File: /home/govancoz/mail/.spam/new/1749110381.M614829P809847.zacp120.webway.host,S=7743,W=7898
Return-Path: <lance.gooden0920366@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id oClxJG1OQWh3WwwA8rC0kQ
(envelope-from <lance.gooden0920366@hotmail.com>)
for <govancoz+spam@zacp120.webway.host>; Thu, 05 Jun 2025 09:59:41 +0200
Return-path: <lance.gooden0920366@hotmail.com>
Envelope-to: janine@govan.co.za
Delivery-date: Thu, 05 Jun 2025 09:59:41 +0200
Received: from [23.90.11.99] (port=42512 helo=KVM-43018.localdomain)
by zacp120.webway.host with esmtp (Exim 4.98.2)
(envelope-from <lance.gooden0920366@hotmail.com>)
id 1uN5Vj-00000003W4P-3vhW
for janine@govan.co.za;
Thu, 05 Jun 2025 09:59:41 +0200
Received: from User (localhost [IPv6:::1])
by KVM-43018.localdomain (Postfix) with SMTP id D93D4412EAF9;
Thu, 5 Jun 2025 03:16:56 -0400 (EDT)
Reply-To: <lance.gooden920366@hotmail.com>
From: "Lance Gooden"<lance.gooden0920366@hotmail.com>
Date: Thu, 5 Jun 2025 00:16:58 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250605071656.D93D4412EAF9@KVM-43018.localdomain>
X-Spam-Status: Yes, score=23.8
X-Spam-Score: 238
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS PAYMENT RECONCILI UNITED NATIONS PAYMENT RECONCILIATION
OFFICE AMERICAN QUARTERS, TEXAS USA
Content analysis details: (23.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lance.gooden0920366%40hotmail.com;ip=23.90.11.99;r=zacp120.webway.host]
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.90.11.99 listed in bl.score.senderscore.com]
1.2 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lance.gooden0920366(at)hotmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lance.gooden0920366(at)hotmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[lance.gooden920366(at)hotmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_SPF_FAIL No description available.
3.4 MSOE_MID_WRONG_CASE No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.8 GB_FREEMAIL_NUM Freemail spammy address
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 SPOOFED_FREEMAIL No description available.
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>UNITED NATIONS PAYMENT RECONCILI</title>
</head>
<body>
<p><font face="Trebuchet MS">UNITED NATIONS PAYMENT RECONCILIATION OFFICE<br>
AMERICAN QUARTERS, TEXAS USA<br>
<br>
Payment Notification<br>
<br>
Attention: Beneficiary<br>
<br>
This is to bring to your notice that the United Nations Secretary General
Ant�nio Guterres<br> has deliberated with the World Bank Group President
Ajay Banga for a compensation payment<br> of Five Million US Dollars
(US$5,000,000.00)
to scammed victims from Asia, America, Africa<br>and Europe. <br>
<br>
Meanwhile, your name and email address has emerged as one of the lucky
beneficiaries.<br>
To enable us start processing your payment, you are hereby advised to get back
to us<br>
as quickly as you receive this email for quick release of your $5,000,000.00
to you through <br>
our paying bank. <br>
<br>
<br>
Yours faithfully,<br>
<br>
Lance Gooden<br>
<b>Representative Coordinator | <font color="#0000FF">
lance.gooden@un-payment.com</font> <br>
Texas Office, USA<br>............................................................................................................<br>
</b><font size="2"><b><font color="#FF0000">NOTE:</font></b> If you receive this message in your SPAM/JUNK folder, that is because of the
restrictions implemented <br> by your Internet Service Provider, we urge you to
treat it genuinely</font><b>.<br>
<br>
</b></font></p>
</body>
</html>