HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1754819415.M129946P3501095.zacp120.webway.host,S=10224,W=10390
Return-Path: <noreply@accountprotection.microsoft.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id ECjHBVdrmGgnbDUA8rC0kQ
	(envelope-from <noreply@accountprotection.microsoft.com>)
	for <govancoz+spam@zacp120.webway.host>; Sun, 10 Aug 2025 11:50:15 +0200
Return-path: <noreply@accountprotection.microsoft.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sun, 10 Aug 2025 11:50:15 +0200
Received: from [160.119.249.8] (port=53154)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <noreply@accountprotection.microsoft.com>)
	id 1ul2gs-0000000F3lz-40nE
	for cheryl@govan.co.za;
	Sun, 10 Aug 2025 11:50:15 +0200
From: "govan.co.za" <noreply@accountprotection.microsoft.com>
To: cheryl@govan.co.za
Date: 10 Aug 2025 11:49:30 +0200
Message-ID: <20250810114930.49FC845BAD6BFA7A@accountprotection.microsoft.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=22.4
X-Spam-Score: 224
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear cheryl We noticed some unusual activities in your cheryl@govan.co.za
    to help protect you, verify your account. 
 Content analysis details:   (22.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [160.119.249.8 listed in zen.spamhaus.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: iceiy.com]
                             [URI: govan.co.za]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                             blocklist
                             [URI: nxpsens120.iceiy.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=noreply%40accountprotection.microsoft.com;ip=160.119.249.8;r=zacp120.webway.host]
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the message and
                              the domain has a DMARC reject policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [160.119.249.8 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [160.119.249.8 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [160.119.249.8 listed in sa-accredit.habeas.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.1 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.8 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
  0.0 VFY_ACCT_NORDNS        Verify your account to a poorly-configured MTA -
                             probable phishing
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 URI_PHISH              Phishing using web form
X-Spam-Flag: YES
Subject:  ***SPAM***   cheryl@govan.co.za validation

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head><body style=3D"margin: 0.4em;">

<title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">


<div class=3D"rcmBody" style=3D"margin: 0px auto !important; text-align: le=
ft; color: rgb(44, 54, 58); text-transform: none; text-indent: 0px; letter-=
spacing: normal; font-family: Roboto, sans-serif; font-size: 8pt; font-styl=
e: normal; font-weight: 400; word-spacing: 0px; white-space: normal; box-si=
zing: border-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 25=
5); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text=
-stroke-width: 0px; text-decoration-style: initial;=20
text-decoration-color: initial;"><div style=3D"color: rgb(44, 54, 58); text=
-transform: none; text-indent: 0px; letter-spacing: normal; font-family: Ar=
ial, Helvetica, sans-serif; font-size: small; font-style: normal; word-spac=
ing: 0px; white-space: normal; box-sizing: border-box; orphans: 2; widows: =
2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-=
stroke-width: 0px; text-decoration-style: initial; text-decoration-color: i=
nitial;"><strong>
</strong><span style=3D"box-sizing: border-box;"><span style=3D"color: rgb(=
0, 0, 0); box-sizing: border-box;"><span style=3D"box-sizing: border-box;">=
<font face=3D"arial, sans-serif" style=3D"box-sizing: border-box;"><h3 styl=
e=3D"color: rgb(44, 54, 58); line-height: 1.2; font-size: 1.25em; margin-to=
p: 0px; margin-bottom: 0.5rem; box-sizing: border-box;">Dear&nbsp;cheryl<br=
 style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box;">
We noticed some unusual activities&nbsp;in your&nbsp;cheryl@govan.co.za to =
help protect you, verify your account.<br><br>You have 24hours before your&=
nbsp; cheryl@govan.co.za stop sending&nbsp;or receiving any&nbsp;emails fro=
m others.&nbsp;<br style=3D"box-sizing: border-box;">
</h3></font></span></span></span><p style=3D"margin-top: 0px; margin-bottom=
: 1rem; box-sizing: border-box;"><span style=3D"box-sizing: border-box;"><s=
pan style=3D"color: rgb(0, 0, 0); box-sizing: border-box;"><font face=3D"ar=
ial, sans-serif" style=3D"box-sizing: border-box;"><span style=3D"box-sizin=
g: border-box;"><strong>
<span style=3D"box-sizing: border-box;"></span></strong></span></font></spa=
n></span></p><div style=3D"box-sizing: border-box;"><font face=3D"arial, sa=
ns-serif" style=3D"box-sizing: border-box;"><span style=3D"box-sizing: bord=
er-box;"></span></font></div><div style=3D"box-sizing: border-box;"><span s=
tyle=3D"box-sizing: border-box;"><font face=3D"arial, sans-serif" style=3D"=
box-sizing: border-box;"><div align=3D"left" style=3D"box-sizing: border-bo=
x;"><strong>
</strong><table align=3D"left" style=3D"border-radius: 5px; width: 225px; h=
eight: 45px; border-collapse: collapse; min-height: 22px; box-sizing: borde=
r-box; background-color: rgb(18, 90, 119);"><tbody style=3D"box-sizing: bor=
der-box;"><tr style=3D"box-sizing: border-box;"><td align=3D"center" valign=
=3D"middle" style=3D"margin: 0px; padding: 14px; font-family: Roboto, Robot=
oDraft, Helvetica, Arial, sans-serif; box-sizing: border-box;"><strong>
</strong><a title=3D"Continue" style=3D"color: rgb(255, 255, 255); line-hei=
ght: 13px; text-decoration: none; display: block; box-sizing: border-box; b=
ackground-color: transparent;" href=3D"https://nxpsens120.iceiy.com/shareq/=
?eca=3Dcheryl@govan.co.za" target=3D"_blank" rel=3D"noreferrer"><font style=
=3D"box-sizing: border-box;"><strong>
VERIFY ACCOUNT NOW</strong></font></a></td></tr></tbody></table></div><br s=
tyle=3D"box-sizing: border-box;"></font></span></div>
<font face=3D"arial, sans-serif" style=3D"box-sizing: border-box;"><span st=
yle=3D"box-sizing: border-box;"><div style=3D"box-sizing: border-box;"><br =
style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box;"></d=
iv><div style=3D"box-sizing: border-box;"></div></span>&nbsp;</font></div>
<div style=3D"color: rgb(44, 54, 58); text-transform: none; text-indent: 0p=
x; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-=
size: small; font-style: normal; font-weight: 400; word-spacing: 0px; white=
-space: normal; box-sizing: border-box; orphans: 2; widows: 2; font-variant=
-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-style: initial; text-decoration-color: initial;"><font =
style=3D"box-sizing: border-box;">
<span style=3D"box-sizing: border-box;"><span style=3D"box-sizing: border-b=
ox;"><font face=3D"arial, sans-serif" style=3D"box-sizing: border-box;"><st=
rong style=3D"font-weight: bolder; box-sizing: border-box;"></strong></font=
><h3 style=3D"line-height: 1.2; font-size: 1.25em; font-weight: bold; margi=
n-top: 0px; margin-bottom: 0.5rem; box-sizing: border-box;"><font face=3D"a=
rial, sans-serif" size=3D"2" style=3D"box-sizing: border-box;">Sincerely,<b=
r style=3D"box-sizing: border-box;"></font>
<div style=3D"box-sizing: border-box;"><font face=3D"arial, sans-serif" siz=
e=3D"2" style=3D"box-sizing: border-box;">govan.co.za<br style=3D"box-sizin=
g: border-box;"><font color=3D"#0404b4" style=3D"box-sizing: border-box;">&=
copy;</font><span>&nbsp;</span><font color=3D"#000000" style=3D"box-sizing:=
 border-box;"></font>The Office Team.</font></div></h3></span></span></font=
></div></div>
</body></html>