File: /home/govancoz/mail/.spam/new/1743453324.M432907P2616492.zacp120.webway.host,S=6944,W=7084
Return-Path: <hanflxxghmnd@gmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id HxPRGIz86mes7CcA8rC0kQ
(envelope-from <hanflxxghmnd@gmail.com>)
for <govancoz+spam@zacp120.webway.host>; Mon, 31 Mar 2025 22:35:24 +0200
Return-path: <hanflxxghmnd@gmail.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Mon, 31 Mar 2025 22:35:24 +0200
Received: from [200.101.10.139] (port=47324 helo=issabel.local)
by zacp120.webway.host with esmtp (Exim 4.98.1)
(envelope-from <hanflxxghmnd@gmail.com>)
id 1tzLqr-0000000AwCH-1aB7
for danielle@govan.co.za;
Mon, 31 Mar 2025 22:35:24 +0200
Received: by issabel.local (Postfix, from userid 1000)
id 358774781B; Mon, 31 Mar 2025 16:08:24 -0300 (-03)
Received: from User (gateway [172.16.16.25])
by issabel.local (Postfix) with SMTP id 0FB1A477EE;
Mon, 31 Mar 2025 16:08:10 -0300 (-03)
Reply-To: <portovalidinvest@onionmail.com>
From: "DMGLD"<hanflxxghmnd@gmail.com>
Date: Mon, 31 Mar 2025 12:08:22 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250331190824.358774781B@issabel.local>
X-Spam-Status: Yes, score=30.4
X-Spam-Score: 304
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam Good day! I have a investment portfolio of
(HIGH VALUE US$150M) One Hundred and Fifty Million United States Dollars
to discuss with you. Feel free to share your ideas and experience in Return
on Inves [...]
Content analysis details: (30.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[200.101.10.139 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[200.101.10.139 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[200.101.10.139 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[200.101.10.139 listed in sa-trusted.bondedsender.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 MILLION_USD BODY: Talks about millions of dollars
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 HK_RANDOM_FROM From username looks random
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[hanflxxghmnd(at)gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FROM_MISSP_USER From misspaced, from "User"
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.8 FROM_MISSP_REPLYTO From misspaced, has Reply-To
3.4 MSOE_MID_WRONG_CASE No description available.
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 SPOOFED_FREEMAIL No description available.
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.4 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** TO-INVEST: 200.101.10.139
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Dear Sir/Madam</DIV>
<DIV>
</DIV>
<DIV>
</DIV>
<DIV>
Good day! I have a investment portfolio of (HIGH VALUE US$150M) One Hundred and Fifty Million United States Dollars to discuss with you. Feel free to share your ideas and experience in Return on Investments (ROI) from your country economy status presently. I would like to invest this fund with your company if you have the ability to direct and manage this funds very well.</DIV>
<DIV>
</DIV>
<DIV>
</DIV>
<DIV>
Await your positive response </DIV>
<DIV>
</DIV>
<DIV>
</DIV>
<DIV>
Regards</DIV>
<DIV>
</DIV>
<DIV>
DR. Edgar PORTO</DIV>
</FONT>
</BODY></HTML>