File: /home/govancoz/mail/.spam/new/1709025786.M164374P1613781.zacp120.ve.host,S=6503,W=6616
Return-Path: <root@ebgvrjqb.relacioninternational.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id eA9WCfqp3WXVnxgAvcbEzQ
(envelope-from <root@ebgvrjqb.relacioninternational.com>)
for <govancoz+spam@zacp120.ve.host>; Tue, 27 Feb 2024 11:23:06 +0200
Return-path: <root@ebgvrjqb.relacioninternational.com>
Envelope-to: qual1@govan.co.za
Delivery-date: Tue, 27 Feb 2024 11:23:06 +0200
Received: from 172-104-33-26.ip.linodeusercontent.com ([172.104.33.26]:48958 helo=ebgvrjqb.relacioninternational.com)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <root@ebgvrjqb.relacioninternational.com>)
id 1retg0-006mRJ-12
for qual1@govan.co.za;
Tue, 27 Feb 2024 11:23:06 +0200
Received: by ebgvrjqb.relacioninternational.com (Postfix, from userid 0)
id 9F57240A17; Tue, 27 Feb 2024 09:20:18 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gov.za; s=mail;
t=1709025618; bh=li0g6VFTzEMDWDMl2JDikB9s0a2JiIEZwd+I1MMLq5c=;
h=Subject:From:To:Date;
b=PA1llmlliQ7apTAbqhGqLSWzwODcniLqs56dj+d7eDSfR2WR1fK3ShhIhIQsRdNGF
MLH2HYYJ+h3s0Fpr4yH7M5gv0VDmBGMNJDctlmMBSMAZzjk5SmHL6jyNghT3L04M72
duaWqqV6k05Pdj+1FEakdWjqMd8T311bGXEPChSnB0Z2+WjcarDNSuOwlm4DoEH+Z6
PaghlxaDT/3EkSpF1HsS21HWN7dUf0c7cPl7vXllK2xGcMCNLcvgOKVTVK7o72Q2gC
WBMXG4XfYB8ZAaGyxbXKO+h94Tkkacm+dX4RfoQa3R74EUoX3a7WbDI7IP51i0Ce9T
42/haFh1VWTDw==
content-type: text/html
MIME-Version: 1.0
X-Priority: 1
X-MSmail-Priority: High
Priority: urgent
Importance: high
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-Newsreader: Microsoft Outlook Express 6.00.2800.140
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Message-ID: <EYRyb1FLllhrSgYYSpBpXfdUCYJm5cfgd@gov.za>
From: The African Revenue Service<jayden@gov.za>
To: qual1@govan.co.za
Date: Tue, 27 Feb 2024 09:20:18 +0000 (UTC)
X-Spam-Status: Yes, score=27.5
X-Spam-Score: 275
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear qual1@govan.co.za, I am reaching out to you as Jayden
Munger, Compliance Officer at the South African Revenue Service (SARS). Attached,
you will find the Fiscal Assessment Report, which provides details on the
status of your tax compliance obligations.
Content analysis details: (27.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: gov.za]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[172.104.33.26 listed in zen.spamhaus.org]
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=root%40ebgvrjqb.relacioninternational.com;ip=172.104.33.26;r=zacp120.ve.host]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ebgvrjqb.relacioninternational.com;ip=172.104.33.26;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.0 URI_AZURE_CLOUDAPP Link to hosted azure web application,
possible phishing
1.8 FROM_MISSP_SPF_FAIL No description available.
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** SARS Document Services ITA530610
<p>Dear <strong>qual1@govan.co.za</strong>,</p>
<p>I am reaching out to you as Jayden Munger, <strong>Compliance Officer at the South African Revenue Service</strong> <strong>(SARS)</strong>.</p>
<p>Attached, you will find the <strong>Fiscal Assessment Report</strong>, which provides details on the status of your <strong>tax compliance obligations</strong>.</p>
<p><a href="https://incomeinvoicepd.northeurope.cloudapp.azure.com/?95017855_9280_53061015835-764854764854260397397407997574079975.pdf">FAR 2603973984500870.pdf</a></p>
<p>If you have any questions or need clarification after reviewing the report, <strong>please feel free to contact me</strong>.</p>
<p>Remember, it is crucial to meet your tax obligations within the specified deadline to avoid possible penalties and surcharges, as provided in <strong>Article 9501 of the Tax Code</strong>. This is your last opportunity to resolve the matter in an extrajudicial stage and in this way avoid facing a judicial process with the consequences mentioned above.</p>
<p>I appreciate your attention and cooperation in advance.</p>
<p>27/02/2024</p>
<p><span style="font-size: 7.5pt; color: #666666;">This email was issued by an official governmental institution. All rights reserved.</span></p>