HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1721790853.M864592P1572241.zacp120.ve.host,S=6151,W=6264
Return-Path: <info@office.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id SEBiM4VxoGaR/RcAvcbEzQ
	(envelope-from <info@office.com>)
	for <govancoz+spam@zacp120.ve.host>; Wed, 24 Jul 2024 05:14:13 +0200
Return-path: <info@office.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Wed, 24 Jul 2024 05:14:13 +0200
Received: from [103.152.79.147] (port=41436 helo=myccba.mahahosting.com)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <info@office.com>)
	id 1sWSSD-00000006az3-2T6f
	for danielle@govan.co.za;
	Wed, 24 Jul 2024 05:14:13 +0200
Received: from User (gateway [10.0.4.113])
	by myccba.mahahosting.com (Postfix) with SMTP id D84C34AAC532;
	Tue, 23 Jul 2024 19:12:13 -0400 (EDT)
Reply-To: <drmackjohn452@gmail.com>
From: "Dr. Mack John"<info@office.com>
Date: Tue, 23 Jul 2024 16:12:19 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.2
X-Spam-Score: 262
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, This mail may come to you as a surprise, but I have
    good news for you. I was contacted by my late client (Mrs. Amelia Kennedy)
    who gave me your email address before her passing. She instructed that a
   donation sum of USD $95 million dollars should be prepared in your name [...]
    
 Content analysis details:   (26.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.5 BILLION_DOLLARS        BODY: Talks about lots of money
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?103.152.79.147>]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  1.2 MISSING_HEADERS        Missing To: header
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [drmackjohn452[at]gmail.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [103.152.79.147 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [103.152.79.147 listed in bl.score.senderscore.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.5 MONEY_NOHTML           Lots of money in plain text
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  0.0 FROM_MISSPACED         From: missing whitespace
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.6 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.2 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  YOUR $95 MILLION DOLLARS FUNDS!!!

Hello,

This mail may come to you as a surprise, but I have good news for you.

I was contacted by my late client (Mrs. Amelia Kennedy) who gave me your email address before her passing. She instructed that a donation sum of USD $95 million dollars should be prepared in your name for the sole aim of setting up a charity organization in your home country, and part of the fund for yourself and family. I am contacting you with trust that this mail will not be exposed to third parties knowing fully well that this is a life-changing opportunity for you and your family.

Kindly get back to me for directives on how to get the fund released to you by the security company where the fund is deposited.

Reply this mail via drmackjohn452@gmail.com and also provide your WhatsApp phone number if you have any for ease of communication.

Thank you.
Dr. Mack John.