File: /home/govancoz/mail/.spam/new/1748532912.M506988P2852973.zacp120.webway.host,S=7746,W=7887
Return-Path: <infoh689@gmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id AKQBHrB+OGhtiCsA8rC0kQ
(envelope-from <infoh689@gmail.com>)
for <govancoz+spam@zacp120.webway.host>; Thu, 29 May 2025 17:35:12 +0200
Return-path: <infoh689@gmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 29 May 2025 17:35:12 +0200
Received: from service.wpol3.com ([23.95.107.24]:43147)
by zacp120.webway.host with esmtp (Exim 4.98.1)
(envelope-from <infoh689@gmail.com>)
id 1uKfHj-0000000DtHF-2hqT
for cheryl@govan.co.za;
Thu, 29 May 2025 17:35:12 +0200
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mykey; d=service.wpol3.com;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:Content-Description:Subject:To:From:Date:Reply-To:Message-ID;
bh=FL/HlL6qoziSAdS7qrWFYaNW438=;
b=QiRIMpRCJLFxwcU7bY5JAGNrVWs2q9KU8VNXVnmkYQXAah+Ie47DkKiT2ndVHhGMQIQKPfizEu8X
7z2Fc8maHz8ikgZotRJ7Uwv9h16O4TOPYcvvtjAepGrA0gcfnrR+n6L9Ean8XB9HqIqhUhqQdJrC
TH5UZrcPjz+XAkquVvw=
Received: from [37.221.94.68] (37.221.94.68) by service.wpol3.com id h71vam0001g5 for <cheryl@govan.co.za>; Thu, 29 May 2025 11:34:26 -0400 (envelope-from <infoh689@gmail.com>)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: cheryl@govan.co.za
From: "I C.C.C Programme" <infoh689@gmail.com>
Date: Thu, 29 May 2025 08:34:26 -0700
Reply-To: infoh689@gmail.com
Message-ID: <0.0.6.9FE.1DBD0AF28FF5D18.0@service.wpol3.com>
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day Sir/Madam We are contacting you today to compensate
you from the money that we recovered from the scammers hence your email address
was found in their computer hard disc. Women and aged people who are often
their targets lose huge amounts of money yearly to financial fraud according
to the U.S government accountability office. It has not been easy but we
are working t [...]
Content analysis details: (11.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?37.221.94.68>]
[Blocked - see <https://www.spamcop.net/bl.shtml?23.95.107.24>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[23.95.107.24 listed in psbl.surriel.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: justice.gov]
[URI: wpol3.com]
[URI: inspector.sb]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URI: service.wpol3.com/23.95.107.24]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.95.107.24 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.95.107.24 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.95.107.24 listed in sa-trusted.bondedsender.org]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: service.wpol3.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[infoh689(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[infoh689(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[infoh689(at)gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.8 GB_FREEMAIL_NUM Freemail spammy address
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.0 GB_GMAIL_NUM Spam from random Gmail address
X-Spam-Flag: YES
Subject: ***SPAM*** Good Day Sir/Madam
Good Day Sir/Madam =
We are contacting you today to compensate you from the money that we recove=
red from the scammers hence your email address was found in their computer =
hard disc.
Women and aged people who are often their targets lose huge amounts of mon=
ey yearly to financial fraud according to the U.S government accountability=
office. It has not been easy but we are working together with relevant aut=
horities to stop them.
You will receive part of this fund as a refund payment in the next 5 workin=
g days after notification. In order to deliver a personalized responsive se=
rvice towards improving our services in compensating you as a victim of fin=
ancial fraud/BEC from the millions of dollars recovered. =
This initiative was made possible after the Re-election of Mr. Donald Trump=
as the 47th American President on Tuesday, November 5, 2024 as one of his=
campaign promise to make America Great again and the whole globe at large
https://www.justice.gov/usao-sdfl/pr/74-arrested-coordinated-international=
-enforcement-operationtargeting-hundreds (copy website and paste for a cl=
ear message)
Please forward your name, a copy of your ID and telephone numbers with your=
physical address to Kameshni Naidoo from South Africa for verification and=
instructions to guide you on how to procure the RELEASE ORDER CERTIFICATE =
to process and release your benefited fund as the Law of SOUTH AFRICA says =
that there will not be any payment without the certificate and to avoid bei=
ng accused of Money Laundering related activities.
Contact Person:
Kameshni Naidoo
Email: helpdesk@rserve.co.za
Yours Sincerely,
Inspector.SB Yadav. Head of Operations,
Cyber Crime Investigation Office.