Return-Path: <oipipe@xlabs.ir>
Delivered-To: commercial+spam@sej-global.com
Received: from ls277.radcom.hosting
	by ls277.radcom.hosting with LMTP
	id qKE6HNAFyGeuDgAAQUtCww
	(envelope-from <oipipe@xlabs.ir>)
	for <commercial+spam@sej-global.com>; Wed, 05 Mar 2025 11:35:36 +0330
Return-path: <oipipe@xlabs.ir>
Envelope-to: commercial@sej-global.com
Delivery-date: Wed, 05 Mar 2025 11:35:36 +0330
Received: from [45.90.73.16] (port=33938 helo=pro.xlabs.ir)
	by ls277.radcom.hosting with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <oipipe@xlabs.ir>)
	id 1tpjkt-000000000xR-2YZz
	for commercial@sej-global.com;
	Wed, 05 Mar 2025 11:35:36 +0330
Received: from DESKTOP-4GS3T62.home (unknown [105.112.221.65])
	by pro.xlabs.ir (Postfix) with ESMTPSA id 705F9BDDDC;
	Mon,  3 Mar 2025 18:03:08 +0330 (+0330)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=xlabs.ir; s=202309;
	t=1741012397; bh=h/SFVxTXhkXvr6clhcxayuzjCYER0DDIc4Glzf1FKew=;
	h=Subject:To:From:Date:Reply-To:From;
	b=moKUz3kdAyv7+tF+q1AWKXEidXcPQMOr4LDnI2veNf0CqHKEpJUzQ5Ifq1j4Phc3D
	 xfZyWICOjzSeIv91bCBWA/El71fcNpG1J54pnZtAG4VgG997Po6iK7OGmHg0F0CoVF
	 IKtc0WJshPvIU3L23Q5hLXAArStEOJFE6ZQvO+xincqHJG0XAd00EACyFnY8DZmew/
	 ZINsX2bTY2F9S2k6i0bv0uOVuljHRV2RjjVd69xqW1Q+uKVFN5TMogVt+7mazNGTa3
	 JFWZE3jSEk83eoF+PcievGNTYzQQK//6otP2safZlUbbqFlMUy7eogsxTwpl13O/Zg
	 A2T8oluaMnfBw==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <oipipe@xlabs.ir>
From: "Mr. X" <oipipe@xlabs.ir>
Date: Mon, 03 Mar 2025 15:33:00 +0100
Reply-To: tomasjessica211@gmail.com
X-Antivirus: Avast (VPS 250303-2, 3/3/2025), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "ls277.radcom.hosting",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Heart greetings, I am Sigrid Rausing, a Swedish investor and
    philanthropist. Your e-mail address was provided by Google Inc. randomly
   selected as an active user on the web. This year, I decided to don [...] 
 Content analysis details:   (11.2 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: xlabs.ir]
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
                             [xlabs.ir TXT:v=spf1 a mx a:xlabs.ir]
                             [ip4:45.90.73.15 ip4:45.90.73.15]
                             [ip6:fd6c:11a0:92cf:0:20c:29ff:fe99:4972]
                             [?all]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?45.90.73.16>]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [45.90.73.16 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [45.90.73.16 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [tomasjessica211[at]gmail.com]
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  1.0 HK_NAME_MR_MRS         No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.1 MONEY_NOHTML           Lots of money in plain text
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
X-Spam-Flag: YES
Subject:  ***SPAM***  Funds Relief
X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

Heart greetings,
I am Sigrid Rausing, a Swedish investor and philanthropist. Your e-mail add=
ress was provided by Google Inc. randomly selected as an active user on the=
 web. This year, I decided to donate 5 percent of my wealth to both chariti=
es and individuals due to the coronavirus pandemic that has paralyzed the w=
hole world.
I am donating to you 1,000,000,00 Euros and I urge you to help someone arou=
nd you with the little you can. 
Contact me on this email address: worlddrey@gmail.com
for more information.

Regards.
S.R

-- 
This email has been checked for viruses by Avast antivirus software.
www.avast.com