HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1695473111.M548913P4039538.zacp120.ve.host,S=7395,W=7560
Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id IG6gHNfdDmVyoz0AvcbEzQ
	(envelope-from <nafco@nafcofuels.com>)
	for <govancoz+spam@zacp120.ve.host>; Sat, 23 Sep 2023 14:45:11 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: candice@govan.co.za
Delivery-date: Sat, 23 Sep 2023 14:45:11 +0200
Received: from 5115220.titserver.net ([162.214.154.70]:48018)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <nafco@nafcofuels.com>)
	id 1qk1zU-00GwKo-10
	for candice@govan.co.za;
	Sat, 23 Sep 2023 14:45:11 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=m1KhlN23JQDbq1gOITV8iVhEy5bT7ft4a7oOkfLpr2Y=; b=CdONAaE87a6z3X0LXwIP0TuKV6
	1QQ/whvr1ay+1EXVpNQBcLOsCQgud/NHO/60YElRcHviFXPiU7mLHitE7+/Wg82XUP4Q5xtRkHjPZ
	9+rPFJhGiFKRztE0zWeglTGkj5C2doVtYo6WmdXWix+lCDRrfN3gXa+uJPepZKM8Vm3oOMZT29XrG
	QJo3nHKwVN2t7T2+nfON0nvdBqOt0NQiP0qQygqinZwppWefKaKrDcnIrjA7gBYS92XsqOkE3oUIG
	0s1l2694xfoYVHXUe8bd0/KpDcdm9EWVmz7Cz75WF2gM4uLtuKiZtw90FOxwdqzJ6oJy9Amg21ENy
	11O47Puw==;
Received: from [119.73.154.210] (port=57428 helo=nafcofuels.com)
	by 5115220.titserver.net with esmtpa (Exim 4.96)
	(envelope-from <nafco@nafcofuels.com>)
	id 1qk1yX-0006um-1l
	for candice@govan.co.za;
	Sat, 23 Sep 2023 07:43:11 -0500
Reply-To: mertinfly@gmail.com
From: MertinFly<nafco@nafcofuels.com>
To: candice@govan.co.za
Date: 23 Sep 2023 12:42:43 +0800
Message-ID: <20230923124241.45B55D9D8D8EC79B@nafcofuels.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Sir/Madam I hope this finds you well My name Terrence
    Cunningham Inheritance Grand. 
 Content analysis details:   (16.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.7 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: nafcofuels.com]
  1.1 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [162.214.154.70 listed in psbl.surriel.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.7 HK_SCAM                No description available.
  0.0 MONEY_NOHTML           Lots of money in plain text
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.4 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Dear Sir/Madam 

Dear Sir/Madam

I hope this finds you well 

My name Terrence Cunningham Inheritance Grand. 

I am the private banker to the late Mr [Terrence] who passed away=20
on the [17 May 2020] following several years of illness. 

I am currently employed at [WYGROUPBANK] here in USA/South Africa=20
where the late Mr [Terrence] owns a personal account which=20
contains approximately $10.9 million at today=E2=80=99s exchange rate.

Due to the fact that Mr Terrence did not have a will and has no=20
next of kin, I am contacting you because you happen to be his=20
namesake (you both have the same names).

In order to have access to these funds, I=E2=80=99d need to legally=20
introduce you as the second signatory on this account. Because I=20
have been a private banker for several years now, I can assure=20
you these funds will eventually be possessed by the bank if we do=20
not go ahead with this.

My supervisors and in-house counsel lawyers are in on this with=20
me.

Such a procedure is standard and straightforward. And with the=20
help of my supervisors, it should be concluded within 7-10=20
working days. 

Should you agree to this, I will need the following documentation=20
emailed to me :

=E2=80=A2 An official document bearing your full name
=E2=80=A2 A document bearing your home address (an electricity bill,=20
clothing account bill etc)
=E2=80=A2 A letter of employment

I will also need that you provide me with the following details:

=E2=80=A2 Age
=E2=80=A2 Marital status
=E2=80=A2 Home telephone number/Cell phone number to ease communication

Upon receipt of the documents and your personal details requested=20
above, our in-house counsel will begin processing the necessary=20
paperwork for the release of the funds.

Sir/Madam, upon conclusion of this transaction, the funds will be=20
paid into a bank account bearing your name only. You are however=20
entitled to 40% of the funds and myself and my colleagues get=20
60%. Please note that we=E2=80=99re all in this for the financial benefit=
=20
and we will not appreciate any form of deceitfulness on your part=20
once the funds are paid into your account. 

I know you have concerns but again I need to assure you that you=20
won=E2=80=99t be exposed to any type of risks. I=E2=80=99ve been involved i=
n=20
quite a number of similar undertakings and they=E2=80=99ve all been=20
successful.

Looking forward to hearing from you.

Kind regards,
MertinFly
Inheritance Grand
eply-to:  mertinfly@gmail.com