HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1731930725.M489859P1133862.zacp120.ve.host,S=9664,W=9831
Return-Path: <cybercrimes@mail.de>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id oE/uHGUqO2cmTREAvcbEzQ
	(envelope-from <cybercrimes@mail.de>)
	for <govancoz+spam@zacp120.ve.host>; Mon, 18 Nov 2024 13:52:05 +0200
Return-path: <cybercrimes@mail.de>
Envelope-to: danielle@govan.co.za
Delivery-date: Mon, 18 Nov 2024 13:52:05 +0200
Received: from mail.nevispeakcoffee.com ([161.129.67.122]:55489)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <cybercrimes@mail.de>)
	id 1tD0IW-00000004zv8-0sIt
	for danielle@govan.co.za;
	Mon, 18 Nov 2024 13:52:05 +0200
Received: from User ([178.215.236.49]) by nevispeakcoffee.com with
 MailEnable ESMTP; Mon, 18 Nov 2024 04:40:10 -0500
Reply-To: <cybersecuritymonitoring@onionmail.org>
From: "IT Consult"<cybercrimes@mail.de>
Date: Mon, 18 Nov 2024 01:40:08 -0800
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <446525C406A04404B8760E08214C9D24.MAI@nevispeakcoffee.com>
X-Spam-Status: Yes, score=25.0
X-Spam-Score: 250
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Cyber-Security Fraud Global Monitoring Unit DO THE RIGHT
   THING. IT WILL GRATIFY SOME PEOPLE AND ASTONISH THE REST 
 Content analysis details:   (25.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the message
                              and the domain has a DMARC quarantine policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [161.129.67.122 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [161.129.67.122 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [161.129.67.122 listed in sa-accredit.habeas.com]
  1.2 MISSING_HEADERS        Missing To: header
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [cybercrimes(at)mail.de]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  2.5 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  3.0 FROM_MISSP_USER        From misspaced, from "User"
  2.2 MALFORMED_FREEMAIL     Bad headers on message from free email service
  0.4 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 FROM_MISSPACED         From: missing whitespace
  0.8 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  0.3 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.0 SPOOFED_FREEMAIL       No description available.
  1.9 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
  1.8 MONEY_FRAUD_3          Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  IT Consult: 161.129.67.122

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT face="Verdana">Cyber-Security Fraud Global Monitoring Unit</FONT></DIV>
<DIV>
<FONT face="Verdana">DO THE RIGHT THING. IT WILL GRATIFY SOME PEOPLE AND ASTONISH THE REST</FONT></DIV>
<DIV>
<FONT face="Verdana">PO Box 250, IFC6, IFC Jersey, St Helier, Jersey, JE4 5PU</FONT></DIV>
<DIV>
<FONT face="Verdana">Address: 8600 Hidden River Pkwy # 100, Tampa, FL 33637</FONT></DIV>
<DIV>
&nbsp;</DIV>
<DIV>
 </DIV>
<DIV>
 </DIV>
<DIV>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <B><U> Scam/Fraud Alert:</B></U></DIV>
<DIV>
<B>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </B><B><U>Site Light Fraud Detection Global Report</B></U></DIV>
<DIV>
&nbsp;</DIV>
<DIV>
 </DIV>
<DIV>
<FONT face="Verdana">Dear Fraud Victim</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">Our Global Fraud Detection Systems have flagged your email address as a potential victim of scams or extortion by fraudulent groups. We utilize advanced Fraud Monitoring Software to track such activities globally, and we advise you to treat this information with utmost confidentiality because your email address has been enlisted for compensation and debt recovery.</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">We will provide you with all the evidence to show that you have unknowingly been a victim of fraud. IBM Trustee Fraud Detection has flagged your transactions as fraudulent, and you have faced traumatic experiences due to the actions of these fraud syndicates. They have taken your hard-earned money, and it�s time to ask yourself: are you really happy dealing with these untrustworthy individuals who prey on others with their endless tales of money claims? How long will you continue to listen to their deceitful stories? after sending money to them, they continue to come back asking for more? This pattern is often a red flag for fraudulent activity or do you want to continue sending money to them?</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">Here�s the good news: a recovery/compensation sum of $2.6 million dollars has been approved from the global debt recovery fund to compensate victims of various types of fraud, If you have any concerns about recent transactions you are presently into or need advice on how to handle such situations, please reach out for support.</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">We will provide you with complete details about this scam once you respond to this message. Please remember to keep this communication strictly confidential and also this is the security compensation transaction reference code (CDFS-KLOIT). Do not inform them of our investigation, as we are working to ensure they are held accountable of their evil practices against humanity. It is best to ignore them entirely, as they may try to manipulate you. Stay cautious and keep everything secret, please disregard further messages from them because they will continue to demand money from you until you are bankrupt.</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">You will receive more information once you reply to this message</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">Regards With Respect.</FONT></DIV>
<DIV>
<FONT face="Verdana">&nbsp;</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"><B>William .J. Richard</B></FONT></DIV>
<DIV>
<FONT face="Verdana"><B>IT Consultant ( Global Cyber Fraud Investigation Unit)</B></FONT></DIV>
</FONT>
</BODY></HTML>