HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1750894972.M182926P1439539.zacp120.webway.host,S=5148,W=5239
Return-Path: <heleneschnapel@gmail.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id oAUZCnyJXGgz9xUA8rC0kQ
	(envelope-from <heleneschnapel@gmail.com>)
	for <govancoz+spam@zacp120.webway.host>; Thu, 26 Jun 2025 01:42:52 +0200
Return-path: <heleneschnapel@gmail.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Thu, 26 Jun 2025 01:42:52 +0200
Received: from [169.239.182.117] (port=60305)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <heleneschnapel@gmail.com>)
	id 1uUZlT-000000064iX-3FMQ
	for cheryl@govan.co.za;
	Thu, 26 Jun 2025 01:42:52 +0200
Reply-To: danielseletso.wpd@gmail.com
From: Karen Morgan<heleneschnapel@gmail.com>
To: cheryl@govan.co.za
Date: 26 Jun 2025 01:42:09 +0200
Message-ID: <20250626014209.947C64E6C578B52A@gmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  You have an inheritance with Scottish bank of England, Contact
    me on danielseletso.wpd@gmail.com to assist you in processing your inheritance
    fund to be released. Regards, Mrs. Karen Morgan Senior Ac [...] 
 Content analysis details:   (15.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [169.239.182.117 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [169.239.182.117 listed in bl.score.senderscore.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?169.239.182.117>]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [heleneschnapel(at)gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [169.239.182.117 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [169.239.182.117 listed in sa-accredit.habeas.com]
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 YOU_INHERIT            Discussing your inheritance
  0.0 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  0.0 SPOOFED_FREEMAIL       No description available.
  1.5 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail reply-to
  0.0 T_FROM_MISSP_FREEMAIL  From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Your Inheritance

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head><body style=3D"margin: 0.4em;">You have an inheritance with Scottish=
 bank of England, <br>Contact me on <a href=3D"mailto:danielseletso.wpd@gma=
il.com">danielseletso.wpd@gmail.com</a> to assist you in processing your in=
heritance fund to be released. <br>Regards, <br>Mrs. Karen Morgan <br>Senio=
r Accountant </body></html>