HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1752006222.M913985P3214842.zacp120.webway.host,S=9426,W=9611
Return-Path: <quickbooks@notification.intuit.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id GKkrNk5+bWj6DTEA8rC0kQ
	(envelope-from <quickbooks@notification.intuit.com>)
	for <govancoz+spam@zacp120.webway.host>; Tue, 08 Jul 2025 22:23:42 +0200
Return-path: <quickbooks@notification.intuit.com>
Envelope-to: janine@govan.co.za
Delivery-date: Tue, 08 Jul 2025 22:23:42 +0200
Received: from [147.124.214.198] (port=49837 helo=notification.intuit.com)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <quickbooks@notification.intuit.com>)
	id 1uZEqq-0000000DUP8-1ino
	for janine@govan.co.za;
	Tue, 08 Jul 2025 22:23:42 +0200
From: Andrew Wagoner <invest.cathayholdingslimited@accountant.com>
To: janine@govan.co.za
Date: 8 Jul 2025 13:22:57 -0700
Message-ID: <20250708132256.A5C42AF2F033151F@accountant.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.1
X-Spam-Score: 161
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Offer Title: Secure Growth Crypto Investment Plan (SGCIP)
    Launch Date: July 08, 2025 Offer Valid Until: August 30, 2025 Target Investors:
    Individuals and institutions seeking secure and high-yield exp [...] 
 Content analysis details:   (16.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?147.124.214.198>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [147.124.214.198 listed in psbl.surriel.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=quickbooks%40notification.intuit.com;ip=147.124.214.198;r=zacp120.webway.host]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=notification.intuit.com;ip=147.124.214.198;r=zacp120.webway.host]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the message
                              and the domain has a DMARC quarantine policy
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [invest.cathayholdingslimited(at)accountant.com]
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [147.124.214.198 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [147.124.214.198 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [147.124.214.198 listed in sa-accredit.habeas.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 SPOOFED_FREEMAIL       No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?8J+agCBDYXRoYXkgSG9sZGluZ3MgTGltaXRlZCBDcnlwdG8gSW52ZXN0bWVudCBPZmZlciAyMDI1?=

<!DOCTYPE HTML>

<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p><strong>Offer Title</strong>: <strong>Secure Growth Crypto Investment Pl=
an (SGCIP)</strong><br>
<strong>Launch Date</strong>: July 08, 2025<br>
<strong>Offer Valid Until</strong>: August 30, 2025<br>
<strong>Target Investors</strong>: Individuals and institutions seeking sec=
ure and high-yield exposure to digital assets.</p><p>
</p><hr><p>
</p><h3><strong><img class=3D"an1" draggable=3D"false" aria-label=3D"&#5535=
7;&#56520;" alt=3D"&#55357;&#56520;" src=3D"https://fonts.gstatic.com/s/e/n=
otoemoji/16.0/1f4c8/72.png" loading=3D"lazy" data-emoji=3D"&#55357;&#56520;=
"> Investment Tiers</strong></h3><p>
</p><div class=3D"gmail-_tableContainer_80l1q_1"><div tabindex=3D"-1" class=
=3D"gmail-_tableWrapper_80l1q_14 gmail-group gmail-flex gmail-w-fit gmail-f=
lex-col-reverse"><table class=3D"gmail-w-fit gmail-min-w-(--thread-content-=
width)"><thead><tr><th>Tier</th><th>Minimum Investment</th><th>Annual Retur=
n (APY)</th><th>Lock-in Period</th><th>Bonus</th></tr></thead><tbody><tr><t=
d>Bronze</td><td>$500</td><td>8%</td><td>6 months</td><td>1% Loyalty Bonus<=
/td></tr><tr><td>Silver</td><td>$2,500</td><td>11%</td>
<td>12 months</td><td>2% Referral Bonus</td></tr><tr><td>Gold</td><td>$10,0=
00</td><td>14%</td><td>18 months</td><td>3% Stake Bonus + Free NFT</td></tr=
><tr><td>Platinum</td><td>$50,000</td><td>18%</td><td>24 months</td><td>5% =
Stake Bonus + VIP Access</td></tr></tbody></table><div class=3D"gmail-stick=
y end-(--thread-content-margin) gmail-h-0 gmail-self-end gmail-select-none"=
><div class=3D"gmail-absolute end-0 gmail-flex gmail-items-end"><span class=
=3D"gmail-">
<button class=3D"gmail-hover:bg-token-bg-tertiary gmail-text-token-text-sec=
ondary gmail-my-1 gmail-rounded-sm gmail-p-1 gmail-transition-opacity gmail=
-group-[:not(:hover):not(:focus-within)]:pointer-events-none gmail-group-[:=
not(:hover):not(:focus-within)]:opacity-0" aria-label=3D"Copy Table"></butt=
on></span></div></div></div></div><p>
</p><hr><p>
</p><h3><strong><img class=3D"an1" draggable=3D"false" aria-label=3D"&#5535=
7;&#56592;" alt=3D"&#55357;&#56592;" src=3D"https://fonts.gstatic.com/s/e/n=
otoemoji/16.0/1f510/72.png" loading=3D"lazy" data-emoji=3D"&#55357;&#56592;=
"> Key Features</strong></h3><p>
</p><ul>
<li>
<p><strong>Secured &amp; Audited Portfolio</strong>: Diversified across Bit=
coin, Ethereum, stablecoins, and emerging altcoins. Audited monthly by inde=
pendent firms.</p>
</li>
<li>
<p><strong>Smart Contract Assurance</strong>: Investments are protected via=
 blockchain-based smart contracts for transparency and automation.</p>
</li>
<li>
<p><strong>Monthly Yield Disbursement</strong>: Returns paid out monthly in=
 USDT, BUSD, or local fiat equivalent.</p>
</li>
<li>
<p><strong>Risk Management</strong>: Hedging and AI-driven rebalancing to m=
inimize downside.</p>
</li>
<li>
<p><strong>Early Exit Option</strong>: Available with a 5% early withdrawal=
 fee (after 3 months minimum).</p>
</li>
</ul><p>
</p><hr><p>
</p><h3><strong><img class=3D"an1" draggable=3D"false" aria-label=3D"&#5535=
6;&#57217;" alt=3D"&#55356;&#57217;" src=3D"https://fonts.gstatic.com/s/e/n=
otoemoji/16.0/1f381/72.png" loading=3D"lazy" data-emoji=3D"&#55356;&#57217;=
"> Limited-Time Bonuses</strong></h3><p>
</p><ul>
<li>
<p><strong>Early Bird</strong> (First 100 investors): Extra 2% APY added to=
 your plan.</p>
</li>
<li>
<p><strong>Referral Reward</strong>: Get 2% of the investment amount for ea=
ch person you refer (credited instantly in crypto).</p>
</li>
<li>
<p><strong>NFT Access Pass</strong>: All Gold+ tier investors receive a rar=
e utility NFT (gives priority access to future deals).</p>
</li>
</ul><p>
</p><hr><p>
</p><h3><strong><img class=3D"an1" draggable=3D"false" aria-label=3D"&#5535=
8;&#56830;" alt=3D"&#55358;&#56830;" src=3D"https://fonts.gstatic.com/s/e/n=
otoemoji/16.0/1f9fe/72.png" loading=3D"lazy" data-emoji=3D"&#55358;&#56830;=
"> Legal &amp; Compliance</strong></h3><p>
</p><ul>
<li>
<p>Fully compliant with applicable local and international financial regula=
tions.</p>
</li>
<li>
<p>KYC/AML verification required before participation.</p>
</li>
<li>
<p>Smart contract code publicly viewable and third-party audited.</p></li><=
/ul><p>Kindly Get back to us immediately for the next step to grab this off=
er while it last.<br><br>Warm Regards<br><br>Andrew Wagoner</p><p>
</p>


</body></html>