HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1743144281.M138400P2298084.zacp120.webway.host,S=5407,W=5503
Return-Path: <Noreply@Megacash4u.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id EPUBCFlF5mfkECMA8rC0kQ
	(envelope-from <Noreply@Megacash4u.com>)
	for <govancoz+spam@zacp120.webway.host>; Fri, 28 Mar 2025 08:44:41 +0200
Return-path: <Noreply@Megacash4u.com>
Envelope-to: info@govan.co.za
Delivery-date: Fri, 28 Mar 2025 08:44:41 +0200
Received: from [23.95.92.66] (port=34119 helo=server.esecureted.sbs)
	by zacp120.webway.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <Noreply@Megacash4u.com>)
	id 1ty3SK-00000009ucD-1YO0
	for info@govan.co.za;
	Fri, 28 Mar 2025 08:44:41 +0200
Reply-To: seldolezaa@gmail.com
From: Megacash4u<Noreply@Megacash4u.com>
To: info@govan.co.za
Date: 28 Mar 2025 06:43:55 +0000
Message-ID: <20250328064355.54DB3BB7F5AD2C31@Megacash4u.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=17.0
X-Spam-Score: 170
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Your registered e-mail linked to the Internet produced
    online ticket number: DTK26290 with reference number ZARY240MM9 and Serial
    number SKLA5365X7, Batch number ZAXIOJOQ-2PY, selected the winning num [...]
    
 Content analysis details:   (17.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?23.95.92.66>]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [23.95.92.66 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [23.95.92.66 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [23.95.92.66 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.8 MILLION_HUNDRED        BODY: Million "One to Nine" Hundred
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
  1.2 KAM_LOTTO2             Highly Likely to be an e-Lotto Scam Email
  0.8 KAM_LOTTO1             Likely to be an e-Lotto Scam Email
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  3.0 KAM_LOTTO3             Almost certain to be an e-Lotto Scam Email
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.2 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  2.9 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  CONGRATULATIONS YOU WON

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><p>Dear </p><p>Your registered e-mail linked to the Internet produced=
 online ticket number: DTK26290 with reference number ZARY240MM9 and Serial=
 number SKLA5365X7, Batch number ZAXIOJOQ-2PY, selected the winning numbers=
: 8, 10, 17, 55, 66 and Bonus 3. </p><p>
You have consequently been assigned to claim a total amount of $2,850,513.0=
0 (Two Million Eight Hundred Fifty Thousand, Five Hundred Thirteen United S=
tates Dollars) in cash, which is recorded under file UKPC/9080144308/07. Th=
is amount is part of a total cash award of $14,210,702.00. </p><p>To receiv=
e your prize, kindly contact William Wade or Selby by providing the details=
 below at <a href=3D"mailto:williwad@megacash4u.com">williwad@megacash4u.co=
m</a> <a href=3D"mailto:seldolezaa@gmail.com">
seldolezaa@gmail.com</a></p><p>1. Full Name: <br>&nbsp;2. Reference Number/=
<br>3. Age/Occupation: <br>4. Winning Email Address:<br>5. Phone Number: <b=
r>6. Country: <br>&nbsp;<br>Yours faithfully, <br>&nbsp;<br>&nbsp;<br>Selby=
 Duffield</p></body></html>