HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: //home/govancoz/mail/.spam/new/1717962712.M867686P433618.zacp120.ve.host,S=6332,W=6458
Return-Path: <portogranikmndgbm@ymail.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id 8DtzM9gHZmbSnQYAvcbEzQ
	(envelope-from <portogranikmndgbm@ymail.com>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 09 Jun 2024 21:51:52 +0200
Return-path: <portogranikmndgbm@ymail.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Sun, 09 Jun 2024 21:51:52 +0200
Received: from [182.76.213.133] (port=49588 helo=hostking24.netandhost.com)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <portogranikmndgbm@ymail.com>)
	id 1sGOZy-00000001okC-37ey
	for danielle@govan.co.za;
	Sun, 09 Jun 2024 21:51:52 +0200
Received: from User (_gateway [192.168.1.253])
	by hostking24.netandhost.com (Postfix) with SMTP id 915A8102AF467;
	Sun,  9 Jun 2024 13:45:33 -0400 (EDT)
Reply-To: <portoproves@firemail.eu>
From: "PORTO ED"<portogranikmndgbm@ymail.com>
Date: Sun, 9 Jun 2024 10:45:36 -0700
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=32.3
X-Spam-Score: 323
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Sir I am Dr. Edgar Porto, a finance/wealth management
    executive. Kindly accept my goodwill approach to invest with you/your country
    with a good sum of money within my possession. My business/investment ap
   [...] 
 Content analysis details:   (32.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.7 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.5 FROM_LOCAL_NOVOWEL     From: localpart has series of non-vowel
                             letters
  0.3 HK_RANDOM_FROM         From username looks random
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [182.76.213.133 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [182.76.213.133 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [182.76.213.133 listed in psbl.surriel.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [portogranikmndgbm[at]ymail.com]
  1.2 MISSING_HEADERS        Missing To: header
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  2.6 MALFORMED_FREEMAIL     Bad headers on message from free email
                             service
  0.0 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FROM_MISSP_USER        From misspaced, from "User"
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  1.0 FROM_MISSPACED         From: missing whitespace
  1.1 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  1.1 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.9 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.0 SPOOFED_FREEMAIL       No description available.
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.9 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  PROGDMXD: 182.76.213.133MM

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Dear Sir</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
I am Dr. Edgar Porto, a finance/wealth management executive. Kindly accept my goodwill approach to invest with you/your country with a good sum of money within my possession. My business/investment approach to you will be based on your experience in your area of expertise that will yield good return on investments. Kindly get back to me for my details.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
With Regards</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Dr. Edgar Porto</DIV>
</FONT>
</BODY></HTML>