OwlCyberSecurity - MANAGER
Edit File: 1713292405.M415237P285630.premium128.web-hosting.com,S=3992,W=4068:2,
Return-Path: <mail@haytham.site> Delivered-To: faouzi.berroua+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id IMvtF3XEHma+WwQAAvhI2g (envelope-from <mail@haytham.site>) for <faouzi.berroua+spam@gourayafroid.com>; Tue, 16 Apr 2024 14:33:25 -0400 Return-path: <mail@haytham.site> Envelope-to: faouzi.berroua@gourayafroid.com Delivery-date: Tue, 16 Apr 2024 14:33:25 -0400 Received: from [107.174.244.103] (port=49292 helo=mail0.malt.com) by premium128.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <mail@haytham.site>) id 1rwncO-001NJv-0B for faouzi.berroua@gourayafroid.com; Tue, 16 Apr 2024 14:33:25 -0400 Reply-To: receivablesklauke@gmail.com From: "Crime Complaint Center NY Department (IC3)" <mail@haytham.site> To: faouzi.berroua@gourayafroid.com Date: 16 Apr 2024 21:32:35 +0300 Message-ID: <20240416213235.28DD24E2B3CC4E54@haytham.site> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=7.1 X-Spam-Score: 71 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Attn faouzi.berroua@gourayafroid.com, My name is Eduard Popa, and I am the Director of the Internet Crime Complaint Center NY Department (IC3). Our records indicate that you are eligible to receive restitution for one or more of the inter [...] Content analysis details: (7.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** Scam Victims Compensation from Internet Crime Complaint Center NY Department (IC3) <!DOCTYPE HTML> <html><head> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> </head> <body><p>Attn faouzi.berroua@gourayafroid.com,</p><p>My name is Eduard Popa= , and I am the Director of the Internet Crime Complaint Center NY Departmen= t (IC3).<br>Our records indicate that you are eligible to receive restituti= on for one or more of the internet fraud schemes you’ve been a victim= of. The fraudsters were apprehended and have been prosecuted and sentenced= =2E</p><p>The prosecuting law firm has been approved by the judge to pay ea= ch victim an amount of USD 1,759,910.00 as restitution.<br> You are required to contact the law firm at the below email address, and yo= u are to send your reference number, which is also stated below.</p><p>Emai= l: <a href=3D"mailto:klauke.receivables@emers0nn.com">klauke.receivables@em= ers0nn.com</a> OR <a href=3D"mailto:receivablesklauke@gmail.com">receivable= sklauke@gmail.com</a></p><p>Ref: GBV-IP/2785-IRL142/064</p><p>Thanks, and r= egards!<br>Eduard Popa Director<br>Internet Crime Complaint Center (IC3)<br= >New York, NY 10216, USA.<br></p></body></html>