File: /home/govancoz/mail/.spam/new/1740392749.M635302P2996253.zacp120.webway.host,S=5585,W=5680
Return-Path: <account-security-noreply@accountprotection.microsoft.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id mOeRJS1JvGcduC0A8rC0kQ
(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
for <govancoz+spam@zacp120.webway.host>; Mon, 24 Feb 2025 12:25:49 +0200
Return-path: <account-security-noreply@accountprotection.microsoft.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Mon, 24 Feb 2025 12:25:49 +0200
Received: from [102.209.118.51] (port=49561 helo=accountprotection.microsoft.com)
by zacp120.webway.host with esmtp (Exim 4.98)
(envelope-from <account-security-noreply@accountprotection.microsoft.com>)
id 1tmVen-0000000CYqj-0Cz8
for cheryl@govan.co.za;
Mon, 24 Feb 2025 12:25:49 +0200
From: Microsoft<account-security-noreply@accountprotection.microsoft.com>
To: cheryl@govan.co.za
Date: 24 Feb 2025 12:25:07 +0200
Message-ID: <20250224122507.DC4A8955F3EA09C3@accountprotection.microsoft.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear cheryl, Your account cheryl@govan.co.za will expire
today. In order to avoid disruption to your website, email, and any other
associated services. Follow instruction below to resolve now. RESOLVE ISSUE
NOW
Content analysis details: (15.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=accountprotection.microsoft.com;ip=102.209.118.51;r=zacp120.webway.host]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=account-security-noreply%40accountprotection.microsoft.com;ip=102.209.118.51;r=zacp120.webway.host]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.209.118.51 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.209.118.51 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[102.209.118.51 listed in bl.score.senderscore.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: bmhm.org]
[URI: govan.co.za]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.1 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_SPF_FAIL No description available.
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
2.0 MIXED_HREF_CASE Has href in mixed case
X-Spam-Flag: YES
Subject: ***SPAM*** FW:Security alert -MailRef#3300896398#-
<HTML><HEAD>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<H3 align=3Dleft>Dear <FONT color=3Dblue><FONT color=3D#000000>cheryl=
,</FONT> </FONT><BR><BR>Your account <FONT color=3D#4e34cb>cheryl@govan.co.=
za</FONT> will expire today. In order to avoid disruption to your website, =
email, and any other associated services. Follow instruction below to=
resolve now. <BR><BR><A href=3D"https://bmhm.org/vandtt/General 2024/index=
=2Ehtml#cheryl@govan.co.za"><U><SPAN style=3D"BACKGROUND-COLOR: #ffff00"><F=
ONT color=3D#0101df>RESOLVE ISSUE NOW</FONT> </SPAN></U></A><BR><BR>
Sincerely, <BR><BR><FONT color=3D#0404b4><FONT color=3D#000000>© govan=
=2Eco.za Security Team</FONT></H3></FONT></FONT>
<H3> </H3></BODY></HTML>