File: /home/govancoz/mail/.spam/new/1755597249.M216526P1372434.zacp120.webway.host,S=8461,W=8680
Return-Path: <lance.gooden0920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id EC+TCsFJpGgS8RQA8rC0kQ
	(envelope-from <lance.gooden0920366@hotmail.com>)
	for <govancoz+spam@zacp120.webway.host>; Tue, 19 Aug 2025 11:54:09 +0200
Return-path: <lance.gooden0920366@hotmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Tue, 19 Aug 2025 11:54:09 +0200
Received: from [104.160.175.141] (port=38868 helo=centos7.localdomain)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <lance.gooden0920366@hotmail.com>)
	id 1uoJ2b-000000065lG-42gf
	for cheryl@govan.co.za;
	Tue, 19 Aug 2025 11:54:09 +0200
Received: from [162.221.207.49] (localhost [IPv6:::1])
	by centos7.localdomain (Postfix) with ESMTP id 1182410A42;
	Tue, 19 Aug 2025 00:58:18 -0400 (EDT)
Content-Type: multipart/alternative; boundary="===============0397574136=="
MIME-Version: 1.0
To: You <lance.gooden0920366@hotmail.com>
From: "Lance Gooden" <lance.gooden0920366@hotmail.com>
Date: Mon, 18 Aug 2025 21:58:16 -0700
Reply-To: lance.gooden920366@hotmail.com
Message-Id: <20250819045818.1182410A42@centos7.localdomain>
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  UNITED NATIONS PAYMENT RECONCILIATION OFFICE AMERICAN QUARTERS,
    TEXAS USA Payment Notification Attention: Beneficiary 
 Content analysis details:   (16.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [104.160.175.141 listed in sa-accredit.habeas.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden0920366%40hotmail.com;ip=104.160.175.141;r=zacp120.webway.host]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  3.6 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.4 NA_DOLLARS             BODY: Talks about a million North American dollars
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [104.160.175.141 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [104.160.175.141 listed in sa-trusted.bondedsender.org]
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                             digit
                             [lance.gooden0920366(at)hotmail.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [lance.gooden0920366(at)hotmail.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [lance.gooden920366(at)hotmail.com]
  0.0 T_US_DOLLARS_3         BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 GB_FREEMAIL_NUM        Freemail spammy address
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TO_EQ_FM_DOM_SPF_FAIL  To domain == From domain and external SPF
                             failed
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 TO_EQ_FM_SPF_FAIL      To == From and external SPF failed
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  0.0 SPOOFED_FREEMAIL       No description available.
  0.0 MONEY_FRAUD_5          Lots of money and many fraud phrases
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail reply-to
  1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Payment Notification
You will not see this in a MIME-aware mail reader.
--===============0397574136==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
 UNITED NATIONS PAYMENT RECONCILIATION OFFICE
 AMERICAN QUARTERS, TEXAS USA
 =
 Payment Notification
 =
 Attention: Beneficiary
 =
 This is to bring to your notice that the United Nations Secretary General =
Ant=F3nio Guterres
 has deliberated with the World Bank Group President Ajay Banga for a compe=
nsation payment
 of Five Million US Dollars (US$5,000,000.00) to scammed victims from Asia,=
 America, Africa
and Europe. =
 =
 Meanwhile, your name and email address has emerged as one of the lucky ben=
eficiaries.
 To enable us start processing your payment, you are hereby advised to get =
back to us
 as quickly as you receive this email for quick release of your $5,000,000.=
00 to you through =
 our paying bank. =
 =
 =
 Yours faithfully,
 =
 Lance Gooden
 Representative Coordinator     |     lance.gooden@un-payment.com          =
   =
 Texas Office, USA
...........................................................................=
.................................
 NOTE: If you receive this message in your SPAM/JUNK folder, that is becaus=
e of the restrictions implemented =
 by your Internet Service Provider, we urge you to treat it genuinely.
 =
  =
=20
--===============0397574136==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<html>
<head>
<meta http-equiv=3D"Content-Language" content=3D"en-us">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face=3D"Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE=
<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General =
Ant=F3nio Guterres<br> has deliberated with the World Bank Group President =
Ajay Banga for a compensation payment<br> of Five Million US Dollars =
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky =
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get b=
ack =
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.0=
0 =
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator     | <font color=3D"#000=
0FF">
  
lance.gooden@un-payment.com</font>       =
;      <br>
Texas Office, USA<br>......................................................=
......................................................<br>
</b><font size=3D"2"><b><font color=3D"#FF0000">NOTE:</font></b> If you rec=
eive this message in your SPAM/JUNK folder, that is because of the =
restrictions implemented <br> by your Internet Service Provider, we urge yo=
u to =
treat it genuinely</font><b>.<br>
<br>
 </b></font></p>
</body>
</html>
--===============0397574136==--