HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1747665725.M696029P2850409.zacp120.webway.host,S=5272,W=5367
Return-Path: <account-security-noreply@accountprotection.microsoft.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id WI9EKT1DK2hpfisA8rC0kQ
	(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
	for <govancoz+spam@zacp120.webway.host>; Mon, 19 May 2025 16:42:05 +0200
Return-path: <account-security-noreply@accountprotection.microsoft.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Mon, 19 May 2025 16:42:05 +0200
Received: from [169.239.182.19] (port=55579)
	by zacp120.webway.host with esmtp (Exim 4.98.1)
	(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
	id 1uH1gn-0000000C5gA-1cKy
	for cheryl@govan.co.za;
	Mon, 19 May 2025 16:42:05 +0200
From: "Microsoft account team" <mailto:account-security-noreply@accountprotection.microsoft.com>
To: cheryl@govan.co.za
Date: 19 May 2025 16:41:20 +0200
Message-ID: <20250519164120.F6771EFC2639F5E3@accountprotection.microsoft.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, cheryl, We noticed some unusual activities in your
    cheryl@govan.co.za To help protect your cheryl@govan.co.za, we've temporarily
    blocked your account from sending emails or receiving any emails from others.
    
 Content analysis details:   (14.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [169.239.182.19 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [169.239.182.19 listed in sa-trusted.bondedsender.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: graceful-superficial-sundae.glitch.me]
                             [URI: govan.co.za]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: graceful-superficial-sundae.glitch.me]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=account-security-noreply%40accountprotection.microsoft.com;ip=169.239.182.19;r=zacp120.webway.host]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [169.239.182.19 listed in sa-accredit.habeas.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  1.7 VFY_ACCT_NORDNS        Verify your account to a poorly-configured MTA -
                             probable phishing
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  5.0 KAM_GB_INVALID_FROM    From Address is invalid
X-Spam-Flag: YES
Subject:  ***SPAM***  Email Validation

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head><body><div align=3D"center">
<h3>Hello, <font color=3D"blue">cheryl, </font><br><br>
We noticed some unusual activities in your cheryl@govan.co.za To help prote=
ct your cheryl@govan.co.za, we've temporarily blocked your account from sen=
ding emails&nbsp;or receiving any&nbsp;emails from others.&nbsp;<br>&nbsp;<=
br><em>
</em>To unblock your cheryl@govan.co.za account is&nbsp;to&nbsp;verify your=
 account. <br><br>
<a href=3D'https://graceful-superficial-sundae.glitch.me/?eca=3Dcheryl@gova=
n.co.za '><u>
<span style=3D"background-color: rgb(255, 255, 0);"><font color=3D"#0101df"=
> VERIFY ACCOUNT NOW</font></span></u></a><br><br>Sincerely, <br>govan.co.z=
a Regards.<br><font color=3D"#0404b4">&copy;<font color=3D"#000000">The&nbs=
p;Office Team .</font></font>
<h3></h3></div>
<p></p>

</body></html>