File: /home/royaltuning/mail/.spam/new/1773529291.M548029P3672583.server.royaltuning.hu,S=9994,W=10156
Return-Path: <abrahamduncan923@gmail.com>
Delivered-To: royaltuning+spam@server.royaltuning.hu
Received: from server.royaltuning.hu
by server.royaltuning.hu with LMTP
id 7zQ3H8votWkHCjgAs5Hlmw
(envelope-from <abrahamduncan923@gmail.com>)
for <royaltuning+spam@server.royaltuning.hu>; Sun, 15 Mar 2026 00:01:31 +0100
Return-path: <abrahamduncan923@gmail.com>
Envelope-to: info@valtogomb.eu
Delivery-date: Sun, 15 Mar 2026 00:01:31 +0100
Received: from [86.54.42.178] (port=52345 helo=gmail.com)
by server.royaltuning.hu with esmtp (Exim 4.98.1)
(envelope-from <abrahamduncan923@gmail.com>)
id 1w1XzB-0000000FPMz-1bni
for info@valtogomb.eu;
Sun, 15 Mar 2026 00:01:31 +0100
Reply-To: abrahamduncan923@gmail.com
From: ASHRAF GHALY <abrahamduncan923@gmail.com>
To: info@valtogomb.eu
Date: 14 Mar 2026 16:00:48 -0700
Message-ID: <20260314160048.7CB6E7129F8D3F33@gmail.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=29.9
X-Spam-Score: 299
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.royaltuning.hu",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear info, Ashraf Ghaly here, the Head of Financial Accounting,
Qatar Energy.
Content analysis details: (29.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[86.54.42.178 listed in zen.spamhaus.org]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[abrahamduncan923(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[abrahamduncan923(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[abrahamduncan923(at)gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.8 GB_FREEMAIL_NUM Freemail spammy address
2.0 GB_GMAIL_NUM Spam from random Gmail address
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.9 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.178 listed in sa-accredit.habeas.com]
0.8 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.178 listed in bl.score.senderscore.com]
0.4 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.178 listed in sa-trusted.bondedsender.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.178>]
2.0 SPOOFED_FREEMAIL No description available.
6.0 KAM_BENEFICIARYLOW Beneficiary scams (Lower Confidence)
1.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject: ***SPAM*** High-Value Investment Discussion Request
<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"></head>
<body>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">Dear <strong>info,<br></strong><br></p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">Ashraf Ghaly here, the Head of Financial A=
ccounting, Qatar Energy. <br><br></p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">I have some funds duly set aside for inves=
tment in your Country due to the war <br>breakout currently going on in the=
middle east.</p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">The fore-mentioned funds represent an over=
invoice of a contract executed here in <br>Qatar Energy.</p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">Please do well to reach out to me on <a hr=
ef=3D"mailto:abrahamduncan923@gmail.com">abrahamduncan923@gmail.com</a> if =
interested.<br><br><br></p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">Warm regards,</p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;">Ashraf Ghaly<br>Head of Financial Accounti=
ng, Qatar Energy.</p>
<p class=3D"MsoNormal" style=3D"margin: 0px; color: rgb(34, 34, 34); text-t=
ransform: none; text-indent: 0px; letter-spacing: normal; font-family: Aria=
l, Helvetica, sans-serif; font-size: small; font-style: normal; font-weight=
: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; backg=
round-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;=20
text-decoration-color: initial;"><br> </p></body></html>