File: /home/govancoz/mail/.spam/new/1715088026.M230926P2407777.zacp120.ve.host,S=7299,W=7428
Return-Path: <knbxaclfty@sina.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id CJjQDJoqOmZhvSQAvcbEzQ
(envelope-from <knbxaclfty@sina.com>)
for <govancoz+spam@zacp120.ve.host>; Tue, 07 May 2024 15:20:26 +0200
Return-path: <knbxaclfty@sina.com>
Envelope-to: candice@govan.co.za
Delivery-date: Tue, 07 May 2024 15:20:26 +0200
Received: from [193.31.28.57] (port=40824 helo=sina.com)
by zacp120.ve.host with smtp (Exim 4.97.1)
(envelope-from <knbxaclfty@sina.com>)
id 1s4Kk1-0000000A72y-2K4u
for candice@govan.co.za;
Tue, 07 May 2024 15:20:26 +0200
From: Bill Carson <billcarsonesq@gmail.com>
To: candice <candice@govan.co.za>
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: Bill Carson <billcarsonesq@gmail.com>
mime-version: 1.0
content-type: multipart/mixed;
boundary="qzsoft_directmail_seperator"
X-Spam-Status: Yes, score=26.2
X-Spam-Score: 262
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Beneficiary. We apologize for the delay of your overdue
payment and all the Inconveniences and hiccups that we might have caused
you. However, we were having some minor problems with our payment system,
which is I [...]
Content analysis details: (26.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[193.31.28.57 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?193.31.28.57>]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=sina.com;ip=193.31.28.57;r=zacp120.ve.host]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=knbxaclfty%40sina.com;ip=193.31.28.57;r=zacp120.ve.host]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[knbxaclfty[at]sina.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
1.4 MISSING_DATE Missing Date: header
0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 MSM_PRIO_REPTO MSMail priority header + Reply-to + short subject
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 SPOOFED_FREEMAIL No description available.
0.0 MONEY_FORM Lots of money if you fill out a form
1.5 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** 7/5/2024
--qzsoft_directmail_seperator
Content-Type: text/plain;
charset="DEFAULT"
Content-Transfer-Encoding: base64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--qzsoft_directmail_seperator--