File: //home/govancoz/mail/.spam/new/1732337898.M603306P1875176.zacp120.ve.host,S=8379,W=8528
Return-Path: <test@limpopo.kz>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id ulWdIupgQWfonBwAvcbEzQ
(envelope-from <test@limpopo.kz>)
for <govancoz+spam@zacp120.ve.host>; Sat, 23 Nov 2024 06:58:18 +0200
Return-path: <test@limpopo.kz>
Envelope-to: candice@govan.co.za
Delivery-date: Sat, 23 Nov 2024 06:58:18 +0200
Received: from [185.234.114.71] (port=52453 helo=limpopo.kz)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from <test@limpopo.kz>)
id 1tEiDp-00000007r1i-0SDC
for candice@govan.co.za;
Sat, 23 Nov 2024 06:58:18 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=limpopo.kz;
s=dkim; h=Sender:Message-Id:Reply-To:Date:From:To:Subject:MIME-Version:
Content-Type:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=OsUEG4Qf0kRw033jSKJGUU0M1ahkjH+jYWEmKVOaXwI=; b=zf4tstiXYKJN4Jl1/se7Z8/jJb
MxnzrSbaaMPNfrBQ+xnur2Mo9ltsgIJNxx5UNMrpFpxNWqBJLcSCNDTff+jW1zrQDq8EZNz2omd7i
CT/O2yg3U4VPXKvU4lfzbefnMLH4epHF7h02BoPphMeplbk26tmS38RJuTIYu0BWyw7Q=;
Received: from [102.36.39.2] (helo=[192.168.1.103])
by limpopo.kz with esmtpa (Exim 4.94.2)
(envelope-from <test@limpopo.kz>)
id 1sBNBw-008prk-7o; Mon, 27 May 2024 05:22:16 +0600
Content-Type: multipart/alternative; boundary="===============2057390735=="
MIME-Version: 1.0
To: Recipients <info@ram.co.za>
From: RAM<info@ram.co.za>
Date: Mon, 27 May 2024 01:22:03 +0200
Reply-To: idanworld@hotmail.com
X-Antivirus: Avast (VPS 240526-4, 5/26/2024), Outbound message
X-Antivirus-Status: Clean
Message-Id: <E1sBNBw-008prk-7o@limpopo.kz>
Sender: test@limpopo.kz
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: RAM: Kindly note that your parcel RL001097064 sent through
Ram has an outstanding balance of R16.13. Click https://www.ramduties.co.za
to securely pay online, view the duty/tax calculation and downloa [...]
Content analysis details: (22.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: avcdn.net]
[URI: limpopo.kz]
[URI: ramduties.co.za]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URI: www.ramduties.co.za]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.234.114.71 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.234.114.71 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.234.114.71 listed in sa-trusted.bondedsender.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: www.ramduties.co.za]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=test%40limpopo.kz;ip=185.234.114.71;r=zacp120.ve.host]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=limpopo.kz;ip=185.234.114.71;r=zacp120.ve.host]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FROM_MISSP_SPF_FAIL No description available.
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.8 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 T_REMOTE_IMAGE Message contains an external image
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Shipping fee R16.13
You will not see this in a MIME-aware mail reader.
--===============2057390735==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
RAM: Kindly note that your parcel RL001097064 sent through Ram has an outst=
anding balance of R16.13. Click https://www.ramduties.co.za to securely pa=
y online, view the duty/tax calculation and download the relevant documents=
to avoid any impact on delivery.
--
This email has been checked for viruses by Avast antivirus software.
www.avast.com
--===============2057390735==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3Diso-8859-1"/></head><BODY><P>RAM: Kindly note that your parcel <STRONG>R=
L001097064</STRONG> sent through Ram has an outstanding balance of <S=
TRONG>R16.13</STRONG>. Click <A href=3D"https://www.ramduties.co.za">https:=
//www.ramduties.co.za</A> to securely pay online, view the duty/tax calcula=
tion and download the relevant documents to avoid any impact on delivery.</=
P><div id=3D"DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br /><table style=3D"bo=
rder-top: 1px solid #D3D4DE;"><tr><td style=3D"width: 55px; padding-top: 13=
px;"><a href=3D"https://www.avast.com/sig-email?utm_medium=3Demail&utm_sour=
ce=3Dlink&utm_campaign=3Dsig-email&utm_content=3Demailclient" target=3D"_bl=
ank"><img src=3D"https://s-install.avcdn.net/ipm/preview/icons/icon-envelop=
e-tick-round-orange-animated-no-repeat-v1.gif" alt=3D"" width=3D"46" height=
=3D"29" style=3D"width: 46px; height: 29px;"/></a></td><td style=3D"width: =
470px; padding-top: 12px; color: #41424e; font-size: 13px; font-family: Ari=
al, Helvetica, sans-serif; line-height: 18px;">Virus-free.<a href=3D"https:=
//www.avast.com/sig-email?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=
=3Dsig-email&utm_content=3Demailclient" target=3D"_blank" style=3D"color: #=
4453ea;">www.avast.com</a></td></tr></table><a href=3D"#DAB4FAD8-2DD7-40BB-=
A1B8-4E2AA1F9FDF2" width=3D"1" height=3D"1"> </a></div></BODY></HTML>
--===============2057390735==--