File: /home/tissuegurucom/mail/.spam/new/1759145642.M484434P2106157.server.cny.com.sg,S=6717,W=6847
Return-Path: <account@1stobject.com>
Delivered-To: tissuegurucom+spam@server.cny.com.sg
Received: from server.cny.com.sg
by server.cny.com.sg with LMTP
id +5UwG6pu2mgtIyAA8yC+hg
(envelope-from <account@1stobject.com>)
for <tissuegurucom+spam@server.cny.com.sg>; Mon, 29 Sep 2025 11:34:02 +0000
Return-path: <account@1stobject.com>
Envelope-to: info@tissueguru.com.sg
Delivery-date: Mon, 29 Sep 2025 11:34:02 +0000
Received: from mail.1stobject.com ([140.150.204.223]:64542)
by server.cny.com.sg with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <account@1stobject.com>)
id 1v3C8l-00000008ptN-3scu
for info@tissueguru.com.sg;
Mon, 29 Sep 2025 11:34:02 +0000
X-SmarterMail-Authenticated-As: sales@1stobject.com
DKIM-Signature: v=1; a=rsa-sha256; d=1stobject.com; s=8D8BE77FE7FAA17;
c=relaxed/relaxed; t=1759145616;
h=reply-to:from:to:subject:date:mime-version:x-priority:x-msmail-priority:
x-mailer:x-mimeole:x-declude-sender:x-declude-spoolname:x-declude-refid:
x-declude-note:x-declude-scan:x-declude-tests:x-country-chain:x-declude-code:
x-helo:x-identity;
bh=elHnn+Ugq2mhAHymOKzJZErRcT5WCa6kUgrxr8LII4Y=;
b=jpCataznkD9Wj1D/nyZaMFIZlWFvuZBqT9zoWRPwo2oqw4nt96PPXiawnyQxosaxdHjqZoZ98Bg
WAwGMYmsCpWOtwR75LqyoIkZF+BspaomfKmwrWhpH5rRsiqifcDmD0GsLLS87ezqFFrJAKFJqziPt
KM+PfEyM6SpOuww+nnSr3n6yNPjBbk7owdSqcLcXzVm79zAjssOR+3TrqIj40b/6UXy4i7+upvF6g
5KFhrm88fnHWDWliLGTusLB62cQePnLV5C56203qxwFsGp6tfoCQjifuCuBfKePWu4FAId1I5MOPV
Gg4z+warVi1sKeYLvZVRRuGDouE+UBHRYccw==
Received: from User (UnknownHost [103.237.86.185]) by mail.1stobject.com
with SMTP; Mon, 29 Sep 2025 06:02:45 -0500
Reply-To: thomaskohler0000@gmail.com
From: Thomas Kohler <account@1stobject.com>
To: account@1stobject.com
Date: Mon, 29 Sep 2025 18:02:32 +0700
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Declude-Sender: account@1stobject.com [103.237.86.185]
X-Declude-Spoolname: 65889580.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 06:02:47 on 29 Sep 2025
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: User
X-Identity: 103.237.86.185 | | titantrailers.com.au
Content-Type: text/plain; charset=Windows-1251
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "server.cny.com.sg",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, I have in front of me an abandoned transfer file
containing details to an escrow account set up in your name. The file shows
that you have correctly made an application to have your funds released to
[...]
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[140.150.204.223 listed in zen.spamhaus.org]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: 1stobject.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[140.150.204.223 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[140.150.204.223 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[140.150.204.223 listed in sa-trusted.bondedsender.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[thomaskohler0000(at)gmail.com]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 PCCC_HASHBL_HDR_EMAIL Message contains email address found on PCCC
HashBL (https://raptor.pccc.com/RBL)
[thomaskohler0000[at]gmail.com]
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Directive.2.TRANSFER.
Greetings,
I have in front of me an abandoned transfer file containing details to an e=
scrow account set up in your name. The file shows that you have correctly m=
ade an application to have your funds released to you. It is also clearly n=
oted on the file that the receiver could not handle the financial commitmen=
t required of him.
I have perfected plans to have these funds transferred to you within the ne=
xt 48hrs. Upon your confirmation, I will give you further directives on wha=
t to do and the reason why you haven't received your funds.
Regards,
Dr. Thomas Kohler