File: /home/govancoz/mail/.spam/new/1741142636.M164808P1175439.zacp120.webway.host,S=7918,W=8075
Return-Path: <lance.gooden920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id SATxCGy6x2eP7xEA8rC0kQ
(envelope-from <lance.gooden920366@hotmail.com>)
for <govancoz+spam@zacp120.webway.host>; Wed, 05 Mar 2025 04:43:56 +0200
Return-path: <lance.gooden920366@hotmail.com>
Envelope-to: janine@govan.co.za
Delivery-date: Wed, 05 Mar 2025 04:43:56 +0200
Received: from [50.3.189.36] (port=50670 helo=189.3.50-static.rdns.serverhub.com)
by zacp120.webway.host with esmtp (Exim 4.98.1)
(envelope-from <lance.gooden920366@hotmail.com>)
id 1tpejj-00000004vg7-09YK
for janine@govan.co.za;
Wed, 05 Mar 2025 04:43:55 +0200
Received: from User (localhost [IPv6:::1])
by 189.3.50-static.rdns.serverhub.com (Postfix) with SMTP id 976F92F3C62;
Tue, 4 Mar 2025 21:34:38 -0500 (EST)
Reply-To: <united.nations.compensation@usa.com>
From: "Lance Gooden"<lance.gooden920366@hotmail.com>
Date: Tue, 4 Mar 2025 18:34:39 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250305023438.976F92F3C62@189.3.50-static.rdns.serverhub.com>
X-Spam-Status: Yes, score=30.7
X-Spam-Score: 307
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS PAYMENT RECONCILI UNITED NATIONS PAYMENT RECONCILIATION
OFFICE AMERICAN QUARTERS, TEXAS USA
Content analysis details: (30.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden920366%40hotmail.com;ip=50.3.189.36;r=zacp120.webway.host]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lance.gooden920366(at)hotmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lance.gooden920366(at)hotmail.com]
0.0 T_US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.8 GB_FREEMAIL_NUM Freemail spammy address
0.0 FROM_MISSP_SPF_FAIL No description available.
3.4 MSOE_MID_WRONG_CASE No description available.
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 SPOOFED_FREEMAIL No description available.
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face="Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General
Ant�nio Guterres<br> has deliberated with the World Bank Group President
Ajay Banga for a compensation payment<br> of Five Million US Dollars
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get back
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.00
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator | <font color="#0000FF">
lance.gooden@un-payment.com</font> <br>
Texas Office, USA<br>............................................................................................................<br>
</b><font size="2"><b><font color="#FF0000">NOTE:</font></b> If you receive this message in your SPAM/JUNK folder, that is because of the
restrictions implemented <br> by your Internet Service Provider, we urge you to
treat it genuinely</font><b>.<br>
<br>
</b></font></p>
</body>
</html>