HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1raE9s-6533874474
From Kebi@suncor.com Wed Feb 14 13:14:36 2024
Return-path: <Kebi@suncor.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Wed, 14 Feb 2024 13:14:36 +0100
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.97.1)
	(envelope-from <Kebi@suncor.com>)
	id 1raE9s-0000000DtkA-0ijk
	for mail@globen-flakket.dk;
	Wed, 14 Feb 2024 13:14:36 +0100
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.0);
	Wed, 14 Feb 2024 13:14:36 +0100
From: "Mr. Sibu Kebi" <Kebi@suncor.com>
To: mail@globen-flakket.dk
Subject: *****SPAM***** Re: Urgent Assistance Needed
Date: 14 Feb 2024 13:17:25 +0100
Message-Id: <20240214131725.9FE9D199F9506B1E@suncor.com>
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.9 required=5.0 tests=ADVANCE_FEE_5_NEW_MONEY,
	COMPENSATION,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
	FREEMAIL_REPLYTO_END_DIGIT,FSL_BULK_SIG,HDRS_MISSP,HK_NAME_MR_MRS,
	KHOP_HELO_FCRDNS,LOTS_OF_MONEY,MILLION_USD,MONEY_FRAUD_8,
	MONEY_FREEMAIL_REPTO,MONEY_NOHTML,PYZOR_CHECK,RCVD_IN_MSPIKE_BL,
	RCVD_IN_MSPIKE_L4,T_SCC_BODY_TEXT_LINE,UNCLAIMED_MONEY,URG_BIZ
	autolearn=unavailable autolearn_force=no version=4.0.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_65CCAEAC.A9AFE70D"

This is a multi-part message in MIME format.

------------=_65CCAEAC.A9AFE70D
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Hello Sir/Madam, I only got your contact details from the
  South Africa Exchange Information On-line Service on my personal programmed
   search on the internet for a reputable company or individual to assist me
   sincerely [...] 

Content analysis details:   (21.9 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            [jerrysong001100(at)gmail.com]
 2.7 UNCLAIMED_MONEY        BODY: People just leave money laying around
 0.0 MILLION_USD            BODY: Talks about millions of dollars
 0.0 RCVD_IN_MSPIKE_L4      RBL: Bad reputation (-4)
                            [198.12.118.214 listed in bl.mailspike.net]
 2.0 PYZOR_CHECK            Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
 0.0 LOTS_OF_MONEY          Huge... sums of money
 0.9 URG_BIZ                Contains urgent matter
 1.0 HK_NAME_MR_MRS         No description available.
 1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                            freemails
 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
-0.0 T_SCC_BODY_TEXT_LINE   No description available.
 2.5 MONEY_NOHTML           Lots of money in plain text
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
 1.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
 0.7 HDRS_MISSP             Misspaced headers
 0.3 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
 3.0 MONEY_FRAUD_8          Lots of money and very many fraud phrases
 0.2 COMPENSATION           "Compensation"
 3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
 0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe



------------=_65CCAEAC.A9AFE70D
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from lnltechnicalsupplieltd.com ([198.12.118.214] helo=mail0.mhca.org)
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <Kebi@suncor.com>)
	id 1raE9r-0000000DtfP-3VAe
	for mail@globen-flakket.dk;
	Wed, 14 Feb 2024 13:14:36 +0100
Reply-To: jerrysong001100@gmail.com
From: "Mr. Sibu Kebi" <Kebi@suncor.com>
To: mail@globen-flakket.dk
Date: 14 Feb 2024 13:17:25 +0100
Message-ID: <20240214131725.9FE9D199F9506B1E@suncor.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 198.12.118.214, -10 Spam score
BlacklistCheck: Blacklisted address, +50 Spam score
SPFCheck: Soft Fail, 30 Spam score
X-Old-Subject:Re: Urgent Assistance Needed
Subject:*****SPAM***** Re: Urgent Assistance Needed
SpamTally: Final spam score: 90

Hello Sir/Madam,

I only got your contact details from the South Africa Exchange=20
Information On-line Service on my personal programmed search on=20
the internet for a reputable company or individual to assist me=20
sincerely & confidential which your information & profiles were=20
very satisfactory, so I decided to contact you immediately. 

It is my great pleasure to write you this letter. Within the=20
Eskom Holdings Limited where I work as a Director of Audit and=20
Project Implementation, I have in my possession an overdue=20
payment in US funds.

The said funds represent a certain percentage of the total=20
contract value executed on behalf of my Department by a foreign=20
contracting firm, which, I the official over-invoiced to the=20
amount of US$45,000, 000.00 (Forty-Five Million United States=20
Dollars). Though the actual contract cost has been paid to the=20
original contractor leaving the excess balance unclaimed. Since=20
the present elected Government is determined to pay foreign=20
contractors all debts owed, so as to maintain a good relationship=20
with foreign governments and non-government agencies, I included=20
the bills for approvals with the Department of Finance and the=20
South Africa Reserve Bank (SARB).

I am seeking your assistance to front as a beneficiary of the=20
unclaimed funds since I am not allowed to operate foreign=20
accounts, details, and change of beneficiary information upon=20
application for claim to reflect payment and approvals will be=20
secured on behalf of you/your Company. I have to propose that=20
should you be willing to assist me in this transaction your share=20
as compensation will be (35%), and the balance of (65%) will be=20
for me. The business is completely safe and secure, provided you=20
treat it with the utmost confidentiality. It does not matter=20
whether you/your Company does contract projects, as a transfer of=20
powers will be secured in favor of you/your Company. Also, your=20
area of specialization is not a hindrance to the successful=20
execution of this transaction.

I have reposed my confidence in you and hope that you will not=20
disappoint me.

For more information kindly reply immediately through my=20
consultant Mr. Jerry Song. email below=20
  (jerrysongconsultant0101@gmail.com)

Thanks for your co-operation.

Kindest Regards,
Mr. Sibu Kebi

------------=_65CCAEAC.A9AFE70D--