File: /home/govancoz/mail/.spam/new/1740319710.M827507P1856973.zacp120.webway.host,S=8172,W=8333
Return-Path: <lance.gooden0920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id 8KlJMN4ru2fNVRwA8rC0kQ
(envelope-from <lance.gooden0920366@hotmail.com>)
for <govancoz+spam@zacp120.webway.host>; Sun, 23 Feb 2025 16:08:30 +0200
Return-path: <lance.gooden0920366@hotmail.com>
Envelope-to: janine@govan.co.za
Delivery-date: Sun, 23 Feb 2025 16:08:30 +0200
Received: from [50.3.189.98] (port=52220 helo=KVM-70016.localdomain)
by zacp120.webway.host with esmtp (Exim 4.98)
(envelope-from <lance.gooden0920366@hotmail.com>)
id 1tmCeh-000000080C4-3kdN
for janine@govan.co.za;
Sun, 23 Feb 2025 16:08:30 +0200
Received: from User (localhost [IPv6:::1])
by KVM-70016.localdomain (Postfix) with SMTP id 800B142D9831;
Sun, 23 Feb 2025 06:26:29 -0500 (EST)
Reply-To: <uintednations.compensation@usa.com>
From: "Lance Gooden"<lance.gooden0920366@hotmail.com>
Date: Sun, 23 Feb 2025 03:26:30 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250223112629.800B142D9831@KVM-70016.localdomain>
X-Spam-Status: Yes, score=29.3
X-Spam-Score: 293
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS PAYMENT RECONCILI UNITED NATIONS PAYMENT RECONCILIATION
OFFICE AMERICAN QUARTERS, TEXAS USA
Content analysis details: (29.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?50.3.189.98>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[50.3.189.98 listed in psbl.surriel.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden0920366%40hotmail.com;ip=50.3.189.98;r=zacp120.webway.host]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.98 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.98 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.98 listed in sa-trusted.bondedsender.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lance.gooden0920366(at)hotmail.com]
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lance.gooden0920366(at)hotmail.com]
0.0 T_US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.8 GB_FREEMAIL_NUM Freemail spammy address
3.4 MSOE_MID_WRONG_CASE No description available.
0.0 MALFORMED_FREEMAIL Bad headers on message from free email service
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 SPOOFED_FREEMAIL No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.7 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.4 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face="Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General
Ant�nio Guterres<br> has deliberated with the World Bank Group President
Ajay Banga for a compensation payment<br> of Five Million US Dollars
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get back
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.00
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator | <font color="#0000FF">
lance.gooden@un-payment.com</font> <br>
Texas Office, USA<br>............................................................................................................<br>
</b><font size="2"><b><font color="#FF0000">NOTE:</font></b> If you receive this message in your SPAM/JUNK folder, that is because of the
restrictions implemented <br> by your Internet Service Provider, we urge you to
treat it genuinely</font><b>.<br>
<br>
</b></font></p>
</body>
</html>