File: /home/govancoz/mail/.spam/new/1700113970.M582126P3154646.zacp120.ve.host,S=8006,W=8143
Return-Path: <emma.maclennan@hotmail.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id GE1fIjKuVWXWIjAAvcbEzQ
(envelope-from <emma.maclennan@hotmail.com>)
for <govancoz+spam@zacp120.ve.host>; Thu, 16 Nov 2023 07:52:50 +0200
Return-path: <emma.maclennan@hotmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 16 Nov 2023 07:52:50 +0200
Received: from [72.252.201.215] (port=54193 helo=hotmail.com)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <emma.maclennan@hotmail.com>)
id 1r3VIt-00DEOr-1I
for cheryl@govan.co.za;
Thu, 16 Nov 2023 07:52:50 +0200
Reply-To: gloconsult800@outlook.com
From: "Global Consult Investment" <emma.maclennan@hotmail.com>
To: cheryl@govan.co.za
Date: 16 Nov 2023 00:54:06 -0400
Message-ID: <20231116005406.DAF5378199C0BEBC@hotmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=60.4
X-Spam-Score: 604
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Reply to...gloconsult800@outlook.com Dear Friend, My name
is Kelvin Liu and I work as as Office Clerk with Global Consult Investment
Ltd here in Hong Kong and China Mainland. The late Mr. James Hansen, a successful
business man who died with his chil [...]
Content analysis details: (60.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[72.252.201.215 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?72.252.201.215>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[72.252.201.215 listed in psbl.surriel.com]
1.4 FSL_HELO_FAKE No description available.
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[gloconsult800[at]outlook.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=emma.maclennan%40hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=hotmail.com;ip=72.252.201.215;r=zacp120.ve.host]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[emma.maclennan[at]hotmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bbc.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[72.252.201.215 listed in bl.score.senderscore.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
2.0 HK_SCAM No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.9 URG_BIZ Contains urgent matter
1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.8 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
2.5 KAM_NIGERIAN Nigerian Scam and Variants
6.0 KAM_INVEST Investment Scams
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.8 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: BUSINESS OPPORTUNITY..CONTACT ME NOW.
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.9600.19431">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><p>Reply <a href=3D"mailto:to...gloconsult800@outlook.com">to...gloco=
nsult800@outlook.com</a></p><p>Dear Friend,</p><p>My name is Kelvin Liu and=
I work as as Office Clerk with Global Consult Investment Ltd here in Hong =
Kong and China Mainland. The late Mr. James Hansen, a successful business m=
an who died with his children and grand-children in their private plane cra=
sh on 30 November 2019, was my client.</p><p>
Please find here the links of the tragic news both on CNN and BBC News resp=
ectively.</p><p>CNN NEWS: <a href=3D"https://edition.cnn.com/2019/12/02/us/=
south-dakota-plane-crash-family/index.html">https://edition.cnn.com/2019/12=
/02/us/south-dakota-plane-crash-family/index.html</a><br>BBC NEWS: <a href=
=3D"https://www.bbc.com/news/world-us-canada-50639537">https://www.bbc.com/=
news/world-us-canada-50639537</a></p><p>
He left behind the sum of $60,000,000 (Sixty Million US D0llars) in an undi=
sclosed bank and I am the only one authorized to produce a beneficiary to t=
hese funds since the late Mr. James Hansen did not state any next of kin to=
the funds during the time of deposit. I want you to partner with me so you=
can send your personal details to me and I will present you to the bank as=
the beneficiary to the funds as I will change the name in the documents to=
your name and the funds will now be transferred=20
to you in your country where I will travel to meet with you so we can both =
invest there together in your choice of industry or specialization. </p><p>=
Kindly send the following details.</p><p>(A) Your Name in full....<br>(B) Y=
our Age....<br>(C) Country....<br>(D) Male/Female....<br>(E) Mobile No....<=
/p><p>I await for your urgent reply to this great opportunity.</p><p>Yours =
Faithfully,</p><p>Mr. Kelvin Liu<br>Office Clerk<br>Global Consult Investme=
nt Ltd.<br>Hong Kong & China Mainland<br>
Email: <a href=3D"mailto:gloconsult800@outlook.com">gloconsult800@outlook.c=
om</a></p></body></html>