/home/p1now/mail/.spam/new
| Name | Size | Mode | Actions |
| 1741750786.M257031P2427159.helium.myhosteddomain.com,S=4120,W=4204 | 4120 | 0640 | editdlrm |
| 1747460014.M601334P248821.helium.myhosteddomain.com,S=6404,W=6530 | 6404 | 0640 | editdlrm |
| 1747978335.M300536P2920701.helium.myhosteddomain.com,S=4258,W=4346 | 4258 | 0640 | editdlrm |
| 1749178707.M395022P595062.helium.myhosteddomain.com,S=6610,W=6753 | 6610 | 0640 | editdlrm |
| 1750732653.M372502P3863806.helium.myhosteddomain.com,S=6423,W=6565 | 6423 | 0640 | editdlrm |
| 1752529545.M45123P63057.helium.myhosteddomain.com,S=6484,W=6594 | 6484 | 0640 | editdlrm |
| 1752605055.M927443P414787.helium.myhosteddomain.com,S=4627,W=4722 | 4627 | 0640 | editdlrm |
| 1752677927.M814751P773876.helium.myhosteddomain.com,S=11385,W=11596 | 11385 | 0640 | editdlrm |
| 1757347544.M670182P2630700.helium.myhosteddomain.com,S=6608,W=6718 | 6608 | 0640 | editdlrm |
| 1757349158.M576488P2638402.helium.myhosteddomain.com,S=6875,W=7029 | 6875 | 0640 | editdlrm |
| 1757471337.M90712P3292457.helium.myhosteddomain.com,S=6473,W=6615 | 6473 | 0640 | editdlrm |
| 1757471678.M944364P3294125.helium.myhosteddomain.com,S=6713,W=6864 | 6713 | 0640 | editdlrm |
| 1760576154.M272668P783819.helium.myhosteddomain.com,S=8400,W=8465 | 8400 | 0640 | editdlrm |
| 1762445813.M737453P2310318.helium.myhosteddomain.com,S=3222,W=3288 | 3222 | 0640 | editdlrm |
| 1764815467.M341743P1926075.helium.myhosteddomain.com,S=3019,W=3076 | 3019 | 0640 | editdlrm |
| 1765369303.M454306P546587.helium.myhosteddomain.com,S=3067,W=3125 | 3067 | 0640 | editdlrm |
| 1772582912.M2666P1177081.helium.myhosteddomain.com,S=4249,W=4323 | 4249 | 0640 | editdlrm |
| 1772647717.M717548P1515940.helium.myhosteddomain.com,S=4548,W=4627 | 4548 | 0640 | editdlrm |
| 1772779233.M183463P584711.helium.myhosteddomain.com,S=4709,W=4791 | 4709 | 0640 | editdlrm |
| 1772844622.M877898P959660.helium.myhosteddomain.com,S=4248,W=4324 | 4248 | 0640 | editdlrm |
| 1772910426.M688768P1290651.helium.myhosteddomain.com,S=5416,W=5506 | 5416 | 0640 | editdlrm |
| 1772975021.M137559P1616370.helium.myhosteddomain.com,S=5762,W=5858 | 5762 | 0640 | editdlrm |
| 1773102510.M377524P2299226.helium.myhosteddomain.com,S=5574,W=5667 | 5574 | 0640 | editdlrm |
| 1773167516.M406905P2639467.helium.myhosteddomain.com,S=5289,W=5378 | 5289 | 0640 | editdlrm |
| 1773232336.M504127P2972797.helium.myhosteddomain.com,S=5241,W=5329 | 5241 | 0640 | editdlrm |
| 1773309134.M300488P3369829.helium.myhosteddomain.com,S=4255,W=4343 | 4255 | 0640 | editdlrm |
| 1773362870.M709834P3696595.helium.myhosteddomain.com,S=5113,W=5200 | 5113 | 0640 | editdlrm |
| 1773453625.M56857P4169256.helium.myhosteddomain.com,S=5294,W=5385 | 5294 | 0640 | editdlrm |
| 1773518100.M378410P308920.helium.myhosteddomain.com,S=4613,W=4693 | 4613 | 0640 | editdlrm |
| 1773582890.M260079P635662.helium.myhosteddomain.com,S=5698,W=5793 | 5698 | 0640 | editdlrm |
| 1773712241.M947534P1305050.helium.myhosteddomain.com,S=5757,W=5856 | 5757 | 0640 | editdlrm |
| 1773773517.M719449P1618454.helium.myhosteddomain.com,S=5640,W=5734 | 5640 | 0640 | editdlrm |
| 1773836419.M478332P1931815.helium.myhosteddomain.com,S=5307,W=5397 | 5307 | 0640 | editdlrm |
| 1773900687.M579545P2249193.helium.myhosteddomain.com,S=5724,W=5821 | 5724 | 0640 | editdlrm |
| 1773965040.M400047P2576124.helium.myhosteddomain.com,S=5462,W=5555 | 5462 | 0640 | editdlrm |
| 1774030479.M951046P2918809.helium.myhosteddomain.com,S=5129,W=5217 | 5129 | 0640 | editdlrm |
| 1774095457.M68312P3259143.helium.myhosteddomain.com,S=4872,W=4956 | 4872 | 0640 | editdlrm |
| 1774161093.M139048P3583581.helium.myhosteddomain.com,S=5725,W=5820 | 5725 | 0640 | editdlrm |
| 1774280103.M316327P4194218.helium.myhosteddomain.com,S=4898,W=4982 | 4898 | 0640 | editdlrm |
| 1774520064.M886858P1341045.helium.myhosteddomain.com,S=4637,W=4727 | 4637 | 0640 | editdlrm |
| 1774618389.M644682P1900128.helium.myhosteddomain.com,S=8288,W=8429 | 8288 | 0640 | editdlrm |
| 1774652074.M87808P2097546.helium.myhosteddomain.com,S=4376,W=4460 | 4376 | 0640 | editdlrm |
| 1774790982.M418141P2833173.helium.myhosteddomain.com,S=4737,W=4829 | 4737 | 0640 | editdlrm |
| 1777216803.M339358P805329.helium.myhosteddomain.com,S=4447,W=4529 | 4447 | 0640 | editdlrm |
| 1777286698.M241359P957325.helium.myhosteddomain.com,S=4696,W=4782 | 4696 | 0640 | editdlrm |
| 1782458988.M747999P2882422.helium.myhosteddomain.com,S=6395,W=6507 | 6395 | 0640 | editdlrm |
| 1785740662.M897056P3021668.helium.myhosteddomain.com,S=12850,W=13053 | 12850 | 0640 | editdlrm |
| 1786031985.M992123P3914611.helium.myhosteddomain.com,S=6376,W=6488 | 6376 | 0640 | editdlrm |
| 1786148601.M486171P76724.helium.myhosteddomain.com,S=13031,W=13237 | 13031 | 0640 | editdlrm |
| 1786460727.M459287P1019881.helium.myhosteddomain.com,S=16841,W=17111 | 16841 | 0640 | editdlrm |
| 1786791325.M832917P1912809.helium.myhosteddomain.com,S=5999,W=6106 | 5999 | 0640 | editdlrm |
Edit: /home/p1now/mail/.spam/new/1741750786.M257031P2427159.helium.myhosteddomain.com,S=4120,W=4204 (4120B)
Return-Path:
Delivered-To: p1now+spam@helium.myhosteddomain.com
Received: from helium.myhosteddomain.com
by helium.myhosteddomain.com with LMTP
id WaVbDgIC0WcXCSUAMXBWDg
(envelope-from )
for ; Tue, 11 Mar 2025 23:39:46 -0400
Return-path:
Envelope-to: info@p1now.com
Delivery-date: Tue, 11 Mar 2025 23:39:46 -0400
Received: from [176.65.134.174] (port=63044 helo=natwest.co.uk)
by helium.myhosteddomain.com with esmtp (Exim 4.98.1)
(envelope-from )
id 1tsCwb-0000000ABMr-3qy9
for info@p1now.com;
Tue, 11 Mar 2025 23:39:46 -0400
Reply-To: taofei6666@hotmail.com
From: Walsh Philip
To: info@p1now.com
Date: 11 Mar 2025 20:39:02 -0700
Message-ID: <20250311203902.ECAB95F17ACCE148@natwest.co.uk>
MIME-Version: 1.0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=25.4
X-Spam-Score: 254
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "helium.myhosteddomain.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day, How are you doing today? My name is Walsh Philip,
I live in the United Kingdom and work with NatWest Bank UK. I am glad to
be connected with you. I have a business proposal I would like to discuss
with you in private. It involves a business opportunity that will be of huge
financial benefit to both of us.
Content analysis details: (25.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=176.65.134.174;r=helium.myhosteddomain.com]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[176.65.134.174 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=walsh.philip%40natwest.co.uk;ip=176.65.134.174;r=helium.myhosteddomain.com]
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[176.65.134.174 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[176.65.134.174 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[taofei6666(at)hotmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FROM_BANK_NOAUTH From Bank domain but no SPF or DKIM
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** MY PROPOSAL
Good Day,
How are you doing today? My name is Walsh Philip, I live in the=20
United Kingdom and work with NatWest Bank UK.
I am glad to be connected with you. I have a business proposal I=20
would like to discuss with you in private. It involves a business=20
opportunity that will be of huge financial benefit to both of us.
Further details will be shared after I receive your response.
Kindly reply with your full name and your country of=20
Origin/residence.
Yours Truly,
Walsh Philip.
Operational Manager