HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1727505258.M971703P2470644.zacp120.ve.host,S=7116,W=7245
Return-Path: <info@pedromenegussi.com.br>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id aHibOGqj92b0siUAvcbEzQ
	(envelope-from <info@pedromenegussi.com.br>)
	for <govancoz+spam@zacp120.ve.host>; Sat, 28 Sep 2024 08:34:18 +0200
Return-path: <info@pedromenegussi.com.br>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sat, 28 Sep 2024 08:34:18 +0200
Received: from 206.222.138.34.bc.googleusercontent.com ([34.138.222.206]:49910 helo=mail.pedromenegussi.com.br)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <info@pedromenegussi.com.br>)
	id 1suR23-0000000AMuj-18Fl
	for cheryl@govan.co.za;
	Sat, 28 Sep 2024 08:34:18 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail.pedromenegussi.com.br (Postfix) with ESMTP id 35C3217E71F;
	Sat, 28 Sep 2024 00:57:32 +0000 (UTC)
Received: from mail.pedromenegussi.com.br ([127.0.0.1])
 by localhost (mail.pedromenegussi.com.br [127.0.0.1]) (amavis, port 10032)
 with ESMTP id v-1FC_pAZagA; Sat, 28 Sep 2024 00:57:28 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
	by mail.pedromenegussi.com.br (Postfix) with ESMTP id ED16017E649;
	Sat, 28 Sep 2024 00:51:31 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.pedromenegussi.com.br ED16017E649
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=pedromenegussi.com.br; s=06FE05D2-6C5C-11EF-9BAC-8B5D8C7F1C51;
	t=1727484692; bh=unI6vGeu16ako8B9ZGNHOuBUAy1ugIlEcbB53SrQ/qU=;
	h=From:Date:MIME-Version:Message-Id;
	b=b9R2GP4SUy13MnaD+G+ek6dq4nmMY6TWvgXOxHRS21m7Ow6nyP748OFPW1vB8lspp
	 2k83caH1Hy54w/R4yo55HMzq3hXkqTFMnxXATIk+mCEvJaQ45pzPYPM1H234nmYtZu
	 6ccbxiv4BPZ5uNhZekjudLiyzEDWhfO4tc7I60bw8vaa1Tm/o228iFswwza4c8Kcjo
	 q4mhMePX7FYKuPFiMLV6dE4ylUjsbfcRVm4zyiPFOA22aKdg731hwGRJbbcwdeC9zl
	 5A7I0kLXEIiBtcX8SRnqxrloCxbKP8ICcYgIHD3t5H9bS5N6Tu6IuDOw16eXQe7RsB
	 yt2z6j1gykP+g==
X-Virus-Scanned: amavis at pedromenegussi.com.br
Received: from mail.pedromenegussi.com.br ([127.0.0.1])
 by localhost (mail.pedromenegussi.com.br [127.0.0.1]) (amavis, port 10026)
 with ESMTP id uGXhWpNcNxz1; Sat, 28 Sep 2024 00:51:30 +0000 (UTC)
Received: from User (unknown [197.211.53.48])
	by mail.pedromenegussi.com.br (Postfix) with SMTP id 3D2F817E637;
	Sat, 28 Sep 2024 00:45:29 +0000 (UTC)
Reply-To: <ritmoo321@gmail.com>
From: "JPMorgan Chase Bank"<info@pedromenegussi.com.br>
Date: Sat, 28 Sep 2024 01:45:47 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20240928004530.3D2F817E637@mail.pedromenegussi.com.br>
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attention We are writing to confirm if you received our message
    regarding the release of your payment by our bank JPMorgan Chase Bank of
   New York. Kindly respond to this message as soon as possible. Regards Mr.
   Jamie Dimon Chief Executive Officer of JPMorgan Chase Bank of New York. 
 Content analysis details:   (22.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: pedromenegussi.com.br]
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [ritmoo321(at)gmail.com]
  1.2 MISSING_HEADERS        Missing To: header
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  3.4 MSOE_MID_WRONG_CASE    No description available.
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSPACED         From: missing whitespace
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FROM_MISSP_DYNIP       From misspaced + dynamic rDNS
  3.3 FROM_MISSP_PHISH       Malformed, claims to be from financial organization
                             - possible phish
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  1.6 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  2.5 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [34.138.222.206 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [34.138.222.206 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [34.138.222.206 listed in sa-trusted.bondedsender.org]
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  Payment Release

Attention

We are writing to confirm if you received our message regarding the release of your payment by our bank JPMorgan Chase Bank of New York. Kindly respond to this message as soon as possible.

Regards
Mr. Jamie Dimon
Chief Executive Officer of JPMorgan Chase Bank of New York.