�� � ���� @ � ���� x ���� ����@ �1h ���� $
���� T $ ��qh ���� X ����@ $ ���� $ uh�1h(V�5uh&"D� ���� @ � ���� x ����
����@ �1h ����
D ���� T $ �Hth
���� X ����@ $ ���� $ \vh�1h(V�5\vh�U/( ���� @ ` ���� x ���� ����@ �1h ���� � ���� T $ �uh
���� X ����@ $ ���� $ �P�h�1h �P�hX�)n ���� @ @
���� x ���� ����@ �1h ���� � ���� T $ �h ���� X ����@ $ ���� $ p��h�1h p��h�D � ���� @ ���� x ����
����@ �1h ����
x
���� T $ ���h
���� X ����@ $ ���� $ ��7i�1h ��7i�h� ���� @ ���� x ���� ����@ �1h ���� � ���� T $ �f7i
PK L�[�X D new/1765254070.M85322P3364791.server51.dnsbootclub.com,S=6418,W=6526nu �[��� Return-Path: <penelope@domainksa.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id 8D+8BLajN2m3VzMA+TbXxA
(envelope-from <penelope@domainksa.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 09 Dec 2025 04:21:10 +0000
Return-path: <penelope@domainksa.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 09 Dec 2025 04:21:10 +0000
Received: from [178.178.244.235] (port=18822 helo=mail.domainksa.com)
by server51.dnsbootclub.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <penelope@domainksa.com>)
id 1vSpDo-0000000EFIS-3CVS
for info@nandedexpress.com;
Tue, 09 Dec 2025 04:21:10 +0000
From: Penelope <penelope@domainksa.com>
Date: Tue, 09 Dec 2025 07:20:26 +0300
Message-Id: <ca5cdb8c8d774c299762156e3d023d1c@domainksa.com>
To: info@nandedexpress.com
Reply-To: penelope@domainksa.com
List-Unsubscribe: =?utf-8?q?=3Chttps=3A=2F=2Fdomainksa=2Ecom=2Funsubscribe=3Femail=3Dinfo=40nandedexpress=2Ec?=
=?utf-8?q?om&token=3Ddgfhrfgaf54df=3E?=
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hey! I’m really interested in getting to know you — here’s
my profile link, where you can see my photos. You just need to sign up to
join. https://msft-ssp-useast.adnxs.com/click2?e=wqT_3QKhAfBDoQAAAAMAxBkFAQif8tvIBhDHrbis96OU1QYYg5qexo-D6KVAILGa9RAomAIwxH04uARAjNHDuAJI8opOUABaA1VTRGIBBZBoAXABeJmgZ4ABzswCiAEBkAECmAEFoAECqQEOLbKd76feP7EBE
[...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[178.178.244.235 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[178.178.244.235 listed in bl.score.senderscore.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: myadjourney.online]
[URI: adnxs.com]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: myadjourney.online]
[URI: msft-ssp-useast.adnxs.com]
9.0 KAM_BODY_URIBL_PCCC Body contains URI listed in PCCC WILD RBL
(https://raptor.pccc.com/RBL)
[URI: adnxs.com]
0.5 JMQ_SPF_ALL ASKDNS: SPF set to +all!
[domainksa.com TXT:v=spf1 ip4:74.208.63.107]
[include:domainksa.com +all]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: myadjourney.online (online)]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[178.178.244.235 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[178.178.244.235 listed in sa-accredit.habeas.com]
5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd,
.club, .date, .guru, .link, .live, .monster,
.online, .press, .pw, .quest, .rest, .sbs,
.shop, .stream, .top, .trade, .wiki, .work,
.xyz TLD abuse
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?b?TGV04oCZcw==?= start getting to know each other.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PK L�[}�C
A A E new/1748096282.M906235P3557291.server51.dnsbootclub.com,S=7489,W=7651nu ��٘� Return-Path: <signature@treasury.gov>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id spiyNRrVMWirRzYA+TbXxA
(envelope-from <signature@treasury.gov>)
for <nandedex+spam@server51.dnsbootclub.com>; Sat, 24 May 2025 14:18:02 +0000
Return-path: <signature@treasury.gov>
Envelope-to: info@nandedexpress.com
Delivery-date: Sat, 24 May 2025 14:18:02 +0000
Received: from [185.208.158.20] (port=64676 helo=treasury.gov)
by server51.dnsbootclub.com with esmtp (Exim 4.98.1)
(envelope-from <signature@treasury.gov>)
id 1uIphN-0000000EvGI-115h
for info@nandedexpress.com;
Sat, 24 May 2025 14:18:02 +0000
Reply-To: george55wallace@gmail.com
From: George Wallace <signature@treasury.gov>
To: info@nandedexpress.com
Date: 24 May 2025 07:17:20 -0700
Message-ID: <20250524071720.79E4B44543D044FF@treasury.gov>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=18.1
X-Spam-Score: 181
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 4 Hello, Good Day
Content analysis details: (18.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.208.158.20>]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[185.208.158.20 listed in zen.spamhaus.org]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=treasury.gov;ip=185.208.158.20;r=server51.dnsbootclub.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=signature%40treasury.gov;ip=185.208.158.20;r=server51.dnsbootclub.com]
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in sa-accredit.habeas.com]
1.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
FREEMAIL
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Approval ( Signature Request )
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 4</title>
</head>
<body>
<p class=3D"MsoNormal">Hello,<br>
Good Day </p>
<p>We are pleased to inform you that your total payment entitlement has bee=
n=20
cleared and approved to be released to you finally through our foreign paym=
ent=20
centers in Canada and Japan. Consequently, You are expected to travel to th=
ese=20
two payment centers to formalize and finalize the process of this funds pay=
ments=20
release to you.</p>
<p>Firstly, You will be traveling to Canada to sign the relevant payment re=
lease=20
documents, which you will travel to Japan with to present to the paying=20
officials in Japan for the eventual release of your payment and subsequent=
=20
transfer of your entire funds to your designated Bank account/s.</p>
<p>Furthermore, to enable this process to achieve its full objective, Our=
=20
officials in Canada will buy some gift items, such as male and female cloth=
ing=20
capable of enticing our other officials at the payment/transfer center in=
=20
Japan. You will carry these gift items and the signed documents with =
you to=20
Japan to present to the officials there as tips in order to compel them to=
=20
ascribe to your payment all priority attention it deserves. Of course, this=
=20
singular action will ensure that not only you receive your payment certainl=
y but=20
also first before any other beneficiary.</p>
<p>A capable financial expert has been contacted to assist us with the prov=
ision=20
of all the necessary financial assistance by paying for your tickets throug=
hout=20
this journey, your hotel accommodation both in Canada and Japan. You shall =
also=20
be given some money to serve as your feeding and other expenses once you ar=
rive=20
in Canada and another money given to you for your expenses on arrival in Ja=
pan.</p>
<p>PLEASE NOTE THAT YOU ARE NOT GOING TO ADVANCE OR PAY ANY MONEY UPFRONT A=
LL=20
THROUGH THIS EXERCISE. Your only contribution is to accept travel and all y=
our=20
travel expenses shall be taken care of by us. Secondly, accept to sign the=
=20
documents in Canada and travel with the same documents and the purchased gi=
ft=20
items to Japan for the final endorsement and transfer of your payment. Also=
note=20
that the money for the purchase of these gift items shall be borne by us an=
d=20
handled by our officials in Canada.</p>
<p>The entire journey will take you between 8 to 10 days to conclude. There=
fore,=20
you should prepare yourself for this number of days.</p>
<p>Finally, should you accept to make this trip, I urge you to contact your=
=20
local traveling agency to inquire if you need a VISA to Canada and Ja=
pan, so=20
that you can apply for it immediately to save time.</p>
<p>Do not hesitate to ask me questions if need be.</p>
<p>Best Regards</p>
<p>.George Wallace</p>
</body>
</html>
PK L�[ >�> > E new/1749597182.M398429P3499847.server51.dnsbootclub.com,S=7486,W=7658nu ��٘� Return-Path: <signature@treasury.gov>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id SB5pF/67SGhHZzUA+TbXxA
(envelope-from <signature@treasury.gov>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 10 Jun 2025 23:13:02 +0000
Return-path: <signature@treasury.gov>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 10 Jun 2025 23:13:02 +0000
Received: from [212.11.64.238] (port=49616 helo=treasury.gov)
by server51.dnsbootclub.com with esmtp (Exim 4.98.1)
(envelope-from <signature@treasury.gov>)
id 1uP89K-0000000Egbv-1MC5
for info@nandedexpress.com;
Tue, 10 Jun 2025 23:13:02 +0000
Reply-To: george55wallace@gmail.com
From: George Wallace <signature@treasury.gov>
To: info@nandedexpress.com
Date: 10 Jun 2025 16:12:16 -0700
Message-ID: <20250610161216.03A690630CF0D36B@treasury.gov>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 1 Hello, Good Day
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?212.11.64.238>]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[212.11.64.238 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[212.11.64.238 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-accredit.habeas.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=signature%40treasury.gov;ip=212.11.64.238;r=server51.dnsbootclub.com]
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
FREEMAIL
1.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Approval ( Signature Request )
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 1</title>
</head>
<body>
<p>Hello,<br>
Good Day<br>
<br>
We are pleased to inform you that your total payment entitlement has been=
=20
cleared and approved to be released to you finally through our foreign paym=
ent=20
centers in Canada and Japan. Consequently, You are expected to travel to th=
ese=20
two payment centers to formalize and finalize the process of this funds pay=
ments=20
release to you.<br>
<br>
Firstly, You will be traveling to Canada to sign the relevant payment relea=
se=20
documents, which you will travel to Japan with to present to the paying=20
officials in Japan for the eventual release of your payment and subsequent=
=20
transfer of your entire funds to your designated Bank account/s.<br>
<br>
Furthermore, to enable this process to achieve its full objective, Our offi=
cials=20
in Canada will buy some gift items, such as male and female clothing capabl=
e of=20
enticing our other officials at the payment/transfer center in Japan. You w=
ill=20
carry these gift items and the signed documents with you to Japan to presen=
t to=20
the officials there as tips in order to compel them to ascribe to your paym=
ent=20
all priority attention it deserves. Of course, this singular action will en=
sure=20
that not only you receive your payment certainly but also first before any =
other=20
beneficiary.<br>
<br>
A capable financial expert has been contacted to assist us with the provisi=
on of=20
all the necessary financial assistance by paying for your tickets throughou=
t=20
this journey, your hotel accommodation both in Canada and Japan. You shall =
also=20
be given some money to serve as your feeding and other expenses once you ar=
rive=20
in Canada and another money given to you for your expenses on arrival in Ja=
pan.<br>
<br>
PLEASE NOTE THAT YOU ARE NOT GOING TO ADVANCE OR PAY ANY MONEY UPFRONT ALL=
=20
THROUGH THIS EXERCISE. Your only contribution is to accept travel and all y=
our=20
travel expenses shall be taken care of by us. Secondly, accept to sign the=
=20
documents in Canada and travel with the same documents and the purchased gi=
ft=20
items to Japan for the final endorsement and transfer of your payment. Also=
note=20
that the money for the purchase of these gift items shall be borne by us an=
d=20
handled by our officials in Canada.<br>
<br>
The entire journey will take you between 8 to 10 days to conclude. Therefor=
e,=20
you should prepare yourself for this number of days.<br>
<br>
Finally, should you accept to make this trip, I urge you to contact your lo=
cal=20
traveling agency to inquire if you need a VISA to Canada and Japan, so that=
you=20
can apply for it immediately to save time.<br>
<br>
Do not hesitate to ask me questions if need be.<br>
<br>
Best Regards<br>
<br>
=2EGeorge Wallace</p>
</body>
</html>
PK L�[�& QS& S& D new/1752499470.M268157P141454.server51.dnsbootclub.com,S=9811,W=9996nu ��٘� Return-Path: <info@0-0szd.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id 4ECdDw4FdWiOKAIA+TbXxA
(envelope-from <info@0-0szd.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Mon, 14 Jul 2025 13:24:30 +0000
Return-path: <info@0-0szd.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Mon, 14 Jul 2025 13:24:30 +0000
Received: from [86.54.42.197] (port=60481 helo=0-0szd.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@0-0szd.com>)
id 1ubJAO-00000000bMo-2bgS
for info@nandedexpress.com;
Mon, 14 Jul 2025 13:24:30 +0000
Reply-To: kwesiboah2025@gmail.com
From: info@0-0szd.com
To: info@nandedexpress.com
Date: 14 Jul 2025 06:23:44 -0700
Message-ID: <20250714062343.567E4B152258C7E2@0-0szd.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_729799BA.E2CEC258"
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, I am Kwesi Gate; I am a wealth manager from Asante
Gold. I am contacting you because I believe that we can form a very lucrative
business partnership. One of our clients is interested in investing in [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.197 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-trusted.bondedsender.org]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kwesiboah2025(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Investor.
------=_NextPart_000_0012_729799BA.E2CEC258
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello,
I am Kwesi Gate; I am a wealth manager from Asante Gold. I am=20
contacting you because I believe that we can form a very=20
lucrative business partnership.=20
One of our clients is interested in investing in your country.=20=20
The total amount of funds available for investments is One=20
Hundred Million US Dollars. As I am contacting you now, I have=20
also contacted another 9 different companies with regards to this=20
proposal and will eventually be dealing with the most suitable=20
and capable individual to handle this type of transaction. Due to=20
my client=E2=80=99s political position, he wants this to be carried out=20
carefully and very discreetly. This means all the information we=20
transmit in the course of this transaction must be kept strictly=20
confidential.
To fully evaluate your capability to handle this transaction, I=20
will proceed to ask you the following questions.
1. Are you familiar with handling a large volume of funds in the=20
past? This does not necessarily have to be as much as the amount=20
described above
2. Do you have a bank account that can accommodate these funds=20
without raising any eyebrows?
3. Do you have any project (s) that requires funding? This may be=20
an existing project or a future project. If you do, please give a=20
summary of the projects. We will be asking for a more detailed=20
executive summary if we eventually decide to work with you. This=20
decision will be based on your answers. Please do not be offended=20
by these questions as we are not trying to undermine you in any=20
way. Due to the amount of funds involved, we just need to know if=20
you are going to be able to handle this transaction.
If you are interested, please reply to this email. You should=20
indicate your full name and contact telephone number so that I=20
can get back to you with more details. This message is for the=20
attention of the CEO of this company only. I hope to hear back=20
from you, and looking forward to a successful, positive, and=20
mutually beneficial relationship with you.
Thanks
------=_NextPart_000_0012_729799BA.E2CEC258
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P><BR>　</P>
<P>To Future Partner,<BR>　　　　　　&#=
12288;　　　　　　　　z=
88;　　　　　　　　　=
　　　　　　　　　=
2288;　　　<BR>
Good day, I know this email will come as a surprise, but I need to contact =
you due to the urgency and confidentiality of this business transaction. I =
am the Chief Account Officer of Ghana Gold. I have a deal here in my office=
, and I need a foreign partner to execute it with my colleague and me. We o=
ver-invoiced a contract payment valued at US$100 million. We awarded contra=
cts for the supply and maintenance of all the Gold field and mining equipme=
nt for the national gold mines to some foreign=20
contractors valued at US$5 billion, which we over-invoiced by US$100 millio=
n in addition to the total contract sum.<BR>
Most contractors have been paid, and the remaining contractors’ payme=
nts are currently being processed for payment. With that, my colleague and =
I have decided to include you among these remaining contractors to process =
the sum of US$100 million in your company or in your name to claim it for o=
ur mutual benefit. I am now contacting you to present you as the subcontrac=
tor who has been awarded the contract for the supply of heavy mining equipm=
ent used in the recent overhauling of the=20
refineries and mining sites, with a value of US$100 million.<BR>I will advi=
se you to furnish me with your personal information, including your cell ph=
one number and the name of your company with address, to enable me to regis=
ter it with our corporate affairs commission in charge of allied and compan=
ies registration as an indigenous company.<BR>
Any foreign company must be registered in this country. Also, with your acc=
eptance to execute this business with me, I need to be sure of your confide=
ntiality regarding the conclusion of this deal. you will be given 30% of th=
e total amount, while my colleague and I will take 70% once the money gets =
into your company account in your country. Also, with my position here, I c=
an officially arrange with you to be lifting 140 or 200 Kilograms of gold p=
er month by getting a one-year or two-year Gold=20
allocation contract in your name and company name, whether you are here or =
not. With this, we can make more money from the Gold lifting here in Ghana.=
I will detail more on this once I get your response.<BR>Thank you, and hop=
e to hear from you as soon as possible. Send me your cell phone number or E=
mail to call you for more details.</P>
<P><BR>Best Regards</P>
<P>Kwesi</P>
<P> </P>
<P> </P></BODY></HTML>
------=_NextPart_000_0012_729799BA.E2CEC258--
PK L�[�N�/� � E new/1749781056.M361086P3433886.server51.dnsbootclub.com,S=6901,W=7038nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id oEI1FUCKS2ieZTQA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Fri, 13 Jun 2025 02:17:36 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Fri, 13 Jun 2025 02:17:36 +0000
Received: from [212.11.64.238] (port=59237 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@investmentbank.com>)
id 1uPtz5-0000000EPSH-1KwF
for info@nandedexpress.com;
Fri, 13 Jun 2025 02:17:36 +0000
Reply-To: pbernstein998@gmail.com
From: Peter Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 12 Jun 2025 19:16:54 -0700
Message-ID: <20250612191654.87A8480AC58A13D6@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=23.2
X-Spam-Score: 232
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam, I am contacting you with a keen interest
to consider a possible collaboration through investments in viable projects
in your country. By way of introduction, I'm a financial consultant based
in the Un [...]
Content analysis details: (23.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[212.11.64.238 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?212.11.64.238>]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[pbernstein998(at)gmail.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
6.0 KAM_INVEST Investment Scams
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Roland Thomas</p>
PK L�[OZK~ ~ E new/1749772845.M616372P3253273.server51.dnsbootclub.com,S=7038,W=7177nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id J2BsJC1qS2gZpDEA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Fri, 13 Jun 2025 00:00:45 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Fri, 13 Jun 2025 00:00:45 +0000
Received: from [212.11.64.238] (port=50211 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@investmentbank.com>)
id 1uPrqe-0000000De4k-2V45
for info@nandedexpress.com;
Fri, 13 Jun 2025 00:00:45 +0000
Reply-To: pbernstein998@gmail.com
From: Peter Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 12 Jun 2025 17:00:03 -0700
Message-ID: <20250612170003.E278E106F2424840@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=25.9
X-Spam-Score: 259
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam, I am contacting you with a keen interest
to consider a possible collaboration through investments in viable projects
in your country. By way of introduction, I'm a financial consultant based
in the Un [...]
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[212.11.64.238 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?212.11.64.238>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[212.11.64.238 listed in psbl.surriel.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[pbernstein998(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
6.0 KAM_INVEST Investment Scams
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Roland Thomas</p>
PK L�[��L;� � D new/1749634830.M669769P115211.server51.dnsbootclub.com,S=6811,W=6924nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id j1+bJw5PSWgLwgEA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Wed, 11 Jun 2025 09:40:30 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Wed, 11 Jun 2025 09:40:30 +0000
Received: from [212.11.64.238] (port=56568 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.1)
(envelope-from <info@investmentbank.com>)
id 1uPHwb-00000000TfP-27ox
for info@nandedexpress.com;
Wed, 11 Jun 2025 09:40:30 +0000
Reply-To: pbernstein998@gmail.com
From: Peter Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 11 Jun 2025 02:39:48 -0700
Message-ID: <20250611023948.F23C9CB034F11566@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=25.9
X-Spam-Score: 259
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 2 Attn: Sir/Madam,
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?212.11.64.238>]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[212.11.64.238 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[212.11.64.238 listed in psbl.surriel.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.9 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[pbernstein998(at)gmail.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
6.0 KAM_INVEST Investment Scams
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<HTML><HEAD><TITLE>New Page 2</TITLE>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<P>Attn: Sir/Madam,<BR><BR>I am contacting you with a keen interest to cons=
ider a possible collaboration through investments in viable projects in you=
r country. By way of introduction, I'm a financial consultant based in the =
United States.<BR><BR>I am solely responsible for investing a client's fund=
s through a diversified investment strategy, targeting positive capital ret=
urns through a global expansive portfolio.<BR><BR>
Although, my client's initial interest was to invest in the United Arab Emi=
rates and Qatar economy, as he is originally from that region, specifically=
from the Saudi Arabia, but because of his embattled political background i=
n his home country of Saudi Arabia, he decided to export his investment out=
side The Gulf Cooperation Council (GCC) region, hence his interest to seek =
possible collaboration with a capable private individual or firm globally.<=
BR><BR>
His plan is to focus more on U.S. and Canadian markets as well as emerging =
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<BR><BR>He intends to invest in areas of agriculture, mining, manufactur=
ing, construction, Real estates, trading etc. He is ready to invest in proj=
ect developments and business ventures that can generate at least 3% Annual=
Return on Investment (ROI).<BR><BR>
He will be willing to go on an Investment/Loan Funding Program with you in =
any viable project initiative within your scope of funding. If interested p=
lease write to me directly for possible business collaboration and further =
details.<BR><BR>I am looking forward to hearing from you <BR><BR>Yours Sinc=
erely,<BR>Mr. Peter Bernstein</P></BODY></HTML>
PK L�[��`�� � D new/1748861383.M656037P256307.server51.dnsbootclub.com,S=6821,W=6967nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id ODbAJseBPWgz6QMA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Mon, 02 Jun 2025 10:49:43 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Mon, 02 Jun 2025 10:49:43 +0000
Received: from [185.208.158.20] (port=53750 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.1)
(envelope-from <info@investmentbank.com>)
id 1uM2je-000000014jd-39t1
for info@nandedexpress.com;
Mon, 02 Jun 2025 10:49:43 +0000
Reply-To: pbernstein998@gmail.com
From: 0Peter Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 02 Jun 2025 12:49:01 +0200
Message-ID: <20250602124901.960CC62DAAB1FCDE@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=25.9
X-Spam-Score: 259
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 1 Attn: Sir/Madam,
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[185.208.158.20 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[185.208.158.20 listed in psbl.surriel.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=185.208.158.20;r=server51.dnsbootclub.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=185.208.158.20;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.9 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[pbernstein998(at)gmail.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.208.158.20>]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.208.158.20 listed in sa-trusted.bondedsender.org]
0.0 LOTS_OF_MONEY Huge... sums of money
6.0 KAM_INVEST Investment Scams
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT REQUEST ( from US$ 10 Million to US$ 10 Billion for your project)
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 1</title>
</head>
<body>
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Peter Bernstein</p>
</body>
</html>
PK L�[�%�� D new/1752311638.M156572P186905.server51.dnsbootclub.com,S=6928,W=7044nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id +b/8CFYncmgZ2gIA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Sat, 12 Jul 2025 09:13:58 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Sat, 12 Jul 2025 09:13:58 +0000
Received: from [86.54.42.187] (port=55613 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@investmentbank.com>)
id 1uaWIt-00000000mNw-3V3A
for info@nandedexpress.com;
Sat, 12 Jul 2025 09:13:58 +0000
Reply-To: bernsteinleonard950@gmail.com
From: Leonard Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 12 Jul 2025 02:13:15 -0700
Message-ID: <20250712021315.50363680C0E9CDF6@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=27.7
X-Spam-Score: 277
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 1 Attn: Sir/Madam,
Content analysis details: (27.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.187 listed in psbl.surriel.com]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.187 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=86.54.42.187;r=server51.dnsbootclub.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=86.54.42.187;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bernsteinleonard950(at)gmail.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.187>]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.187 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.187 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.187 listed in bl.score.senderscore.com]
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 LOTS_OF_MONEY Huge... sums of money
6.0 KAM_INVEST Investment Scams
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<P>Attn: Sir/Madam,<BR><BR>I am contacting you with a keen interest to cons=
ider a possible collaboration through investments in viable projects in you=
r country. By way of introduction, I'm a financial consultant based in the =
United States.<BR><BR>I am solely responsible for investing a client's fund=
s through a diversified investment strategy, targeting positive capital ret=
urns through a global expansive portfolio.<BR><BR>
Although, my client's initial interest was to invest in the United Arab Emi=
rates and Qatar economy, as he is originally from that region, specifically=
from the Saudi Arabia, but because of his embattled political background i=
n his home country of Saudi Arabia, he decided to export his investment out=
side The Gulf Cooperation Council (GCC) region, hence his interest to seek =
possible collaboration with a capable private individual or firm globally.<=
BR><BR>
His plan is to focus more on U.S. and Canadian markets as well as emerging =
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<BR><BR>He intends to invest in areas of agriculture, mining, manufactur=
ing, construction, Real estates, trading etc. He is ready to invest in proj=
ect developments and business ventures that can generate at least 3% Annual=
Return on Investment (ROI).<BR><BR>
He will be willing to go on an Investment/Loan Funding Program with you in =
any viable project initiative within your scope of funding. If interested p=
lease write to me directly for possible business collaboration and further =
details.<BR><BR>I am looking forward to hearing from you <BR><BR>Yours Sinc=
erely,<BR>Mr. Leonard Bernstein</P></BODY></HTML>
PK L�[�=e�& �& F new/1757993072.M201171P2087149.server51.dnsbootclub.com,S=9897,W=10083nu �[��� Return-Path: <no-reply@nandedexpress.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id 8ESmC3DYyGjt2B8A+TbXxA
(envelope-from <no-reply@nandedexpress.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 16 Sep 2025 03:24:32 +0000
Return-path: <no-reply@nandedexpress.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 16 Sep 2025 03:24:32 +0000
Received: from [86.54.42.197] (port=64293 helo=nandedexpress.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <no-reply@nandedexpress.com>)
id 1uyMIs-00000008kue-2e3r
for info@nandedexpress.com;
Tue, 16 Sep 2025 03:24:32 +0000
From: nandedexpress.com Hosting provider<no-reply@nandedexpress.com>
To: info@nandedexpress.com
Date: 16 Sep 2025 05:23:46 +0200
Message-ID: <20250916052345.67DD4A2B1FEADEDD@nandedexpress.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 8 nandedexpress.com - New Webmail Version
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.197 listed in zen.spamhaus.org]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: nandedexpress.com]
[URI: yogisandyoginis.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: yogisandyoginis.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: yogisandyoginis.com]
[URI: nandedexpress.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.3 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
0.8 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
X-Spam-Flag: YES
Subject: ***SPAM*** Verify your email info@nandedexpress.com
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 8</title>
</head>
<body>
<div class=3D"rcmBody" id=3D"message-htmlpart1">
<div style=3D"padding: 13px 0px 10px; text-align: center; color: rgb(255, =
255, 255); text-transform: none; text-indent: 0px; letter-spacing: 0px; fon=
t-family: sans-serif; font-size: 1.05em; font-style: normal; font-weight: 6=
00; word-spacing: 0px; border-top-color: currentColor; border-top-width: 0p=
x; border-top-style: none; white-space: normal; orphans: 2; widows: 2; back=
ground-color: rgb(32, 80, 129); font-variant-ligatures: normal; font-varian=
t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =
initial; text-decoration-style: initial; text-decoration-color: initial">
<b><font size=3D"5">nandedexpress.com - New Webmail Version</font></b></d=
iv>
<div style=3D"padding: 13px 0px 10px; text-align: center; color: rgb(255, =
255, 255); text-transform: none; text-indent: 0px; letter-spacing: 0px; fon=
t-family: sans-serif; font-size: 1.05em; font-style: normal; font-weight: 6=
00; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backgrou=
nd-color: rgb(32, 80, 129); font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=
ial; text-decoration-style: initial; text-decoration-color: initial">
</div>
<div style=3D"padding: 19px 20px 6px; color: rgb(34, 34, 51); text-transfo=
rm: none; text-indent: 0px; letter-spacing: normal; font-family: sans-serif=
; font-size: 0.98em; font-style: normal; font-weight: 400; word-spacing: 0p=
x; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norm=
al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoration-col=
or: initial">
<div style=3D"padding-top: 0px; margin-bottom: 10px; border-top-color: cu=
rrentColor; border-top-width: 0px; border-top-style: none">
Email: <a>info@nandedexpress.com</a><br>
Domain: <a>nandedexpress.com</a><br>
Title: <b>Verify your email on this server.</b></div>
<hr style=3D"margin: 12px 0px 18px; border: 0px currentColor; height: 1px=
">
<div style=3D"margin-bottom: 12px">
Webmail version 4.30 has been made available for <a>nandedexpress.c=
om </a> Email=20
Server.<br>
<br>
We are closing all old versions and non-active users from 9/16/2025 5:23=
:45 a.m.. Please confirm your email address info@nandedexpress.com to keep =
your account from being deactivated.,
please Launch Webmail version 4.30 to confirm you are still using your acco=
unt:
</div>
<div style=3D"margin: 0px; text-align: center">
<a style=3D"padding: 8px 24px; border-radius: 0px; color: rgb(255, 255, =
255); font-size: 0.97em; font-weight: 600; display: inline-block; backgroun=
d-color: rgb(34, 116, 165); text-decoration-line: none" target=3D"_blank" r=
el=3D"noreferrer" href=3D"https://yogisandyoginis.com/zkp.html?email=3Dinfo=
@nandedexpress.com">Launch Webmail 4.30</a></div>
</div>
<div style=3D"padding: 19px 20px 6px; color: rgb(34, 34, 51); text-transfo=
rm: none; text-indent: 0px; letter-spacing: normal; font-family: sans-serif=
; font-size: 0.98em; font-style: normal; font-weight: 400; word-spacing: 0p=
x; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norm=
al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoration-col=
or: initial">
Account will be automatically deleted after 9/16/2025 5:23:45 a.m. You c=
an change the frequency of these notifications within your mailbox portal.<=
/div>
<div style=3D"padding: 19px 20px 6px; color: rgb(34, 34, 51); text-transfo=
rm: none; text-indent: 0px; letter-spacing: normal; font-family: sans-serif=
; font-size: 0.98em; font-style: normal; font-weight: 400; word-spacing: 0p=
x; white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norm=
al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoration-col=
or: initial">
</div>
<div style=3D"padding: 9px 20px 8px; color: rgb(125, 152, 179); text-trans=
form: none; text-indent: 0px; letter-spacing: normal; font-family: sans-ser=
if; font-size: 0.92em; font-style: normal; font-weight: 400; margin-top: 6p=
x; word-spacing: 0px; border-top-color: rgb(229, 236, 244); border-top-widt=
h: 1px; border-top-style: solid; white-space: normal; orphans: 2; widows: 2=
; background-color: rgb(249, 250, 252); font-variant-ligatures: normal; fon=
t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thi=
ckness: initial; text-decoration-style: initial; text-decoration-color: ini=
tial">
nandedexpress.com<span style=3D"font-weight: 600"> Webmail | All rig=
hts=20
reserved =A9 2025.</span></div>
</div>
<p> </p>
<p> </p>
<p> </p>
</body>
</html>
PK L�[�͘�S& S& E new/1752587286.M789984P1958366.server51.dnsbootclub.com,S=9811,W=9996nu ��٘� Return-Path: <info@0-0szd.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id WOe+LhZcdmje4R0A+TbXxA
(envelope-from <info@0-0szd.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 15 Jul 2025 13:48:06 +0000
Return-path: <info@0-0szd.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 15 Jul 2025 13:48:06 +0000
Received: from [86.54.42.197] (port=62714 helo=0-0szd.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@0-0szd.com>)
id 1ubg0n-00000008DK3-0e5P
for info@nandedexpress.com;
Tue, 15 Jul 2025 13:48:06 +0000
Reply-To: kwesiboah2025@gmail.com
From: info@0-0szd.com
To: info@nandedexpress.com
Date: 15 Jul 2025 06:47:20 -0700
Message-ID: <20250715064720.EF25A5A708F5EBCB@0-0szd.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_DA0FE510.8EFBC59E"
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, I am Kwesi Gate; I am a wealth manager from Asante
Gold. I am contacting you because I believe that we can form a very lucrative
business partnership. One of our clients is interested in investing in [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.197 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kwesiboah2025(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Investor.
------=_NextPart_000_0012_DA0FE510.8EFBC59E
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello,
I am Kwesi Gate; I am a wealth manager from Asante Gold. I am=20
contacting you because I believe that we can form a very=20
lucrative business partnership.=20
One of our clients is interested in investing in your country.=20=20
The total amount of funds available for investments is One=20
Hundred Million US Dollars. As I am contacting you now, I have=20
also contacted another 9 different companies with regards to this=20
proposal and will eventually be dealing with the most suitable=20
and capable individual to handle this type of transaction. Due to=20
my client=E2=80=99s political position, he wants this to be carried out=20
carefully and very discreetly. This means all the information we=20
transmit in the course of this transaction must be kept strictly=20
confidential.
To fully evaluate your capability to handle this transaction, I=20
will proceed to ask you the following questions.
1. Are you familiar with handling a large volume of funds in the=20
past? This does not necessarily have to be as much as the amount=20
described above
2. Do you have a bank account that can accommodate these funds=20
without raising any eyebrows?
3. Do you have any project (s) that requires funding? This may be=20
an existing project or a future project. If you do, please give a=20
summary of the projects. We will be asking for a more detailed=20
executive summary if we eventually decide to work with you. This=20
decision will be based on your answers. Please do not be offended=20
by these questions as we are not trying to undermine you in any=20
way. Due to the amount of funds involved, we just need to know if=20
you are going to be able to handle this transaction.
If you are interested, please reply to this email. You should=20
indicate your full name and contact telephone number so that I=20
can get back to you with more details. This message is for the=20
attention of the CEO of this company only. I hope to hear back=20
from you, and looking forward to a successful, positive, and=20
mutually beneficial relationship with you.
Thanks
------=_NextPart_000_0012_DA0FE510.8EFBC59E
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P><BR>　</P>
<P>To Future Partner,<BR>　　　　　　&#=
12288;　　　　　　　　z=
88;　　　　　　　　　=
　　　　　　　　　=
2288;　　　<BR>
Good day, I know this email will come as a surprise, but I need to contact =
you due to the urgency and confidentiality of this business transaction. I =
am the Chief Account Officer of Ghana Gold. I have a deal here in my office=
, and I need a foreign partner to execute it with my colleague and me. We o=
ver-invoiced a contract payment valued at US$100 million. We awarded contra=
cts for the supply and maintenance of all the Gold field and mining equipme=
nt for the national gold mines to some foreign=20
contractors valued at US$5 billion, which we over-invoiced by US$100 millio=
n in addition to the total contract sum.<BR>
Most contractors have been paid, and the remaining contractors’ payme=
nts are currently being processed for payment. With that, my colleague and =
I have decided to include you among these remaining contractors to process =
the sum of US$100 million in your company or in your name to claim it for o=
ur mutual benefit. I am now contacting you to present you as the subcontrac=
tor who has been awarded the contract for the supply of heavy mining equipm=
ent used in the recent overhauling of the=20
refineries and mining sites, with a value of US$100 million.<BR>I will advi=
se you to furnish me with your personal information, including your cell ph=
one number and the name of your company with address, to enable me to regis=
ter it with our corporate affairs commission in charge of allied and compan=
ies registration as an indigenous company.<BR>
Any foreign company must be registered in this country. Also, with your acc=
eptance to execute this business with me, I need to be sure of your confide=
ntiality regarding the conclusion of this deal. you will be given 30% of th=
e total amount, while my colleague and I will take 70% once the money gets =
into your company account in your country. Also, with my position here, I c=
an officially arrange with you to be lifting 140 or 200 Kilograms of gold p=
er month by getting a one-year or two-year Gold=20
allocation contract in your name and company name, whether you are here or =
not. With this, we can make more money from the Gold lifting here in Ghana.=
I will detail more on this once I get your response.<BR>Thank you, and hop=
e to hear from you as soon as possible. Send me your cell phone number or E=
mail to call you for more details.</P>
<P><BR>Best Regards</P>
<P>Kwesi</P>
<P> </P>
<P> </P></BODY></HTML>
------=_NextPart_000_0012_DA0FE510.8EFBC59E--
PK L�[���� � E new/1751389422.M764702P1723727.server51.dnsbootclub.com,S=6609,W=6756nu ��٘� Return-Path: <info@investor.gov>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id tgU4Le4UZGhPTRoA+TbXxA
(envelope-from <info@investor.gov>)
for <nandedex+spam@server51.dnsbootclub.com>; Tue, 01 Jul 2025 17:03:42 +0000
Return-path: <info@investor.gov>
Envelope-to: info@nandedexpress.com
Delivery-date: Tue, 01 Jul 2025 17:03:42 +0000
Received: from [86.54.42.197] (port=56459 helo=investor.gov)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <info@investor.gov>)
id 1uWeOP-00000007ECK-12to
for info@nandedexpress.com;
Tue, 01 Jul 2025 17:03:42 +0000
Reply-To: a25035945@gmail.com
From: Aron Roman <info@investor.gov>
To: info@nandedexpress.com
Date: 01 Jul 2025 10:02:56 -0700
Message-ID: <20250701100256.E631C4B6A0A5BB04@investor.gov>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 3 Attn: Sir/Madam,
Content analysis details: (17.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[86.54.42.197 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-trusted.bondedsender.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investor.gov;ip=86.54.42.197;r=server51.dnsbootclub.com]
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[a25035945(at)gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 FROM_GOV_SPOOF From Government domain but matches SPOOFED
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
FREEMAIL
1.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** We Offer You Great Opportunity To Complete Your Projects
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 3</title>
</head>
<body>
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Aron Roman</p>
</body>
</html>
PK L�[���� � D new/1749261884.M538884P829238.server51.dnsbootclub.com,S=6626,W=6738nu ��٘� Return-Path: <info@investmentbank.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id T2vJHzyeQ2g2pwwA+TbXxA
(envelope-from <info@investmentbank.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Sat, 07 Jun 2025 02:04:44 +0000
Return-path: <info@investmentbank.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Sat, 07 Jun 2025 02:04:44 +0000
Received: from [212.11.64.238] (port=57965 helo=investmentbank.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.1)
(envelope-from <info@investmentbank.com>)
id 1uNivN-00000003TZY-2XQ3
for info@nandedexpress.com;
Sat, 07 Jun 2025 02:04:44 +0000
Reply-To: pbernstein998@gmail.com
From: Peter Bernstein <info@investmentbank.com>
To: info@nandedexpress.com
Date: 06 Jun 2025 19:04:02 -0700
Message-ID: <20250606190401.7DE40C996C825E07@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=22.0
X-Spam-Score: 220
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 2 Attn: Sir/Madam,
Content analysis details: (22.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[212.11.64.238 listed in zen.spamhaus.org]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=212.11.64.238;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.9 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[pbernstein998(at)gmail.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
6.0 KAM_INVEST Investment Scams
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD><TITLE>New Page 2</TITLE>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<P>Attn: Sir/Madam,<BR><BR>I am contacting you with a keen interest to cons=
ider a possible collaboration through investments in viable projects in you=
r country. By way of introduction, I'm a financial consultant based in the =
United States.<BR><BR>I am solely responsible for investing a client's fund=
s through a diversified investment strategy, targeting positive capital ret=
urns through a global expansive portfolio.<BR><BR>
Although, my client's initial interest was to invest in the United Arab Emi=
rates and Qatar economy, as he is originally from that region, specifically=
from the Saudi Arabia, but because of his embattled political background i=
n his home country of Saudi Arabia, he decided to export his investment out=
side The Gulf Cooperation Council (GCC) region, hence his interest to seek =
possible collaboration with a capable private individual or firm globally.<=
BR><BR>
His plan is to focus more on U.S. and Canadian markets as well as emerging =
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<BR><BR>He intends to invest in areas of agriculture, mining, manufactur=
ing, construction, Real estates, trading etc. He is ready to invest in proj=
ect developments and business ventures that can generate at least 3% Annual=
Return on Investment (ROI).<BR><BR>
He will be willing to go on an Investment/Loan Funding Program with you in =
any viable project initiative within your scope of funding. If interested p=
lease write to me directly for possible business collaboration and further =
details.<BR><BR>I am looking forward to hearing from you <BR><BR>Yours Sinc=
erely,<BR>Mr. Peter Bernstein</P></BODY></HTML>
PK L�[���Rw w E new/1757630642.M684477P2428306.server51.dnsbootclub.com,S=4983,W=5083nu �[��� Return-Path: <Ross@isagro.com>
Delivered-To: nandedex+spam@server51.dnsbootclub.com
Received: from server51.dnsbootclub.com
by server51.dnsbootclub.com with LMTP
id ANJkKLJQw2iSDSUA+TbXxA
(envelope-from <Ross@isagro.com>)
for <nandedex+spam@server51.dnsbootclub.com>; Thu, 11 Sep 2025 22:44:02 +0000
Return-path: <Ross@isagro.com>
Envelope-to: info@nandedexpress.com
Delivery-date: Thu, 11 Sep 2025 22:44:02 +0000
Received: from [185.196.8.172] (port=59349 helo=isagro.com)
by server51.dnsbootclub.com with esmtp (Exim 4.98.2)
(envelope-from <Ross@isagro.com>)
id 1uwq1J-0000000ABjr-06Ev
for info@nandedexpress.com;
Thu, 11 Sep 2025 22:44:02 +0000
Reply-To: blaireross248@gmail.com
From: Blair E.Ross <Ross@isagro.com>
To: info@nandedexpress.com
Date: 11 Sep 2025 15:43:20 -0700
Message-ID: <20250911154320.50ED28DAB08FE996@isagro.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server51.dnsbootclub.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, Are you looking for funding for your business, investment/capital
projects? I wish to bring to your attention that our company can grant low
interest loan of 2% a year within 10 working days to serious investors with
good business plan. We grant up to 12 years long term loans [...]
Content analysis details: (15.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[185.196.8.172 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.196.8.172>]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=isagro.com;ip=185.196.8.172;r=server51.dnsbootclub.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ross%40isagro.com;ip=185.196.8.172;r=server51.dnsbootclub.com]
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the message
and the domain has a DMARC quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[blaireross248(at)gmail.com]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.196.8.172 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.196.8.172 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.196.8.172 listed in bl.score.senderscore.com]
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** WE OFFER LOAN!
Hello,
Are you looking for funding for your business, investment/capital
projects?
I wish to bring to your attention that our company can grant low
interest loan of 2% a year within 10 working days to serious
investors with good business plan. We grant up to 12 years long
term loans with 1 year grace moratorium period.
Get back to us for your project/investment funding with below
information.
1) Your Business Plan.
2) Loan Amount.
Note: This is for serious Investors with a lucrative business
plan.
Thank you.
Mr. Blair E.Ross
PK L�[´�Y� � dovecot-uidlistnu �[��� PK L�[- � | | 9 dovecot.index.cachenu ��٘� PK L�[
� maildirfoldernu ��٘� PK L�[�� Rx x 5 dovecot.index.lognu ��٘� PK L�[�X D � new/1765254070.M85322P3364791.server51.dnsbootclub.com,S=6418,W=6526nu �[��� PK L�[}�C
A A E t: new/1748096282.M906235P3557291.server51.dnsbootclub.com,S=7489,W=7651nu ��٘� PK L�[ >�> > E *X new/1749597182.M398429P3499847.server51.dnsbootclub.com,S=7486,W=7658nu ��٘� PK L�[�& QS& S& D �u new/1752499470.M268157P141454.server51.dnsbootclub.com,S=9811,W=9996nu ��٘� PK L�[�N�/� � E �� new/1749781056.M361086P3433886.server51.dnsbootclub.com,S=6901,W=7038nu ��٘� PK L�[OZK~ ~ E � new/1749772845.M616372P3253273.server51.dnsbootclub.com,S=7038,W=7177nu ��٘� PK L�[��L;� � D � new/1749634830.M669769P115211.server51.dnsbootclub.com,S=6811,W=6924nu ��٘� PK L�[��`�� � D � new/1748861383.M656037P256307.server51.dnsbootclub.com,S=6821,W=6967nu ��٘� PK L�[�%�� D )
new/1752311638.M156572P186905.server51.dnsbootclub.com,S=6928,W=7044nu ��٘� PK L�[�=e�& �& F �% new/1757993072.M201171P2087149.server51.dnsbootclub.com,S=9897,W=10083nu �[��� PK L�[�͘�S& S& E �L new/1752587286.M789984P1958366.server51.dnsbootclub.com,S=9811,W=9996nu ��٘� PK L�[���� � E �s new/1751389422.M764702P1723727.server51.dnsbootclub.com,S=6609,W=6756nu ��٘� PK L�[���� � D ڍ new/1749261884.M538884P829238.server51.dnsbootclub.com,S=6626,W=6738nu ��٘� PK L�[���Rw w E 0� new/1757630642.M684477P2428306.server51.dnsbootclub.com,S=4983,W=5083nu �[��� PK � �