Return-Path: <kurumsal@osinif.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id GFJyN9dPFGjPqDUA8rC0kQ
	(envelope-from <kurumsal@osinif.com>)
	for <govancoz+spam@zacp120.webway.host>; Fri, 02 May 2025 06:53:43 +0200
Return-path: <kurumsal@osinif.com>
Envelope-to: candice@govan.co.za
Delivery-date: Fri, 02 May 2025 06:53:43 +0200
Received: from [185.23.72.109] (port=56533 helo=VWINT-177.server.local)
	by zacp120.webway.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
	(Exim 4.98.1)
	(envelope-from <kurumsal@osinif.com>)
	id 1uAiPA-0000000EzhF-0okR
	for candice@govan.co.za;
	Fri, 02 May 2025 06:53:43 +0200
Received: from User ([200.54.221.66]) by VWINT-177.server.local with
 MailEnable ESMTPA; Thu, 6 Mar 2025 03:45:00 +0300
Reply-To: <patrickcourier@qualityservice.com>
From: "Linda Carl"<kurumsal@osinif.com>
Date: Wed, 5 Mar 2025 21:44:56 -0300
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <D1ADEE75497346E89D27D5AB1D19189F.MAI@VWINT-177.server.local>
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attention Beneficiary, I have registered your Compensation
    Fund, ATM CARD of US$10,500,000.00 with Secureway Express Courier Company
    with registration code.SCXZSA080 please Contact the accountant with your
   delivery informat [...] 
 Content analysis details:   (18.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?185.23.72.109>]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.23.72.109 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.23.72.109 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.23.72.109 listed in sa-accredit.habeas.com]
  1.2 MISSING_HEADERS        Missing To: header
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.8 HK_SCAM                No description available.
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 MONEY_NOHTML           Lots of money in plain text
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
  3.1 MONEY_FRAUD_3          Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  Attention Beneficiary, 

Attention Beneficiary,

I have registered your Compensation Fund, ATM CARD of
US$10,500,000.00 with Secureway Express Courier Company with
registration code.SCXZSA080 please Contact the accountant with
your delivery information such as, Your Name, Your Address I.D
CARD and phone Number/Whatsapp:

Secureway Account Patrick
Contact Email:  patrickcourier@qualityservice.com

I have paid for the Delivery .The only fee you have to pay is
their Security fee and Insurance fee only.Please indicate the
registration Number and ask Him how much is their Security fee so
that you can pay it for the immediate delivery.

Kind Regards,
Linda Carl
IMF Grant Compensation Fund