HEX
Server: LiteSpeed
System: Linux node612.namehero.net 4.18.0-553.121.1.lve.el8.x86_64 #1 SMP Thu Apr 30 16:40:41 UTC 2026 x86_64
User: dfwparty (1186)
PHP: 8.3.31
Disabled: NONE
Upload Files
File: //home/dfwparty/mail/.spam/new/1742480528.M673331P3033811.node612.namehero.net,S=5199,W=5297
Return-Path: <Walsh.philip@natwest.co.uk>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
	by node612.namehero.net with LMTP
	id OOofJ5Ak3GfTSi4AJLeZpw
	(envelope-from <Walsh.philip@natwest.co.uk>)
	for <dfwparty+spam@node612.namehero.net>; Thu, 20 Mar 2025 08:22:08 -0600
Return-path: <Walsh.philip@natwest.co.uk>
Envelope-to: info@texaspartyforum.com
Delivery-date: Thu, 20 Mar 2025 08:22:08 -0600
Received: from [185.208.158.35] (port=60640 helo=natwest.co.uk)
	by node612.namehero.net with esmtp (Exim 4.98.1)
	(envelope-from <Walsh.philip@natwest.co.uk>)
	id 1tvGmc-0000000D7gw-3liX
	for info@texaspartyforum.com;
	Thu, 20 Mar 2025 08:22:08 -0600
Reply-To: rafhen860@hotmail.com
From: Walsh Philip <Walsh.philip@natwest.co.uk>
To: info@texaspartyforum.com
Date: 20 Mar 2025 07:21:17 -0700
Message-ID: <20250320072117.5A7BFD4AA472FEA7@natwest.co.uk>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good Day, How are you doing today? My name is Walsh Philip,
    I live in the United Kingdom and work with NatWest Bank UK. I am glad to
   be connected with you. I have a business proposal I would like to discuss
   with you in private. It involves a business opportunity that will be of huge
    financial benefit to both of us.Furt [...] 
 Content analysis details:   (16.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [185.208.158.35 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?185.208.158.35>]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=natwest.co.uk;ip=185.208.158.35;r=node612.namehero.net]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [185.208.158.35 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [185.208.158.35 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.208.158.35 listed in sa-accredit.habeas.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=walsh.philip%40natwest.co.uk;ip=185.208.158.35;r=node612.namehero.net]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the message and
                              the domain has a DMARC reject policy
  0.1 KAM_COUK               Scoring .co.uk emails higher due to poor registry security.
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [rafhen860(at)hotmail.com]
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FROM_BANK_NOAUTH       From Bank domain but no SPF or DKIM
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  MY PROPOSAL

Good Day,

How are you doing today? My name is Walsh Philip, I live in the=20
United Kingdom and work with NatWest Bank UK.

I am glad to be connected with you. I have a business proposal I=20
would like to discuss with you in private. It involves a business=20
opportunity that will be of huge financial benefit to both of=20
us.Further details will be shared after I receive your response.

Kindly reply with your full name and your country of=20
Origin/residence.

Yours Truly,

Walsh Philip.
Operational Manager.