{"from":"Walsh Philip ","subject":"MY PROPOSAL","envelope":"{\"to\":[\"info@thriftcart.us\"],\"from\":\"Walsh.philip@walshp.com\"}","text":"Good Day,\r\n\r\nHow are you doing today? My name is Walsh Philip, I live in the\r\nUnited Kingdom and work with NatWest Bank UK.\r\n\r\nI am glad to be connected with you. I have a business proposal I\r\nwould like to discuss with you in private. It involves a business\r\nopportunity that will be of huge financial benefit to both of us.\r\n\r\nFurther details will be shared after I receive your response.\r\n\r\nKindly reply with your full name and your country of\r\nOrigin\/residence.\r\n\r\nYours Truly,\r\n\r\nWalsh Philip.\r\nOperational Manager \r\n","attachments":"0","SPF":"none","spam_report":"Spam detection software, running on the system \"parsley-spamassassin-5df89d97bb-z8xl2\",\nhas identified this incoming email as possible spam. The original\nmessage has been attached to this so you can view it or label\nsimilar future email. If you have any questions, see\nthe administrator of that system for details.\n\nContent preview: Good Day, How are you doing today? My name is Walsh Philip,\n I live in the United Kingdom and work with NatWest Bank UK. I am glad to\n be connected with you. I have a business proposal I would like to discuss\n with you in private. It involves a business opportunity that will be of huge\n financial benefit to both of us. \n\nContent analysis details: (7.6 points, 5.0 required)\n\n pts rule name description\n---- ---------------------- --------------------------------------------------\n 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in\n 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query\n 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in\n 0.5 SUBJ_ALL_CAPS Subject is all capitals\n 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL\n 0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)\n 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted\n 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From\n 0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS\n","headers":"Content-Transfer-Encoding: quoted-printable\nContent-Type: text\/plain; charset=\"utf-8\"\nDate: 19 Sep 2026 06:36:55 -0700\nFrom: Walsh Philip \nMIME-Version: 1.0\nMessage-ID: <20260919063654.E4D8FDC857E03746@walshp.com>\nReceived: from walshp.com (mxd [158.94.209.22]) by mx.sendgrid.net with ESMTP id K9Yi2Y5bT62qOsGGpmwzAw for ; Sat, 19 Sep 2026 13:36:51.248 +0000 (UTC)\nReply-To: taofei6666@hotmail.com\nSubject: MY PROPOSAL\nTo: info@thriftcart.us\n","charsets":"{\"to\":\"UTF-8\",\"from\":\"UTF-8\",\"subject\":\"UTF-8\",\"text\":\"utf-8\"}","dkim":"none","sender_ip":"158.94.209.22","spam_score":"7.6","to":"info@thriftcart.us"}