OwlCyberSecurity - MANAGER
Edit File: 1726556063.M937030P1640951.premium128.web-hosting.com,S=6674,W=6793:2,
Return-Path: <noor@ivando.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id oIn1NZ8n6Wb3CRkAAvhI2g (envelope-from <noor@ivando.com>) for <contact+spam@gourayafroid.com>; Tue, 17 Sep 2024 02:54:23 -0400 Return-path: <noor@ivando.com> Envelope-to: contact@gourayafroid.com Delivery-date: Tue, 17 Sep 2024 02:54:23 -0400 Received: from round.ivando.com ([193.25.216.42]:39519) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <noor@ivando.com>) id 1sqS6M-006tx0-1p for contact@gourayafroid.com; Tue, 17 Sep 2024 02:54:23 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=ivando.com; h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; i=noor@ivando.com; bh=FhkgOpY6TAOCe+rxzV/WqVHtMJg=; b=ZVsWpS63BpGmTi05Mxb66dTxksLUl5OxyRx8M3KG0p7mps+Q8cQMcOG2MTRfgc4GfvQfF4Wa3KUI iUhUlvYQZCJ9+SyMLNI95+2mW0HoID69IZ0DG/QSQn58qOLj9XUOJ50+QAjr967KeiK78p5LcHJo lIqOc1wvhubfzAseYbrT/uw9TgPbS9qIG22q103PQ/n9ukqX7+v3ZiQyFThuDNPjksWX92lsW+SH rxKxUf5zYuepzn5chdrKmkbSnYIqfHPwjAxSQxuFhWhVNNeLPWAGGZrXmUSVAJTcOyQr+rN8lGMG Vhn6QlnhUECtB7kxTvzO++smGu37cOY/X9EA1w== DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=ivando.com; b=LWRr/3kP+JP2rRlaofErOtcxbC6C2i2OopuKqN6mZ/aRS/MyNOeNOR6smZ6sLyh/5ybfeFFScdzs 1LfyproDn11mt3MdiVC0dBLUFjkA0BJat3bYTFQMeoU2bOe/5FrKhEHiMq0qW3gPinXiUeGkacyI NwdRWDJI0ElzZGDYqfwPGP37UGqMob26eH45zgKlEYajz2nhwM7ILsqoUK6X1mYMu41Am91Ecekt blPWofnKztQ2mGVRg6v+wPLyrfQm0mQRYfliJMRkaXH73NBh9QgGfDZvQyRqasE949MIyIcibEAO +t/rL4feqBLtPyB99W8u3FLiZaQJfZ+wloK8sg==; Reply-To: popaeduard812@gmail.com From: "Scam Victims Compensation@gourayafroid.com" <noor@ivando.com> To: contact@gourayafroid.com Date: 16 Sep 2024 23:03:14 -0700 Message-ID: <20240916230314.3D8B480AE43C259A@ivando.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=5.4 X-Spam-Score: 54 X-Spam-Bar: +++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Attn Victim:contact, My name is Eduard Popa, and I am the Director of the Internet Crime Complaint Center NY Department (IC3). Our records indicate that you are eligible to receive restitution for one or more of the inter [...] Content analysis details: (5.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ivando.com] 2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus DBL blocklist [URIs: ivando.com] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: ivando.com] 0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS blocklist [URIs: ivando.com] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [popaeduard812[at]gmail.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [193.25.216.42 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [193.25.216.42 listed in sa-accredit.habeas.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** Scam Victims Compensation from Internet Crime Complaint Cent er NY Department (IC3) <!DOCTYPE HTML> <html><head><title></title> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> </head> <body style=3D"margin: 0.4em;"><p>Attn Victim:contact,</p><p>My name is Edu= ard Popa, and I am the Director of the Internet Crime Complaint Center NY D= epartment (IC3).<br>Our records indicate that you are eligible to receive r= estitution for one or more of the internet fraud schemes you’ve been = a victim of. The fraudsters were apprehended and have been prosecuted and s= entenced.</p><p> The prosecuting law firm has been approved by the judge to pay each victim = an amount of USD 1,759,910.00 as restitution.<br>You are required to contac= t the law firm at the below email address, and you are to send your referen= ce number, which is also stated below.</p><p>Email: <a href=3D"mailto:popae= duard812@gmail.com">popaeduard812@gmail.com</a></p><p>Ref: GBV-IP/2785-IRL1= 42/064</p><p>Thanks, and regards!<br>Eduard Popa Director<br>Internet Crime= Complaint Center (IC3)<br> New York, NY 10216, USA.</p></body></html>