HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: //home/govancoz/mail/new/1738427072.M735117P4153484.zacp120.webway.host,S=5173,W=5273
Return-Path: <support@slowfest.org>
Delivered-To: govancoz@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id cC+2KsBKnmeMYD8A8rC0kQ
	(envelope-from <support@slowfest.org>)
	for <govancoz@zacp120.webway.host>; Sat, 01 Feb 2025 18:24:32 +0200
Return-path: <support@slowfest.org>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sat, 01 Feb 2025 18:24:32 +0200
Received: from alice.octopuce.fr ([91.194.60.6]:51317)
	by zacp120.webway.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <support@slowfest.org>)
	id 1teGIH-0000000HPkk-0Bqf
	for cheryl@govan.co.za;
	Sat, 01 Feb 2025 18:24:32 +0200
Received: by alice.octopuce.fr (Postfix, from userid 4284)
	id 66F5C17BBF2B; Sat,  1 Feb 2025 16:50:04 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=slowfest.org;
	s=alternc; t=1738425096;
	bh=Km1gnxzKfTUYvQhSP8NJkg4YCWWyiLmssKddWFF6kdY=;
	h=To:Subject:Date:From:Reply-To;
	b=nSwtJLu8BGuHKOi04sXXUPkmikgo9My3dWYN/0WskLn9YH7559h+RDXApFlQqip+H
	 j5bScT3E/EtK0ZoUhpRVRg6AaGK0FRSEVxM8QqJ2cop5Xn5zoDfmY9ovENQMvkEjDt
	 LdGk/I8/G7dpq9p5w7YTNNVQkzIqPuUQr+FEky8aHHYEz8VLb1WhVWv856Y3OUwZGN
	 tH56ybFv1E4Kk4VMdr9Bf2+rk+grJybobwI6TqMMcbT4kcQUizI8c6XBM1160hVBnx
	 MDOKFG6jrTOe8ZENogxcoN4m/Px7Bx/BcOnXxj1fw+NMLWk0IDfpiIeoRSnb2jjY9f
	 7Mby9dT5LIIEw==
To: cheryl@govan.co.za
Subject: Based on an unclaimed policy
X-PHP-Originating-Script: 4284:zfcofciwr.php
Date: Sat, 1 Feb 2025 16:50:04 +0100
From: Hebrew Atkinson <support@slowfest.org>
Reply-To: hebrewatkinson98@gmail.com
Message-ID: <164a5c08e50db95f3d818324c59dafa7@slowfest.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: No, score=3.3
X-Spam-Score: 33
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "zacp120.webway.host",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day, I hope this email finds you well. My name is Hebrew
    Atkinson and I am a retired investment adviser, I was contacted by my old
    friend who is also a family Lawyer based in Birmingham UK about an unclaim
    [...] 
 Content analysis details:   (3.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: slowfest.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [91.194.60.6 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [91.194.60.6 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [91.194.60.6 listed in sa-trusted.bondedsender.org]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [hebrewatkinson98(at)gmail.com]
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.5 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: NO

Good day,

I hope this email finds you well.
My name is Hebrew Atkinson and I am a retired investment adviser, I was contacted by my old friend who is also a family Lawyer based in Birmingham UK about an unclaimed permanent life insurance policy held by His deceased client.

He requested I look for someone with the same last name as the deceased and that is why I am contacting you.
Please get back to me so that I can explain everything better and clear to you.

I hope to hear from you soon.

Thanks
Hebrew Atkinson