File: /home/dfwparty/mail/.spam/new/1752533612.M708227P2806978.node612.namehero.net,S=10281,W=10452
Return-Path: <mrsrobinsanders185@gmail.com>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
by node612.namehero.net with LMTP
id 6PeCKWyKdWjC1CoAJLeZpw
(envelope-from <mrsrobinsanders185@gmail.com>)
for <dfwparty+spam@node612.namehero.net>; Mon, 14 Jul 2025 16:53:32 -0600
Return-path: <mrsrobinsanders185@gmail.com>
Envelope-to: glopez@gigiscleaning.net
Delivery-date: Mon, 14 Jul 2025 16:53:32 -0600
Received: from mail.sosep.gob.gt ([38.246.76.44]:52672)
by node612.namehero.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <mrsrobinsanders185@gmail.com>)
id 1ubS38-0000000CSSU-2CQQ
for glopez@gigiscleaning.net;
Mon, 14 Jul 2025 16:53:32 -0600
Received: from localhost (localhost [127.0.0.1])
by mail.sosep.gob.gt (Postfix) with ESMTP id 39C3E2413F0F;
Mon, 14 Jul 2025 14:54:59 -0600 (CST)
X-Virus-Scanned: amavis at sosep.gob.gt
Received: from mail.sosep.gob.gt ([127.0.0.1])
by localhost (mail.sosep.gob.gt [127.0.0.1]) (amavis, port 10024) with ESMTP
id 0F0Hxk_XYIHp; Mon, 14 Jul 2025 14:54:59 -0600 (CST)
Received: from User (unknown [10.10.0.1])
by mail.sosep.gob.gt (Postfix) with SMTP id BEF3B2413BCA;
Mon, 14 Jul 2025 14:54:44 -0600 (CST)
Reply-To: <infordepabsa@yahoo.com>
From: "Dr.Mrs Robin Sanders"<mrsrobinsanders185@gmail.com>
Date: Tue, 15 Jul 2025 00:50:47 +0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20250714205444.BEF3B2413BCA@mail.sosep.gob.gt>
X-Spam-Status: Yes, score=30.8
X-Spam-Score: 308
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn; Fund Beneficiary I am Mrs Robin Sanders, Former U.S.A
Ambassador to Nigeria. With reference to your entitlement fund and inline
with the CHANGE OF BENEFICARY'S APPLICATION, signed by Mrs. Glenda F. Ward
with your purp [...]
Content analysis details: (30.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[38.246.76.44 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?38.246.76.44>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[38.246.76.44 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[38.246.76.44 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[38.246.76.44 listed in sa-trusted.bondedsender.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrsrobinsanders185(at)gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrsrobinsanders185(at)gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.8 GB_FREEMAIL_NUM Freemail spammy address
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 GB_GMAIL_NUM Spam from random Gmail address
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 FROM_MISSP_USER From misspaced, from "User"
1.9 REPLYTO_WITHOUT_TO_CC No description available.
3.4 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.2 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 KAM_BANK2 Bank scams
0.0 SPOOFED_FREEMAIL No description available.
1.9 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.4 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** ABOUT YOUR FUNDS
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT size=3 face="Tahoma">Attn; Fund Beneficiary</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">I am Mrs Robin Sanders, Former U.S.A Ambassador to Nigeria. With reference to your entitlement fund and inline with the CHANGE OF BENEFICARY'S APPLICATION, signed by Mrs. Glenda F. Ward with your purported authorization. This case has been carefully examined and we have declined Mrs. Ward's application and reported to the security department for appropriate action, as the application lacks regular signature. But Did you ever instruct Mrs Glenda F. Ward to claim your fund worth US$7.000.000? Below is the bank account information provided by Mrs Glenda F. Ward saying that you authorized her to claim your fund that you are terminally ill.</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">BANK NAME: Bank Of America</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">BANK ADDRESS: 20920 Wilshire Blvd Los Angeles, Ca 90024 USA</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">ACCOUNT #: 7054510036</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">ROUTING #: 842000247</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Swift Code: BOFBIUS6S</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Account Name: Glender F Ward</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Beneficiary address: 2902 N Beverly Glen Blvd Los Angeles, Ca 90077 USA</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">If you had not authorized the change of your bank account in respect to your outstanding entitlement Payment, therefore notify me immediately as the notification / declaration was supported with a sworn affidavit from Lagos high court ref: ilk /jj/202/k2021, dated 14/07/2025 and signed by Mrs. Glenda Ward who claim and stated in the sworn declaration that you authorized her to claim the said fund on your behalf to a different bank account in the U.S.A as stated above because you were terminally ill and the Doctor who is incharge of your case stated that you will not stay more than one Month before passing away.</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">This development has caused lots of discrepancies in your payment file that is why we had to suspend your payment and prompted to contact you directly before rejuvenating your payment. You have to be rest assured that I will do everything within my capacity to successfully actualize the quick transfer of your fund to any of your nominated bank account.</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Kindly get back to me as soon as possible so that I will direct you on what to do.</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma"> </FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Sincerely Yours</FONT></DIV>
<DIV>
<FONT size=3 face="Tahoma">Dr.Mrs Robin Sanders</FONT></DIV>
</FONT>
</BODY></HTML>