File: /home/govancoz/mail/.spam/new/1706786697.M280125P2453290.zacp120.ve.host,S=6067,W=6183
Return-Path: <lucashans1901@gmail.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id IEVdEIl/u2UqbyUAvcbEzQ
(envelope-from <lucashans1901@gmail.com>)
for <govancoz+spam@zacp120.ve.host>; Thu, 01 Feb 2024 13:24:57 +0200
Return-path: <lucashans1901@gmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 01 Feb 2024 13:24:57 +0200
Received: from mail-ua1-f41.google.com ([209.85.222.41]:58835)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <lucashans1901@gmail.com>)
id 1rVVBe-00AKMt-2z
for cheryl@govan.co.za;
Thu, 01 Feb 2024 13:24:57 +0200
Received: by mail-ua1-f41.google.com with SMTP id a1e0cc1a2514c-7ce3c7566e0so389069241.1
for <cheryl@govan.co.za>; Thu, 01 Feb 2024 03:24:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1706786651; x=1707391451; darn=govan.co.za;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=NwXmN7PcS+taT7ccwfJ5cRtWSo3UEkoEKn/DAlO5Um4=;
b=CdJgyLXhUgQ3XefFGeMbkeP+cTdajyNK1fkC+mZDJSzn6xgKxtFUZR2Mz37e7xDbDG
UpSeQlJLBiY7UUBPE+IppwhFKSTp97gRcoQghlOovxCiQTaPHGP+LJfyClKANhMIGHv7
VPDudnQW8N+1IkNww14xzv64Q9oo2VnlvQQdVy2hzhsKtrF2ong72/wRUFrmdz5GtR5v
O3AnIp85Yw3mKxiNw6Mm8bVkdcOmY7K8UH9NNjThkVjIffu2w6Ot/yy/HKsbkhcEvj/y
oVj7BnqOTPGWSNfU5qp9sS4dFn2sHjmjKegMCVABLi/YGYMI4dlRlYGx2B9akWfGpeQ1
eGIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706786651; x=1707391451;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=NwXmN7PcS+taT7ccwfJ5cRtWSo3UEkoEKn/DAlO5Um4=;
b=eIx3O3Ef5ril0IM9oalQhkv9v2f5HRfGLH0WIfV+ntDHsEIz/1I89lt/VTcbPYha6w
UNXl7CP8orsIhSHGYwsB5czR0ikl1MYL12hgtJsgZktYutVI1sRk0wTC40sKhFVKj949
cn9Y0VNR0QQRFjPgXdUINxwRu5ZP+cDktT6rrcdbrsiP4oM+bE1+B7Ia73yIhKGS67rY
X262e9FtxOIun+aG63t9JX82K637+mONZlyB/bcvz0tN0rtj41gDzgpM4U37SnxEvM62
8zoMpKfpBrAFMvt53bfLYplvJUH4vAoSiuM+c6sO0Cqj8XSWE/8Bwvw89O/c8IiRBaNd
rniw==
X-Gm-Message-State: AOJu0YzGHUG82NFG+Ve00poeuWNVBInOJ502Na+tv/D1U6iPfEUeIg2J
5V0xbnl9fO8ZhLs3+BhmXvwlha4d/gSwke491DUhclg5ia+0FpxXj56FioYN5+Vk5reGBiJ+/bt
8A7w2VcCjYlz4wHoZqIs9BHa1kUw=
X-Google-Smtp-Source: AGHT+IEJwlr7xOYXcjrFaBfQNTwHzOeL+/bcKY5eOOaT5PMQu5soeok5NggcoeNfEujNmICEWxHV4uL8LuuUVa+W0SI=
X-Received: by 2002:a67:bd02:0:b0:46b:15c0:5805 with SMTP id
y2-20020a67bd02000000b0046b15c05805mr4166323vsq.13.1706786650657; Thu, 01 Feb
2024 03:24:10 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a59:1256:0:b0:44d:2e4f:32dd with HTTP; Thu, 1 Feb 2024
03:24:10 -0800 (PST)
Reply-To: info.department2020org@aol.com
From: "Attention: Beneficiary." <lucashans1901@gmail.com>
Date: Thu, 1 Feb 2024 13:24:10 +0200
Message-ID: <CAMnUjjT-nhXZHi6F97cFv_gx2_e+ac2JXHfjmMzTpJS3nMYkfw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: cheryl@govan.co.za
X-Spam-Status: Yes, score=8.0
X-Spam-Score: 80
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir /Madam. You requested that we should instead send
you the funds through an ATM CARD the card was sent to you on the 24th December
2023 and the tracking details below indicates that you have received your
ATM [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lucashans1901[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lucashans1901[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: aramex.co.za]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.3 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject: ***SPAM*** RE...
Dear Sir /Madam.
You requested that we should instead send you the funds through an ATM
CARD the card was sent to you on the 24th December 2023 and the
tracking details below indicates that you have received your ATM card
(daily limit of the ATM card will be $1000.00 each day, but you can
increase the limit up to $5000.00) For the ATM Pin Code CONTACT
E_ADDRESS: ( info.department2020org@aol.com )
Please, find the tracking number: DBW47400785154
WWW.ARAMEX.CO.ZA /tracking Nunber:DBW47400785154
THANKS.
FROM DR. BEN WILLIAMS.