관리-도구

편집 파일: 1752144615.M79819P530609.cp-biz03.syd05.ds.network,S=6946,W=7092

Envelope-to: tony@galaxybeads.com.au
Delivery-date: Thu, 10 Jul 2025 20:50:15 +1000
Reply-To: jabotha084@gmail.com
From: James Botha <jamesbotha225@gmail.com>
To: tony@galaxybeads.com.au
Date: 10 Jul 2025 03:49:44 -0700
Message-ID: <20250710034943.F470DAC81863B74B@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
 
 Content preview:  Good day, I hope you are doing well. My name is James Botha.
    I would like to propose a legitimate business to you and please take this
    seriously as this message is not spam. I am presenting an opportunity that
    could significantly benefit [...] 
 
 Content analysis details:   (24.7 points, 8.5 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?198.55.98.233>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [198.55.98.233 listed in psbl.surriel.com]
  0.8 KAM_ADVERT2            BODY: This is probably an unwanted commercial
                             email...
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.55.98.233 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.55.98.233 listed in bl.score.senderscore.com]
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [jamesbotha225[at]gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [jabotha084[at]gmail.com]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [jamesbotha225[at]gmail.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 MONEY_NOHTML           Lots of money in plain text
  6.0 KAM_INVEST             Investment Scams
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail
                             reply-to
  0.0 MONEY_FRAUD_5          Lots of money and many fraud phrases
  0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Re: FUNDS

Good day,

I hope you are doing well.

My name is James Botha. I would like to propose a legitimate
business to you and please take this seriously as this message is
not spam. I am presenting an opportunity that could significantly
benefit both of us.

I am a senior accountant with First National Bank of South
Africa, where I have worked for over 15 years. During this time,
I was the personal accountant for an American consultant /
contractor with Shell Plc Johannesburg (Mr. John Beaver) who held
an investment account at my bank.

Tragically, my client, along with his entire family passed away
in France while on sabbatical in the summer of 2015.
Unfortunately, he died without a valid South Africa will and
extensive efforts to locate his extended family have been
unsuccessful.

Last week, I received a notice asking me to identify the
account's beneficiary within 21 days or the funds will be
transferred to the government. So I am reaching out to seek your
assistance in claiming the funds.

This process will be conducted in full compliance with South
Africa laws and success is assured if we work together. The bank
will release the funds to you due to my recommendation of you as
the beneficiary.

To demonstrate my commitment to this serious matter, I will
provide my international passport upon your response. The amount
involved is USD 23,500,000.00. I propose a fair split of 50:50.
Once I receive your reply, I will share all necessary information
regarding this transaction.

I look forward to your cooperation. Please treat this proposal
with the utmost confidentiality and urgency to ensure a
successful outcome.

If you are not interested, please delete this email.

Regards,
James Botha.