HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1708115392.M12578P2990686.zacp120.ve.host,S=5150,W=5261
Return-Path: <mello@imasanet.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id MOrDOr/Fz2Veoi0AvcbEzQ
	(envelope-from <mello@imasanet.com>)
	for <govancoz+spam@zacp120.ve.host>; Fri, 16 Feb 2024 22:29:51 +0200
Return-path: <mello@imasanet.com>
Envelope-to: CANDICE@GOVAN.CO.ZA
Delivery-date: Fri, 16 Feb 2024 22:29:52 +0200
Received: from [66.84.80.50] (port=37976 helo=mail.visuallink.com)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <mello@imasanet.com>)
	id 1rb4q8-00CY0W-0N
	for CANDICE@GOVAN.CO.ZA;
	Fri, 16 Feb 2024 22:29:51 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail.visuallink.com (Postfix) with ESMTP id F38ED41F8334D;
	Fri,  9 Feb 2024 06:00:49 -0500 (EST)
Received: from mail.visuallink.com ([127.0.0.1])
	by localhost (mail.visuallink.com [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id g4zXfTQAxnsH; Fri,  9 Feb 2024 06:00:49 -0500 (EST)
Received: from localhost (localhost [127.0.0.1])
	by mail.visuallink.com (Postfix) with ESMTP id 31AE1427E841D;
	Sun,  4 Feb 2024 13:26:39 -0500 (EST)
X-Virus-Scanned: amavisd-new at mail.visuallink.com
Received: from mail.visuallink.com ([127.0.0.1])
	by localhost (mail.visuallink.com [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id d-LodCHYqyfo; Sun,  4 Feb 2024 13:26:39 -0500 (EST)
Received: from [192.168.0.163] (unknown [102.165.196.1])
	by mail.visuallink.com (Postfix) with ESMTPSA id 8A3C142839327;
	Wed, 31 Jan 2024 14:47:19 -0500 (EST)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <mello@imasanet.com>
From: Mr. Ugo Verni <mello@imasanet.com>
Date: Thu, 01 Feb 2024 05:47:41 +1000
Reply-To: ugo.verni17@gmail.com
X-Antivirus: Avast (VPS 240131-4, 1/2/2024), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20240131194719.8A3C142839327@mail.visuallink.com>
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day, My name is Ugo Verni and I have urgent donation
   information for you which will benefit you and your entire family, with the
    less privileged in your local community. WATCH ME HERE: https://www.telegraph.co.uk/news/worldnews/europe/italy/6076837/Italian-Ugo-Verni-wins-130m-in-Europes-biggest-ever-lottery-prize.html
    
 Content analysis details:   (14.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.4 NO_DNS_FOR_FROM        DNS: Envelope sender has no MX or A DNS records
  0.5 MILLION_EUR            BODY: Talks about millions of euros
  0.8 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in
                             DNS
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [ugo.verni17[at]gmail.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?66.84.80.50>]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: telegraph.co.uk]
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  1.0 HK_NAME_MR_MRS         No description available.
  2.5 MONEY_NOHTML           Lots of money in plain text
  1.9 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  A donation has been made for you

Good day,

My name is Ugo Verni and I have urgent donation information for you which w=
ill benefit you and your entire family, with the less privileged in your lo=
cal community.

WATCH ME HERE:  https://www.telegraph.co.uk/news/worldnews/europe/italy/607=
6837/Italian-Ugo-Verni-wins-130m-in-Europes-biggest-ever-lottery-prize.html

A donation of =E2=82=AC 3,000,000.00 Million Euro has been presented to you=
 by Mr. Ugo Verni.

THIS IS YOUR DONATION CODE: MW207143

Reply with the DONATION CODE to this email: ugo.verni17@gmail.com

God Bless you richly.

Mr. Ugo Verni
 =