HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1737118737.M861456P3931793.zacp120.ve.host,S=6278,W=6389
Return-Path: <yfnrfezlsh@microsoft.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id 8JdAMhFUimeR/jsAvcbEzQ
	(envelope-from <yfnrfezlsh@microsoft.com>)
	for <govancoz+spam@zacp120.ve.host>; Fri, 17 Jan 2025 14:58:57 +0200
Return-path: <yfnrfezlsh@microsoft.com>
Envelope-to: emalini1@govan.co.za
Delivery-date: Fri, 17 Jan 2025 14:58:57 +0200
Received: from [198.23.164.77] (port=50986 helo=microsoft.com)
	by zacp120.ve.host with smtp (Exim 4.98)
	(envelope-from <yfnrfezlsh@microsoft.com>)
	id 1tYlw7-0000000Gc7n-2Eax
	for emalini1@govan.co.za;
	Fri, 17 Jan 2025 14:58:57 +0200
From: Frank Gibbs <mrfrankgibbspvtloan@gmail.com>
To: emalini1 <emalini1@govan.co.za>
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: Frank Gibbs <mrfrankgibbspvtloan@gmail.com>
mime-version: 1.0
content-type: multipart/mixed;
	boundary="qzsoft_directmail_seperator"
X-Spam-Status: Yes, score=21.3
X-Spam-Score: 213
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, Our Group invites you to partner with us and benefit
    in our new Loan and Project funding program. We offer flexible loans and
   funding for various projects bypassing the usual rigorous procedures. This
    [...] 
 Content analysis details:   (21.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.4 MISSING_DATE           Missing Date: header
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [198.23.164.77 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [198.23.164.77 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.164.77 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.164.77 listed in sa-accredit.habeas.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=yfnrfezlsh%40microsoft.com;ip=198.23.164.77;r=zacp120.ve.host]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=microsoft.com;ip=198.23.164.77;r=zacp120.ve.host]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.5 FROM_LOCAL_NOVOWEL     From: localpart has series of non-vowel letters
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [mrfrankgibbspvtloan(at)gmail.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  2.0 PDS_HELO_SPF_FAIL      High profile HELO that fails SPF
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.0 SPOOFED_FREEMAIL       No description available.
  0.2 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  Loans and Project Funding

--qzsoft_directmail_seperator
Content-Type: text/plain;
	charset="DEFAULT"
Content-Transfer-Encoding: base64
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--qzsoft_directmail_seperator--