HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1738749265.M991266P2170365.zacp120.webway.host,S=5044,W=5147
Return-Path: <9395@trad.ocn.ne.jp>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id 8ZoJOlE1o2f9HSEA8rC0kQ
	(envelope-from <9395@trad.ocn.ne.jp>)
	for <govancoz+spam@zacp120.webway.host>; Wed, 05 Feb 2025 11:54:25 +0200
Return-path: <9395@trad.ocn.ne.jp>
Envelope-to: danielle@govan.co.za
Delivery-date: Wed, 05 Feb 2025 11:54:25 +0200
Received: from 89.213.144.63.as215142.net ([89.213.144.63]:53396 helo=mail.makeinlab.fr)
	by zacp120.webway.host with esmtp (Exim 4.98)
	(envelope-from <9395@trad.ocn.ne.jp>)
	id 1tfc6w-000000095kS-2L3G
	for danielle@govan.co.za;
	Wed, 05 Feb 2025 11:54:25 +0200
Received: from [195.177.95.39] (unknown [195.177.95.39])
	by mail.makeinlab.fr (Postfix) with ESMTP id C0E8D127F3B;
	Wed,  5 Feb 2025 07:02:16 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <9395@trad.ocn.ne.jp>
From: "Mr. K Rowland" <9395@trad.ocn.ne.jp>
Date: Tue, 04 Feb 2025 22:01:58 -0800
Reply-To: drnh3047@gmail.com
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn: Beneficiary We have finally concluded and agreed to
   effect your fund worth of (US$5.5m) via ATM Card or via bank wire transfer/
    online to your bank account. as the best and easier way to receive your funds
    in any [...] 
 Content analysis details:   (15.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [89.213.144.63 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [89.213.144.63 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [89.213.144.63 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.1 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [drnh3047(at)gmail.com]
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  1.0 HK_NAME_MR_MRS         No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.6 MONEY_NOHTML           Lots of money in plain text
  0.2 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.0 MONEY_FORM             Lots of money if you fill out a form
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 FILL_THIS_FORM         Fill in a form with personal information
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  0.0 MONEY_ATM_CARD         Lots of money on an ATM card
  3.0 MONEY_FRAUD_3          Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  Hello...       

Attn: Beneficiary

We have finally concluded and agreed to effect your fund worth of (US$5.5m)=
 via ATM Card or via bank wire transfer/ online to your bank account. as th=
e best and easier way to receive your funds in any nearest ATM machine in y=
our city, based on agreement with ATM department director, you will receive=
 your fund via the above mentiond options. However, the below information i=
s needed as to enable the profiling of the release of your fund to you:

Full name:
Age:
Occupation:
Home address:
Country/city:
Direct phone number:

Once we receive this information, we will proceed without delay.

Thank you.
Kelvin Rowland.

89-63