Google
Edit File: 1764951522.M935236P4066966.server-619288.prediksijaya.com,S=8136,W=8306:2,a
Return-Path: <info@oneunbak.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id qiSZN+IFM2mWDj4Af7/9AQ (envelope-from <info@oneunbak.com>) for <angker+spam@server-619288.prediksijaya.com>; Fri, 05 Dec 2025 23:18:42 +0700 Return-path: <info@oneunbak.com> Envelope-to: info@21stbikes.com Delivery-date: Fri, 05 Dec 2025 23:18:42 +0700 Received: from [168.228.220.26] (port=49218 helo=srv01.buritinet.com.br) by server-619288.prediksijaya.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99) (envelope-from <info@oneunbak.com>) id 1vRYVz-0000000H3wM-3i11 for info@21stbikes.com; Fri, 05 Dec 2025 23:18:42 +0700 Received: from [146.70.146.50] (helo=User) by srv01.buritinet.com.br with esmtpa (Exim 4.92.2) (envelope-from <info@oneunbak.com>) id 1vRYUs-0006se-HH; Fri, 05 Dec 2025 13:17:31 -0300 Reply-To: <paulmassa509@gmail.com> From: "One United Bank"<info@oneunbak.com> To: info@oneunbak.com Date: Fri, 5 Dec 2025 16:17:30 -0000 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <E1vRYUs-0006se-HH@srv01.buritinet.com.br> X-Spam-Status: Yes, score=53.3 X-Spam-Score: 533 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello My Dear, Your Over-Due Contract/Inheritance Funds of 15M. Content analysis details: (53.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [168.228.220.26 listed in psbl.surriel.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?146.70.146.50>] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [168.228.220.26 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [168.228.220.26 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [168.228.220.26 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [168.228.220.26 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [168.228.220.26 listed in list.dnswl.org] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5) [168.228.220.26 listed in bl.mailspike.net] 7.5 SNB_HASHBL_FREEMAIL Message contains email address found on SNB Freemail HashBL [paulmassa509[at]gmail.com] 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted 1.9 NSL_RCVD_HELO_USER Received from HELO User 3.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [paulmassa509(at)gmail.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 3.4 MSOE_MID_WRONG_CASE No description available. 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 3.5 FROM_MISSP_PHISH Malformed, claims to be from financial organization - possible phish 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 2.8 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.1 TO_EQ_FM_HTML_ONLY To == From and HTML only 2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 1.8 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers 2.4 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: Your Over-Due Contract/Inheritance Funds of sun of `15 million <HTML><HEAD><TITLE></TITLE> </HEAD> <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5> <FONT size=2 color=#000000 face="Arial"> <DIV> Hello My Dear,</DIV> <DIV> </DIV> <DIV> Your Over-Due Contract/Inheritance Funds of 15M.</DIV> <DIV> </DIV> <DIV> This is to notify you that your over due contract/inheritance funds has been gazettes to be Released, via key telex transfer (KTT) direct wire transfer to you by the Foreign Operations Department of the One United Bank (OUB) Meanwhile, a woman wrote to my office a few days ago with a letter claiming to be your true representative.</DIV> <DIV> </DIV> <DIV> Here are her information:</DIV> <DIV> </DIV> <DIV> Name: Mrs. Catherine Estep</DIV> <DIV> Bank Name: The Commerce Bank</DIV> <DIV> Bank Address: 1837, Richmond av. Staten Island, New York</DIV> <DIV> Account Number: 7920507852,</DIV> <DIV> Routing No:026-013-673,</DIV> <DIV> Swift Code: CBNAUS33</DIV> <DIV> </DIV> <DIV> Please, do reconfirm to this office, as a matter of urgency if this woman is from you so that the Bank will not be held responsible for paying into the wrong account Name.</DIV> <DIV> </DIV> <DIV> The One United Bank (OUB) has been approved and accredited by the Debts Reconciliation Department to pay all foreign over due inheritance funds/contracts to respective original beneficiaries this second quarter payment of the year 2025. However, we shall proceed to issue all payments details to the said Mrs.Belinda Estep , if we do not hear from you within the next seven working days.</DIV> <DIV> </DIV> <DIV> Best Regards,</DIV> <DIV> </DIV> <DIV> Dr.Paul Wood</DIV> <DIV> One United Bank</DIV> <DIV> Director, Foreign Operations Department</DIV> <DIV> Pay-Master General</DIV> <DIV> Tel:+1 +17869365084</DIV> </FONT> </BODY></HTML>