HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1751984757.M408688P2084793.zacp120.webway.host,S=9382,W=9536
Return-Path: <quickbooks@notification.intuit.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id iKUoGHUqbWi5zx8A8rC0kQ
	(envelope-from <quickbooks@notification.intuit.com>)
	for <govancoz+spam@zacp120.webway.host>; Tue, 08 Jul 2025 16:25:57 +0200
Return-path: <quickbooks@notification.intuit.com>
Envelope-to: mike@govan.co.za
Delivery-date: Tue, 08 Jul 2025 16:25:57 +0200
Received: from [147.124.214.198] (port=57119 helo=notification.intuit.com)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <quickbooks@notification.intuit.com>)
	id 1uZ9Gc-00000008mDQ-00Fm
	for mike@govan.co.za;
	Tue, 08 Jul 2025 16:25:57 +0200
From: Q&M TRADING <qmtrucksnellspruit@gmail.com>
To: mike@govan.co.za
Date: 8 Jul 2025 07:25:10 -0700
Message-ID: <20250708072510.9C3AF792002269DF@gmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello mike@govan.co.za We are pleased to extend an exciting
    opportunity for you to represent our company in your country. This is a legitimate
    offer with no financial obligations required from you. 
 Content analysis details:   (21.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?147.124.214.198>]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [147.124.214.198 listed in zen.spamhaus.org]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [147.124.214.198 listed in psbl.surriel.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=quickbooks%40notification.intuit.com;ip=147.124.214.198;r=zacp120.webway.host]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=notification.intuit.com;ip=147.124.214.198;r=zacp120.webway.host]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [qmtrucksnellspruit(at)gmail.com]
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [147.124.214.198 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [147.124.214.198 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [147.124.214.198 listed in sa-accredit.habeas.com]
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 SPOOFED_FREEMAIL       No description available.
  0.4 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?UmVtb3RlIEJ1c2luZXNzIE9wcG9ydHVuaXR5IOKAkyBMb2NhbCBSZXByZXNlbnRhdGl2ZSBOZWVkZWQ=?=

<!DOCTYPE HTML>

<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<span style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0=
px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font=
-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; floa=
t: none; display: inline !important; white-space: normal; orphans: 2; widow=
s: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: normal;=
 font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style:=20
initial; text-decoration-color: initial;"><p style=3D"color: rgb(34, 34, 34=
); text-transform: none; text-indent: 0px; letter-spacing: normal; font-fam=
ily: Arial, Helvetica, sans-serif; font-size: small; font-style: normal; fo=
nt-weight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows:=
 2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text=
-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial;">
Hello mike@govan.co.za<br></p><font color=3D"#000000" face=3D"Times New Rom=
an" size=3D"3" style=3D"text-transform: none; text-indent: 0px; letter-spac=
ing: normal; font-style: normal; font-weight: 400; word-spacing: 0px; white=
-space: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=
-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=
kness: initial; text-decoration-style: initial; text-decoration-color: init=
ial;"><p>
We are pleased to extend an exciting opportunity for you to represent our c=
ompany in your country. This is a legitimate offer with<span>&nbsp;</span><=
strong>no financial obligations required from you</strong>.</p><p>You&#8217=
;ll enjoy<span>&nbsp;</span><strong>flexible work arrangements</strong>, wh=
ether you're seeking part-time or full-time involvement. Additionally, this=
 role offers<span>&nbsp;</span><strong>competitive earnings</strong><span>&=
nbsp;</span>
that exceed typical job expectations in similar positions.</p><p>If you're =
interested in learning more, please reply with your<span>&nbsp;</span><stro=
ng>phone number, and preferred email address</strong>, and we will promptly=
 provide you with further details.</p><p>We look forward to connecting with=
 you.</p></font>
<p style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0px;=
 letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-si=
ze: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-s=
pace: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-v=
ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=
ess: initial; text-decoration-style: initial; text-decoration-color: initia=
l;">
<font color=3D"#000000" face=3D"Times New Roman" size=3D"3">Best regards,</=
font><br><strong><font color=3D"#1f1f1f" face=3D"Helvetica">Arthur Sable</f=
ont></strong><br>
<span style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0=
px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font=
-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; floa=
t: none; display: inline !important; white-space: normal; orphans: 2; widow=
s: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: normal;=
 font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style:=20
initial; text-decoration-color: initial;">Q&amp;M TRADING</span></p></span>=

<p style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0px;=
 letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-si=
ze: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-s=
pace: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-v=
ariant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=
ess: initial; text-decoration-style: initial; text-decoration-color: initia=
l;"><br></p><p><br></p>


</body></html>