HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1732007920.M609562P1958269.zacp120.ve.host,S=5887,W=6007
Return-Path: <9395@trad.ocn.ne.jp>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id 2E4VI/BXPGd94R0AvcbEzQ
	(envelope-from <9395@trad.ocn.ne.jp>)
	for <govancoz+spam@zacp120.ve.host>; Tue, 19 Nov 2024 11:18:40 +0200
Return-path: <9395@trad.ocn.ne.jp>
Envelope-to: danielle@govan.co.za
Delivery-date: Tue, 19 Nov 2024 11:18:40 +0200
Received: from [177.44.191.54] (port=59522 helo=zimbra.vitoria.com.br)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <9395@trad.ocn.ne.jp>)
	id 1tDKNX-00000008Euq-3xIO
	for danielle@govan.co.za;
	Tue, 19 Nov 2024 11:18:39 +0200
Received: from localhost (localhost [127.0.0.1])
	by zimbra.vitoria.com.br (Postfix) with ESMTP id 89C5A2733092;
	Tue, 19 Nov 2024 05:45:08 -0300 (-03)
Received: from zimbra.vitoria.com.br ([127.0.0.1])
	by localhost (zimbra.vitoria.com.br [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id rbw95P87D4oP; Tue, 19 Nov 2024 05:45:08 -0300 (-03)
Received: from localhost (localhost [127.0.0.1])
	by zimbra.vitoria.com.br (Postfix) with ESMTP id 5882E2733E58;
	Tue, 19 Nov 2024 05:45:08 -0300 (-03)
X-Virus-Scanned: amavisd-new at zimbra.vitoria.com.br
Received: from zimbra.vitoria.com.br ([127.0.0.1])
	by localhost (zimbra.vitoria.com.br [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id aLZfBtZQGmay; Tue, 19 Nov 2024 05:45:08 -0300 (-03)
Received: from [94.156.177.64] (unknown [172.17.10.67])
	by zimbra.vitoria.com.br (Postfix) with ESMTP id C1F912733092;
	Tue, 19 Nov 2024 05:45:01 -0300 (-03)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <9395@trad.ocn.ne.jp>
From: "Mr. Kelvin" <9395@trad.ocn.ne.jp>
Date: Tue, 19 Nov 2024 00:44:33 -0800
Reply-To: krowland413@gmail.com
Message-Id: <20241119084501.C1F912733092@zimbra.vitoria.com.br>
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn: Beneficiary We have finally concluded and agreed to
   effect your fund worth of (US$5.5m) via ATM Card or via bank wire transfer/
    online to your bank account. as the best and easier way to receive your funds
    in any [...] 
 Content analysis details:   (16.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [177.44.191.54 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [177.44.191.54 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [177.44.191.54 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [177.44.191.54 listed in sa-accredit.habeas.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.2 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [krowland413(at)gmail.com]
  0.0 HK_NAME_MR_MRS         No description available.
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FILL_THIS_FORM         Fill in a form with personal information
  1.2 MONEY_NOHTML           Lots of money in plain text
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 MONEY_ATM_CARD         Lots of money on an ATM card
  1.0 XFER_LOTSA_MONEY       Transfer a lot of money
  0.0 MONEY_FORM             Lots of money if you fill out a form
  1.3 MONEY_FRAUD_3          Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  Hello      

Attn: Beneficiary

We have finally concluded and agreed to effect your fund worth of (US$5.5m)=
 via ATM Card or via bank wire transfer/ online to your bank account. as th=
e best and easier way to receive your funds in any nearest ATM machine in y=
our city, based on agreement with ATM department director, you will receive=
 your via the above mentiond options. However, the below information is nee=
ded as to enable the profiling of the release of your fund to you:

Full name:
Age:
Occupation:
Home address:
Country/city:
Direct phone number:

Once we receive this information, we will proceed without delay.

Thank you.
Kelvin Rowland.



201-89