| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757310195.M926887P27821.host100322.itwesthosting.com,S=8629,W=8794:2, |
Return-Path: <kkkk@gmail.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id tycKN/NsvmitbAAAp0YrwQ
(envelope-from <kkkk@gmail.com>)
for <ithome@host100322.itwesthosting.com>; Mon, 08 Sep 2025 07:43:15 +0200
Return-path: <kkkk@gmail.com>
Envelope-to: info@vrchocoart.com
Delivery-date: Mon, 08 Sep 2025 07:43:15 +0200
Received: from [86.54.42.197] (port=50595 helo=gmail.com)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <kkkk@gmail.com>)
id 1uvUep-0007EZ-0j
for info@vrchocoart.com;
Mon, 08 Sep 2025 07:43:15 +0200
Reply-To: kwesiboah97@gmail.com
From: kkkk@gmail.com
To: info@vrchocoart.com
Date: 08 Sep 2025 07:43:14 +0200
Message-ID: <20250908074314.ED0B9F45A48E53AE@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_08F80527.F5C1AF47"
X-Spam-Status: Yes, score=32.4
X-Spam-Score: 324
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: To Future Partner, γγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγγ
Good day, I know this email will come as a surprise, but I need to [...]
Content analysis details: (32.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?86.54.42.197>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[86.54.42.197 listed in psbl.surriel.com]
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[86.54.42.197 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kkkk[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[kwesiboah97[at]gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[86.54.42.197 listed in sa-accredit.habeas.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
6.0 KAM_INVEST Investment Scams
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 SPOOFED_FREEMAIL No description available.
0.3 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Business.
X-From-Rewrite: unmodified, forwarded message
------=_NextPart_000_0012_08F80527.F5C1AF47
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
To Future Partner,
=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=
=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=
=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=
=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80=E3=
=80=80=E3=80=80=E3=80=80=E3=80=80=E3=80=80
Good day, I know this email will come as a surprise, but I need=20
to contact you due to the urgency and confidentiality of this=20
business transaction. I am the Chief Account Officer of Ghana=20
Gold. I have a deal here in my office, and I need a foreign=20
partner to execute it with my colleague and me. We over-invoiced=20
a contract payment valued at US$100 million. We awarded contracts=20
for the supply and maintenance of all the Gold field and mining=20
equipment for the national gold mines to some foreign contractors=20
valued at US$5 billion, which we over-invoiced by US$100 million=20
in addition to the total contract sum.
Most contractors have been paid, and the remaining contractors=E2=80=99=20
payments are currently being processed for payment. With that, my=20
colleague and I have decided to include you among these remaining=20
contractors to process the sum of US$100 million in your company=20
or in your name to claim it for our mutual benefit. I am now=20
contacting you to present you as the subcontractor who has been=20
awarded the contract for the supply of heavy mining equipment=20
used in the recent overhauling of the refineries and mining=20
sites, with a value of US$100 million.
I will advise you to furnish me with your personal information,=20
including your cell phone number and the name of your company=20
with address, to enable me to register it with our corporate=20
affairs commission in charge of allied and companies registration=20
as an indigenous company.
Any foreign company must be registered in this country. Also,=20
with your acceptance to execute this business with me, I need to=20
be sure of your confidentiality regarding the conclusion of this=20
deal. you will be given 30% of the total amount, while my=20
colleague and I will take 70% once the money gets into your=20
company account in your country. Also, with my position here, I=20
can officially arrange with you to be lifting 140 or 200=20
Kilograms of gold per month by getting a one-year or two-year=20
Gold allocation contract in your name and company name, whether=20
you are here or not. With this, we can make more money from the=20
Gold lifting here in Ghana. I will detail more on this once I get=20
your response.
Thank you, and hope to hear from you as soon as possible. Send me=20
your phone number or Email to call you for more details.
Best Regards
Kwesi
------=_NextPart_000_0012_08F80527.F5C1AF47
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P></P></BODY></HTML>
------=_NextPart_000_0012_08F80527.F5C1AF47--