OwlCyberSecurity - MANAGER
Edit File: 1755007912.M806150P1398422.server254.web-hosting.com,S=4869,W=4963
Return-Path: <Walsh.philip@natwest.co.uk> Delivered-To: info+spam@sportspesatips.com Received: from server254.web-hosting.com by server254.web-hosting.com with LMTP id mDKIL6hLm2iWVhUAUzp1tw (envelope-from <Walsh.philip@natwest.co.uk>) for <info+spam@sportspesatips.com>; Tue, 12 Aug 2025 10:11:52 -0400 Return-path: <Walsh.philip@natwest.co.uk> Envelope-to: info@sportspesatips.com Delivery-date: Tue, 12 Aug 2025 10:11:52 -0400 Received: from [86.54.42.197] (port=53375 helo=natwest.co.uk) by server254.web-hosting.com with esmtp (Exim 4.98.2) (envelope-from <Walsh.philip@natwest.co.uk>) id 1ulpjC-00000006aJP-10Rk for info@sportspesatips.com; Tue, 12 Aug 2025 10:11:52 -0400 Reply-To: hfheirwig@hotmail.com From: Walsh Philip <Walsh.philip@natwest.co.uk> To: info@sportspesatips.com Date: 12 Aug 2025 16:11:08 +0200 Message-ID: <20250812161108.4B1D5C2D0906A956@natwest.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=22.4 X-Spam-Score: 224 X-Spam-Bar: ++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server254.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Good Day, How are you doing today? My name is Walsh Philip, I live in the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business proposal I would like to discuss with you in private. It involves a business opportunity that will be of huge financial benefit to both of us.Furt [...] Content analysis details: (22.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [86.54.42.197 listed in zen.spamhaus.org] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=86.54.42.197;r=server254.web-hosting.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=walsh.philip%40natwest.co.uk;ip=86.54.42.197;r=server254.web-hosting.com] 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security. 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in sa-trusted.bondedsender.org] 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [86.54.42.197 listed in bl.score.senderscore.com] 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FROM_BANK_NOAUTH From Bank domain but no SPF or DKIM X-Spam-Flag: YES Subject: ***SPAM*** MY PROPOSAL Good Day, How are you doing today? My name is Walsh Philip, I live in the United Kingdom and work with NatWest Bank UK. I am glad to be connected with you. I have a business proposal I would like to discuss with you in private. It involves a business opportunity that will be of huge financial benefit to both of us.Further details will be shared after I receive your response. Kindly reply with your full name and your country of Origin/residence. Yours Truly, Walsh Philip. Operational Manager.