File: //home/govancoz/mail/.spam/new/1708860987.M974916P276664.zacp120.ve.host,S=4312,W=4396
Return-Path: <noreply@govan.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id 2IOdODsm22W4OAQAvcbEzQ
(envelope-from <noreply@govan.co.za>)
for <govancoz+spam@zacp120.ve.host>; Sun, 25 Feb 2024 13:36:27 +0200
Return-path: <noreply@govan.co.za>
Envelope-to: cheryl@govan.co.za
Delivery-date: Sun, 25 Feb 2024 13:36:27 +0200
Received: from [161.129.66.20] (port=63111 helo=govan.co.za)
by zacp120.ve.host with esmtp (Exim 4.96.2)
(envelope-from <noreply@govan.co.za>)
id 1reCnw-001A9T-2F
for cheryl@govan.co.za;
Sun, 25 Feb 2024 13:36:27 +0200
From: noreply@govan.co.za
To: cheryl@govan.co.za
Date: 25 Feb 2024 03:35:42 -0800
Message-ID: <20240225033542.36377D500372F868@govan.co.za>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear cheryl, Your account cheryl@govan.co.za will expire
today. In order to avoid disruption to your website, email, and any other
associated services. Follow instruction below to resolve now. RESOLVE ISSUE
NOW
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[161.129.66.20 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: amdev.ca]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?161.129.66.20>]
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 MIXED_HREF_CASE Has href in mixed case
1.3 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** Critical security alert for cheryl@govan.co.za
<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.18817"></HEAD>
<BODY>
<H3 align=3Dleft>Dear <FONT color=3Dblue><FONT color=3D#000000>cheryl=
,</FONT> </FONT><BR><BR>Your account <FONT color=3D#4e34cb>cheryl@govan.co.=
za</FONT> will expire today. In order to avoid disruption to your website, =
email, and any other associated services. Follow instruction below to=
resolve now. <BR><BR><A href=3D"https://dev.amdev.ca/dunde/General 2022/in=
dex.html#cheryl@govan.co.za"><U><SPAN style=3D"BACKGROUND-COLOR: #ffff00"><=
FONT color=3D#0101df>RESOLVE ISSUE NOW</FONT> </SPAN></U></A><BR><BR>
Sincerely, <BR><BR><FONT color=3D#0404b4><FONT color=3D#000000>© govan=
=2Eco.za Security Team</FONT></H3></FONT></FONT>
<H3> </H3></BODY></HTML>