
­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
Return-Path: <test@test.com>
Delivered-To: info+spam@autozone.com.sa
Received: from depro4.fcomet.com
	by depro4.fcomet.com with LMTP
	id KFr/D5u/uWQLty4AfHesKA
	(envelope-from <test@test.com>)
	for <info+spam@autozone.com.sa>; Fri, 21 Jul 2023 01:13:31 +0200
Return-path: <test@test.com>
Envelope-to: info@autozone.com.sa
Delivery-date: Fri, 21 Jul 2023 01:13:31 +0200
Received: from ironportvm9.gmu.edu ([129.174.0.61]:57479)
	by depro4.fcomet.com with esmtp (Exim 4.96)
	(envelope-from <test@test.com>)
	id 1qMcpw-00CqJR-0p
	for info@autozone.com.sa;
	Fri, 21 Jul 2023 01:13:31 +0200
Message-Id: <800299$2j24v@ironportvm9.gmu.edu>
X-IronPort-AV: E=Sophos;i="6.01,220,1684814400"; 
   d="scan'208";a="2721951"
X-IPAS-Result: =?us-ascii?q?A2B4+AAEvrlk/0gMcApCE4EXBoNLgkuUUIIJGZdRhDWBa?=
 =?us-ascii?q?oFqDwEBAQEBAQEBAU0EAQGFFQY8AQEBAQWFVyZLAQYBAQEBAwIDAQEBAQEBA?=
 =?us-ascii?q?wIBBwEBAQEGAwGBHYUvDAEBAQEBAQEzgVxIAQEBhEUQAi4eAnYKgiODQZMnm?=
 =?us-ascii?q?xuBNBoCZYEHgVyBfK8ZAYRBhRKBBQEFYIlTiF6CKgIQARMTTYNziTsDAQ0BC?=
 =?us-ascii?q?wGFG3aDfIkmGA4ZgQgIX4FwPgINVAsLY4EYgksCAhE6FFN4GwMHA4EFEC8HB?=
 =?us-ascii?q?C8mBgkYLyUGUQchDCQJExVABHMgZYFaCoEIPxUOEYJRYTsbTYJqCRUMNFN9E?=
 =?us-ascii?q?EkdgRWBBigdHi0DMxEdNwkDez01CAwbT0gdFQSdTAk1NFgwYkQRBUIcGpEbg?=
 =?us-ascii?q?gUojwSCG6A4CoQLgVgHiHuuHRYDhAeOEIQHiFeLSKJ5IQeFTYJYcHAVggeBb?=
 =?us-ascii?q?RmEZ4EYAYFtAQEBAQECAYNZWCQFgwgBAgaSXEhhCYkJAQUFgjQBAQ?=
IronPort-Data: A9a23:GDAGLq2lKgYr8qaFzPbD5a1xkn2cJEfYwER7XKvMYLTBsI5bp2cAy
 DEcC2mHMqyPM2OhfYglb97k8RsFscSEyYcxTFQ+qSg9HnlHgPSeCIXCJC8cHQvLdZSbExgPA
 +byyzXkBJppJpMJjk71atANlVEliefSAOCU5NfsYkhZXRVjRDoqlSVtkus4hp8AqdWiCmthg
 /uryyHkEAHjg2cc3l48sfrZ80sw5qyq41v0g3RnDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W
 9HCwNmRlo8O105wYj8Nuu+TnnwiGtY+DyDX4pZlc/HKbix5m8AH+v1T2Mzwxqtgo27hc9hZk
 L2hvHErIOsjFvWkdO81C3G0H8ziVEFL0OevHJSxjSCc527sTGLw5s8+NUYvPtdJoe9pL2JIy
 dVNfVjhbjjb7w636LK2UOxhnYI5NsLrOoZZvWtvpd3bJa9+B8maGeOTv5kHhl/chegXdRraT
 9YUciZHcBnbf1tEPVJ/5JcWxrjy3yiiKlW0rnrPvYoy/FOOnDV3753TLf+SevvNZ4ZsyxPwS
 mXuuj6R7gshHN2Zxz2t+2+wgf3Imy69U4UXUqaxntZrhlOU7mUOFhRQXly+5+Kw4ma/XdxYA
 0UK8ysq66M18QqwR7HVXhu2p1aNoBVaUN1VVfYzgCmMzKTTyw+HDS4fR1Zpadoos+c/WzEsy
 1LPlNTsQydm2JWUT3ya3r6Ko3W5Pi1TNmZqTS4CQwwt6sfi5Zo6yBnIS5B4Gcadj9v7Hhn53
 TGR6iM5gvMIhKYj1qO1+njOnTOyr5iPVQddzgTRUGWN5xxwaYrjbIutr0PShd5BKoieZlCet
 XxCkM+bqvsHZbmMkiKKaOwSFbWv6urDNjDAx0Vmd7Eg8Tqq03e8dIRI5DhlOEZiKYAPfjqve
 0a7kQJX6ph7NWSjdrR6ecS2Ects1qGIPdXjWPf8Z8VHcJV1MgSA+Wd1bCa43mbjl2Aljqx5M
 pCeN92lZV4bD6pg5DOpRqEW1rpt3SlW7WLVS5fTxgull7GZYTiOQN8tMV2Aacgw86XCqwLQt
 c1WX/Zm0D0GCKunO3ORqNRVcgpiwWUHOK0aYvd/LoarSjeK0kl4YxMN6dvNo7BYopk=
IronPort-HdrOrdr: A9a23:MqWGLayKyIkhfU2c9bxsKrPwML1zdoMgy1knxilNodU8SKOlfq
 eV8MjztCWftN9/YgBCpTntAsm9qBDnmKKdiLN5VdyftW/dyQmVxepZg7cKrQeAJxHD
X-Talos-CUID: =?us-ascii?q?9a23=3A6OzW/mkzDkRmO2BA7kFyuCJXetDXOV73827MBnX?=
 =?us-ascii?q?oMGFwS+fEElaO1qBir+M7zg=3D=3D?=
X-Talos-MUID: 9a23:HhBZdQQrmKfhf058RXS2nBFnK/w1s52oN2UzjLBBu+7DF29JbmI=
Received: from unknown (HELO hermes.rrchnm.org) ([10.112.12.72])
  by ironportvm9.gmu.edu with ESMTP; 20 Jul 2023 19:12:49 -0400
Received: from [87.120.84.144] (unknown [10.112.12.66])
	by hermes.rrchnm.org (Postfix) with ESMTPS id B8EBB8C;
	Thu, 20 Jul 2023 19:12:46 -0400 (EDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <test@test.com>
From: "Lorenzo Bengat" <test@test.com>
Date: Thu, 20 Jul 2023 23:12:43 -0700
Reply-To: lorenzobengat@aliyun.com
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, I'm Dr. Bengat. I wish to urgently confirm from you
    if actually you know one Mrs. Jeanne White who claims to be your business
    associate/partner. Kindly reconfirm this application put in by Mrs. Jeanne
    White - she submitted the under-listed bank account information supposedly
    sent by you to receive the funds on your behalf. 
 Content analysis details:   (12.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.4 MILLION_USD            BODY: Talks about millions of dollars
  0.0 DATE_IN_FUTURE_06_12   Date: is 6 to 12 hours after Received: date
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 LOTS_OF_MONEY          Huge... sums of money
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 HK_SCAM                No description available.
  0.0 MSGID_FROM_MTA_HEADER  Message-Id was added by a relay
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.4 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  0.0 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  0.0 MONEY_FRAUD_3          Lots of money and several fraud phrases
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
  0.0 FORM_FRAUD_3           Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  Confirm.

Hello,

I'm Dr. Bengat. I wish to urgently confirm from you if actually you know on=
e Mrs. Jeanne White who claims to be your business associate/partner.

Kindly reconfirm this application put in by Mrs. Jeanne White - she submitt=
ed the under-listed bank account information supposedly sent by you to rece=
ive the funds on your behalf.

The bank information she applied with are stated thus:

Account Name: Mrs. Jeanne White
Bank name: Citi Bank NA
Bank address: #1230 Arch Street, Philadelphia, PA 19107, USA
Account Number: 013439887655
Routing Number: 2771722
Swift Code: CITIUS30

The said Mrs. Jeanne White is claiming to this office that you are dead and=
 have Instructed that all relevant documentation/Information regarding your=
 Payment/Transfer, be changed to her as the beneficiary of the payment shor=
t-listed among the foreign beneficiaries entitled to receive their payment.

For your Information, this Government has approved the total amount of EIGH=
T MILLION, FIVE HUNDRED THOUSAND UNITED STATES DOLLARS ONLY, in your favor,=
 prior to the Federal Government instructions/mandate to offset all outstan=
ding payments to the various legal foreign beneficiaries. We need to confir=
m from you if it's really true that you are dead as mentioned by your Assoc=
iate.

You should note that, if we do not hear from you, we automatically assume t=
hat you are actually dead and the information passed to us by Mrs. Jeanne W=
hite is correct. Hence, you are hereby requested to reply to this Email imm=
ediately for confirmation, before we proceed with this payment and for us t=
o know the true position of things with you so that we won't make any mista=
kes/errors in remitting your out-standing payment to a wrong person/account.

Lastly, you are advised to reply back to this email and reconfirm the detai=
ls of this message if truly you're alive.

Full name................................
Direct telephone number.........
Address....................................
Age...........................................


Your quick response will help us a lot ( lorenzobengat@aliyun.com )

Yours, Sincerely,
Dr. L. Bengat
