Return-Path: <legalizacao@depaulacontadores.com.br>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id wE82KOHOimZ/KCEAvcbEzQ
	(envelope-from <legalizacao@depaulacontadores.com.br>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 07 Jul 2024 19:22:41 +0200
Return-path: <legalizacao@depaulacontadores.com.br>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sun, 07 Jul 2024 19:22:41 +0200
Received: from mx1.depaulacontadores.com.br ([200.250.76.62]:54004)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <legalizacao@depaulacontadores.com.br>)
	id 1sQVax-000000097Fz-3R00
	for cheryl@govan.co.za;
	Sun, 07 Jul 2024 19:22:41 +0200
Received: from User (_gateway [192.168.1.1])
	by mx1.depaulacontadores.com.br (Postfix) with SMTP id D4681311E1B;
	Sun,  7 Jul 2024 08:43:47 -0300 (-03)
Reply-To: <matondipaul@gmail.com>
From: "From. Paul Matondi"<legalizacao@depaulacontadores.com.br>
Date: Sun, 7 Jul 2024 04:44:10 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.8
X-Spam-Score: 248
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  From. Paul Matondi Tel: +27 844283910, Dear Friend 
 Content analysis details:   (24.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [200.250.76.62 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?200.250.76.62>]
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [200.250.76.62 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [200.250.76.62 listed in sa-trusted.bondedsender.org]
  1.2 MISSING_HEADERS        Missing To: header
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.6 DEAR_FRIEND            BODY: Dear Friend? That's not very dear!
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.9 URG_BIZ                Contains urgent matter
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.3 CTE_8BIT_MISMATCH      Header says 7bits but body disagrees
  0.0 T_HK_NAME_FROM         No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.5 MONEY_NOHTML           Lots of money in plain text
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  From. Paul Matondi

From. Paul Matondi

Tel: +27 844283910,

Dear Friend

I hope this message finds you well. We discovered your contact information during our search for a trustworthy foreign partner who can assist us in a critical matter. Please accept our apologies if this email causes any discomfort, as we are reaching out to you without prior acquaintance.

My name is Paul Matondi, and I am reaching out on behalf of my family. Due to the political crisis in Zimbabwe, we are currently refugees in South Africa and urgently need your assistance.

Our father, Sir Clifford Matondi, was a prominent farmer in Zimbabwe who opposed President Robert Mugabe�s land policies. As a result, our farm was destroyed, and our father was severely beaten, leading to his death. Before he passed, he deposited $30 million in a South African financial institution for purchasing farming equipment.

As refugees, we cannot access these funds. We seek your help to transfer the money out of South Africa by standing as our father's beneficiary, facilitated by his financial attorney.

In appreciation, we offer you 35% of the total funds, with 5% allocated for transfer-related expenses. The remaining 60% will help us start a new business in your country with your support.

Please respond if you are willing to assist, and we will provide further details.

Thank you and God bless,

Paul and Sandile Matondi
(On behalf of the Matondi Family)