HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1710635905.M951034P3055403.zacp120.ve.host,S=6409,W=6535
Return-Path: <prvs=1829697315=evode.munyensanga@risa.gov.rw>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id WFC2N4E79mUrny4AvcbEzQ
	(envelope-from <prvs=1829697315=evode.munyensanga@risa.gov.rw>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 17 Mar 2024 02:38:25 +0200
Return-path: <prvs=1829697315=evode.munyensanga@risa.gov.rw>
Envelope-to: CANDICE@govan.co.za
Delivery-date: Sun, 17 Mar 2024 02:38:25 +0200
Received: from gateway25.aos.rw ([197.243.25.163]:51919)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <prvs=1829697315=evode.munyensanga@risa.gov.rw>)
	id 1rleXj-00CofJ-1P
	for CANDICE@govan.co.za;
	Sun, 17 Mar 2024 02:38:25 +0200
Authentication-Results: gateway.aos.rw;
	spf=pass (aos.rw: domain of evode.munyensanga@risa.gov.rw designates 197.243.21.121 as permitted sender) smtp.mailfrom=evode.munyensanga@risa.gov.rw;
Received: from mail.risa.gov.rw (sm.zm.042.mb.rw [197.243.21.121])
	by gateway.aos.rw  with ESMTPS id 42H0bJeT010350-42H0bJeV010350
	(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO);
	Sun, 17 Mar 2024 02:37:20 +0200
Received: from mail.risa.gov.rw (localhost [127.0.0.1])
	by mail.risa.gov.rw (Postfix) with ESMTPS id A0AA53D504D;
	Sun, 17 Mar 2024 00:55:09 +0200 (CAT)
Received: from localhost (localhost [127.0.0.1])
	by mail.risa.gov.rw (Postfix) with ESMTP id 9169F3D06DF;
	Sun, 17 Mar 2024 00:39:10 +0200 (CAT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.risa.gov.rw 9169F3D06DF
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=risa.gov.rw;
	s=risa.gov.rw; t=1710628750;
	bh=NV/sk0tJwgIYOCJ864YK7DKkpGhDs/jqm0cYnEdWSt4=;
	h=MIME-Version:To:From:Date:Message-Id;
	b=BnbRQk6StMoL7r5eRoTj7FXBFhUsCKkQ3a/Wpau66m/GsgXqFhpz8wftDissOsbju
	 5StVXSc7q1w/pvlZp6ONM8vWTsYUdY4KTx5gjOs9NXbDwAWlOvDD8acX4WnWbaYxLH
	 dpzmwUl+4UEpnGZ3auhycBDxw3jAPsXP9xjI7B4lIXe7GtZyRYxAg8d9dc//uqe0xm
	 lW0PuptvUyg5W65GT7iLTglWKZFL1Rv+Wdvp9Z872pM9yiN/q6fYcsM2eoYcLTbKgl
	 lqhyoR+owylyrCgagcDDxzURp5MR4SeIK1uf6Q3A4EHKtzhnkiZB7Z/pUGc21g0H1U
	 OJnqiTC29ZHgA==
Received: from mail.risa.gov.rw ([127.0.0.1])
	by localhost (mail.risa.gov.rw [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id AT32N1jAnfSR; Sun, 17 Mar 2024 00:39:10 +0200 (CAT)
Received: from [192.168.0.163] (unknown [102.165.196.209])
	by mail.risa.gov.rw (Postfix) with ESMTPSA id 9BF353CE8EC;
	Sun, 17 Mar 2024 00:31:28 +0200 (CAT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <evode.munyensanga@risa.gov.rw>
From: Mr. Ugo Verni <evode.munyensanga@risa.gov.rw>
Date: Sun, 17 Mar 2024 08:31:28 +1000
Reply-To: ugo.verni17@gmail.com
X-Antivirus: Avast (VPS 240316-4, 17/3/2024), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20240316223128.9BF353CE8EC@mail.risa.gov.rw>
X-FEAS-SPF: sender-alignment=not-aligned, header from=evode.munyensanga@risa.gov.rw, spf-result=pass, ip=197.243.21.121, helo=mail.risa.gov.rw, mailFrom=evode.munyensanga@risa.gov.rw
X-FEAS-Client-IP: 197.243.21.121
X-FE-Last-Public-Client-IP: 197.243.21.121
X-FE-Policy-ID: 23:4:2:SYSTEM
X-Spam-Status: Yes, score=11.1
X-Spam-Score: 111
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day, My name is Ugo Verni and I have urgent donation
   information that will benefit you and your entire family, as well as the less
    privileged in your local community. WATCH ME HERE: https://www.telegraph.co.uk/news/worldnews/europe/italy/6076837/Italian-Ugo-Verni-wins-130m-in-Europes-biggest-ever-lottery-prize.html
    
 Content analysis details:   (11.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: risa.gov.rw]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?197.243.25.163>]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [ugo.verni17[at]gmail.com]
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [197.243.25.163 listed in psbl.surriel.com]
  1.0 HK_NAME_MR_MRS         No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  2.5 MONEY_NOHTML           Lots of money in plain text
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
X-Spam-Flag: YES
Subject:  ***SPAM***  Claim Your Donation Fund

Good day,

My name is Ugo Verni and I have urgent donation information that will benef=
it you and your entire family, as well as the less privileged in your local=
 community.

WATCH ME HERE: https://www.telegraph.co.uk/news/worldnews/europe/italy/6076=
837/Italian-Ugo-Verni-wins-130m-in-Europes-biggest-ever-lottery-prize.html

Mr. Ugo Verni has presented you with a donation of 3,000,000.00 million eur=
os.

THIS IS YOUR DONATION CODE: MW207143

Reply with the DONATION CODE to this email: ugo.verni17@gmail.com

God bless you richly.

Mr. Ugo Verni