509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ Return-Path: Delivered-To: crm+spam@autozone.com.sa Received: from depro4.fcomet.com by depro4.fcomet.com with LMTP id kDK4AlS9uWTJhC4AfHesKA (envelope-from ) for ; Fri, 21 Jul 2023 01:03:48 +0200 Return-path: Envelope-to: crm@autozone.com.sa Delivery-date: Fri, 21 Jul 2023 01:03:48 +0200 Received: from ironportvm9.gmu.edu ([129.174.0.61]:20769) by depro4.fcomet.com with esmtp (Exim 4.96) (envelope-from ) id 1qMcgX-00Cngy-1A for crm@autozone.com.sa; Fri, 21 Jul 2023 01:03:47 +0200 Message-Id: <800299$2ilfb@ironportvm9.gmu.edu> X-IronPort-AV: E=Sophos;i="6.01,219,1684814400"; d="scan'208";a="2708971" X-IPAS-Result: =?us-ascii?q?A2B4+ACVu7lk/0gMcApCE4EXBoNLgkuUUIIJGZdRhDWBa?= =?us-ascii?q?oFqDwEBAQEBAQEBAU0EAQGFFQY8AQEBAQWFVyZLAQYBAQEBAwIDAQEBAQEBA?= =?us-ascii?q?wIBBwEBAQEGAwGBHYUvDAEBAQEBAQEzgVxIAQEBhEUQAi4eAnYKgiODQZMkm?= =?us-ascii?q?xuBNBoCZYEHgVyBfK8ZAYRBhRKBBQEFYIlTiF6CKgIQARMTTYNziTsDAQ0BC?= =?us-ascii?q?wGFG3aDfIkmGA4ZgQgIX4FwPgINVAsLY4EYgksCAhE6FFN4GwMHA4EFEC8HB?= =?us-ascii?q?C8mBgkYLyUGUQchDCQJExVABHMgZYFaCoEIPxUOEYJRYTsbTYJqCRUMNFN9E?= =?us-ascii?q?EkdgRWBBigdHi0DMxEdNwkDez01CAwbT0gdFQSdTAk1NFgwYkQRBUIcGpEbg?= =?us-ascii?q?gUojwSCG6A4CoQLgVgHiHuuHRYDhAeOEIQHiFeLSKJ5IQeFTYJYcHAVggeBb?= =?us-ascii?q?RmEZ4EYAYFtAQEBAQECAYNZWCQFgwgBAgaSXEhhCYkJAQUFgjQBAQ?= IronPort-Data: A9a23:aRaaa66MA4fFhrTf8NbceQxRtAbHchMFZxGqfqrLsTDasY5as4F+v mMXWD/Ubq7ZNGPwL4t3OYiz8hlTvJbXm9U1TAU4rSE8Eysa+MHILOrCIxarNUt+DOWaFxs/s J92hvosjSwQZiWBzvt4GuG59RGQ7YnRGvymTrSs1hlZHWdMUD0mhQ9oh9k3i4tphcnRKw6Ws LsemeWGULOe82Ayajt8B56r8ks156yt4mtA5DTSWNgS1LPgvyhNZH4gDfzpR5fIatE8NvK3Q e/F0Ia48gvxl/v6Ior4+lpTWhRiro/6ZWBiuFIPM0SRqkEqShgJ70oOHKF0hXG7JNm+t4sZJ N1l7fRcQOqyV0HGsLx1vxJwS0mSMUDakVPKCSDXjCCd86HJW0HN7PpFVGpoBq0zwddYLX0Sq fUgLAlYO3hvh8ruqF66YulhnMEuN4/xJogfvHQmyivWZRokacmbBfyTv5kBhnFv3KiiHt6HD yYdQSZidwjofxBUJhEcD5dWcOKA3CanI2wH8Tp5o4JmwHnIi1RKwYOuMYTcROyDaeJwm0OH8 zeuE2PRR0ty2Mak4TGf93elh+vGkSb6XqobH7y3sPVthRuIzwQ7AwcTfVKnofS0kAi4Vs4ZM EV80iE0qIA76VCsXN77Uluzp3vCpRd0c9FKF+9n8FmBybDUuwGYCXMOZjQHc9VOnMQsQBQg3 1uUldroCXpkt7jTUnv13ryOqBu/MiFTImgcIzQNJSMO+cGloYc9iTrPVNptVqmvgZvuEFnYy CqShCswmrALy8MHyuOg9DjviCi04JPJRw8v4wzRdmGr8xt8IoOpesqz4DDz5uxYaoiQRUSFo GksmMaD9OVIAJ2Q0jeEKM0GBram+t6GPyCM2kRmEZYu8HK28haLdppVpjVzLUtBN80IfjngZ EPI/whW4dlINROCZrVyJoO3BcMCy6X8Ct30Tbbfad8IeZEZXASd+yRjf0m4x3vw1kUgjOckM P+zetyrFXEyEPp43iDwXO51+bQxwzsj3XvUX4zT1B+p0aHYY2SaD6wMWHOFdOcm6oufuB6T9 dtDcdCDoz1USurhZDHT+JwaBUsSNj49CIywsMU/XuWZJSJ6EX48Df7AyPUqfIkjhK09vuzS+ 1mjW0ZTwUDyw3bALEORYxhehKjHBM459Cthe3V2ewnys5Q+XbuSAG4kX8NfVdEaGCZLl5aYk 9Ftlx28P8ly IronPort-HdrOrdr: A9a23:OtyKHqnENryUpqOfu9l3w43AOY/pDfLi3DAbv31ZSRFFG/Fw8P re5cjztCWE7gr5PUtN+OxoV5PwJU80haQU3WBvB8bQYOCLghrKEGga1/qb/9SCIVyYygc+79 YaT0EWMrSZYDcVsS+T2mKF+r0bsby6Gc6T9IXjJ7AGd3AXV0gx1W1E4s7yKDwNeOGnbaBJaa Z0EfA32QZJwR8sH7SG7sJvZZmzmzRhruOYXSI7 X-Talos-CUID: =?us-ascii?q?9a23=3Aomg4XWvsRN15U08DKhrqn5d86IsfU1LS5y/7fXS?= =?us-ascii?q?YIl1YZ5GJFQOZwKddxp8=3D?= X-Talos-MUID: =?us-ascii?q?9a23=3A/BqjIw/33B8FNa4Run7yTUyQf5ZL8r/pUHscqtY?= =?us-ascii?q?H5cC6BSVcHBKYiSviFw=3D=3D?= Received: from unknown (HELO hermes.rrchnm.org) ([10.112.12.72]) by ironportvm9.gmu.edu with ESMTP; 20 Jul 2023 19:03:05 -0400 Received: from [87.120.84.144] (unknown [10.112.12.66]) by hermes.rrchnm.org (Postfix) with ESMTPS id 4E5AB85B; Thu, 20 Jul 2023 19:03:00 -0400 (EDT) Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Description: Mail message body To: Recipients From: "Lorenzo Bengat" Date: Thu, 20 Jul 2023 23:02:57 -0700 Reply-To: lorenzobengat@aliyun.com X-Spam-Status: Yes, score=12.4 X-Spam-Score: 124 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, I'm Dr. Bengat. I wish to urgently confirm from you if actually you know one Mrs. Jeanne White who claims to be your business associate/partner. Kindly reconfirm this application put in by Mrs. Jeanne White - she submitted the under-listed bank account information supposedly sent by you to receive the funds on your behalf. Content analysis details: (12.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.4 MILLION_USD BODY: Talks about millions of dollars 0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 LOTS_OF_MONEY Huge... sums of money -0.0 T_SCC_BODY_TEXT_LINE No description available. 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 HK_SCAM No description available. 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 0.0 XFER_LOTSA_MONEY Transfer a lot of money 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_3 Fill a form and several fraud phrases X-Spam-Flag: YES Subject: ***SPAM*** Confirm. Hello, I'm Dr. Bengat. I wish to urgently confirm from you if actually you know on= e Mrs. Jeanne White who claims to be your business associate/partner. Kindly reconfirm this application put in by Mrs. Jeanne White - she submitt= ed the under-listed bank account information supposedly sent by you to rece= ive the funds on your behalf. The bank information she applied with are stated thus: Account Name: Mrs. Jeanne White Bank name: Citi Bank NA Bank address: #1230 Arch Street, Philadelphia, PA 19107, USA Account Number: 013439887655 Routing Number: 2771722 Swift Code: CITIUS30 The said Mrs. Jeanne White is claiming to this office that you are dead and= have Instructed that all relevant documentation/Information regarding your= Payment/Transfer, be changed to her as the beneficiary of the payment shor= t-listed among the foreign beneficiaries entitled to receive their payment. For your Information, this Government has approved the total amount of EIGH= T MILLION, FIVE HUNDRED THOUSAND UNITED STATES DOLLARS ONLY, in your favor,= prior to the Federal Government instructions/mandate to offset all outstan= ding payments to the various legal foreign beneficiaries. We need to confir= m from you if it's really true that you are dead as mentioned by your Assoc= iate. You should note that, if we do not hear from you, we automatically assume t= hat you are actually dead and the information passed to us by Mrs. Jeanne W= hite is correct. Hence, you are hereby requested to reply to this Email imm= ediately for confirmation, before we proceed with this payment and for us t= o know the true position of things with you so that we won't make any mista= kes/errors in remitting your out-standing payment to a wrong person/account. Lastly, you are advised to reply back to this email and reconfirm the detai= ls of this message if truly you're alive. Full name................................ Direct telephone number......... Address.................................... Age........................................... Your quick response will help us a lot ( lorenzobengat@aliyun.com ) Yours, Sincerely, Dr. L. Bengat