MOON
Server: Apache
System: Linux server.cny.com.sg 4.18.0-477.21.1.el8_8.x86_64 #1 SMP Thu Aug 10 13:51:50 EDT 2023 x86_64
User: tissuegurucom (1020)
PHP: 8.1.29
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/tissuegurucom/mail/.spam/new/1758737775.M387201P1390794.server.cny.com.sg,S=5388,W=5487
Return-Path: <account@comschool.in>
Delivered-To: tissuegurucom+spam@server.cny.com.sg
Received: from server.cny.com.sg
	by server.cny.com.sg with LMTP
	id mPiAFm811GjKOBUA8yC+hg
	(envelope-from <account@comschool.in>)
	for <tissuegurucom+spam@server.cny.com.sg>; Wed, 24 Sep 2025 18:16:15 +0000
Return-path: <account@comschool.in>
Envelope-to: info@tissueguru.com.sg
Delivery-date: Wed, 24 Sep 2025 18:16:15 +0000
Received: from ns1.comschool.in ([103.150.186.253]:43148 helo=server1.sagar.kuber)
	by server.cny.com.sg with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <account@comschool.in>)
	id 1v1U2K-00000005pn4-0UEb
	for info@tissueguru.com.sg;
	Wed, 24 Sep 2025 18:16:15 +0000
Received: from User (unknown [103.237.86.185])
	by server1.sagar.kuber (Postfix) with ESMTPA id 3FEC441A8115;
	Wed, 24 Sep 2025 23:34:39 +0530 (IST)
Reply-To: <thomaskohler0000@gmail.com>
From: "Thomas Kohler"<account@comschool.in>
To: account@comschool.in
Date: Thu, 25 Sep 2025 01:04:44 +0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "server.cny.com.sg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings, I have in front of me an abandoned transfer file
    containing details to an escrow account set up in your name. The file shows
    that you have correctly made an application to have your funds released to
    [...] 
 Content analysis details:   (8.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [103.150.186.253 listed in zen.spamhaus.org]
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
                             [comschool.in TXT:v=spf1 a mx a:comschool.in]
                             [ip4:103.150.186.253 ip4:103.150.186.253]
                             [ip6:fe80::83d4:4e61:fef6:2b6c ?all]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [103.150.186.253 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [103.150.186.253 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [103.150.186.253 listed in sa-accredit.habeas.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [thomaskohler0000(at)gmail.com]
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  3.5 PCCC_HASHBL_HDR_EMAIL  Message contains email address found on PCCC
                             HashBL (https://raptor.pccc.com/RBL)
                             [thomaskohler0000[at]gmail.com]
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  Directive.2.TRANSFER.


Greetings,

I have in front of me an abandoned transfer file containing details to an escrow account set up in your name. The file shows that you have correctly made an application to have your funds released to you. It is also clearly noted on the file that the receiver could not handle the financial commitment required of him.

I have perfected plans to have these funds transferred to you within the next 48hrs. Upon your confirmation, I will give you further directives on what to do and the reason why you haven't received your funds.

Regards,
Dr. Thomas Kohler