File: /home/govancoz/mail/.spam/new/1695366201.M402793P1566221.zacp120.ve.host,S=6309,W=6415
Return-Path: <v.vorobel@irf.com.ua>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id UDe3Fjk8DWUN5hcAvcbEzQ
(envelope-from <v.vorobel@irf.com.ua>)
for <govancoz+spam@zacp120.ve.host>; Fri, 22 Sep 2023 09:03:21 +0200
Return-path: <v.vorobel@irf.com.ua>
Envelope-to: candice@govan.co.za
Delivery-date: Fri, 22 Sep 2023 09:03:21 +0200
Received: from mail.irf.com.ua ([5.9.108.222]:60538)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <v.vorobel@irf.com.ua>)
id 1qjaC5-006g5v-16
for candice@govan.co.za;
Fri, 22 Sep 2023 09:03:21 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.irf.com.ua (Postfix) with ESMTP id E8721381E37;
Fri, 22 Sep 2023 09:40:36 +0300 (EEST)
Received: from mail.irf.com.ua ([127.0.0.1])
by localhost (mail.irf.com.ua [127.0.0.1]) (amavis, port 10032) with ESMTP
id W4ykGX8pdfcu; Fri, 22 Sep 2023 09:40:36 +0300 (EEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.irf.com.ua (Postfix) with ESMTP id D1830381DF2;
Fri, 22 Sep 2023 09:40:35 +0300 (EEST)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.irf.com.ua D1830381DF2
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=irf.com.ua;
s=6E7FADF4-4620-11EE-AD82-7E15E817B5B4; t=1695364836;
bh=Vdxy4tD6q8koMzfsS/P804dk/Vdrfmeb9ZNUtHjGyRs=;
h=Date:From:Message-ID:MIME-Version;
b=H3OsjUlaqAOY6srsD8+NuCHUxlwhOiFb1wdZRYnwnpMTWACDjNSxJ8cSSrFuarm66
bnjUNr3BNzxnYokaXJOaWwQLGeOFkNCPlHF8UbKERW4GPtxUgB7MsdegxWGIxwXyKv
iZRcb2LRIkDPTLcKPfhgCnQUg72tA70zOnp9wwdHCUv/NIN1uBgQ66UpD3JuKVPMS/
eeEVtC5QVx0K9cZoAxi4fdlXHxgaejWIR/y45yEsruqk7cfj4HMsfxAseW6t9SpiB/
NMHeY7cnhJCWc3aBOm7TzGiCCQiOqRhiV8OACi8KXut1gmb27cihIzeytOIzx4ED34
mI6dI1w7syZKQ==
X-Virus-Scanned: amavis at mail.irf.com.ua
Received: from mail.irf.com.ua ([127.0.0.1])
by localhost (mail.irf.com.ua [127.0.0.1]) (amavis, port 10026) with ESMTP
id L6uhB23VqZGq; Fri, 22 Sep 2023 09:40:35 +0300 (EEST)
Received: from mail.irf.com.ua (mail.irf.com.ua [192.168.7.106])
by mail.irf.com.ua (Postfix) with ESMTP id 9CA66381C7A;
Fri, 22 Sep 2023 09:40:32 +0300 (EEST)
Date: Fri, 22 Sep 2023 08:40:32 +0200 (GMT+02:00)
From: =?utf-8?B?INCS0L7RgNC+0LHQtdC70Ywg0JLQu9Cw0LTQuNC80LjRgA==?= <v.vorobel@irf.com.ua>
Reply-To: "Mrs. Mavis" <wanczyk748@gmail.com>
Message-ID: <774924785.1265047.1695364832620.JavaMail.zimbra@irf.com.ua>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_5ee068a8-bb2b-46e8-856e-a1b7d1a7848f"
X-Originating-IP: [192.168.7.106]
X-Mailer: Zimbra 8.8.15_GA_4562 (zclient/8.8.15_GA_4562)
Thread-Index: iucLGQuf7QmweJ4Sl56rJYNU+vTDAg==
Thread-Topic: GOOD DAY
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A donation of 3,000,000.00 Euro has been presented to you
by Mrs Mavis Wanczyk, the mega winner of $758 Million in Mega Millions Jackpot,
I am donating to 5 random individuals. If you get this email t [...]
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[wanczyk748[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ball.watch]
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD DAY
--=_5ee068a8-bb2b-46e8-856e-a1b7d1a7848f
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
A donation of 3,000,000.00 Euro has been presented to you by Mrs Mavis Wanczyk, the mega winner of $758 Million in Mega Millions Jackpot, I am donating to 5 random individuals. If you get this email then your email was selected after a spin ball.WATCH ME HERE: https://www.youtube.com/watch?v=7kWnqvJM1mMTHIS IS YOUR DONATION CODE: MW207143Reply with the DONATION CODE to this email: wanczyk748@gmail.comHope to make you and your family happy.Regards,Mrs Mavis Wanczyk
--=_5ee068a8-bb2b-46e8-856e-a1b7d1a7848f
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html><head><style> body {height: 100%; color:#000000; font-size:12pt; font-family:arial,helvetica,sans-serif;}</style></head><body><div><div>A donation of 3,000,000.00 Euro has been presented to you by Mrs Mavis Wanczyk, the mega winner of $758 Million in Mega Millions Jackpot, I am donating to 5 random individuals. If you get this email then your email was selected after a spin ball.</div><div>WATCH ME HERE: https://www.youtube.com/watch?v=7kWnqvJM1mM</div><div>THIS IS YOUR DONATION CODE: MW207143</div><div>Reply with the DONATION CODE to this email: wanczyk748@gmail.com</div><div>Hope to make you and your family happy.</div><div>Regards,</div><div>Mrs Mavis Wanczyk</div></div></body></html>
--=_5ee068a8-bb2b-46e8-856e-a1b7d1a7848f--