HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1746715521.M917460P1031511.zacp120.webway.host,S=5545,W=5661
Return-Path: <cvender@telus.net>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id sGVGNYHDHGhXvQ8A8rC0kQ
	(envelope-from <cvender@telus.net>)
	for <govancoz+spam@zacp120.webway.host>; Thu, 08 May 2025 16:45:21 +0200
Return-path: <cvender@telus.net>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 08 May 2025 16:45:21 +0200
Received: from henderson.vocus.net.nz ([123.100.67.194]:60808)
	by zacp120.webway.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <cvender@telus.net>)
	id 1uD2Uw-000000056fI-280v
	for cheryl@govan.co.za;
	Thu, 08 May 2025 16:45:21 +0200
Received: from localhost (localhost [127.0.0.1])
	by henderson.vocus.net.nz (Postfix) with ESMTP id 4ZtZf856bmz5ZF;
	Fri,  9 May 2025 02:44:32 +1200 (NZST)
X-Virus-Scanned: Debian amavisd-new at henderson.vocus.net.nz
Received: from henderson.vocus.net.nz ([127.0.0.1])
	by localhost (henderson.vocus.net.nz [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id 8lmqrYnoMD_4; Fri,  9 May 2025 02:44:28 +1200 (NZST)
Received: from laingholm.vocus.net.nz (laingholm.vocus.net.nz [123.100.67.158])
	by henderson.vocus.net.nz (Postfix) with ESMTP id 4ZtZf45Mq4z5Z7;
	Fri,  9 May 2025 02:44:28 +1200 (NZST)
Received: from webmail.maxnet.co.nz (lynfield.vocus.net.nz [123.100.67.219])
	by laingholm.vocus.net.nz (Postfix) with ESMTPA id 087B1800B9;
	Fri,  9 May 2025 02:44:24 +1200 (NZST)
MIME-Version: 1.0
Date: Thu, 08 May 2025 16:44:23 +0200
From: chris Bavender-refunds <cvender@telus.net>
To: undisclosed-recipients:;
Reply-To: jgingras@minister.com
Mail-Reply-To: jgingras@minister.com
Message-ID: <0e7e143d7331a4a2e9735a62bcd418be@telus.net>
Maxnet-Sender: cvender@telus.net
Content-Type: text/plain; charset=US-ASCII;
 format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  -- Our Ref: 9247181296FBICPRO This letter is to officially
    inform you that the federal bureau of investigation just discovered that
   your transactions where you have spent a lot of money trying to claim some
    funds were fraudulent. 
 Content analysis details:   (8.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: interpol.int]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [123.100.67.194 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [123.100.67.194 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [123.100.67.194 listed in sa-trusted.bondedsender.org]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.8 ODD_FREEM_REPTO        Has unusual reply-to header
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.9 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject:  ***SPAM***  .



-- 
Our Ref: 9247181296FBICPRO

This letter is to officially inform you that the federal bureau of
investigation just discovered that your transactions where you have 
spent a
lot of money trying to claim some funds were fraudulent.

This initiatives includes many foreign contractors/investments and 
Lottery
Winners that has been paying money without receiving nothing, we have
finally caught some group of people who were involved in that act as
published herein:
https://www.interpol.int/en/News-and-Events/News/2025/More-than-300-arrests-as-African-countries-clamp-down-on-cyber-threats


The US national treasury has decided to compensate you from the money
realized from them and their properties that were confiscated as they 
are
facing charges of fraud related crimes.

Kindly contact Mr. James Gingras on this email so that he can help you
process your refund: jgingras@minister.com

Thanks,
Chris Bavender
Public Affairs Officer