HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1732337898.M603306P1875176.zacp120.ve.host,S=8379,W=8528
Return-Path: <test@limpopo.kz>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id ulWdIupgQWfonBwAvcbEzQ
	(envelope-from <test@limpopo.kz>)
	for <govancoz+spam@zacp120.ve.host>; Sat, 23 Nov 2024 06:58:18 +0200
Return-path: <test@limpopo.kz>
Envelope-to: candice@govan.co.za
Delivery-date: Sat, 23 Nov 2024 06:58:18 +0200
Received: from [185.234.114.71] (port=52453 helo=limpopo.kz)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <test@limpopo.kz>)
	id 1tEiDp-00000007r1i-0SDC
	for candice@govan.co.za;
	Sat, 23 Nov 2024 06:58:18 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=limpopo.kz;
	s=dkim; h=Sender:Message-Id:Reply-To:Date:From:To:Subject:MIME-Version:
	Content-Type:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
	Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
	In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=OsUEG4Qf0kRw033jSKJGUU0M1ahkjH+jYWEmKVOaXwI=; b=zf4tstiXYKJN4Jl1/se7Z8/jJb
	MxnzrSbaaMPNfrBQ+xnur2Mo9ltsgIJNxx5UNMrpFpxNWqBJLcSCNDTff+jW1zrQDq8EZNz2omd7i
	CT/O2yg3U4VPXKvU4lfzbefnMLH4epHF7h02BoPphMeplbk26tmS38RJuTIYu0BWyw7Q=;
Received: from [102.36.39.2] (helo=[192.168.1.103])
	by limpopo.kz with esmtpa (Exim 4.94.2)
	(envelope-from <test@limpopo.kz>)
	id 1sBNBw-008prk-7o; Mon, 27 May 2024 05:22:16 +0600
Content-Type: multipart/alternative; boundary="===============2057390735=="
MIME-Version: 1.0
To: Recipients <info@ram.co.za>
From: RAM<info@ram.co.za>
Date: Mon, 27 May 2024 01:22:03 +0200
Reply-To: idanworld@hotmail.com
X-Antivirus: Avast (VPS 240526-4, 5/26/2024), Outbound message
X-Antivirus-Status: Clean
Message-Id: <E1sBNBw-008prk-7o@limpopo.kz>
Sender: test@limpopo.kz
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  RAM: Kindly note that your parcel RL001097064 sent through
    Ram has an outstanding balance of R16.13. Click https://www.ramduties.co.za
    to securely pay online, view the duty/tax calculation and downloa [...] 
 Content analysis details:   (22.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: avcdn.net]
                             [URI: limpopo.kz]
                             [URI: ramduties.co.za]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: www.ramduties.co.za]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.234.114.71 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [185.234.114.71 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [185.234.114.71 listed in sa-trusted.bondedsender.org]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: www.ramduties.co.za]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=test%40limpopo.kz;ip=185.234.114.71;r=zacp120.ve.host]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=limpopo.kz;ip=185.234.114.71;r=zacp120.ve.host]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  1.0 HTML_IMAGE_ONLY_16     BODY: HTML: images with 1200-1600 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 FROM_MISSP_SPF_FAIL    No description available.
  0.3 HTML_SHORT_LINK_IMG_2  HTML is very short with a linked image
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 TO_EQ_FM_SPF_FAIL      To == From and external SPF failed
  0.8 TO_EQ_FM_DOM_SPF_FAIL  To domain == From domain and external SPF
                             failed
  0.0 T_REMOTE_IMAGE         Message contains an external image
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  Shipping fee R16.13

You will not see this in a MIME-aware mail reader.
--===============2057390735==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

RAM: Kindly note that your parcel RL001097064 sent through Ram has an outst=
anding balance of  R16.13. Click https://www.ramduties.co.za to securely pa=
y online, view the duty/tax calculation and download the relevant documents=
 to avoid any impact on delivery.


-- 
This email has been checked for viruses by Avast antivirus software.
www.avast.com
--===============2057390735==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3Diso-8859-1"/></head><BODY><P>RAM: Kindly note that your parcel <STRONG>R=
L001097064</STRONG> sent through Ram has an outstanding balance of &nbsp;<S=
TRONG>R16.13</STRONG>. Click <A href=3D"https://www.ramduties.co.za">https:=
//www.ramduties.co.za</A> to securely pay online, view the duty/tax calcula=
tion and download the relevant documents to avoid any impact on delivery.</=
P><div id=3D"DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br /><table style=3D"bo=
rder-top: 1px solid #D3D4DE;"><tr><td style=3D"width: 55px; padding-top: 13=
px;"><a href=3D"https://www.avast.com/sig-email?utm_medium=3Demail&utm_sour=
ce=3Dlink&utm_campaign=3Dsig-email&utm_content=3Demailclient" target=3D"_bl=
ank"><img src=3D"https://s-install.avcdn.net/ipm/preview/icons/icon-envelop=
e-tick-round-orange-animated-no-repeat-v1.gif" alt=3D"" width=3D"46" height=
=3D"29" style=3D"width: 46px; height: 29px;"/></a></td><td style=3D"width: =
470px; padding-top: 12px; color: #41424e; font-size: 13px; font-family: Ari=
al, Helvetica, sans-serif; line-height: 18px;">Virus-free.<a href=3D"https:=
//www.avast.com/sig-email?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=
=3Dsig-email&utm_content=3Demailclient" target=3D"_blank" style=3D"color: #=
4453ea;">www.avast.com</a></td></tr></table><a href=3D"#DAB4FAD8-2DD7-40BB-=
A1B8-4E2AA1F9FDF2" width=3D"1" height=3D"1"> </a></div></BODY></HTML>
--===============2057390735==--