| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773464933.M450494P31070.host100322.itwesthosting.com,S=7374,W=7506 |
Return-Path: <stevenwelbourn001@dhstpierrecc.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id MACwGmXttGleeQAAp0YrwQ
(envelope-from <stevenwelbourn001@dhstpierrecc.com>)
for <ithome@host100322.itwesthosting.com>; Sat, 14 Mar 2026 06:08:53 +0100
Return-path: <stevenwelbourn001@dhstpierrecc.com>
Envelope-to: doe.john@h1telekom.hr
Delivery-date: Sat, 14 Mar 2026 06:08:53 +0100
Received: from [163.223.211.19] (port=40213 helo=mail1.dhstpierrecc.com)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <stevenwelbourn001@dhstpierrecc.com>)
id 1w1HF9-00084O-0n
for doe.john@h1telekom.hr;
Sat, 14 Mar 2026 06:08:53 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=dhstpierrecc.com;
h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=stevenwelbourn001@dhstpierrecc.com;
bh=0bRBOHHl9UpP1JoHtVWsW1qGhjpJ/07Fx+HMu3kTCSE=;
b=qYIB/wOMWvcVhKI11337znGmNEkq0v1t2ELuWnKpBwT5XDevGyCgWG+5ERlpfolUz08TSsuPKdyZ
fmPFp7xOINtBE/J1c+EqDvrR/u1KspmSn0zaR6niDF36tVWlNYspnhDUypqtE0PW1YDQ4LFfrA+n
QokQDb0k0hADHe/YpVDQxK1Ul+GsgJiQY7bF0/NVtTtxDbHV+IGASDWMfbtX0j9LgYyLgdUxIpKy
Np0baXmC8c3Er0Ucvu5bNstHcBWObrVzJiP2j9JwCYmnHJ2ROD31wa3fCPFAeOfCZA4AiHimJQ2N
aWWFiQDdf3B1o0YS3XG6kP2HjXsGI2hm3tIqNg==
Reply-To: Mr.Steven Welbourn <stevenwelbourn001@gmail.com>
From: Mr.Steven Welbourn <stevenwelbourn001@dhstpierrecc.com>
To: doe.john@h1telekom.hr
Date: 13 Mar 2026 22:08:47 -0700
Message-ID: <20260313220847.ECA3490F73BFB9BE@dhstpierrecc.com>
MIME-Version: 1.0
Disposition-Notification-To: mkg10102@gmail.com
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=21.2
X-Spam-Score: 212
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir, I would like to extend an opportunity that could
be of interest to you.I have a client with Assets in excess of over US$10Billion.
He is ready to provide funding for the project on loan basi [...]
Content analysis details: (21.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[163.223.211.19 listed in zen.spamhaus.org]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: dhstpierrecc.com]
2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus
DBL blocklist
[URIs: dhstpierrecc.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?163.223.211.19>]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[163.223.211.19 listed in sa-trusted.bondedsender.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[163.223.211.19 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[163.223.211.19 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[stevenwelbourn001[at]gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
0.1 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From
contain different freemails but mailfrom
is not a freemail
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
X-Spam-Flag: YES
Subject: ***SPAM*** Rare Opportunity..
X-From-Rewrite: unmodified, forwarded message
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p>Dear Sir,<br>I would like to extend an opportunity that could be of inte=
rest to you.I have a client with Assets in excess of over US$10Billion.<br>=
He is ready to provide funding for the project on loan basis to any interes=
ted Party whose project must not be sited in prohibited Countries and prohi=
bited businesses.Only willing and able to provide the facility for anyone o=
n a loan basis.<br>Interested parties will be provided with the details upo=
n a favorable response.<br>
Please contact me for further details.<br>N.B. We do not sponsor projects o=
r enter into partnership,we only fund projects solemnly through loan system=
operatives.Therefore contact me if you need a loan from us,we are capable =
of giving you a loan ranging from US$20Million to US$10Billion for your pro=
ject.<br>Thanks for your cooperation,<br>Yours Sincerely,<br>Mr.Steven Welb=
ourn<br>Chief Executive Officer (CEO)<br>Crawford Consulting Inc.</p><p>
<br></p>
</body></html>