HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1713654374.M319059P3314132.zacp120.ve.host,S=5826,W=5936
Return-Path: <victorchen.zokk@counsellor.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id DMhbEWZKJGbUkTIAvcbEzQ
	(envelope-from <victorchen.zokk@counsellor.com>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 21 Apr 2024 01:06:14 +0200
Return-path: <victorchen.zokk@counsellor.com>
Envelope-to: recep@govan.co.za
Delivery-date: Sun, 21 Apr 2024 01:06:14 +0200
Received: from netarabia.com ([162.215.209.227]:33032)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <victorchen.zokk@counsellor.com>)
	id 1ryJmd-00Du0o-0M
	for recep@govan.co.za;
	Sun, 21 Apr 2024 01:06:14 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=alsafwaco.com; s=default; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=oBDNK230Nf9FG92+PvJEMjmWr8+eJkCKolsRv1dcsLA=; b=SRJAVHMNlA/f7FQbRUE1xQjTGy
	dzY0RFpFXKzYshfEBdhc6+lrRtmVn8LP+b7rGjqkBAVvrJp/zLWHY+QY+05xMG7G0MYq16LZ0C8A/
	YpL8zABadUZHOZCTVpNF1KOfSk9a9Ex89am55aCBY/hKlLCTW/6HcAKhAipLRQ8v8XtVfDI//rtLe
	JaDJwK6HOTiVVoD7yZ5WyQChjq98XHcXSjabTIX9GlABw+s5rDGBwPqBFtbsvzO4YK5HqUBM2v65K
	8xbOUvOwVYipJsTlQ11EMdkKre/t7tmbH2Eqrq4wpH6UbdYLcAGPIphyLPF7HNUdMRT8UqOKqXzIK
	7CNKLVBA==;
Received: from [46.183.222.65] (port=50698 helo=counsellor.com)
	by 5027362.netarabia.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <victorchen.zokk@counsellor.com>)
	id 1ryJlo-00040a-1L
	for recep@govan.co.za;
	Sun, 21 Apr 2024 01:05:20 +0200
Reply-To: info@komoli.biz
From: "Victor Chenzoks"<victorchen.zokk@counsellor.com>
To: recep@govan.co.za
Date: 21 Apr 2024 02:05:19 +0300
Message-ID: <20240421020519.9A043353BF036660@counsellor.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 5027362.netarabia.com
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - counsellor.com
X-Get-Message-Sender-Via: 5027362.netarabia.com: authenticated_id: magdy@alsafwaco.com
X-Authenticated-Sender: 5027362.netarabia.com: magdy@alsafwaco.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear recep@govan.co.za, I am a private investigator and have
    been contracted by a financial institution to ascertain your relationship
    to an individual who died sometime ago. He died intestate and left behind
    an estate, we have reasons to believe that you may be related to the deceased.
    
 Content analysis details:   (10.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [162.215.209.227 listed in psbl.surriel.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                           [162.215.209.227 listed in bl.score.senderscore.com]
  0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [victorchen.zokk[at]counsellor.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 FROM_MISSPACED         From: missing whitespace
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.1 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Re: Family Estates (recep@govan.co.za)

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19699"></HEAD>
<body>
<P><FONT face=3D"Comic Sans MS">Dear recep@govan.co.za,<BR><BR>I am a priva=
te investigator and have been contracted by a financial institution to asce=
rtain your relationship to an individual who died sometime ago. <BR><BR>He =
died intestate and left behind an estate, we have reasons to believe that y=
ou may be related to the deceased. <BR><BR>For further information, please =
contact me or the Assessor for confirmation.<BR><BR>Yours Sincerely,<BR>Vic=
tor Chenzoks<BR></FONT><BR><BR><BR>
This message is from Victor&nbsp; Chenzoks&nbsp; secured server and this em=
ail is only for recep@govan.co.za, 2024</P></BODY></HTML>