Return-Path: <ideitasadm@ideitas.es>
Delivered-To: info@safaridigar.com
Received: from irpro6.dnswebhost.com
	by irpro6.dnswebhost.com with LMTP
	id wNJIEMWupGSTZwAA6iaYKA
	(envelope-from <ideitasadm@ideitas.es>)
	for <info@safaridigar.com>; Wed, 05 Jul 2023 03:14:05 +0330
Return-path: <ideitasadm@ideitas.es>
Envelope-to: info@safaridigar.com
Delivery-date: Wed, 05 Jul 2023 03:14:05 +0330
Received: from servidor.ideafix.es ([82.223.99.75]:48837)
	by irpro6.dnswebhost.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <ideitasadm@ideitas.es>)
	id 1qGpgi-0008B4-0i
	for info@safaridigar.com;
	Wed, 05 Jul 2023 03:14:05 +0330
Received: by servidor.ideafix.es (Postfix, from userid 10015)
	id 64B12CAB23; Tue,  4 Jul 2023 22:11:27 +0000 (UTC)
To: info@safaridigar.com
Subject: =?UTF-8?B?UmVwbHkgSW1tZWRpYXRlbHkg?=
From: =?UTF-8?B?S2xhdXMgSG9mbWFubg==?= <khofman1@msn.com>
MIME-Version: 1.0;
Content-type: multipart/mixed; boundary="--xTE2LAiIIS"
Reply-To: khofmann@qwestoffice.net
Message-Id: <20230704231010.64B12CAB23@servidor.ideafix.es>
Date: Tue,  4 Jul 2023 22:11:27 +0000 (UTC)
X-Spam-Status: No, score=4.4
X-Spam-Score: 44
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "irpro6.dnswebhost.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Beneficiary The united nation has approved the sum of
    $5,000,000,00 to be transferred into your country bank account. Reply for
    more information Regards Klaus Hofmann 
 Content analysis details:   (4.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [82.223.99.75 listed in bl.score.senderscore.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [khofman1[at]msn.com]
  0.0 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 T_TVD_MIME_NO_HEADERS  BODY: No description available.
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                             EnvelopeFrom freemail headers are
                             different
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily
  1.0 BOGUS_MIME_VERSION     Mime version header is bogus
  0.0 MONEY_FRAUD_3          Lots of money and several fraud phrases
  1.6 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO

----xTE2LAiIIS
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit

Dear Beneficiary<br><br>The united nation has approved the sum of 
$5,000,000,00 to be transferred into your country bank account. Reply 
for more information<br><br>Regards<br>Klaus Hofmann
----xTE2LAiIIS