File: /home/govancoz/mail/.spam/new/1749288185.M400637P1701190.zacp120.webway.host,S=7744,W=7899
Return-Path: <lance.gooden0920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id 6BkZF/kERGhG9RkA8rC0kQ
(envelope-from <lance.gooden0920366@hotmail.com>)
for <govancoz+spam@zacp120.webway.host>; Sat, 07 Jun 2025 11:23:05 +0200
Return-path: <lance.gooden0920366@hotmail.com>
Envelope-to: janine@govan.co.za
Delivery-date: Sat, 07 Jun 2025 11:23:05 +0200
Received: from [23.90.11.99] (port=50542 helo=KVM-43018.localdomain)
by zacp120.webway.host with esmtp (Exim 4.98.2)
(envelope-from <lance.gooden0920366@hotmail.com>)
id 1uNplY-00000007Gbs-3RQr
for janine@govan.co.za;
Sat, 07 Jun 2025 11:23:05 +0200
Received: from User (localhost [IPv6:::1])
by KVM-43018.localdomain (Postfix) with SMTP id C9A7D417E626;
Sat, 7 Jun 2025 03:59:04 -0400 (EDT)
Reply-To: <lance.gooden920366@hotmail.com>
From: "Lance Gooden"<lance.gooden0920366@hotmail.com>
Date: Sat, 7 Jun 2025 00:59:06 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250607075904.C9A7D417E626@KVM-43018.localdomain>
X-Spam-Status: Yes, score=24.0
X-Spam-Score: 240
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS PAYMENT RECONCILI UNITED NATIONS PAYMENT RECONCILIATION
OFFICE AMERICAN QUARTERS, TEXAS USA
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden0920366%40hotmail.com;ip=23.90.11.99;r=zacp120.webway.host]
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in sa-trusted.bondedsender.org]
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[lance.gooden920366(at)hotmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lance.gooden0920366(at)hotmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lance.gooden0920366(at)hotmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
3.4 MSOE_MID_WRONG_CASE No description available.
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.8 GB_FREEMAIL_NUM Freemail spammy address
0.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 SPOOFED_FREEMAIL No description available.
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.2 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face="Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General
Ant�nio Guterres<br> has deliberated with the World Bank Group President
Ajay Banga for a compensation payment<br> of Five Million US Dollars
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get back
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.00
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator | <font color="#0000FF">
lance.gooden@un-payment.com</font> <br>
Texas Office, USA<br>............................................................................................................<br>
</b><font size="2"><b><font color="#FF0000">NOTE:</font></b> If you receive this message in your SPAM/JUNK folder, that is because of the
restrictions implemented <br> by your Internet Service Provider, we urge you to
treat it genuinely</font><b>.<br>
<br>
</b></font></p>
</body>
</html>