OwlCyberSecurity - MANAGER
Edit File: 1648758758.M450687P262881.server146.web-hosting.com,S=11147,W=11345
Return-Path: <csd.esm2017@gmail.com> Delivered-To: info+spam@oneinnovationhub.com Received: from server146.web-hosting.com by server146.web-hosting.com with LMTP id wPsaGuYPRmLhAgQAUHVlPg (envelope-from <csd.esm2017@gmail.com>) for <info+spam@oneinnovationhub.com>; Thu, 31 Mar 2022 16:32:38 -0400 Return-path: <csd.esm2017@gmail.com> Envelope-to: info@oneinnovationhub.com Delivery-date: Thu, 31 Mar 2022 16:32:38 -0400 Received: from mail-vs1-f48.google.com ([209.85.217.48]:36606) by server146.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from <csd.esm2017@gmail.com>) id 1na1T8-001Uwv-1u for info@oneinnovationhub.com; Thu, 31 Mar 2022 16:32:38 -0400 Received: by mail-vs1-f48.google.com with SMTP id a127so735417vsa.3 for <info@oneinnovationhub.com>; Thu, 31 Mar 2022 13:32:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to; bh=OriUv5/fLQi16w0kCU+ipO9pntCjIFdLXcmNVIrjpoQ=; b=pIsz0iPpeEJqekQPsLfjnjEdJnh4+BciQu9jAxen4HWDHM+FD6TZgsre6YEgk+0owf kiu6S7bAyo0udZzSZhoWkvCE34JPDrgiqHwftx0N1WKg0lNnHYSghH3il/qwHarHnYLr 96EWyX6M8Jts/hGasGuWEY35BizUZZ3o7EAdyn6VDHLPS/1aEc+dCOkLBjk20hRdWAkg g9I0PzLXE2m5A18du7TTEs99w04As/BHj7NQG1lFQoLzYwNnC8joOC0/7tNck/Rm/Cxg onRLcaDH4iHHlEcJdu0NlKD9IDOaBXI5JNmfANIQZH5L5AnHqKk6YwHOUfHEVwyForIM YBTg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to; bh=OriUv5/fLQi16w0kCU+ipO9pntCjIFdLXcmNVIrjpoQ=; b=O/nqVsAPQJ3WO+ciDHx7XraoOnF7BaF1DvAgSZ+XWn+7q9PCtxBERZ9xGxanSMsBFq R54U20AhyplZU8H0DAnPepPAs5e3QHv07+33tmDoozCDWQ75ZmiT7NeFTBpuB1cR+SbE w2aUKpaZ8AXN61wcu39jiUod3q4LcOSm781xkGDtkupdFTh3LbQC/TixV5VtbzJvMYBb SGDbxrHUzX8St8/gNc76ylQp1pyZBTjW6opsjSPAHXmdfMgS2PcdcA2EMIZFSPL2O6yR Uj/A3n1L7GTPGVzBjW9T392AlmUlfDSLnt/LSZbpKh/kzNwSfO1ttLKGk0ArlRdlQqJ5 UlnA== X-Gm-Message-State: AOAM530R4oiRYyAWw20ge5AXnprb4TQLacStXeli3UQW6DeplTUJC/tz OSu9bChJJ7KI6hu/0klAa6EFRHZ8GSY+2OOpuKg= X-Google-Smtp-Source: ABdhPJzekggQebnKiHpHliclfAJiEhwjHR08ofuU6cGG9MsTGCEprFUGbs7qE72kRwFiSqf7zMIeJo3jnub9CJLMwfk= X-Received: by 2002:a05:6102:49c:b0:324:f5aa:c30a with SMTP id n28-20020a056102049c00b00324f5aac30amr21653141vsa.75.1648758712771; Thu, 31 Mar 2022 13:31:52 -0700 (PDT) MIME-Version: 1.0 Reply-To: boniseitlho@gmail.com From: Boni Seitlholo <bosvuan@gmail.com> Date: Thu, 31 Mar 2022 22:30:55 +0200 Message-ID: <CAObH8=U5eEzcn8A5H7jzbsngA8RtcVgt9mX0_bGcRYyLsH4DXw@mail.gmail.com> To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="000000000000652db705db898d5e" Bcc: info@oneinnovationhub.com X-Spam-Status: Yes, score=12.8 X-Spam-Score: 128 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "server146.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: RE. Good day The purpose of this letter is to inform you that we have completed a thorough investigation into a transaction, or should we say, a contract, that we conducted with a Libyan oil corporation. We are th [...] Content analysis details: (12.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [csd.esm2017[at]gmail.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [csd.esm2017[at]gmail.com] 0.0 T_US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** REF: UNH Crude Oil --000000000000652db705db898d5e Content-Type: text/plain; charset="UTF-8" RE. Good day The purpose of this letter is to inform you that we have completed a thorough investigation into a transaction, or should we say, a contract, that we conducted with a Libyan oil corporation. We are therefore trusting that you will assist us in receiving a contract dividend of US $ 68,760,000.00. We conducted a crude oil supply deal through HAN Oil Angola based on a license issued by the Libyan Oil Cooperation, but we later discovered that the permit holder was not its rightful owner. Please do not ignore this communication. Angola's HAN Oil is required to report any unclaimed funds for permanent closure. Being an executive in the Crude Oil & Products Trading Division of HAN Oil Angola, I have access to all necessary information and contacts to ensure that the funds can be recovered without any trouble. HAN Oil Angola has deposited funds in escrow in anticipation of receiving legitimate claims for disbursement. Since I was fortunate enough to acquire this information, I believe it could be the key to achieving lifetime success without taking any risks. I can be reached via private email at *boniseitlhol@outlook.com*, I will not disclose any further information until we receive confirmation that we are in communication with the appropriate party. I look forward to your prompt response. Sincerely, Boni Seitlholo Email: *boniseitlhol@outlook.com* Procurement Supervisor Crude Oil & Products Trading Division --000000000000652db705db898d5e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><span style=3D"font-size:14.6667px;font-family:Arial,"= ;sans-serif";background-image:initial;background-position:initial;back= ground-size:initial;background-repeat:initial;background-origin:initial;bac= kground-clip:initial">RE.=C2=A0 Good day</span><br style=3D"font-family:Cal= ibri,"sans-serif";font-size:14.6667px"><br style=3D"font-family:C= alibri,"sans-serif";font-size:14.6667px"><span style=3D"font-fami= ly:Calibri,"sans-serif";font-size:14.6667px">The purpose of this = letter is to inform you that we have completed a thorough investigation int= o a transaction, or should we say, a contract, that we conducted with a Lib= yan oil corporation. We are therefore trusting that you will assist us in r= eceiving a contract dividend of US $ 68,760,000.00.</span><br style=3D"font= -family:Calibri,"sans-serif";font-size:14.6667px"><br style=3D"fo= nt-family:Calibri,"sans-serif";font-size:14.6667px"><span style= =3D"font-family:Calibri,"sans-serif";font-size:14.6667px">We cond= ucted a crude oil supply deal through HAN Oil Angola based on a license iss= ued by the Libyan Oil Cooperation, but we later discovered that the permit = holder was not its rightful owner.</span><br style=3D"font-family:Calibri,&= quot;sans-serif";font-size:14.6667px"><br style=3D"font-family:Calibri= ,"sans-serif";font-size:14.6667px"><span style=3D"font-family:Cal= ibri,"sans-serif";font-size:14.6667px">Please do not ignore this = communication.</span><br style=3D"font-family:Calibri,"sans-serif"= ;;font-size:14.6667px"><br style=3D"font-family:Calibri,"sans-serif&qu= ot;;font-size:14.6667px"><span style=3D"font-family:Calibri,"sans-seri= f";font-size:14.6667px">Angola's HAN Oil is required to report any= unclaimed funds for permanent closure. Being an executive in the Crude Oil= & Products Trading Division of HAN Oil Angola, I have access to all ne= cessary information and contacts to ensure that the funds can be recovered = without any trouble.</span><br style=3D"font-family:Calibri,"sans-seri= f";font-size:14.6667px"><br style=3D"font-family:Calibri,"sans-se= rif";font-size:14.6667px"><span style=3D"font-family:Calibri,"san= s-serif";font-size:14.6667px">HAN Oil Angola has deposited funds in es= crow in anticipation of receiving legitimate claims for disbursement. Since= I was fortunate enough to acquire this information, I believe it could be = the key to achieving lifetime success without taking any risks. I can be re= ached via private email at=C2=A0</span><u style=3D"font-family:Calibri,&quo= t;sans-serif";font-size:14.6667px"><span style=3D"background-image:ini= tial;background-position:initial;background-size:initial;background-repeat:= initial;background-origin:initial;background-clip:initial"><a>boniseitlhol@= outlook.com</a></span></u><span style=3D"font-size:14.6667px;font-family:Ar= ial,"sans-serif";background-image:initial;background-position:ini= tial;background-size:initial;background-repeat:initial;background-origin:in= itial;background-clip:initial">,<br><br>I will not disclose any further inf= ormation until we receive confirmation that we are in communication with th= e appropriate party.<br><br>I look forward to your prompt response.<br><br>= Sincerely,<br><br>Boni Seitlholo<br>Email:=C2=A0</span><u style=3D"font-fam= ily:Calibri,"sans-serif";font-size:14.6667px"><span style=3D"back= ground-image:initial;background-position:initial;background-size:initial;ba= ckground-repeat:initial;background-origin:initial;background-clip:initial">= <a>boniseitlhol@outlook.com</a></span></u><span style=3D"font-size:14.6667p= x;font-family:Arial,"sans-serif";background-image:initial;backgro= und-position:initial;background-size:initial;background-repeat:initial;back= ground-origin:initial;background-clip:initial"><br><br>Procurement Supervis= or<br>Crude Oil & Products Trading Division</span><br></div> --000000000000652db705db898d5e--