HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1715825849.M852282P3685113.zacp120.ve.host,S=5514,W=5623
Return-Path: <amina@danbatnao.cfd>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id sJV2MblsRWb5OjgAvcbEzQ
	(envelope-from <amina@danbatnao.cfd>)
	for <govancoz+spam@zacp120.ve.host>; Thu, 16 May 2024 04:17:29 +0200
Return-path: <amina@danbatnao.cfd>
Envelope-to: candice@govan.co.za
Delivery-date: Thu, 16 May 2024 04:17:29 +0200
Received: from mail.danbatnao.cfd ([143.198.172.220]:57310)
	by zacp120.ve.host with esmtp (Exim 4.97.1)
	(envelope-from <amina@danbatnao.cfd>)
	id 1s7QgU-0000000FSaJ-2OhL
	for candice@govan.co.za;
	Thu, 16 May 2024 04:17:29 +0200
Received: from User (unknown [194.59.31.151])
	by mail.danbatnao.cfd (Postfix) with ESMTPA id DB5148D3E2;
	Wed, 15 May 2024 09:36:00 -0800 (AKDT)
Reply-To: <kristina@soborka.net>
From: "Financial Crimes Enforcement Network"<amina@danbatnao.cfd>
Date: Wed, 15 May 2024 10:36:09 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  FINANCIAL CRIMES ENFORCEMENT NETWORK 2070 Chain Bridge Road,�
    Vienna, VAUnited States of America. RE: ASSISTED REFUND PROGRAMME: This letter
    serves to officially inform you that we have been working towards the eradication
    of scam in the world with the help of African Union (AU), United Nations
   Security Council (UNSC), European [...] 
 Content analysis details:   (14.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.2 MISSING_HEADERS        Missing To: header
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 T_US_DOLLARS_3         BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?194.59.31.151>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [143.198.172.220 listed in psbl.surriel.com]
  0.0 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 CTE_8BIT_MISMATCH      Header says 7bits but body disagrees
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  2.5 MONEY_NOHTML           Lots of money in plain text
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.0 FROM_MISSPACED         From: missing whitespace
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.0 FILL_THIS_FORM         Fill in a form with personal information
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 MONEY_FORM             Lots of money if you fill out a form
  0.2 MONEY_FRAUD_8          Lots of money and very many fraud phrases
  0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
                             money
X-Spam-Flag: YES
Subject:  ***SPAM***  Payment

FINANCIAL CRIMES ENFORCEMENT NETWORK
2070 Chain Bridge Road,�
Vienna, VAUnited States of America.

RE: ASSISTED REFUND PROGRAMME:

This letter serves to officially inform you that we have been working towards the eradication of scam in the world with the help of African Union (AU), United Nations Security Council (UNSC), European Union (EU), the International Monetary Fund (IMF), Financial Intelligence center and FBI. We were able to track down up to 74 scam artists globally from (Canada, USA, Malaysia, Poland, Mauritius, Nigeria and Indonesia) and they are all in government custody facing criminal and fraud charges.

The United Nations board of trustee on humanitarian aids have ordered that part of the money recovered from the scammers should be shared among 27 Lucky people around the world for compensation and you are on the list as your email address was found in one of the scam Artists computer hard-disk hence we are contacting you, maybe you have been scammed or being tried to.

You are advised to contact our representative in South African�(Ms Nomfundo Fundi Tshazibana)on below contact details to direct you immediately for your International Bank transfer of USD$5,000,000.00.

Contact Email: (info@sarbank.org) 

These funds are in an escrow account of a financial crimes enforcement network for security purposes.

Your Contact details:

Name:
Email:
Telephone:
City:
Country:
Occupation:
Age:
Date of Birth:

Yours Faithfully,
Mr Andrea Gacki Director (FINANCIAL CRIMES ENFORCEMENT NETWORK)