File: /home/govancoz/mail/.spam/new/1729036521.M46391P2231438.zacp120.ve.host,S=5903,W=6010
Return-Path: <orin@johnrice.cfd>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id eGy1AekAD2eODCIAvcbEzQ
(envelope-from <orin@johnrice.cfd>)
for <govancoz+spam@zacp120.ve.host>; Wed, 16 Oct 2024 01:55:21 +0200
Return-path: <orin@johnrice.cfd>
Envelope-to: candice@govan.co.za
Delivery-date: Wed, 16 Oct 2024 01:55:21 +0200
Received: from [157.66.48.148] (port=51258 helo=tonyhai.com)
by zacp120.ve.host with esmtp (Exim 4.97.1)
(envelope-from <orin@johnrice.cfd>)
id 1t0rNl-00000009NAP-1EyD
for candice@govan.co.za;
Wed, 16 Oct 2024 01:55:20 +0200
Received: from User (8ta-150-224-62.telkomadsl.co.za [41.150.224.62])
by tonyhai.com (Postfix) with ESMTPA id BB59CCEF1A;
Tue, 15 Oct 2024 14:43:31 +0200 (CEST)
Reply-To: <refund.payment@unitedsnations.org>
From: "Tony Ross"<orin@johnrice.cfd>
Date: Tue, 15 Oct 2024 15:41:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good day. This is to officially notify you that our International
law enforcement from 61 countries has dismantled online scam networks in
several countries, identifying over 14,600 possible suspects across all [...]
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[157.66.48.148 listed in psbl.surriel.com]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[157.66.48.148 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?157.66.48.148>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: therecord.media]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 MISSING_HEADERS Missing To: header
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSPACED From: missing whitespace
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.66.48.148 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.66.48.148 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.66.48.148 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FROM_41 Lots of money from Africa
X-Spam-Flag: YES
Subject: ***SPAM*** reply now.
Good day.
This is to officially notify you that our International law enforcement from 61 countries has dismantled online scam networks in several countries, identifying over 14,600 possible suspects across all continents, arresting over 3,900 suspects and seizing $257 million in illegally obtained assets.
The operation was conducted by police, targeting phishing, investment fraud, fake online shopping sites, romance scams, and impersonation scams which your email address was found in one of the arrested scam artist possession hence we are reaching you as published: https:// therecord.media/4000-arrested-in-global-cybercrime-scam-crackdown-interpol
get back to us so that we can direct you to the bank where the fund was deposited as we are compensating only 98 persons globally from the recovered fund.
Get back to us now.
Tony Ross.
Representative
refund.payment@unitedsnations.org
Financial crimes enforcement network (FinCEN)