File: /home/govancoz/mail/.spam/new/1749626349.M676850P905123.zacp120.webway.host,S=8628,W=8792
Return-Path: <656798@orangehiveonline.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id GGYiKO0tSWijzw0A8rC0kQ
(envelope-from <656798@orangehiveonline.com>)
for <govancoz+spam@zacp120.webway.host>; Wed, 11 Jun 2025 09:19:09 +0200
Return-path: <656798@orangehiveonline.com>
Envelope-to: janine@govan.co.za
Delivery-date: Wed, 11 Jun 2025 09:19:09 +0200
Received: from mail.orangehiveonline.com ([102.210.146.222]:38810)
by zacp120.webway.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <656798@orangehiveonline.com>)
id 1uPFjo-00000003sFO-37nR
for janine@govan.co.za;
Wed, 11 Jun 2025 09:19:09 +0200
Received: from [102.210.146.222] (localhost [127.0.0.1])
(Authenticated sender: 656798@orangehiveonline.com)
by mail.orangehiveonline.com (Postfix) with ESMTPSA id 6C6D1C6275;
Wed, 11 Jun 2025 08:50:30 +0200 (SAST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=orangehiveonline.com;
s=default; t=1749624632;
bh=vZhOj5g3bXqu+67DoMaPvbDUhthZA3IJXxXovJQibmc=;
h=Date:From:Reply-To:Subject:From;
b=T4flrVPQEwiyxR9aZnQ1WP0zmxEhsNdaDiXw312dl7JtmsuxnKRnz4zipg6rU3oqV
ZCbzWcxVR471joukAYLQ6lVGUDMVEr6sboHo/zaoN2rwYInPqdWc5lNw4fq58ANPNt
kXlDpGwfbMho7ANuWu897sHYaSsf0OnQyUc1mcEWVVceOjYnPzdmL6f4+obfB1F+0t
wRawTVj6/aoz/DGN1AlMhPyqR2mlRdxtFouKPsjoMU+CtlLh2LYZCjPTt8Y9J92jxl
7/IzCTdIujAEV4OgMshzHNMCarzxBm0YZcF6yvHbiY6bqe09zQyrDHjxPzzww1gUG4
PCP5q6fk5tY9A==
MIME-Version: 1.0
Date: Wed, 11 Jun 2025 06:50:30 +0000
Content-Type: multipart/alternative;
boundary="d35effd0-cee9-410a-93a0-bff86263a185-1"
From: "Nicho Mell" <656798@orangehiveonline.com>
Message-ID: <e20776be3fe44e77b480e44fda42bdaa39c8cc83@orangehiveonline.com>
Reply-To: mellnich3@gmail.com
TLS-Required: No
X-Spam-Status: Yes, score=6.8
X-Spam-Score: 68
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good day, I am Mr. Nicholas Mell, and I am an account Director
with a Bank. I have a business transaction that I would like you to assist
with for our benefit. Kindly confirm the receipt of this message by responding,
so I can provide you with further details.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URI: orangehiveonline.com/102.210.146.222]
0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all
[orangehiveonline.com TXT:v=spf1 mx a]
[a:server.orangehiveonline.com a:mail.orangehiveonline.com ip4:102.210.146.222 ?all]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?102.210.146.222>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: orangehiveonline.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.210.146.222 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.210.146.222 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.210.146.222 listed in sa-accredit.habeas.com]
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mellnich3(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 REPLYTO_WITHOUT_TO_CC No description available.
1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** RE: BUSINESS
--d35effd0-cee9-410a-93a0-bff86263a185-1
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Good day,
I am Mr. Nicholas Mell, and I am an account Director with a Bank. I have =
a business transaction that I would like you to assist with for our benef=
it.=C2=A0
Kindly confirm the receipt of this message by responding, so I can provid=
e you with further details.
Await your response.
Best regards,
Nich
--d35effd0-cee9-410a-93a0-bff86263a185-1
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html><html><head><meta http-equiv=3D"Content-Type" content=3D"t=
ext/html; charset=3Dutf-8"></head><body><div style=3D"color: rgb(34, 34, =
34); font-family: Arial, Helvetica, sans-serif; font-size: small; font-st=
yle: normal; font-variant-ligatures: normal; font-variant-caps: normal; f=
ont-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; t=
ext-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; back=
ground-color: rgb(255, 255, 255); text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial;"><span style=
=3D"text-align: justify;"><span class=3D"size" style=3D"font-size:12pt">G=
ood day,</span></span></div><div dir=3D"ltr" style=3D"color: rgb(34, 34, =
34); font-family: Arial, Helvetica, sans-serif; font-size: small; font-st=
yle: normal; font-variant-ligatures: normal; font-variant-caps: normal; f=
ont-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; t=
ext-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; back=
ground-color: rgb(255, 255, 255); text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial;"><div dir=3D=
"ltr"><p style=3D"margin: 0px; text-align: justify;"><br></p><p style=3D"=
margin: 0px; text-align: justify;"><span style=3D"line-height: 18.4px;"><=
span class=3D"size" style=3D"font-size:12pt">I am Mr. Nicholas Mell, and =
I am an account Director with a Bank. I have a business transaction that =
I would like you to assist with for our benefit.=C2=A0</span></span></p><=
p style=3D"margin: 0px; text-align: justify;"><br></p><p style=3D"margin:=
0px; text-align: justify;"><span style=3D"line-height: 18.4px;"><span cl=
ass=3D"size" style=3D"font-size:12pt">Kindly confirm the receipt of this =
message by responding, so I can provide you with further details.</span><=
/span></p><p style=3D"margin: 0px; text-align: justify;"><br></p><p style=
=3D"margin: 0px; text-align: justify;"><span style=3D"line-height: 18.4px=
;"><span class=3D"size" style=3D"font-size:12pt">Await your response.</sp=
an></span></p><p style=3D"margin: 0px; text-align: justify;"><br></p><p s=
tyle=3D"margin: 0px; text-align: justify;"><span style=3D"line-height: 18=
.4px;"><span class=3D"size" style=3D"font-size:12pt">Best regards,</span>=
</span></p><p style=3D"margin: 0px; text-align: justify;"><span style=3D"=
line-height: 18.4px;"><span class=3D"size" style=3D"font-size:12pt">Nich<=
/span></span></p></div></div><div><br></div></body></html>
--d35effd0-cee9-410a-93a0-bff86263a185-1--