Return-Path: Delivered-To: andrew@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id 0HPOLsilrWVKMwoAchKAPA (envelope-from ) for ; Sun, 21 Jan 2024 17:16:24 -0600 Return-path: Envelope-to: andrew@sterlingcal.com Delivery-date: Sun, 21 Jan 2024 17:16:24 -0600 Received: from pnuexed1.pnu.ac.ir ([87.107.34.67]:1206) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1rRh38-002p8u-2z for andrew@sterlingcal.com; Sun, 21 Jan 2024 17:16:24 -0600 Received: from PNUEXS1.pnu.ac.ir (192.168.10.204) by PNUEXED1.pnu.ac.ir (192.168.10.205) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.922.7; Mon, 22 Jan 2024 02:46:07 +0330 Received: from PNUEXS1.pnu.ac.ir (192.168.10.204) by PNUEXS1.pnu.ac.ir (192.168.10.204) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.922.7; Mon, 22 Jan 2024 02:46:06 +0330 Received: from PNUEXS1.pnu.ac.ir ([::1]) by PNUEXS1.pnu.ac.ir ([::1]) with mapi id 15.02.0922.007; Mon, 22 Jan 2024 02:46:06 +0330 From: mohammad reza ranjbar fallah Thread-Topic: ASSET TRANSFER/MOVEMENT Thread-Index: AQHaTL/PzE8HeRkTHk+qcklPJ7idLg== Date: Sun, 21 Jan 2024 23:16:06 +0000 Message-ID: Reply-To: "fmonfalc.one703@gmail.com" Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [51.161.107.17] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 To: Undisclosed recipients:; X-Spam-Status: Yes, score=8.7 X-Spam-Score: 87 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: -- Hello, Mr. Frank Monfalcone, a Portfolio Manager at MetLife Insurance Company instructed me to make contact because one of his confidential clients is in a difficult situation and he is looking for someone l [...] Content analysis details: (8.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars -0.5 SPF_PASS SPF: sender matches SPF record 1.5 SUBJ_ALL_CAPS Subject is all capitals 0.5 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [fmonfalc.one703[at]gmail.com] 1.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs X-Spam-Flag: YES Subject: [SPAM] ASSET TRANSFER/MOVEMENT DQotLSANCkhlbGxvLA0KDQpNci4gRnJhbmsgTW9uZmFsY29uZSwgYSBQb3J0Zm9saW8gTWFuYWdl ciBhdCBNZXRMaWZlIEluc3VyYW5jZSBDb21wYW55IGluc3RydWN0ZWQgbWUgdG8gbWFrZSBjb250 YWN0IGJlY2F1c2Ugb25lIG9mIGhpcyBjb25maWRlbnRpYWwgY2xpZW50cyBpcyBpbiBhIGRpZmZp Y3VsdCBzaXR1YXRpb24gYW5kIGhlIGlzIGxvb2tpbmcgZm9yIHNvbWVvbmUgbGlrZSB5b3UgdG8g aGVscCBoaW0gbW92ZS90cmFuc2ZlciBvdXQgaGlzIGFzc2V0IHN1bSAkNDMuNSBNaWxsaW9uIFVT RCBvdXQgb2YgVVNBIGFuZCBpbnZlc3QgaXQgb3ZlcnNlYXMgZHVlIHRvIHNvbWUgZGlmZmljdWx0 IHNpdHVhdGlvbiBoZSBpcy4NCg0KSSBhbSByZWFjaGluZyBvdXQgdG8geW91IHRvIHNlZSBpZiB5 b3UgY2FuIHJlY2VpdmUgYW5kIG1hbmFnZSB0aGVzZSBmdW5kcyBmb3IgYSBwZXJpb2Qgb2YgNSB5 ZWFycy4gSWYgeW91IGFyZSBpbnRlcmVzdGVkLCBwbGVhc2UgcmV2ZXJ0IHRvIG1lIGZvciBtZSBk ZXRhaWxzLg0KDQpSZWdhcmRzLA0KDQo=