File: //home/dfwparty/mail/.spam/new/1753656751.M443676P2365736.node612.namehero.net,S=7411,W=7547
Return-Path: <mr.viktor_zubkov@yahoo.com>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
by node612.namehero.net with LMTP
id APvMGa+thmgoGSQAJLeZpw
(envelope-from <mr.viktor_zubkov@yahoo.com>)
for <dfwparty+spam@node612.namehero.net>; Sun, 27 Jul 2025 16:52:31 -0600
Return-path: <mr.viktor_zubkov@yahoo.com>
Envelope-to: glopez@gigiscleaning.net
Delivery-date: Sun, 27 Jul 2025 16:52:31 -0600
Received: from [103.81.254.214] (port=33978 helo=mail.prime.net.id)
by node612.namehero.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <mr.viktor_zubkov@yahoo.com>)
id 1ugAEF-00000009vRy-3Hui
for glopez@gigiscleaning.net;
Sun, 27 Jul 2025 16:52:31 -0600
Received: from User (unknown [165.154.217.222])
by mail.prime.net.id (Postfix) with SMTP id D06F1B4094;
Fri, 25 Jul 2025 04:58:45 +0000 (UTC)
Reply-To: <mrviktorzubkov57@gmail.com>
From: "Mr.Viktor Zubkov"<mr.viktor_zubkov@yahoo.com>
Date: Fri, 25 Jul 2025 08:58:50 +0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=20.2
X-Spam-Score: 202
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day, I am Mr. Viktor Zubkov an investor and a director
with Gazprom Russia. Considering the current economic sanctions melted on
Russia by some European countries and
Content analysis details: (20.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[103.81.254.214 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.81.254.214 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.81.254.214 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.81.254.214 listed in bl.score.senderscore.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?103.81.254.214>]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mr.viktor_zubkov(at)yahoo.com]
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrviktorzubkov57(at)gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_NAME_FM_MR_MRS No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.7 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 SPOOFED_FREEMAIL No description available.
1.6 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** GET BACK TO ME FOR MORE DETAILS
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT face="Tahoma">Good Day,</FONT></DIV>
<DIV>
<FONT face="Tahoma"> </FONT></DIV>
<DIV>
<FONT face="Tahoma">I am Mr. Viktor Zubkov an investor and a director with Gazprom Russia. Considering the current economic sanctions melted on Russia by some European countries and</FONT></DIV>
<DIV>
<FONT face="Tahoma"> </FONT></DIV>
<DIV>
<FONT face="Tahoma">United States of America which is seriously affecting us now, I'm soliciting for your consent transfer Sixty eight Million Dollars ($68M) investment funds deposited with an American bank into your personal bank account for investment and also to escape confiscation by USA Government. Please respond back for more details.</FONT></DIV>
<DIV>
<FONT face="Tahoma"> </FONT></DIV>
<DIV>
<FONT face="Tahoma">Yours Truly,</FONT></DIV>
<DIV>
<FONT face="Tahoma"> </FONT></DIV>
<DIV>
<FONT face="Tahoma">Mr.Viktor Zubkov</FONT></DIV>
<DIV>
<FONT face="Tahoma">Chairman of the board of directors Gazprom</FONT></DIV>
</FONT>
</BODY></HTML>