Return-Path: Delivered-To: operation+spam@sej-global.com Received: from ls277.radcom.hosting by ls277.radcom.hosting with LMTP id hHu2JBaG42eODAAAQUtCww (envelope-from ) for ; Wed, 26 Mar 2025 08:14:06 +0330 Return-path: Envelope-to: operation@sej-global.com Delivery-date: Wed, 26 Mar 2025 08:14:06 +0330 Received: from [85.158.110.94] (port=35785 helo=ansschope.xyz) by ls277.radcom.hosting with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.1) (envelope-from ) id 1txIcP-000000000mj-3Jda for operation@sej-global.com; Wed, 26 Mar 2025 08:14:06 +0330 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ansschope.xyz; s=dkim; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=y1WLx8npSqmcRsm+q8+gCnZoITOM8DwAqo6Yc+VciZM=; b=Fu++Q/x0I2xeHHgfHLR0Jc6oJ7 jTN2wVeprUdU3fOE0g1MEc9i5Km7bbMfQddTwhPUuJ0AdSiAzDO2jEv6B6LYQxbTXcYOCbsWKOjzK wfT1YVq15Vay5WGNWMhezrfcgrrGt09Nic9ps+s74ZVppyZzb9/+JxIRWTz0IPB9BLNk=; Received: from [5.252.153.0] (helo=hosted-by.csrdp.host) by ansschope.xyz with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1txIcP-009vG1-Cj for operation@sej-global.com; Wed, 26 Mar 2025 04:43:57 +0000 Reply-To: DennisNovak00@outlook.com From: Dennis Novak To: operation@sej-global.com Date: 25 Mar 2025 21:43:57 -0700 Message-ID: <20250325214357.A1F7CF0DD6E4B217@ansschope.xyz> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-SPF-Fail: YES X-Spam-Status: Yes, score=13.9 X-Spam-Score: 139 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "ls277.radcom.hosting", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hallo, Wir/unsere Mandant stellen Finanzmittel für Projekte zur Verfügung, sowie Firmen- und Privatkreditfinanzierungen zu einem Zinssatz von 1.5% - 3% für eine Dauer von 2 bis 35 Jahren. Unsere Kunden sind bereit Fremdfinanzierungen, Darlehen und Joint Venture (J.V.) Projekte zu finanzieren. Darüber hinaus sind unsere Institute, Finanzunternehmen und Banken bereit kurzfristige sowie [...] Content analysis details: (13.9 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ansschope.xyz] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: ansschope.xyz] 2.1 CPANEL_XYZ .XYZ domain mostly used by spammers 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: ansschope.xyz (xyz)] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [dennisnovak00[at]outlook.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [85.158.110.94 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [85.158.110.94 listed in bl.score.senderscore.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.8 KAM_INFOUSMEBIZ Prevalent use of .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life domains in spam/malware 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.8 FROM_NTLD_REPLY_FREEMAIL From abused NTLD and Reply-To is FREEMAIL X-Spam-Flag: YES Subject: ***SPAM*** =?UTF-8?B?QWFuYmllZGluZyBmaW5hbmNpw6tsZSBsZW5pbmc=?= X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

Hallo,

Wir/unsere Mandant stellen Finanzmittel für Proj= ekte zur Verfügung, sowie
Firmen- und Privatkreditfinanzierungen zu= einem Zinssatz von 1.5% - 3% für
eine Dauer von 2 bis 35 Jahren.

Unsere Kunden sind bereit Fremdfinanzierungen, Darlehen und Joint Vent= ure
(J.V.) Projekte zu finanzieren. Darüber hinaus sind unsere Inst= itute,
Finanzunternehmen und Banken bereit kurzfristige sowie langfristi= ge
Projekte zu finanzieren.

Bitte kontaktieren Sie uns für weitere Informationen. Gerne beraten wi= r Sie
und gehen auf Ihre eigenen Bedürfnisse ein.

Gerne bespr= echen wir auch weitere Geschäftsmöglichkeiten mit Ihnen.
Wir z= ahlen auch 1% Provision an Makler, die uns Projekteigentümer
vorste= llen die auf der Suche nach Finanzierungen sind.

Kontaktieren Sie uns= unter, DennisNovak00@outlook.= com

Mit Vielen Grüßen,
Dennis Novak