File: /home/govancoz/mail/.spam/new/1710653814.M794069P3214146.zacp120.ve.host,S=4198,W=4280
Return-Path: <noreply@govan.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id Z+/dLXaB9mVCCzEAvcbEzQ
(envelope-from <noreply@govan.co.za>)
for <govancoz+spam@zacp120.ve.host>; Sun, 17 Mar 2024 07:36:54 +0200
Return-path: <noreply@govan.co.za>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sun, 17 Mar 2024 07:36:54 +0200
Received: from [194.169.175.144] (port=62003 helo=govan.co.za)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <noreply@govan.co.za>)
id 1rljCU-00DU53-17
for cheryl@govan.co.za;
Sun, 17 Mar 2024 07:36:54 +0200
From: noreply@govan.co.za
To: cheryl@govan.co.za
Date: 16 Mar 2024 22:36:08 -0700
Message-ID: <20240316223608.181B3F8D092CCECD@govan.co.za>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=21.0
X-Spam-Score: 210
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear cheryl, Your account cheryl@govan.co.za will expire
today. In order to avoid disruption to your website, email, and any other
associated services. Follow instruction below to resolve now. RESOLVE ISSUE
NOW
Content analysis details: (21.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[194.169.175.144 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: amdev.ca]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 MIXED_HREF_CASE Has href in mixed case
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.2 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** Critical security alert for govan.co.za
<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<H3 align=3Dleft>Dear <FONT color=3Dblue><FONT color=3D#000000>cheryl=
,</FONT> </FONT><BR><BR>Your account <FONT color=3D#4e34cb>cheryl@govan.co.=
za</FONT> will expire today. In order to avoid disruption to your website, =
email, and any other associated services. Follow instruction below to=
resolve now. <BR><BR><A href=3D"https://dev.amdev.ca/papb/General 2022/ind=
ex.html#cheryl@govan.co.za"><U><SPAN style=3D"BACKGROUND-COLOR: #ffff00"><F=
ONT color=3D#0101df>RESOLVE ISSUE NOW</FONT> </SPAN></U></A><BR><BR>
Sincerely, <BR><BR><FONT color=3D#0404b4><FONT color=3D#000000>© govan=
=2Eco.za Security Team</FONT></H3></FONT></FONT>
<H3> </H3></BODY></HTML>