File: /home/tissuegurucom/mail/.spam/new/1762214824.M789673P651819.server.cny.com.sg,S=6163,W=6275
Return-Path: <info@kolnegar.ir>
Delivered-To: tissuegurucom+spam@server.cny.com.sg
Received: from server.cny.com.sg
by server.cny.com.sg with LMTP
id hfCvLqhDCWkr8gkA8yC+hg
(envelope-from <info@kolnegar.ir>)
for <tissuegurucom+spam@server.cny.com.sg>; Tue, 04 Nov 2025 00:07:04 +0000
Return-path: <info@kolnegar.ir>
Envelope-to: info@tissueguru.com.sg
Delivery-date: Tue, 04 Nov 2025 00:07:04 +0000
Received: from [195.250.31.241] (port=37818 helo=vps.gconp.com)
by server.cny.com.sg with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <info@kolnegar.ir>)
id 1vG4Zk-00000002jYK-3bRg
for info@tissueguru.com.sg;
Tue, 04 Nov 2025 00:07:04 +0000
Received: by vps.gconp.com (Postfix, from userid 1000)
id 0CC0E60CFD93; Tue, 4 Nov 2025 05:35:20 +0530 (IST)
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on vps.gconp.com
X-Spam-Level: ****
Received: from User (unknown [103.237.86.173])
by vps.gconp.com (Postfix) with ESMTPA id 3E7ED619C174;
Tue, 4 Nov 2025 05:35:10 +0530 (IST)
Reply-To: <thomaskohler0000@gmail.com>
From: "Thomas Kohler"<info@kolnegar.ir>
To: lnfo@kolnegar.ir
Date: Tue, 4 Nov 2025 07:05:08 +0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20251104000520.0CC0E60CFD93@vps.gconp.com>
X-Spam-Status: Yes, score=24.2
X-Spam-Score: 242
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.cny.com.sg",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, I have in front of me an abandoned transfer file
containing details to an escrow account set up in your name. The file shows
that you have correctly made an application to have your funds released to
[...]
Content analysis details: (24.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[195.250.31.241 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[195.250.31.241 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[195.250.31.241 listed in sa-trusted.bondedsender.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40kolnegar.ir;ip=195.250.31.241;r=server.cny.com.sg]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[195.250.31.241 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[thomaskohler0000(at)gmail.com]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
3.4 MSOE_MID_WRONG_CASE No description available.
2.2 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_SPF_FAIL No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
0.5 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
3.5 PCCC_HASHBL_HDR_EMAIL Message contains email address found on PCCC
HashBL (https://raptor.pccc.com/RBL)
[thomaskohler0000[at]gmail.com]
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.8 TVD_SUBJ_NUM_OBFU_MINFP No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** Account2PayU.
Greetings,
I have in front of me an abandoned transfer file containing details to an escrow account set up in your name. The file shows that you have correctly made an application to have your funds released to you. It is also clearly noted on the file that the receiver could not handle the financial commitment required of him.
I have perfected plans to have these funds transferred to you within the next 48hrs. Upon your confirmation, I will give you further directives on what to do and the reason why you haven't received your funds.
Regards,
Dr. Thomas Kohler