File: /home/govancoz/mail/.spam/new/1743238995.M593168P3619459.zacp120.webway.host,S=6689,W=6828
Return-Path: <test@aurizathailand.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id AN6GIlO352eDOjcA8rC0kQ
(envelope-from <test@aurizathailand.com>)
for <govancoz+spam@zacp120.webway.host>; Sat, 29 Mar 2025 11:03:15 +0200
Return-path: <test@aurizathailand.com>
Envelope-to: candice@govan.co.za
Delivery-date: Sat, 29 Mar 2025 11:03:15 +0200
Received: from [94.74.87.176] (port=58556 helo=ns2.jtclogistics.com)
by zacp120.webway.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <test@aurizathailand.com>)
id 1tyS5w-0000000FRJt-3BIZ
for candice@govan.co.za;
Sat, 29 Mar 2025 11:03:15 +0200
Received: from webmail.aurizathailand.com (localhost.localdomain [IPv6:::1])
by ns2.jtclogistics.com (Postfix) with ESMTPSA id 6A7BA645E97F;
Sat, 29 Mar 2025 16:02:06 +0700 (+07)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aurizathailand.com;
s=default; t=1743238938;
bh=PPDZJv6TQxs0qLooJBxK1a07JKZnoEDd+5IvAYa4jA8=; h=To:Subject:From;
b=Wz4ePiKoIlyKVbKLOByAqEqKSPErB9oAPLX6wb3s5mwoSNhBb4tkQyjzyoAhuI5k0
spuQNYwLWEdbSvMfmbo5a//98chA+eur/UVxiimzgjpRAE9x6JQf5Cs+EHCtC4rMt9
ct27dZ88DhaxTy+oIoqIOuAvI5o17uuHHJprijR0Sv1mp9EnkzyHjzWe7Gbc16+P3r
OVqOh2dvGIFIAEbUxvQjSOh2/YMSuaNmYw1TKUme0/PAh1i/ewLLSH7s/DDpaegEAU
Et3EOKnt/P6IdGw6BDtEqzxwbt/6iiBwiTHpXD1yt4ZRAejZEFq8p/lLzHm7MX8LyJ
Vc6i7vevZ4vqg==
Authentication-Results: ns2;
spf=pass (sender IP is ::1) smtp.mailfrom=noreply@ofidgrant.org smtp.helo=webmail.aurizathailand.com
Received-SPF: pass (ns2: connection is authenticated)
MIME-Version: 1.0
Date: Sat, 29 Mar 2025 11:02:06 +0200
To: undisclosed-recipients:;
Reply-To: mailatopecfunding@europe.com
User-Agent: Roundcube Webmail/1.4.15
Message-ID: <aea8ecccea8d4b5b76b90d867ae22e01@ofidgrant.org>
X-Sender: noreply@ofidgrant.org
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
X-PPP-Message-ID: <174323892744.407.9660598749130384102@localhost.localdomain>
From: Opec Grant <test@aurizathailand.com>
X-PPP-Vhost: aurizathailand.com
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- From: Desk of Director Foreign Processing Department OPEC
Fund for International Development (OFID) From: OPEC Fund for International
Development Program office. You have been nominated to receive the sum of
2,500,000.00 (Two Million Five Hundred Thousand) in the 2025 OPEC Fund for
International Development Program in collaboration with W.H.O. Covid-19 compens
[...]
Content analysis details: (14.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: ofid.org]
[URI: aurizathailand.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[94.74.87.176 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[94.74.87.176 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[94.74.87.176 listed in bl.score.senderscore.com]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.8 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject: ***SPAM*** Fyi
--
From: Desk of Director
Foreign Processing Department
OPEC Fund for International Development (OFID)
From: OPEC Fund for International Development Program office.
You have been nominated to receive the sum of 2,500,000.00 (Two Million
Five Hundred Thousand) in the 2025 OPEC Fund for International
Development Program in collaboration with W.H.O. Covid-19 compensation
relief funds program.
Your Email Address was attached to a secured file #: OPEC/762OFID/ZA
emerged as a beneficiary in Batch BT-XW-00-AMEA.
To process claim forward the following information's (Name, Address,
Phone, Fax, Age, and Batch Number) to your Fiduciary Agent at the below
email/tel:
Name: Daniel Howard
Email: mailatopecfunding@europe.com
Alternative Email: dmghoward@gmail.com
(Name, Address, Phone, Fax, Age, and Batch Number).
Please include your file #: OPEC/762OFID/UK
With warmest regards,
Mr. Suleiman Jasir Al-Herbish
Publicity Directorate,
OPEC Fund for International Development Program
www.ofid.org