HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1707080626.M995534P2672668.zacp120.ve.host,S=3377,W=3445
Return-Path: <guest@gwgtelco.com.br>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id oFEKO7L7v2UcyCgAvcbEzQ
	(envelope-from <guest@gwgtelco.com.br>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 04 Feb 2024 23:03:46 +0200
Return-path: <guest@gwgtelco.com.br>
Envelope-to: nilam@govan.co.za
Delivery-date: Sun, 04 Feb 2024 23:03:46 +0200
Received: from [45.81.241.32] (port=60140 helo=tr.webest.com.tr)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <guest@gwgtelco.com.br>)
	id 1rWjeR-00BDKt-0e
	for nilam@govan.co.za;
	Sun, 04 Feb 2024 23:03:46 +0200
Received: from [192.168.0.177] (unknown [197.184.177.216])
	by tr.webest.com.tr (Postfix) with ESMTPSA id 4F3F4416ADCC;
	Sun,  4 Feb 2024 15:51:12 -0500 (EST)
Authentication-Results: tr.webest.com.tr;
        spf=pass (sender IP is 197.184.177.216) smtp.mailfrom=guest@gwgtelco.com.br smtp.helo=[192.168.0.177]
Received-SPF: pass (tr.webest.com.tr: connection is authenticated)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <guest@gwgtelco.com.br>
From: ''Mrs Cristy Davis''<guest@gwgtelco.com.br>
Date: Mon, 05 Feb 2024 04:51:05 +0800
Reply-To: cristydavisfoundation0101@gmail.com
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  $3.5 million have been donated to you by Mrs Cristy Davis
   contact for more information for more information : cristydavisfoundation0101@gmail.com
    
 Content analysis details:   (12.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [cristydavisfoundation0101[at]gmail.com]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [45.81.241.32 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.5 MONEY_NOHTML           Lots of money in plain text
  0.9 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Donation

$3.5 million have been donated to you by Mrs Cristy Davis contact for more =
information for more information : cristydavisfoundation0101@gmail.com