File: /home/govancoz/mail/.spam/new/1751821574.M535877P1871995.zacp120.webway.host,S=7267,W=7408
Return-Path: <manportodrg@outlook.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id iAkYHwatamh7kBwA8rC0kQ
(envelope-from <manportodrg@outlook.com>)
for <govancoz+spam@zacp120.webway.host>; Sun, 06 Jul 2025 19:06:14 +0200
Return-path: <manportodrg@outlook.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Sun, 06 Jul 2025 19:06:14 +0200
Received: from vmi2653792.contaboserver.net ([46.250.238.159]:56660)
by zacp120.webway.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <manportodrg@outlook.com>)
id 1uYSod-00000007wwU-2k6q
for danielle@govan.co.za;
Sun, 06 Jul 2025 19:06:14 +0200
X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZGFuaWVsbGVAZ292YW4uY28uemEifQ==
DKIM-Signature: v=1; a=rsa-sha256; d=smccmonc.com; s=mail; c=relaxed/relaxed;
bh=4iqj641Y4Rvc6bcEjGsW/49wCK/wBoHK3z8H2wMhrFs=;
h=from:to:subject:date; t=1751821525;
b=pW5pO7IlBlWH0VOYhiOgZLpOfZkFIW28KrofuSxJmE2a0YDW5dK5IiXdeoLn9XILLR/bI97+o
uKgEy2A9lMPDbtUAqiom1rxbrcevPVrx/9hJ2cgzJjQ7Z2p+C1XTof4eVsWi/uV58/cuJc6Wr4r
ZaOi8i4f2TD7obVuc3C2l8wELmAEwXjoILAAizr3kKFk6hEd3REY/ximV/cKxpHNZ0om8GRvIuP
rNp1BID6fQAEvjwjlZ4/CRPROYiojXoTnBKHA3X9CnZ33yz0+pmmwwbVGA6ZwTumAipiLSWe3HW
QJHa8irbB+jdtuG5+fA+peGuE6NHiC810FtYdIflpHeg==;
Received: from user (45.141.233.188)
by vmi2653792.contaboserver.net (KumoMTA 46.250.238.159)
with ESMTP id 68f77b1a5a8b11f0b46d0050565b305c for <danielle@govan.co.za>;
Sun, 6 Jul 2025 17:05:25 +0000
Reply-To: <portoaddress@onionmail.org>
From: "PORTO"<manportodrg@outlook.com>
Date: Mon, 7 Jul 2025 21:04:17 +0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam I am Dr. Edgar Porto, a finance/wealth management
executive. Kindly accept my goodwill approach to invest with you/your country
with a good sum of money within my possession. My business/investment ap
[...]
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?46.250.238.159>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: smccmonc.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[46.250.238.159 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[46.250.238.159 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[46.250.238.159 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[manportodrg(at)outlook.com]
2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.2 MISSING_HEADERS Missing To: header
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 SPOOFED_FREEMAIL No description available.
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** PREVIEW: 46.250.238.159MN
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT face="Verdana">Dear Sir/Madam</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">I am Dr. Edgar Porto, a finance/wealth management executive. Kindly accept my goodwill approach to invest with you/your country with a good sum of money within my possession. My business/investment approach to you will be based on your experience in your area of expertise that will yield good return on investments. </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">Kindly get back to me for more details.</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">With Regards</FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana"> </FONT></DIV>
<DIV>
<FONT face="Verdana">Dr. Edgar Porto</FONT></DIV>
</FONT>
</BODY></HTML>