Return-Path: <nafco@nafcofuels.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id QDsLLlYWHWWt1gMAvcbEzQ
	(envelope-from <nafco@nafcofuels.com>)
	for <govancoz+spam@zacp120.ve.host>; Wed, 04 Oct 2023 09:37:58 +0200
Return-path: <nafco@nafcofuels.com>
Envelope-to: qual1@govan.co.za
Delivery-date: Wed, 04 Oct 2023 09:37:58 +0200
Received: from 5115220.titserver.net ([162.214.154.70]:54314)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.1)
	(envelope-from <nafco@nafcofuels.com>)
	id 1qnwS2-0015ZG-2j
	for qual1@govan.co.za;
	Wed, 04 Oct 2023 09:37:58 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=nafcofuels.com; s=default; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=ZhVgR5+d6LLTP2lD0aDy5uvRnqWc61su6o/xX3dJGTI=; b=ezvtyCsYo4ttzPd3ToU95tuINY
	iuXaz8QyxuLieVqSFOUJI0B4w5FL/PaqP/WYv7+G0Flxw6c56htEKVIY2SpHusrHOxGaR+z7IknLJ
	vRQuZcWhWHyjaps06wBwb+RG0TruCTuIgIrdtlYJTLCRUyy3maXxme9vjzjcg1JJpXyPiRmBg3pqa
	0VqMD8jY9Y3YYrpuKvNv0qpiiUohL0x0eDynn1Igtb9u8HXxWg3bvwGDdLw+dfBpNbbyed3L24ncv
	2XDDCTcZsYfwep3E3bxyj5pw8n4OeJowMn6orrNKf+bi8TxLsp1cVnLX+7Mg34eXwMVb4xyXd5hC+
	CLI0VNtg==;
Received: from [119.73.154.210] (port=60645 helo=nafcofuels.com)
	by 5115220.titserver.net with esmtpa (Exim 4.96)
	(envelope-from <nafco@nafcofuels.com>)
	id 1qnwR1-0005hr-0g
	for qual1@govan.co.za;
	Wed, 04 Oct 2023 02:36:44 -0500
Reply-To: securewaycouieruk@gmail.com
From: Thompson Dhaka<nafco@nafcofuels.com>
To: qual1@govan.co.za
Date: 04 Oct 2023 07:35:52 +0800
Message-ID: <20231004073552.0CD64E976B5E8E49@nafcofuels.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5115220.titserver.net
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nafcofuels.com
X-Get-Message-Sender-Via: 5115220.titserver.net: authenticated_id: nafco@nafcofuels.com
X-Authenticated-Sender: 5115220.titserver.net: nafco@nafcofuels.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attention Owner, I have registered your Unclaim/Imf Grant
   amount of $10.5M Usd with Secureway Courier Services with registration code
    of Shipment Code AWD 44ALG. please Contact with your delivery information
    such as, [...] 
 Content analysis details:   (11.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: nafcofuels.com]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [162.214.154.70 listed in bl.score.senderscore.com]
  1.1 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
  0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.3 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  consignment package

Attention Owner,

I have registered your Unclaim/Imf Grant amount of $10.5M Usd=20
with Secureway Courier Services with registration code of=20
Shipment Code AWD 44ALG. please Contact with your delivery=20
information such as, Your Name, Your Address and Your Telephone=20
Number:

Note: International Check is uncashable in your country so the=20
Check will be
converted to Cash Transfer and our Diplomatic Agent will make=20
secure
delivery, AirWay Bill/shipping cost shall be paid by you.=20
delivery
agent ALex is incharge of your delivery. He will call you once he=20
arrives in your country.

Office: E-mail: (securewaycouieruk@gmail.com)
Contact Name: Jacob Anderson

Best Regards,

Thompson Dhaka