File: /home/govancoz/mail/.spam/new/1694423772.M732027P1532544.zacp120.ve.host,S=5841,W=5955
Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id sGZzKtza/mSAYhcAvcbEzQ
(envelope-from <nafco@nafcofuels.com>)
for <govancoz+spam@zacp120.ve.host>; Mon, 11 Sep 2023 11:16:12 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: recep@govan.co.za
Delivery-date: Mon, 11 Sep 2023 09:16:12 +0000
Received: from 5115220.titserver.net ([162.214.154.70]:33732)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qfd1d-006S4R-38
for recep@govan.co.za;
Mon, 11 Sep 2023 09:16:12 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=85n35NswlqoZftN0qlcA1vi39nhBveE5aJYtNnoIOnQ=; b=dm/PFcVknTwaGWpHcSK5Eo2bDg
8xUnGN2K91veem67idWxlq8xunzPdCoa9IHi8JdeYyOcjIHtleFgKKCcD/lbP2hj8DQppx3y7tJiM
qZBhSyapjkOy/g56HjgLJ2um3ziJvOe/nrrnQFtPJF/CWk7dAP1JrwLEnQA5Yrpo8R70/hA2fTWf4
yv3RRXa9pt0Vp/HyiK68dal5WV8x4XDMW4Ke856G7Lx2L7tM/rR2UKq74/VzD02+EW6bCG50RpNlj
tqHseSmf7S1zm1XyJLg/vqGzxi9Z5usCGKexu+ZXT9V/BY+FM116iUUHr90lddAMSeA4VmVdXSDZC
9Scd6ZfA==;
Received: from [119.73.154.210] (port=62288 helo=User)
by 5115220.titserver.net with esmtpa (Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qfcyL-0005zf-2P;
Mon, 11 Sep 2023 04:12:55 -0500
Reply-To: <universalparcelservice84@gmail.com>
From: "Joseph Thomas"<nafco@nafcofuels.com>
Date: Mon, 11 Sep 2023 09:12:12 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Owner Of The CASHIER CHEQUE, I have registered Your
CASHIER CHEQUE of $2,950.000 USD with UNIVERSAL PARCEL SERVICES with registration
code of ( Shipment Code HCA 33XCW). please Contact with your delivery information
such as, Your [...]
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[universalparcelservice84[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 MISSING_HEADERS Missing To: header
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 MONEY_NOHTML Lots of money in plain text
0.3 FROM_MISSPACED From: missing whitespace
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Owner Of The CASHIER CHEQUE,
Attention Owner Of The CASHIER CHEQUE,
I have registered Your CASHIER CHEQUE of $2,950.000 USD with UNIVERSAL PARCEL SERVICES with registration code of ( Shipment Code HCA 33XCW). please Contact with your delivery information such as, Your Name, Your Address and Your Telephone Number:
Note: Cheque will be converted to funds and our Diplomatic Courier Service will make secure delivery
Contact Name: DR YAYA
Office: E-mail: universalparcelservice84@gmail.com
Best Regards,
Joseph Thomas