File: /home/govancoz/mail/.spam/new/1728620838.M143998P713912.zacp120.ve.host,S=7138,W=7263
Return-Path: <bounces+7311780-c1ea-danielle=govan.co.za@sendgrid.net>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id YKNKByapCGe45AoAvcbEzQ
(envelope-from <bounces+7311780-c1ea-danielle=govan.co.za@sendgrid.net>)
for <govancoz+spam@zacp120.ve.host>; Fri, 11 Oct 2024 06:27:18 +0200
Return-path: <bounces+7311780-c1ea-danielle=govan.co.za@sendgrid.net>
Envelope-to: danielle@govan.co.za
Delivery-date: Fri, 11 Oct 2024 06:27:18 +0200
Received: from o1.ptr5524.kellogggarden.com ([159.183.66.85]:33794)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1)
(envelope-from <bounces+7311780-c1ea-danielle=govan.co.za@sendgrid.net>)
id 1sz7FD-000000030JK-1JaW
for danielle@govan.co.za;
Fri, 11 Oct 2024 06:27:17 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;
h=from:subject:mime-version:content-type:content-transfer-encoding:
reply-to:cc:content-type:from:subject:to;
s=smtpapi; bh=yVW5kAi+3X4M+GTdqy8YsGujQxyckAoMjuR/t/l1wPo=;
b=O4CoMDSf33nvRvEjGQ3xRy8YT/rPUZu35jzViOZTXqkf1Z4iwT3hq8EZRzKavACmuF3s
leX4WXqZxzYA0Cj+1L+YZRB46GcfQc9iaNlA5seE+xk3ogU/mtMJ+jPUan6f7zp9nWvZch
FLtRBxlYn7kk5wLXgTCUkYB0WjGDQ8rm8=
Received: by recvd-5ddd76c7bc-g4j8f with SMTP id recvd-5ddd76c7bc-g4j8f-1-6708A8F7-28
2024-10-11 04:26:31.66949678 +0000 UTC m=+2456950.835441013
Received: from kgweb1.kellogggarden.com (unknown)
by geopod-ismtpd-6 (SG)
with ESMTP id lFR3ZAl-Qei-MIhwbuiErQ
for <danielle@govan.co.za>;
Fri, 11 Oct 2024 04:26:31.606 +0000 (UTC)
Received: from User ([178.215.236.144]) by kgweb1.kellogggarden.com with Microsoft SMTPSVC(10.0.17763.1697);
Thu, 10 Oct 2024 21:26:30 -0700
From: "International Monetary Fund (IMF)" <admin@office.net>
Date: Fri, 11 Oct 2024 04:26:31 +0000 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <KGWEB1dDW6lCPx33E1i000043b4@kgweb1.kellogggarden.com>
X-OriginalArrivalTime: 11 Oct 2024 04:26:31.0221 (UTC) FILETIME=[BF5D6E50:01DB1B95]
Reply-To: josephandersonservice@gmail.com
X-SG-EID:
=?us-ascii?Q?u001=2E3DQCpPzQ7xI1J5aX+HtjcUfDmym0sanUXvm142hvOkfsi9zpEeiL=2FTjc1?=
=?us-ascii?Q?751B=2F8=2F8rk9Gm5wQe7mOXUJqgs4rMHVHGNhhhRs?=
=?us-ascii?Q?TiYrspltVvnFZiLQE4KBNTQXvrXisHDPwbPzf=2Fe?=
=?us-ascii?Q?ZxunNSNKfn2WpgoUHRhrjY8knWwvPls0CBnZycr?=
=?us-ascii?Q?ao9jUOBV5B4DDrazPz02YmDUsIH6kFiiu0Q4Oud?=
=?us-ascii?Q?X=2FtxPeopXpDQnZA5v2HJzawzKPgeY2=2FW2AbbFis?=
=?us-ascii?Q?Z+rpd515=2FzfpPpkpyz2hEjDSHg=3D=3D?=
X-Entity-ID: u001.76A58Sf7D0+iOJ+AFJNQyQ==
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, This is to bring to your notice that
we have recovered your inheritance fund payment of US$10.5 Million United
State Dollars, which have been pending for payment. You are hereby advised
to get in cont [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: sendgrid.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
1.2 MISSING_HEADERS Missing To: header
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[159.183.66.85 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[159.183.66.85 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[159.183.66.85 listed in sa-trusted.bondedsender.org]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 KAM_SENDGRID Sendgrid being exploited by scammers
1.7 MONEY_NOHTML Lots of money in plain text
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your Response Very Important
Attention: Beneficiary,
This is to bring to your notice that we have recovered your inheritance fund payment of US$10.5 Million United State Dollars, which have been pending for payment. You are hereby advised to get in contact with me so as to enable me proceed to the release of your inheritance fund payment. You are advised to send the following information's for the release of your payment.
(1) a scan copy of your international passport or driver’s license for your identification.(2)Your Direct Telephone number.(3)Your Contact Address,this is because we will not want to make payment to an impostor based on identity theft that is going on all over the world. All mails should be directed to josephandersonservice@gmail.com
Yours Sincerely,
Joseph Anderson
Head, Debt Reconciliation dept.
International Monetary Fund (IMF)