File: /home/govancoz/mail/.spam/new/1745427515.M752790P1081363.zacp120.webway.host,S=7730,W=7884
Return-Path: <lance.gooden0920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id QAnMKzscCWgTgBAA8rC0kQ
(envelope-from <lance.gooden0920366@hotmail.com>)
for <govancoz+spam@zacp120.webway.host>; Wed, 23 Apr 2025 18:58:35 +0200
Return-path: <lance.gooden0920366@hotmail.com>
Envelope-to: janine@govan.co.za
Delivery-date: Wed, 23 Apr 2025 18:58:35 +0200
Received: from [50.3.189.36] (port=44600 helo=189.3.50-static.rdns.serverhub.com)
by zacp120.webway.host with esmtp (Exim 4.98.1)
(envelope-from <lance.gooden0920366@hotmail.com>)
id 1u7dQf-00000004XBF-3jhf
for janine@govan.co.za;
Wed, 23 Apr 2025 18:58:35 +0200
Received: from User (localhost [IPv6:::1])
by 189.3.50-static.rdns.serverhub.com (Postfix) with SMTP id 4D1872CA727;
Sat, 19 Apr 2025 14:57:04 -0400 (EDT)
Reply-To: <lance.gooden920366@hotmail.com>
From: "Lance Gooden"<lance.gooden0920366@hotmail.com>
Date: Wed, 23 Apr 2025 09:48:28 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250419185704.4D1872CA727@189.3.50-static.rdns.serverhub.com>
X-Spam-Status: Yes, score=24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS PAYMENT RECONCILI UNITED NATIONS PAYMENT RECONCILIATION
OFFICE AMERICAN QUARTERS, TEXAS USA
Content analysis details: (24.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[50.3.189.36 listed in sa-trusted.bondedsender.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden0920366%40hotmail.com;ip=50.3.189.36;r=zacp120.webway.host]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lance.gooden0920366(at)hotmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[lance.gooden920366(at)hotmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lance.gooden0920366(at)hotmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
3.4 MSOE_MID_WRONG_CASE No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.8 GB_FREEMAIL_NUM Freemail spammy address
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_SPF_FAIL No description available.
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 SPOOFED_FREEMAIL No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.4 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face="Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General
Ant�nio Guterres<br> has deliberated with the World Bank Group President
Ajay Banga for a compensation payment<br> of Five Million US Dollars
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get back
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.00
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator | <font color="#0000FF">
lance.gooden@un-payment.com</font> <br>
Texas Office, USA<br>............................................................................................................<br>
</b><font size="2"><b><font color="#FF0000">NOTE:</font></b> If you receive this message in your SPAM/JUNK folder, that is because of the
restrictions implemented <br> by your Internet Service Provider, we urge you to
treat it genuinely</font><b>.<br>
<br>
</b></font></p>
</body>
</html>