by buried under 419s
Thu May 14, 2020 11:56 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id 68RAJT31vV7S6AEAibB4EA
(envelope-from <[email protected]>)
for ; Thu, 14 May 2020 21:49:49 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 14 May 2020 21:49:49 -0400
Received: from correo.gobernacionnapo.gob.ec ([186.4.140.133]:42976)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jZPTt-000WXn-88
for ; Thu, 14 May 2020 21:49:49 -0400
Received: from localhost (localhost [127.0.0.1])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id 7EBEE10B731;
Thu, 14 May 2020 21:33:12 -0400 (EDT)
Received: from correo.gobernacionnapo.gob.ec ([127.0.0.1])
by localhost (correo.gobernacionnapo.gob.ec [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id gG9voxdwN89B; Thu, 14 May 2020 21:33:12 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id B8F7810B70C;
Thu, 14 May 2020 21:33:08 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.10.3 correo.gobernacionnapo.gob.ec B8F7810B70C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gobernacionnapo.gob.ec; s=B3B14332-3031-11EA-98EC-EFD79789ACEC;
t=1589506389; bh=jdwcfvJhWwo2P5tAm6CvoiVWK0++gBYYLgUctqOeUkE=;
h=Date:From:Message-ID:MIME-Version;
b=hNr4jlV1smQ2rKBfgZ6fznlfwfsNjinpMHPpr6VL2MR2Y5+D90rrgCO2A2RDeENE0
JF7Ehn+fB3adoICO/lKZkYCfqxOKC0aQO7vooWt38vPd7mmm7Fn6JuTDdFN7ZLHNIz
2K2opD0OO9fWJLIXulmeFkX+gh81X34Icsmk3p9w0Gq+5QszymyVU6WiB3AMe+fikH
L1LA4mmn7WHDadqK80wFnJD1ZFYGSmFDKjOFyhL2Gac6oz/8nEgBM45CvBPjbZXEfX
UgscyqS0vrvFcPZS4rPQTAJofEQF09x7X+7H1Vl3g5k+nDAhWTOR15Gzv1cbtlTUV3
7QEW6+u5EDqng==
X-Virus-Scanned: amavisd-new at gobernacionnapo.gob.ec
Received: from correo.gobernacionnapo.gob.ec ([127.0.0.1])
by localhost (correo.gobernacionnapo.gob.ec [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id Jw2YG4gh9ypx; Thu, 14 May 2020 21:33:08 -0400 (EDT)
Received: from correo.gobernacionnapo.gob.ec (correo.gobernacionnapo.gob.ec [172.30.10.102])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id 1A03510B6FB;
Thu, 14 May 2020 21:33:05 -0400 (EDT)
Date: Thu, 14 May 2020 21:33:05 -0400 (EDT)
From: David Yax <[email protected]>
Reply-To: David Yax <[email protected]>
Message-ID: <2127830280.14442.1589506385024.JavaMail.zimbra@gobernacionnapo.gob.ec>
Subject: RE: Goodnews......
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_b340dd2e-0465-4af3-8b57-c172814f56d4"
X-Originating-IP: [172.30.10.102]
X-Mailer: Zimbra 8.8.15_GA_3928 (ZimbraWebClient - FF77 (Win)/8.8.15_GA_3928)
Thread-Index: QioWLHB+ZRRcukBsn/YBBEtYUJXkRg==
Thread-Topic: Goodnews......
X-Spam-Status: No, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: $680,000.00USD Palliative support to you in Ongoing Covid-19
Pandemic $680,000.00USD Palliative support to you in Ongoing Covid-19 Pandemic
Content analysis details: (6.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7078]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[davidyax087[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
--=_b340dd2e-0465-4af3-8b57-c172814f56d4
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
$680,000.00USD Palliative support to you in Ongoing Covid-19 Pandemic
Delivered-To:
Received: from
by with LMTP
id 68RAJT31vV7S6AEAibB4EA
(envelope-from <[email protected]>)
for ; Thu, 14 May 2020 21:49:49 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 14 May 2020 21:49:49 -0400
Received: from correo.gobernacionnapo.gob.ec ([186.4.140.133]:42976)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jZPTt-000WXn-88
for ; Thu, 14 May 2020 21:49:49 -0400
Received: from localhost (localhost [127.0.0.1])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id 7EBEE10B731;
Thu, 14 May 2020 21:33:12 -0400 (EDT)
Received: from correo.gobernacionnapo.gob.ec ([127.0.0.1])
by localhost (correo.gobernacionnapo.gob.ec [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id gG9voxdwN89B; Thu, 14 May 2020 21:33:12 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id B8F7810B70C;
Thu, 14 May 2020 21:33:08 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.10.3 correo.gobernacionnapo.gob.ec B8F7810B70C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gobernacionnapo.gob.ec; s=B3B14332-3031-11EA-98EC-EFD79789ACEC;
t=1589506389; bh=jdwcfvJhWwo2P5tAm6CvoiVWK0++gBYYLgUctqOeUkE=;
h=Date:From:Message-ID:MIME-Version;
b=hNr4jlV1smQ2rKBfgZ6fznlfwfsNjinpMHPpr6VL2MR2Y5+D90rrgCO2A2RDeENE0
JF7Ehn+fB3adoICO/lKZkYCfqxOKC0aQO7vooWt38vPd7mmm7Fn6JuTDdFN7ZLHNIz
2K2opD0OO9fWJLIXulmeFkX+gh81X34Icsmk3p9w0Gq+5QszymyVU6WiB3AMe+fikH
L1LA4mmn7WHDadqK80wFnJD1ZFYGSmFDKjOFyhL2Gac6oz/8nEgBM45CvBPjbZXEfX
UgscyqS0vrvFcPZS4rPQTAJofEQF09x7X+7H1Vl3g5k+nDAhWTOR15Gzv1cbtlTUV3
7QEW6+u5EDqng==
X-Virus-Scanned: amavisd-new at gobernacionnapo.gob.ec
Received: from correo.gobernacionnapo.gob.ec ([127.0.0.1])
by localhost (correo.gobernacionnapo.gob.ec [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id Jw2YG4gh9ypx; Thu, 14 May 2020 21:33:08 -0400 (EDT)
Received: from correo.gobernacionnapo.gob.ec (correo.gobernacionnapo.gob.ec [172.30.10.102])
by correo.gobernacionnapo.gob.ec (Postfix) with ESMTP id 1A03510B6FB;
Thu, 14 May 2020 21:33:05 -0400 (EDT)
Date: Thu, 14 May 2020 21:33:05 -0400 (EDT)
From: David Yax <[email protected]>
Reply-To: David Yax <[email protected]>
Message-ID: <2127830280.14442.1589506385024.JavaMail.zimbra@gobernacionnapo.gob.ec>
Subject: RE: Goodnews......
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_b340dd2e-0465-4af3-8b57-c172814f56d4"
X-Originating-IP: [172.30.10.102]
X-Mailer: Zimbra 8.8.15_GA_3928 (ZimbraWebClient - FF77 (Win)/8.8.15_GA_3928)
Thread-Index: QioWLHB+ZRRcukBsn/YBBEtYUJXkRg==
Thread-Topic: Goodnews......
X-Spam-Status: No, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: $680,000.00USD Palliative support to you in Ongoing Covid-19
Pandemic $680,000.00USD Palliative support to you in Ongoing Covid-19 Pandemic
Content analysis details: (6.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7078]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[davidyax087[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
--=_b340dd2e-0465-4af3-8b57-c172814f56d4
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
$680,000.00USD Palliative support to you in Ongoing Covid-19 Pandemic
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces