File: /home/govancoz/mail/.spam/new/1694994118.M845547P2732113.zacp120.ve.host,S=5858,W=5977
Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id fE0JMsaOB2VRsCkAvcbEzQ
(envelope-from <nafco@nafcofuels.com>)
for <govancoz+spam@zacp120.ve.host>; Mon, 18 Sep 2023 01:41:58 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: candice@govan.co.za
Delivery-date: Mon, 18 Sep 2023 01:41:58 +0200
Received: from 5115220.titserver.net ([162.214.154.70]:34134)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qi1Nn-00BSWb-0T
for candice@govan.co.za;
Mon, 18 Sep 2023 01:41:58 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=EMxw3P/eT5bPWP/n1wk1HFqMilrVE7B7nb0TmlFnLWQ=; b=LQNWmvPN/EZg/SBVFOiaXgSWCE
lkfCAAhgEVPQh19qKhpx85Krmq5eoSHcT1Bum+BbD5tsTQHMxCm6hBjnK3CBW6dsqYRcHkC5fEiv+
Z1944Wpc8EamPcMBGAYgu1zARXb1HiPzJhGoTJC0+jV2pDCCueKqaZv6+puq+R6B2knx5LGjH1v5P
o9NJWlGA8NyzaM9iBHrxHAaQ8Zb0QQ3K6tkLImyVFUvxOIEun6duxWP4TQv8ZIqRb2Z4naK2o/X39
0m1TbiDdaRuMAyuCN2bEJ52Iv3JnjsAmbdiX2W1BLaZtWvtj9QM3Oge6pRjPjD/gCOp1Rw0YOUr3J
na47y32w==;
Received: from [119.73.154.210] (port=57499 helo=User)
by 5115220.titserver.net with esmtpa (Exim 4.96)
(envelope-from <nafco@nafcofuels.com>)
id 1qi1Ik-0001cU-2Y;
Sun, 17 Sep 2023 18:35:47 -0500
Reply-To: <universalparcelservice84@gmail.com>
From: "Patrick FRED"<nafco@nafcofuels.com>
Date: Sun, 17 Sep 2023 23:34:57 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day Sir/Maam We have registered Your CASH CHEQUE of R7,000.000
with UNIVERSAL PARCEL SERVICES, with the registration code of ( Shipment
Code SBA 65URI). Please Contact us with your delivery information such as,
Yo [...]
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[universalparcelservice84[at]gmail.com]
1.2 MISSING_HEADERS Missing To: header
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[162.214.154.70 listed in psbl.surriel.com]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.3 FROM_MISSPACED From: missing whitespace
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** PARCEL TO BE DELIVERED
Good Day Sir/Maam
We have registered Your CASH CHEQUE of R7,000.000 with UNIVERSAL PARCEL
SERVICES, with the registration code of ( Shipment Code SBA 65URI). Please
Contact us with your delivery information such as, Your Name, Residential Address and
Your contacts Number.
Please Note: International Cheque is uncashable in various countries. So Cheque will be
converted to your own currency, and our diplomatic Courier Agent will make secure
delivery, Bill of loading/airway bill shall be paid by you once delivery
agent Daniel arrived at your destination airport in your country.
Contact Name: Mohid Morgan
Office: E-mail: universalparcelservice84@gmail.com
Best Regards,
Patrick FRED