HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1741042872.M751748P1734458.zacp120.webway.host,S=5096,W=5191
Return-Path: <llitsia@hotmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id AFefLLg0xmc6dxoA8rC0kQ
	(envelope-from <llitsia@hotmail.com>)
	for <govancoz+spam@zacp120.webway.host>; Tue, 04 Mar 2025 01:01:12 +0200
Return-path: <llitsia@hotmail.com>
Envelope-to: mike@govan.co.za
Delivery-date: Tue, 04 Mar 2025 01:01:12 +0200
Received: from [177.8.226.82] (port=59657 helo=hotmail.com)
	by zacp120.webway.host with esmtp (Exim 4.98.1)
	(envelope-from <llitsia@hotmail.com>)
	id 1tpEmc-00000007HO6-0PIg
	for mike@govan.co.za;
	Tue, 04 Mar 2025 01:01:12 +0200
Reply-To: alexbergsma677@gmail.com
From: Alex Bergsma <llitsia@hotmail.com>
To: mike@govan.co.za
Date: 03 Mar 2025 19:43:26 -0300
Message-ID: <20250303194326.F7104ADFE5210207@hotmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=23.1
X-Spam-Score: 231
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings, Do you have any projects that require funding?
   We are a group of private investors that provides funding for projects and
    loans irrespective of the sector at a 2% interest rate and a 1-year grace
    peri [...] 
 Content analysis details:   (23.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [177.8.226.82 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?177.8.226.82>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [177.8.226.82 listed in psbl.surriel.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=llitsia%40hotmail.com;ip=177.8.226.82;r=zacp120.webway.host]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=hotmail.com;ip=177.8.226.82;r=zacp120.webway.host]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [177.8.226.82 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [177.8.226.82 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [177.8.226.82 listed in sa-trusted.bondedsender.org]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [alexbergsma677(at)gmail.com]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [llitsia(at)hotmail.com]
  0.0 PDS_HELO_SPF_FAIL      High profile HELO that fails SPF
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  0.0 SPOOFED_FREEMAIL       No description available.
  2.4 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject:  ***SPAM***  EXCLUSIVE LOAN OFFER @ 2%

Greetings,

Do you have any projects that require funding? We are a group of=20
private investors that provides funding for projects and loans=20
irrespective of the sector at a 2% interest rate and a 1-year=20
grace period. We also offer equity funding and joint ventures. If=20
you would like more details, please feel free to write back.

Sincerely,
Alex Bergsma