| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757256334.M268057P10895.host100322.itwesthosting.com,S=5212,W=5327:2, |
Return-Path: <Info@usa.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 8KHYD46avWiPKgAAp0YrwQ
(envelope-from <Info@usa.com>)
for <ithome@host100322.itwesthosting.com>; Sun, 07 Sep 2025 16:45:34 +0200
Return-path: <Info@usa.com>
Envelope-to: ripe-admin@h1telekom.hr
Delivery-date: Sun, 07 Sep 2025 16:45:34 +0200
Received: from mail.positive.kz ([95.56.254.230]:54556)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <Info@usa.com>)
id 1uvGe5-0002pb-0m
for ripe-admin@h1telekom.hr;
Sun, 07 Sep 2025 16:45:34 +0200
Message-ID: <614705337-17074@mail.positive.kz>
Received: from [192.168.0.178] ([105.112.178.143])
by mail.positive.kz with ESMTPS
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256 bits));
Sun, 7 Sep 2025 23:34:17 +0900
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <Info@usa.com>
From: "Mr. John Paul" <Info@usa.com>
Date: Sun, 07 Sep 2025 15:32:30 +0100
Reply-To: moneygramoffice@email.com
X-Mailer: Mozilla 4.72 [en] (Windows NT 5.0; I)
X-Spam-Status: Yes, score=14.9
X-Spam-Score: 149
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTENTION:BENEFICIARY, WE THE MONEY GRAM REMMITTING OFFICE
WERE HEREBY WRITE TO INFORM YOU THAT WE HAVE ALREADY SENT YOUR FULL COMPENSATION
PAYMENT OF $4.5M TO YOU THROUGH MONEY GRAM, YOU WILL BE RECE [...]
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.56.254.230 listed in bl.score.senderscore.com]
0.0 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.56.254.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
1.7 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
2.5 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of
money
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FIRST PAYMENT THROUGH MONEY GTAM. , 95.56.254.230
X-From-Rewrite: unmodified, forwarded message
ATTENTION:BENEFICIARY,
WE THE MONEY GRAM REMMITTING OFFICE WERE HEREBY WRITE TO
INFORM YOU THAT WE HAVE ALREADY SENT YOUR FULL COMPENSATION
PAYMENT OF $4.5M TO YOU THROUGH MONEY GRAM, YOU WILL BE
RECEIVING 10.000.00USD PER DAY, AND WE HAVE SEND THE FIRST
PAYMENT TO YOU.
SO CONTACT OUR DIRECTOR MR.JOHN PAUL AND ASK HIM TO GIVE YOU
THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE
TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY
PROBLEM.
CONTACT HIM WITH THE BELLOW INFORMATION.
( moneygramoffice@email.com )
PHONE NUMBER (+2348020585)
AND CONTACT HIM WITH YOUR FULL INFORMATION.
Your name............
country.... ..........
phone ...........
address...............
city..........
age..................
sex..................
CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE
THE MONEY GRAM INFORMATION TO YOU AS SOON AS YOU CAN.
Thanks and Remain Blessed
John Paul.
From Money Gramm.