from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <virusalert@dandemutande.co.zw>)
	id 1iNXtJ-000NIr-TT
	for dnsadmin@yoafrica.com; Thu, 24 Oct 2019 09:50:41 +0200

from [41.190.32.2] (port=20308 helo=sengwe.utande.co.zw)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1iNXvc-0007wY-4Z
	for dnsadmin@yoafrica.com; Thu, 24 Oct 2019 09:53:04 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 0629677D34B
	for <dnsadmin@yoafrica.com>; Thu, 24 Oct 2019 09:50:48 +0200 (CAT)

"Content-filter at sengwe.utande.co.zw" <virusalert@dandemutande.co.zw>

Banned Attachment Alert

Our content checker found 1 banned names: .exe,.exe-ms,ACCOUNT STATEMENTS.exe
in an email addressed to you claiming to be from <yukon@earthlink.net>.

Please contact your system administrator for further details.

SpamTitan ID: 7GNly5oafgfg

For your reference, here are the headers from the email:
--------------------------- BEGIN HEADERS ---------------------------
Received: from sengwe.utande.co.zw (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 4D0D877D2E2
	for <dnsadmin@yoafrica.com>; Thu, 24 Oct 2019 09:49:32 +0200 (CAT)
Authentication-Results: sengwe.utande.co.zw;
        dkim=pass (2048-bit rsa key sha256)
          header.d=thikanursinghomehospital.org
          header.i=@thikanursinghomehospital.org header.b=Zi5txnod
          header.a=rsa-sha256 header.s=default x-bits=2048;
        spf=softfail smtp.mailfrom=yukon@earthlink.net
          smtp.helo=zebra.vivawebhost.com
Received-SPF: softfail
        (earthlink.net: Sender is not authorized by default to use 'yukon@earthlink.net' in 'mfrom' identity, however domain is not currently prepared for false failures (mechanism '~all' matched))
        receiver=sengwe.utande.co.zw;
        identity=mailfrom;
        envelope-from="yukon@earthlink.net";
        helo=zebra.vivawebhost.com;
        client-ip=78.128.60.93
Received: from zebra.vivawebhost.com (zebra.vivawebhost.com [78.128.60.93])
	by sengwe.utande.co.zw (Postfix) with ESMTPS id 7C4B177D328
	for <dnsadmin@yoafrica.com>; Thu, 24 Oct 2019 09:49:24 +0200 (CAT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=thikanursinghomehospital.org; s=default; h=Message-ID:Reply-To:Subject:To:
	From:Date:Content-Type:MIME-Version:Sender:Cc:Content-Transfer-Encoding:
	Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
	Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
	List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	 bh=isYJjw1xoxd5rMheReEt8cnrYWH9RI3ukKT/nDtbpck=; b=Zi5txnod75HhgMrNkLV4BXQmq
	z5BbwYvHw8wkX+klKIQ9YjESk0P9TzFxiibXgBjXpuRUOgIrWAt7VXRLiTYt85UEp0Fft8kI4m4R1
	O3IiCZdlmvD586v+KI+ALCmRaAbmTwE/5pXwNY0ItzT+WpIKuaHiwlavmW54L5hCqL7lALuGzoezc
	ssQGCCKL3q/LqY1mkV58BfkKq1NKQqFovS/+wB3qGpICYdWwS4j7NO3P5VPMBzFif/DC+Kvzlt/aF
	yQgegSIicfIBafAjVvDzvWDFWcMUCFmcv3iJkvpqKhc0TWi435HiKDLAkEUA+tbVHX2WZNsLntGxJ
	LA6vqZ5Lg==;
Received: from [::1] (port=41354 helo=zebra.vivawebhost.com)
	by zebra.vivawebhost.com with esmtpa (Exim 4.92)
	(envelope-from <yukon@earthlink.net>)
	id 1iNXcw-0002AW-Ph; Thu, 24 Oct 2019 10:33:46 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="=_d84b8968713ca9b4ae01f4a9bf427dc2"
Date: Thu, 24 Oct 2019 10:33:46 +0300
From: ACCOUNTS <yukon@earthlink.net>
To: undisclosed-recipients:;
Subject: Fwd: STATEMENT
Reply-To: jeremytirx@yahoo.com
Mail-Reply-To: jeremytirx@yahoo.com
Message-ID: <db160eb381c34af3c2ece8a529ee5aab@earthlink.net>
X-Sender: yukon@earthlink.net
User-Agent: Roundcube Webmail/1.3.8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - zebra.vivawebhost.com
X-AntiAbuse: Original Domain - yoafrica.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - earthlink.net
X-Get-Message-Sender-Via: zebra.vivawebhost.com: authenticated_id: info@thikanursinghomehospital.org
X-Authenticated-Sender: zebra.vivawebhost.com: info@thikanursinghomehospital.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
---------------------------  END HEADERS  ---------------------------