HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1718499119.M203799P3158865.zacp120.ve.host,S=5477,W=5589
Return-Path: <dgould38@btinternet.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id sV5mCy83bmZRMzAAvcbEzQ
	(envelope-from <dgould38@btinternet.com>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 16 Jun 2024 02:51:59 +0200
Return-path: <dgould38@btinternet.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Sun, 16 Jun 2024 02:51:59 +0200
Received: from avansum.su ([194.158.193.237]:53800)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <dgould38@btinternet.com>)
	id 1sIe7g-0000000DFhv-2Equ
	for danielle@govan.co.za;
	Sun, 16 Jun 2024 02:51:59 +0200
Received: from User (unknown [192.168.1.1])
	by avansum.su (Postfix) with SMTP id C1ACE2E9957;
	Sun, 16 Jun 2024 02:51:22 +0300 (+03)
Reply-To: <portoproves@firemail.eu>
From: "PORTO ED"<dgould38@btinternet.com>
Date: Sat, 15 Jun 2024 16:52:19 -0700
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.4
X-Spam-Score: 194
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Sir I am Dr. Edgar Porto, a finance/wealth management
    executive. Kindly accept my goodwill approach to invest with you/your country
    with a good sum of money within my possession. My business/investment ap
   [...] 
 Content analysis details:   (19.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.7 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [194.158.193.237 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [194.158.193.237 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [194.158.193.237 listed in psbl.surriel.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.2 MISSING_HEADERS        Missing To: header
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.0 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.1 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.3 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.0 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject:  ***SPAM***  PROGDMXD: 194.158.215.88MMM

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Dear Sir</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
I am Dr. Edgar Porto, a finance/wealth management executive. Kindly accept my goodwill approach to invest with you/your country with a good sum of money within my possession. My business/investment approach to you will be based on your experience in your area of expertise that will yield good return on investments. Kindly get back to me for my details.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
With Regards</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Dr. Edgar Porto</DIV>
</FONT>
</BODY></HTML>