Gecko [ beacons-mine.com ]

Name	Size	Permission	Date
1762674722.M844125P2271408.cds-alphanode.dnscapweb.net,S=4141,W=4233	4.04 KB	-rw-r-----	2025-11-09 13:22
1763834792.M590601P4030127.cds-alphanode.dnscapweb.net,S=5344,W=5443	5.22 KB	-rw-r-----	2025-11-22 23:36
1765405419.M103820P436727.cds-alphanode.dnscapweb.net,S=27123,W=27574	26.49 KB	-rw-r-----	2025-12-11 03:53
1765418611.M119419P528599.cds-alphanode.dnscapweb.net,S=27258,W=27711	26.62 KB	-rw-r-----	2025-12-11 07:33
1765473956.M443690P921805.cds-alphanode.dnscapweb.net,S=27272,W=27725	26.63 KB	-rw-r-----	2025-12-11 22:55
1765474346.M964046P924510.cds-alphanode.dnscapweb.net,S=27231,W=27684	26.59 KB	-rw-r-----	2025-12-11 23:02
1765906289.M82834P3037493.agni.gfireservers.in,S=24783,W=25198	24.2 KB	-rw-r-----	2025-12-16 23:01
1765906681.M694841P3060294.agni.gfireservers.in,S=24742,W=25157	24.16 KB	-rw-r-----	2025-12-16 23:08
1768992887.M59480P830923.velvet.gennetworks.in,S=5921,W=6060	5.78 KB	-rw-r-----	2026-01-21 16:24
1769161055.M213600P3962049.velvet.gennetworks.in,S=27536,W=27994	26.89 KB	-rw-r-----	2026-01-23 15:07
1769178824.M338277P141312.velvet.gennetworks.in,S=27958,W=28422	27.3 KB	-rw-r-----	2026-01-23 20:03
1769204928.M725470P624937.velvet.gennetworks.in,S=28006,W=28471	27.35 KB	-rw-r-----	2026-01-24 03:18
1769280416.M845532P2221107.velvet.gennetworks.in,S=27693,W=28153	27.04 KB	-rw-r-----	2026-01-25 00:16
1769298119.M84117P2610624.velvet.gennetworks.in,S=28088,W=28554	27.43 KB	-rw-r-----	2026-01-25 05:11
1769362515.M500022P3713236.velvet.gennetworks.in,S=28003,W=28467	27.35 KB	-rw-r-----	2026-01-25 23:05
1769442053.M650502P1041673.velvet.gennetworks.in,S=27962,W=28426	27.31 KB	-rw-r-----	2026-01-26 21:10
1769516632.M16536P2508094.velvet.gennetworks.in,S=28639,W=29113	27.97 KB	-rw-r-----	2026-01-27 17:53
1769609881.M863267P211112.velvet.gennetworks.in,S=27926,W=28390	27.27 KB	-rw-r-----	2026-01-28 19:48

Rename

Envelope-to: info@blockfirstcapital.com
Delivery-date: Sun, 09 Nov 2025 07:52:02 +0000
Reply-To: info@pearlcitadelinvestment.com
From: Pearl Consult <info@atfcan.com>
To: info@blockfirstcapital.com
Date: 9 Nov 2025 08:51:17 +0100
Message-ID: <20251109085117.6231E412FE615667@atfcan.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
    
 Content analysis details:   (12.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [198.23.206.49 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?198.23.206.49>]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [198.23.206.49 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.206.49 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.206.49 listed in sa-accredit.habeas.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the message
                              and the domain has a DMARC quarantine policy
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                             2)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Investment Loan Funding

Hello,

I=E2=80=99m an International Financial & Wealth Management Consultant to=20=

a large Fund Owner/Investor.

We offer corporate loans, investment loans and Personal Loans at=20
a minimal interest rate without undue prerequisite.

If you are interested, do get back to me for more details

Regards

Ali Sheriff
Financial & Wealth Consultant