| Current File : /home/itiffy/mail/.spam/cur/1643916555.M166362P3257138.premium224.web-hosting.com,S=5904,W=6016:2, |
Return-Path: <tegar@citra.net.id>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id 6LiRCQst/GEyszEA1L5CYA
(envelope-from <tegar@citra.net.id>)
for <itiffy+spam@premium224.web-hosting.com>; Thu, 03 Feb 2022 14:29:15 -0500
Return-path: <tegar@citra.net.id>
Envelope-to: info@itiffy.com
Delivery-date: Thu, 03 Feb 2022 14:29:15 -0500
Received: from pakpos.citra.net.id ([202.65.115.106]:32881 helo=citra.net.id)
by premium224.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <tegar@citra.net.id>)
id 1nFhn4-00DfPI-EO
for info@itiffy.com; Thu, 03 Feb 2022 14:29:15 -0500
Received: from pakpos.citra.net.id (localhost [127.0.0.1])
by pakpos.citra.net.id (Postfix) with ESMTP id 3AC66C1D4A54F
for <info@itiffy.com>; Fri, 4 Feb 2022 02:28:27 +0700 (WIB)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citra.net.id;
s=default; t=1643916507;
bh=C7UAWKooepV2cUq120qXtQsblvI73Y96bLLMZbKobkE=;
h=Received:Received:From:To:Subject;
b=er64pPP03TERMGmWsSHyxsVkjZ6M8G/Ye8/rGrd5Rkt/ULY2ThgyPpbjS51ffuUsF
KdjHpPv/8zS0OeGTeumm4djhhwNHJVCAhrX00HANeQhXNwDSEN6eqOYsL9rlXLI7YA
HHPuMXzYFBQ1+GgRLbFHFIGlVJ6Dkc1tyWNKFfmA=
Authentication-Results: pakpos.citra.net.id;
spf=pass (sender IP is 127.0.0.1) smtp.mailfrom=tegar@citra.net.id smtp.helo=pakpos.citra.net.id
Received-SPF: pass (pakpos.citra.net.id: localhost is always allowed.) client-ip=127.0.0.1; envelope-from=tegar@citra.net.id; helo=pakpos.citra.net.id;
X-Virus-Scanned: amavisd-new at example.com
X-Spam-Level: **
Authentication-Results: pakpos.citra.net.id (amavisd-new);
dkim=pass (1024-bit key) header.d=citra.net.id
Received: from pakpos.citra.net.id ([127.0.0.1])
by pakpos.citra.net.id (pakpos.citra.net.id [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 0G64fcmsyluB for <info@itiffy.com>;
Fri, 4 Feb 2022 02:28:24 +0700 (WIB)
Received: from citra.net.id (ec2-35-86-141-29.us-west-2.compute.amazonaws.com [35.86.141.29])
by pakpos.citra.net.id (Postfix) with ESMTPSA id 0175EC1D48F22
for <info@itiffy.com>; Fri, 4 Feb 2022 02:28:23 +0700 (WIB)
Received-SPF: pass (pakpos.citra.net.id: connection is authenticated)
Reply-To: wjarvisr@gmail.com
From: "William R Jarvis"<tegar@citra.net.id>
To: info@itiffy.com
Date: 03 Feb 2022 19:28:23 +0000
Message-ID: <20220203192823.280722CEF3F0C349@citra.net.id>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=5.7
X-Spam-Score: 57
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings to you, I want to ask for your Partnership in getting
back the funds 3,500,000.00 (Three Million Five Hundred Thousand Dollars)
left behind by a citizen of your country Mr. Vinay Kumar. This is safe and
benef [...]
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: citra.net.id]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR HONEST COOPERATION IS HIGHLY NEEDED!
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P>Greetings to you,</P>
<P>I want to ask for your Partnership in getting back the funds 3,500,000.0=
0 (Three Million Five Hundred Thousand Dollars) left behind by a citizen of=
your country Mr. Vinay Kumar. This is safe and beneficial, I am the operat=
ions manager of our bank here in United states of America.</P>
<P>I will give you more details of my self and this transaction once i get =
a response from you.</P>
<P>Regards,<BR>William R Jarvis<BR>Operations Manager<BR>SDTB</P></BODY></H=
TML>