File: /home/govancoz/mail/.spam/new/1700040291.M172418P1454768.zacp120.ve.host,S=6602,W=6717
Return-Path: <shaeran@hotmail.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id OAuWCGOOVGWwMhYAvcbEzQ
(envelope-from <shaeran@hotmail.com>)
for <govancoz+spam@zacp120.ve.host>; Wed, 15 Nov 2023 11:24:51 +0200
Return-path: <shaeran@hotmail.com>
Envelope-to: mike@govan.co.za
Delivery-date: Wed, 15 Nov 2023 11:24:51 +0200
Received: from [72.252.201.215] (port=51129 helo=hotmail.com)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <shaeran@hotmail.com>)
id 1r3C8f-0067mL-36
for mike@govan.co.za;
Wed, 15 Nov 2023 11:24:51 +0200
Reply-To: billiondollarman8888@hotmail.com
From: "*ROMAN ABRAMOVICH HERE*" <shaeran@hotmail.com>
To: mike@govan.co.za
Date: 15 Nov 2023 04:26:31 -0400
Message-ID: <20231115042630.9E391D0E59B0B0F0@hotmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=38.0
X-Spam-Score: 380
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Reply-To-Email: billiondollarman8888@hotmail.com Dearest Friend,
My name is Roman Abramovich and I was the former owner of Chelsea Football
Club which has been sold out and all funds have been given to charity since
I seriously condemed the Russian invasion in Ukra [...]
Content analysis details: (38.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
1.3 FSL_HELO_FAKE No description available.
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=shaeran%40hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[billiondollarman8888[at]hotmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[shaeran[at]hotmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[72.252.201.215 listed in zen.spamhaus.org]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[72.252.201.215 listed in psbl.surriel.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[72.252.201.215 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.9 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.9 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
0.8 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: LUCKY YOU..CONTACT ME IMMEDIATELY!
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.9600.19431">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><p>Reply-To-Email: <a href=3D"mailto:billiondollarman8888@hotmail.com=
">billiondollarman8888@hotmail.com</a><br><br>Dearest Friend,</p><p>
My name is Roman Abramovich and I was the former owner of Chelsea Football =
Club which has been sold out and all funds have been given to charity since=
I seriously condemed the Russian invasion in Ukraine which i am against th=
e president's decision Mr. Vladmir Putin as we have since both parted ways =
for good.. I found your email address and profile on Google search an=
d saw a distinguished person about you.. In this regard i am offering that =
you contact my account officer which i will send=20
to you his contact email address and that would be after I have receiv=
ed your personal details in your next reply to me. He will help you secure =
the the sum amount of $100,000,000 (ONE HUNDRED MILLION US DOLLARS ONLY). A=
fter receiving this funds i want you to donate 60% of the funds to any good=
Charity Organization and Motherless Babies Homes of your choice and you ca=
n thereafter have the rest for yourself. You will co-operate with the accou=
nt officer to secure the funds. Please take note=20
that=20
during the course of this transaction there will be no phone call or commun=
ication, this is for security reasons.</p><p>You should send the following =
information back to me so i can forward it to my account officer as i have =
briefed him already about this matter.</p><p>1. Full Name:<br>2. Nationalit=
y/Country of Origin:<br>3. Country Currently Staying:<br>4. Age:<br>5. Male=
/Female:</p><p>I expect to hear from you immediately.</p><p>Best Regards,</=
p><p>Roman Abramovich<br>
Former Owner; Chelsea FC<br>E-mail: <a href=3D"mailto:billiondollarman8888@=
hotmail.com">billiondollarman8888@hotmail.com</a></p></body></html>