HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1754465940.M471330P2168654.zacp120.webway.host,S=6226,W=6341
Return-Path: <admin@stichessolutionts.xyz>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id APEnGZQGk2hOFyEA8rC0kQ
	(envelope-from <admin@stichessolutionts.xyz>)
	for <govancoz+spam@zacp120.webway.host>; Wed, 06 Aug 2025 09:39:00 +0200
Return-path: <admin@stichessolutionts.xyz>
Envelope-to: danielle@govan.co.za
Delivery-date: Wed, 06 Aug 2025 09:39:00 +0200
Received: from [37.221.66.109] (port=53363 helo=MCWwI2aq.ava.hosting)
	by zacp120.webway.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <admin@stichessolutionts.xyz>)
	id 1ujYjj-000000098CV-0TPa
	for danielle@govan.co.za;
	Wed, 06 Aug 2025 09:39:00 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=stichessolutionts.xyz; s=dkim; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=Uu2jMqesPFFwWGWYfkXOEYsrPgoQnescun0oVceSZJU=; b=ZwkzhMDsgQJVC+xRtBIypgGApW
	CZNURYuF++RSxyfhtivX5d+DBylGE1Od1nDk4Ibb1LqMK83fa+EgKxzvmkIbGByAFaH0fka9G9Bfm
	1QhMtROPMEtPXQzEi8R2igLjS8wvI5a++3WQt22sHwoRLORn2oOtPfQKdNGx+83RXcHY=;
Received: from [188.253.111.148] (helo=stichessolutionts.xyz)
	by MCWwI2aq.ava.hosting with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <admin@stichessolutionts.xyz>)
	id 1ujYiy-002ZCa-Ek
	for danielle@govan.co.za;
	Wed, 06 Aug 2025 07:38:12 +0000
Reply-To: mauriceoostendorp@gmail.com
From: "Maurice Oostendorp"<admin@stichessolutionts.xyz>
To: danielle@govan.co.za
Date: 06 Aug 2025 15:38:11 +0800
Message-ID: <20250806153811.171AEF5AA367BC07@stichessolutionts.xyz>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=15.9
X-Spam-Score: 159
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day, I hope you are doing well. 
 Content analysis details:   (15.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in DNS
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  2.1 CPANEL_XYZ             .XYZ domain mostly used by spammers
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: stichessolutionts.xyz (xyz)]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: stichessolutionts.xyz]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [37.221.66.109 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.221.66.109 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.221.66.109 listed in bl.score.senderscore.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: stichessolutionts.xyz]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                             domains in spam/malware
  1.0 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.3 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.4 FROM_NTLD_REPLY_FREEMAIL From abused NTLD and Reply-To is FREEMAIL
X-Spam-Flag: YES
Subject:  ***SPAM***  In Your  Best Intrest...

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em"><FONT color=3D#1a1a1a size=3D4 face=3DArialMT=
><FONT color=3D#1a1a1a size=3D4 face=3DArialMT><FONT color=3D#1a1a1a size=
=3D4 face=3DArialMT>
<P>Good day,</P>
<P>I hope you are doing well.</P>
<P>I have contacted you before regarding the Financial Portfolio, "Estate" =
, a perceived relative of yours &nbsp;left behind in our institution. Kindl=
y ensure to respond this time around so that this issue can be further disc=
ussed. </P>
<P>Regards, </P>
<P>Maurice Oostendorp.</P></FONT></FONT></FONT></BODY></HTML>