| Dir : /home/caa20236/mail/.spam/new/ |
| Server: Linux int2.cpanelhost.cl 3.10.0-962.3.2.lve1.5.88.el7.x86_64 #1 SMP Fri Sep 26 14:06:42 UTC 2025 x86_64 IP: 138.117.148.152 |
| Dir : //home/caa20236/mail/.spam/new/1752103371.M379133P1981797.int2.cpanelhost.cl,S=6581,W=6731 |
Return-Path: <info@investmentbank.com>
Delivered-To: caa20236+spam@int2.cpanelhost.cl
Received: from int2.cpanelhost.cl
by int2.cpanelhost.cl with LMTP
id kItGFsv5bmhlPR4AfWsSrQ
(envelope-from <info@investmentbank.com>)
for <caa20236+spam@int2.cpanelhost.cl>; Wed, 09 Jul 2025 19:22:51 -0400
Return-path: <info@investmentbank.com>
Envelope-to: info@aan.cl
Delivery-date: Wed, 09 Jul 2025 19:22:51 -0400
Received: from [212.11.64.238] (port=62829 helo=investmentbank.com)
by int2.cpanelhost.cl with esmtp (Exim 4.96.2)
(envelope-from <info@investmentbank.com>)
id 1uZe7h-008Meb-0g
for info@aan.cl;
Wed, 09 Jul 2025 19:22:51 -0400
Reply-To: bernsteinleonard950@gmail.com
From: Leonard Bernstein <info@investmentbank.com>
To: info@aan.cl
Date: 09 Jul 2025 16:22:03 -0700
Message-ID: <20250709162202.63A9D5A39B84CA27@investmentbank.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=24.6
X-Spam-Score: 246
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "int2.cpanelhost.cl",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 1 Attn: Sir/Madam, I am contacting you with a keen
interest to consider a possible collaboration through investments in viable
projects in your country. By way of introduction, I'm a financial consultant
based in the Un [...]
Content analysis details: (24.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[bernsteinleonard950[at]gmail.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?212.11.64.238>]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[212.11.64.238 listed in zen.spamhaus.org]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=investmentbank.com;ip=212.11.64.238;r=int2.cpanelhost.cl]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40investmentbank.com;ip=212.11.64.238;r=int2.cpanelhost.cl]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[212.11.64.238 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
2.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN / INVESTMENT OFFER ( from US$ 10 Million to US$ 10 Billion for your project)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
252">
<title>New Page 1</title>
</head>
<body>
<p>Attn: Sir/Madam,<br>
<br>
I am contacting you with a keen interest to consider a possible collaborati=
on=20
through investments in viable projects in your country. By way of introduct=
ion,=20
I'm a financial consultant based in the United States.<br>
<br>
I am solely responsible for investing a client's funds through a diversifie=
d=20
investment strategy, targeting positive capital returns through a global=20=
expansive portfolio.<br>
<br>
Although, my client's initial interest was to invest in the United Arab Emi=
rates=20
and Qatar economy, as he is originally from that region, specifically from =
the=20
Saudi Arabia, but because of his embattled political background in his home=
=20
country of Saudi Arabia, he decided to export his investment outside The Gu=
lf=20
Cooperation Council (GCC) region, hence his interest to seek possible=20
collaboration with a capable private individual or firm globally.<br>
<br>
His plan is to focus more on U.S. and Canadian markets as well as emerging=
=20
markets in Europe, Brazil, Mexico, China, Japan, Bahamas, and Indonesia (et=
c).<br>
<br>
He intends to invest in areas of agriculture, mining, manufacturing,=20
construction, Real estates, trading etc. He is ready to invest in project=
=20
developments and business ventures that can generate at least 3% Annual Ret=
urn=20
on Investment (ROI).<br>
<br>
He will be willing to go on an Investment/Loan Funding Program with you in =
any=20
viable project initiative within your scope of funding. If interested pleas=
e=20
write to me directly for possible business collaboration and further detail=
s.<br>
<br>
I am looking forward to hearing from you <br>
<br>
Yours Sincerely,<br>
Mr. Leonard Bernstein</p>
</body>
</html>