File: /home/govancoz/mail/.spam/new/1696088461.M652054P2849477.zacp120.ve.host,S=7132,W=7272
Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id uCkXJY1BGGXFeisAvcbEzQ
(envelope-from <nafco@nafcofuels.com>)
for <govancoz+spam@zacp120.ve.host>; Sat, 30 Sep 2023 17:41:01 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: candice@govan.co.za
Delivery-date: Sat, 30 Sep 2023 17:41:01 +0200
Received: from 5115220.titserver.net ([162.214.154.70]:34766)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qmc5S-00Bydj-2l
for candice@govan.co.za;
Sat, 30 Sep 2023 17:41:01 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=qt8FA+j81jAF45wVbQ8BBEgy6DkNWQKPuoBBsKNf/JY=; b=IH+f686sokXs3IDC2U3u23qnr9
6Z8R+woFsEC7OBGDkCH08lXaJUwWeu2F2yw0JFAO916R8e9zZiXsImJQ/UeKw7+ZAj0qHHHShyagZ
jshZqQdlwrLS4zl4fpz7UHXDaKKz+f4r50yd52WHi44YmhHzgGM4dVP0k1p0kZbkPVIcxh6ULxM41
iVmXkHb/xMFQ9EZJF2mvPDZZ5nI9RQF+pXRUW8vZ0ywWZTlJ8dGUCcMjIUF+PtS9qATK8GVYI3vEg
zleDr89qek24tnhVBuuKCXiUephkyDYbqhLETsb2mXZffFLd3eH217dHoLuZW4SBIEbRn8Ap4vkdz
2vo4zZ4Q==;
Received: from [119.73.154.210] (port=53606 helo=User)
by 5115220.titserver.net with esmtpa (Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qmc2K-0003Ty-0c;
Sat, 30 Sep 2023 10:37:44 -0500
Reply-To: <jasonraymondboa.com@gmail.com>
From: "Mr. Jason Raymond"<nafco@nafcofuels.com>
Date: Sat, 30 Sep 2023 15:37:00 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=34.4
X-Spam-Score: 344
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day, How are you doing today? I hope this email finds
you well, I have a money claim proposal from my bank in United state on behalf
of a Dormant money in one of our late departed clients account that have
[...]
Content analysis details: (34.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 MILLION_USD BODY: Talks about millions of dollars
2.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 MISSING_HEADERS Missing To: header
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[162.214.154.70 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[162.214.154.70 listed in psbl.surriel.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nafcofuels.com]
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
2.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.3 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.3 MONEY_FROM_MISSP Lots of money and misspaced From
2.0 FROM_MISSPACED From: missing whitespace
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** I hope this email finds you well
Good Day,
How are you doing today? I hope this email finds you well, I have
a money claim proposal from my bank in United state on behalf of
a Dormant money in one of our late departed clients account that
have been due to use due to the departed client has no family or
friends added to his profile, but mentioned to give it out the
whole money after few years of his departure and we want to give
the share of 40% of the whole amount of ($75,000,000) SEVENTY FIVE MILLION USD ONLY,If you can be able to claim for this funds,kindly get back to me Mr. Jason Raymond assistant CEO WYGROUPBANK branch (not disclosed to public for security reasons) I will help you to go about the withdrawal process and
key-in your name into the system to represent and claim for the
above mentioned fund, to access your details in our system as to
ensure a reliable claim for your perusal.
Will need the following details
FULL NAME
SCAN ID/PASSPORT
ADDRESS
TELEPHONE/WHATSAPP NUMBER
I await your response immediately to begin with your process and
our prefered person for this claim must be debt free,account
owner and able to finance the process with me and my bank
management team.
Thanks with Regards,
Mr. Jason Raymond
Contact Email: jasonraymondboa.com@gmail.com