OwlCyberSecurity - MANAGER
Edit File: 1744265040.M297674P1525339.server.nsenabled.com,S=4780,W=4879
Return-Path: <Walsh.philip@natwest.co.uk> Delivered-To: info+spam@mixylife.com Received: from server.nsenabled.com by server.nsenabled.com with LMTP id zjzbEFBf92dbRhcA4cJeQg (envelope-from <Walsh.philip@natwest.co.uk>) for <info+spam@mixylife.com>; Thu, 10 Apr 2025 09:04:00 +0300 Return-path: <Walsh.philip@natwest.co.uk> Envelope-to: info@mixylife.com Delivery-date: Thu, 10 Apr 2025 09:04:00 +0300 Received: from [185.208.158.35] (port=63998 helo=natwest.co.uk) by server.nsenabled.com with esmtp (Exim 4.97.1) (envelope-from <Walsh.philip@natwest.co.uk>) id 1u2l16-00000006Ogb-2cJW for info@mixylife.com; Thu, 10 Apr 2025 09:04:00 +0300 Reply-To: rafhen860@hotmail.com From: Walsh Philip <Walsh.philip@natwest.co.uk> To: info@mixylife.com Date: 09 Apr 2025 23:03:18 -0700 Message-ID: <20250409230318.0285FF4578832EF3@natwest.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=20.3 X-Spam-Score: 203 X-Spam-Bar: ++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server.nsenabled.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Good Day, How are you doing today? My name is Walsh Philip, I live in the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business proposal I would like to discuss with you in private. It involves a business opportunity that will be of huge financial benefit to both of us.Fur [...] Content analysis details: (20.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.8 KAM_COUK Scoring .co.uk emails higher due to poor registry security. 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?185.208.158.35>] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=walsh.philip%40natwest.co.uk;ip=185.208.158.35;r=server.nsenabled.com] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [rafhen860[at]hotmail.com] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=185.208.158.35;r=server.nsenabled.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals -3.0 RCVD_IN_VALIDITY_CERTIFIED RBL: Sender in Validity Certification - Contact certification@validity.com [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>] 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [185.208.158.35 listed in bl.score.senderscore.com] -2.0 RCVD_IN_VALIDITY_SAFE RBL: Sender in Validity Safe - Contact certification@validity.com 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [185.208.158.35 listed in psbl.surriel.com] 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 FROM_BANK_NOAUTH From Bank domain but no SPF or DKIM 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** MY PROPOSAL Good Day, How are you doing today? My name is Walsh Philip, I live in=20 the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business=20 proposal I would like to discuss with you in private. It involves a=20 business opportunity that will be of huge financial benefit to both of us.Further details will be shared after I receive your=20 response. Kindly reply with your full name and your country of Origin/residence. Yours Truly, Walsh Philip. Operation Manager.