JezK

Edit File: 1790012629.M144452P334371.ng-shost103.tenten.vn,S=4182,W=4271

Return-Path: <Walsh.philip@walshp.com> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id lEpLCNVssWojGgUA0NYCOQ (envelope-from <Walsh.philip@walshp.com>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Tue, 22 Sep 2026 00:43:49 +0700 Return-path: <Walsh.philip@walshp.com> Envelope-to: info@lednhattao.com Delivery-date: Tue, 22 Sep 2026 00:43:49 +0700 Received: from [158.94.209.22] (port=62574 helo=walshp.com) by ng-shost103.tenten.vn with esmtp (Exim 4.100) (envelope-from <Walsh.philip@walshp.com>) id 1x8i3P-00000001Nkv-0G0D for info@lednhattao.com; Tue, 22 Sep 2026 00:43:48 +0700 Reply-To: rafhen860@hotmail.com From: Walsh Philip <Walsh.philip@walshp.com> To: info@lednhattao.com Date: 21 Sep 2026 10:40:33 -0700 Message-ID: <20260921104033.930BF5E2FC2B9482@walshp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=24.7 X-Spam-Score: 247 X-Spam-Bar: ++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Good Day, How are you doing today? My name is Walsh Philip, I live in the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business proposal I would like to discuss with you in private. It involves a business opportunity that will be of huge financial benefit to both of us. Content analysis details: (24.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?158.94.209.22>] 6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5) [158.94.209.22 listed in bl.mailspike.net] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [158.94.209.22 listed in list.dnswl.org] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [158.94.209.22 listed in hostkarma.junkemailfilter.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [158.94.209.22 listed in psbl.surriel.com] 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [rafhen860(at)hotmail.com] 7.5 SNB_HASHBL_FREEMAIL Message contains email address found on SNB Freemail HashBL [rafhen860[at]hotmail.com] 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** MY PROPOSAL X-From-Rewrite: unmodified, forwarded message Good Day, How are you doing today? My name is Walsh Philip, I live in the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business proposal I would like to discuss with you in private. It involves a business opportunity that will be of huge financial benefit to both of us. Further details will be shared after I receive your response. Kindly reply with your full name and your country of Origin/residence. Yours Truly, Walsh Philip. Operational Manager=20