HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1737058033.M130832P3693488.zacp120.ve.host,S=8670,W=8842
Return-Path: <test@tradingenterprises.online>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id +DrVBvFmiWewWzgAvcbEzQ
	(envelope-from <test@tradingenterprises.online>)
	for <govancoz+spam@zacp120.ve.host>; Thu, 16 Jan 2025 22:07:13 +0200
Return-path: <test@tradingenterprises.online>
Envelope-to: candice@govan.co.za
Delivery-date: Thu, 16 Jan 2025 22:07:13 +0200
Received: from vps-c46648a0.vps.ovh.net ([51.75.160.99]:46968 helo=server-51-75-160-99.da.direct)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <test@tradingenterprises.online>)
	id 1tYW90-0000000FU6e-0DzU
	for candice@govan.co.za;
	Thu, 16 Jan 2025 22:07:12 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=tradingenterprises.online; s=x; h=Message-ID:Content-Transfer-Encoding:
	Content-Type:MIME-Version:Date:Subject:From:Reply-To:Sender:To:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=Pr3TucTpF8zXJkfaDQ5ob1LZ9B0R6vkYgXe4CycQpig=; b=oO3q/+wSf0BzZmAnE9uKOsZVup
	amgAGXy4yqEJnZN+artWIux/jcbHrZWtIRyUkYo7oQN16svj2ABVgJc+DV5hwJufmA7Uxwjqf76HE
	MuMoLB+kqsz3sJ51yj5PerWQvaiZ7WBvqvXmlculGgByxWI/ixIrmv60hJuwB9ke3TLlZs1ykACqQ
	pkC6BRGebZpLYs4Kvh2fHqjo6ntI4Rlccz3V7MolD+WlN+jlqY1ITWtnn5tu8jZjNEl8aB5D4H/od
	1j1sH4LSuMeykd7hTAusaAff+cJipHw158ewHkXNVCRRLFp73xKPzD9db7SVV137aTBU4Puh2PAXH
	JRoTi1lg==;
Received: from server-51-75-160-99.da.direct ([51.75.160.99] helo=User)
	by server-51-75-160-99.da.direct with esmtpa (Exim 4.98)
	(envelope-from <test@tradingenterprises.online>)
	id 1tYW7I-000000031qe-1Y3I;
	Thu, 16 Jan 2025 20:05:24 +0000
Reply-To: <sarb_drrashad@safrica.com>
From: "Mr. Collins Murray"<test@tradingenterprises.online>
Date: Thu, 16 Jan 2025 14:05:24 -0600
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <GENERATED-WASMISSING-1tYW7I-000000031qe-1Y3I@server-51-75-160-99.da.direct>
X-ACL-Warn: Adding Message-ID header because it is missing!
X-Authenticated-Id: test@tradingenterprises.online
X-Spam-Status: Yes, score=17.3
X-Spam-Score: 173
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  FROM MR. COLLINS MURRAY. DIRECTOR, WORLD DEBT REMITTANCE
   COMMITTEE, UK. 
 Content analysis details:   (17.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: tradingenterprises.online]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: tradingenterprises.online]
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
                             [tradingenterprises.online TXT:v=spf1 a mx ptr]
                             [a:tradingenterprises.online ip4:51.195.137.0/24]
                             [?all]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [51.75.160.99 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [51.75.160.99 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [51.75.160.99 listed in sa-trusted.bondedsender.org]
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_HELO_USER     Received from HELO User
  1.2 MISSING_HEADERS        Missing To: header
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: tradingenterprises.online]
                             [(online)]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.6 HK_NAME_MR_MRS         No description available.
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.0 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  0.0 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.7 FROM_NTLD_REPLY_FREEMAIL From abused NTLD and Reply-To is FREEMAIL
X-Spam-Flag: YES
Subject:  ***SPAM***  URGENT INFORMATION FROM SOUTH AFRICAN RESERVE BANK.

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
FROM MR. COLLINS MURRAY.</DIV>
<DIV>
DIRECTOR, WORLD DEBT REMITTANCE COMMITTEE, UK.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Attention:</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: CONTACT SOUTH AFRICAN RESERVE BANK IMMEDIATELY.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Owing to numerous complaints from many beneficiaries across the globe due to the failure of concerned financial committees/institutions set up in the past by IMF and&nbsp; WORLD BANK to effect the payment of their outstanding funds such as Contract Payment, Inheritance and Lottery Winning Prize Awards among others, WORLD BANK AND INTERNATIONAL MONETARY FUND have set up this team, WORLD DEBT REMITTANCE COMMITTEE to ensure that beneficiaries receive their funds without hitches.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
In view of the above, your fund with reference number: WDRC/L-F/UK/0407/19 has been approved for payment and moved to the Reserve bank of your country, South African Reserve bank for easy transfer to your bank account over there since you reside in South Africa.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
You are therefore, advised to contact the Reserve bank of your country for the transfer of your fund to you using the contact details below:</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Name: Dr. Rashad Cassim(Deputy Governor).</DIV>
<DIV>
Email: sarb_drrashad@safrica.com</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Remember to state your fund reference number: WDRC/L-F/UK/0407/19 while contacting the deputy governor.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Contact him immediately for the transfer of your fund and let me know as soon as you contact him.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Regards,</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Mr. Collins Murray.</DIV>
<DIV>
Director, World Debt Remittance Committee, UK.</DIV>
</FONT>
</BODY></HTML>