File: /home/govancoz/mail/.spam/new/1695436398.M426320P3175472.zacp120.ve.host,S=8212,W=8368
Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id wPsmGG5ODmUwdDAAvcbEzQ
(envelope-from <nafco@nafcofuels.com>)
for <govancoz+spam@zacp120.ve.host>; Sat, 23 Sep 2023 04:33:18 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: janine@govan.co.za
Delivery-date: Sat, 23 Sep 2023 04:33:18 +0200
Received: from 5115220.titserver.net ([162.214.154.70]:44150)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qjsRL-00DJaM-0r
for janine@govan.co.za;
Sat, 23 Sep 2023 04:33:18 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=3v91ZI3+qVozVH5iKt/i5EgHc7L9PrvlWO3zW1ipiYA=; b=OU9gVf8EoCwQS2ATrIXW+H1KPC
OK24Ld2JJ8FQITPivXkE2BNfcU6EMLupQHEVf/mjtrOZns0DL4NmQzsxY6nWfz4QqMITOcf1581+E
K0bX5ZknwU+hNYA6Y/BGzV9ZWyWW6uMVBj+Mkz7NLWXmcbMrbR9AKkeOpQcAl9OwBb1FCZWrQSEpZ
Mx9GHnSEmqFo2Oo/FSDBP4sQ/+RzT3FXKDuJQNH7f40J/VmrzzGTG/Wjy0L3okLA2JvdtNKEKAKTU
WPFPF2Mqfm3vuLyoCr8Vk8A3GUV3OcYw7SIGv/Y7Mop6a5u99ljUkAQg9yun0+SOObb7DxIlgIwEg
K1sbL5Qg==;
Received: from [119.73.154.210] (port=56840 helo=User)
by 5115220.titserver.net with esmtpa (Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qjsNm-00033d-06;
Fri, 22 Sep 2023 21:28:46 -0500
Reply-To: <mertinfly3210@gmail.com>
From: "MertinFly"<nafco@nafcofuels.com>
Date: Sat, 23 Sep 2023 02:28:45 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=23.5
X-Spam-Score: 235
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam I hope this finds you well My name Terrence
Cunningham Inheritance Grand.
Content analysis details: (23.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nafcofuels.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mertinfly3210[at]gmail.com]
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[162.214.154.70 listed in psbl.surriel.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.7 HK_SCAM No description available.
0.0 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.3 FROM_MISSPACED From: missing whitespace
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** AVAILIABLE CLAIM FUNDS
Dear Sir/Madam
I hope this finds you well
My name Terrence Cunningham Inheritance Grand.
I am the private banker to the late Mr [Terrence] who passed away on the [17 May 2020] following several years of illness.
I am currently employed at [WYGROUPBANK] here in USA/South Africa where the late Mr [Terrence] owns a personal account which contains approximately $10.9 million at today�s exchange rate.
Due to the fact that Mr Terrence did not have a will and has no next of kin, I am contacting you because you happen to be his namesake (you both have the same names).
In order to have access to these funds, I�d need to legally introduce you as the second signatory on this account. Because I have been a private banker for several years now, I can assure you these funds will eventually be possessed by the bank if we do not go ahead with this.
My supervisors and in-house counsel lawyers are in on this with me.
Such a procedure is standard and straightforward. And with the help of my supervisors, it should be concluded within 7-10 working days.
Should you agree to this, I will need the following documentation emailed to me :
� An official document bearing your full name
� A document bearing your home address (an electricity bill, clothing account bill etc)
� A letter of employment
I will also need that you provide me with the following details:
� Age
� Marital status
� Home telephone number/Cell phone number to ease communication
Upon receipt of the documents and your personal details requested above, our in-house counsel will begin processing the necessary paperwork for the release of the funds.
Sir/Madam, upon conclusion of this transaction, the funds will be paid into a bank account bearing your name only. You are however entitled to 40% of the funds and myself and my colleagues get 60%. Please note that we�re all in this for the financial benefit and we will not appreciate any form of deceitfulness on your part once the funds are paid into your account.
I know you have concerns but again I need to assure you that you won�t be exposed to any type of risks. I�ve been involved in quite a number of similar undertakings and they�ve all been successful.
Looking forward to hearing from you.
Kind regards,
Mertin Fly
Inheritance Grand
Reply-to: mertinfly3210@gmail.com