File: /home/govancoz/mail/.spam/new/1710751125.M868656P4073672.zacp120.ve.host,S=3894,W=3971
Return-Path: <noreply@govan.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id UM3wMpX992XIKD4AvcbEzQ
(envelope-from <noreply@govan.co.za>)
for <govancoz+spam@zacp120.ve.host>; Mon, 18 Mar 2024 10:38:45 +0200
Return-path: <noreply@govan.co.za>
Envelope-to: cheryl@govan.co.za
Delivery-date: Mon, 18 Mar 2024 10:38:45 +0200
Received: from [194.169.175.144] (port=61727 helo=govan.co.za)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <noreply@govan.co.za>)
id 1rm8W1-00H8Db-2V
for cheryl@govan.co.za;
Mon, 18 Mar 2024 10:38:45 +0200
From: noreply@govan.co.za
To: cheryl@govan.co.za
Date: 18 Mar 2024 01:38:00 -0700
Message-ID: <20240318013759.174E9BFF2DB108B5@govan.co.za>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=21.3
X-Spam-Score: 213
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear cheryl, Your account cheryl@govan.co.za will expire
today. In order to avoid disruption to your website, email, and any other
associated services. Follow instruction below to resolve now. RESOLVE ISSUE
NOW
Content analysis details: (21.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[194.169.175.144 listed in zen.spamhaus.org]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 MIXED_HREF_CASE Has href in mixed case
1.5 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** Critical security alert for govan.co.za
<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<H3 align=3Dleft>Dear <FONT color=3Dblue><FONT color=3D#000000>cheryl=
,</FONT> </FONT><BR><BR>Your account <FONT color=3D#4e34cb>cheryl@govan.co.=
za</FONT> will expire today. In order to avoid disruption to your website, =
email, and any other associated services. Follow instruction below to=
resolve now. <BR><BR><A href=3D"https://dev.amdev.ca/kenthu/General 2022/i=
ndex.html#cheryl@govan.co.za"><U><SPAN style=3D"BACKGROUND-COLOR: #ffff00">=
<FONT color=3D#0101df>RESOLVE ISSUE NOW</FONT> </SPAN></U></A><BR><BR>
Sincerely, <BR><BR><FONT color=3D#0404b4><FONT color=3D#000000>© govan=
=2Eco.za Security Team</FONT></H3></FONT></FONT>
<H3> </H3></BODY></HTML>