Google
Edit File: 1774925301.M49972P1207344.server-619288.prediksijaya.com,S=14751,W=15014
Return-Path: <test@bebyaz.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id mdjeAvU1y2kwbBIAf7/9AQ (envelope-from <test@bebyaz.com>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 31 Mar 2026 09:48:21 +0700 Return-path: <test@bebyaz.com> Envelope-to: adadeh@pokoknya.com Delivery-date: Tue, 31 Mar 2026 09:48:21 +0700 Received: from bebyaz.com ([213.232.11.124]:58954 helo=mail.bebyaz.com) by server-619288.prediksijaya.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.99.1) (envelope-from <test@bebyaz.com>) id 1w7P9N-0000000542g-0KOC for adadeh@pokoknya.com; Tue, 31 Mar 2026 09:48:20 +0700 dkim-signature: v=1; a=rsa-sha256; d=bebyaz.com; s=dkim; c=relaxed/relaxed; q=dns/txt; h=From:Subject:Date:Message-ID:MIME-Version:Content-Type; bh=RNLnRQiNGZHC4rRO25QSebNUkQS7V9MriK1Qa89Ji4E=; b=hzDF8F/DBO9M9Vis+hpxJCu8U3wLNcQ2dP1GqSsB4LtblDCxRIimsN1vpVpZrK2y+VvB97zAzxcp+cNaGILCh46yiduRp+laEF81RFRJ4vOEoK2QZQqLPJDET5K9nKYGciNBClKSITZSxX/YUhdrEitdu58dsb9KEoBxdvSarTM= Received: from localhost by debian with SpamAssassin (version 4.0.1); Tue, 31 Mar 2026 02:45:40 +0300 From: "Jeffrey D. Feltman"<test@bebyaz.com> Date: Mon, 30 Mar 2026 16:45:38 -0700 Message-Id: <887EF5F9-696A-42D6-A301-CD2D440B507F@mail.bebyaz.com> X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on debian X-Spam-Level: ************************************************** MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------=_69CB0B24.00D25E6D" X-hMailServer-Spam: YES X-hMailServer-Reason-1: - (Score: 5) X-hMailServer-Reason-2: - (Score: 5) X-hMailServer-Reason-3: The host name specified in HELO does not match IP address. - (Score: 2) X-hMailServer-Reason-4: Tagged as Spam by SpamAssassin - (Score: 7) X-hMailServer-Reason-Score: 19 X-Spam-Status: Yes, score=13.2 X-Spam-Score: 132 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Spam detection software, running on the system "debian", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future [...] Content analysis details: (13.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: validity.com] [URI: dnswl.org] [URI: senderscore.com] [URI: bondedsender.org] [URI: habeas.com] [URI: spamhaus.net] [URI: bebyaz.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [213.232.11.124 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [213.232.11.124 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [213.232.11.124 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 0.6 FROM_MISSPACED From: missing whitespace 0.8 KAM_LOTTO1 Likely to be an e-Lotto Scam Email 0.0 LOTS_OF_MONEY Huge... sums of money 1.8 HK_SCAM No description available. 0.7 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases 2.9 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: FUND APPROVAL NOTIFICATION...Contact: johnlandrumcooper568@gmail.com This is a multi-part message in MIME format. ------------=_69CB0B24.00D25E6D Content-Type: text/plain; charset=UTF-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit Spam detection software, running on the system "debian", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Dear Beneficiary, Reference Number IUNPB/UN/05XLCD2S/2026 Content analysis details: (83.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [141.98.9.35 listed in list.dnswl.org] 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted 2.7 RCVD_IN_MSPIKE_ZBI No description available. 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 2.2 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 FSL_HELO_NON_FQDN_1 No description available. 0.0 NSL_RCVD_FROM_USER Received from User 1.2 MISSING_HEADERS Missing To: header 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [johnlandrumcooper568(at)gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.5 HELO_NO_DOMAIN Relay reports its domain incorrectly 2.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.0 FROM_MISSP_USER From misspaced, from "User" 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.9 REPLYTO_WITHOUT_TO_CC No description available. 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 1.6 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 2.0 FROM_MISSPACED From: missing whitespace 1.1 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.2 XPRIO Has X-Priority header 1.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [141.98.9.35 listed in u4nmjqzapki4jhxv36gmxua4lq.zen.dq.spamhaus.net] 1.8 DMARC_REJECT DMARC reject policy 6.0 RCVD_IN_SBL Received via a relay in Spamhaus SBL 0.0 RCVD_IN_PBL Received via a relay in Spamhaus PBL 8.0 RCVD_IN_ZEN_LASTEXTERNAL The last untrusted relay is listed in Spamhaus ZEN 6.0 RCVD_IN_SBL_DROP No description available. 3.0 RCVD_IN_SBL_CSS Received via a relay in Spamhaus SBL-CSS 1.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [141.98.9.35 listed in sa-trusted.bondedsender.org] 1.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [141.98.9.35 listed in sa-accredit.habeas.com] 1.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [141.98.9.35 listed in bl.score.senderscore.com] 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 2.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.7 HK_SCAM No description available. 0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 T_LOTTO_AGENT Claims Agent 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 3.1 MONEY_FRAUD_5 Lots of money and many fraud phrases The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor. ------------=_69CB0B24.00D25E6D Content-Type: message/rfc822; x-spam-type=original Content-Description: original message before SpamAssassin Content-Disposition: attachment Content-Transfer-Encoding: 8bit Received: from User (Unknown [141.98.9.35]) by mail.bebyaz.com with ESMTP ; Tue, 31 Mar 2026 02:45:35 +0300 Message-ID: <887EF5F9-696A-42D6-A301-CD2D440B507F@mail.bebyaz.com> Reply-To: <johnlandrumcooper568@gmail.com> From: "Jeffrey D. Feltman"<test@bebyaz.com> Subject: FUND APPROVAL NOTIFICATION...Contact: johnlandrumcooper568@gmail.com Date: Mon, 30 Mar 2026 16:45:38 -0700 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 <HTML><HEAD><TITLE></TITLE> </HEAD> <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5> <FONT size=2 color=#000000 face="Arial"> <DIV> <FONT size=3><B>Dear Beneficiary,</B></FONT></DIV> <DIV> <FONT size=3><B>Reference Number IUNPB/UN/05XLCD2S/2026</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>We are pleased to inform you about the outcome of the final decision made after the meeting held by this board, The United Nation, British Compensation commission, and the International monetary funds (IMF) representatives here in London, United Kingdom in regards to Foreign victims of war crises in 2025 and 2026 primarily concentrated in regions experiencing high-intensity conflict, with Sudan, Gaza, and Syria reporting the highest casualties and displacements, exacerbated by the breakdown of international humanitarian law.The IRC's 2026 Watchlist and 2025 humanitarian assessments show that millions of foreign nationals, refugees, and host community members are impacted.</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>U.S. Victims of State-Sponsored Terrorism Fund (USVSST): In January 2026, the US Department of Justice announced its largest-ever distribution of over $2.8 billion to nearly 22,000 victims of state-sponsored terrorism. This fund, which has awarded over $10 billion in total, compensates US citizens and non-citizen employees/contractors harmed in attacks like the 1998 US embassy bombings in East Africa and the 1983 Beirut barracks bombing.</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>You were listed among a 22,000 victims to receive the sum of $5 Million United States Dollars only as retrieved and full compensation sum grant from this board, also be informed that your compensation with Reference Number IUNPB/UN/05XLCD2S/2026 would be reserved for FIVE working days after which will be terminated, if there is no response from you.</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>Please endeavor to contact the Fiduciary agent in-charge of your payment Prof. Landrum John with your Payment Approval Reference Number IUNPB/UN/05XLCD2S/2026.</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>Send your Full name, Contact Address, and Phone number directly to him for reconfirmation to proceed further.</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>His email contact detail is ( johnlandrumcooper568@gmail.com )</B></FONT></DIV> <DIV> <FONT size=3><B> </B></FONT></DIV> <DIV> <FONT size=3><B>Regards,</B></FONT></DIV> <DIV> <FONT size=3><B>Jeffrey D. Feltman</B></FONT></DIV> <DIV> <FONT size=3><B>United Nations Department </B></FONT></DIV> <DIV> <FONT size=3><B>of Political Affairs</B></FONT></DIV> </FONT> </BODY></HTML> ------------=_69CB0B24.00D25E6D--