from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <virusalert@dandemutande.co.zw>)
	id 1iPN93-0005aa-Q0
	for dnsadmin@yoafrica.com; Tue, 29 Oct 2019 10:46:29 +0200

from [41.190.32.2] (port=16789 helo=sengwe.utande.co.zw)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1iPNBM-0003nH-1J
	for dnsadmin@yoafrica.com; Tue, 29 Oct 2019 10:48:52 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 1A51377D34A
	for <dnsadmin@yoafrica.com>; Tue, 29 Oct 2019 10:46:28 +0200 (CAT)

"Content-filter at sengwe.utande.co.zw" <virusalert@dandemutande.co.zw>

Banned Attachment Alert

Our content checker found 1 banned names: .exe,.exe-ms,Swiftcopy00002736393639262936.exe
in an email addressed to you claiming to be from <maurizio@neptunevenice.it>.

Please contact your system administrator for further details.

SpamTitan ID: bDgeepmrKsbl

For your reference, here are the headers from the email:
--------------------------- BEGIN HEADERS ---------------------------
Received: from sengwe.utande.co.zw (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id D878577D412
	for <dnsadmin@yoafrica.com>; Tue, 29 Oct 2019 10:41:44 +0200 (CAT)
Authentication-Results: sengwe.utande.co.zw;
        dkim=pass (2048-bit rsa key sha256)
          header.d=thikanursinghomehospital.org
          header.i=@thikanursinghomehospital.org header.b=Vf6+e+ub
          header.a=rsa-sha256 header.s=default x-bits=2048;
        spf=softfail smtp.mailfrom=maurizio@neptunevenice.it
          smtp.helo=zebra.vivawebhost.com
Received-SPF: softfail
        (neptunevenice.it: Sender is not authorized by default to use 'maurizio@neptunevenice.it' in 'mfrom' identity, however domain is not currently prepared for false failures (mechanism '~all' matched))
        receiver=sengwe.utande.co.zw;
        identity=mailfrom;
        envelope-from="maurizio@neptunevenice.it";
        helo=zebra.vivawebhost.com;
        client-ip=78.128.60.93
Received: from zebra.vivawebhost.com (zebra.vivawebhost.com [78.128.60.93])
	by sengwe.utande.co.zw (Postfix) with ESMTPS id 417EF77D463
	for <dnsadmin@yoafrica.com>; Tue, 29 Oct 2019 10:41:37 +0200 (CAT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=thikanursinghomehospital.org; s=default; h=Message-ID:References:
	In-Reply-To:Subject:To:From:Date:Content-Type:MIME-Version:Sender:Reply-To:Cc
	:Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:
	Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:
	List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	 bh=DLk6p/a6RM+tkkl9YnMQNy6tBw5+2GElHTFcheCYB3o=; b=Vf6+e+ubChYxoUw6+sbMATk0G
	xWaz4SxPCbuNChayaavohaqWTGneXZrzXtRGKzC0FuY5/fKDxjfpbgUW0LTTIZfjavlt0r675uq+u
	ptJT4bBOze9l72Puu9UPa3H/fd5DOje/ACofsRLacj34WPCiyTOGxrKwMWRDy1xMQJsOPbtjXt3w+
	+7vwN3wUnRZzVH73brNgt9LT8emRkbnp3NpwxXYTmayiw4MzM3GUgMSvdmPS96Gg5rOTIbKOQSopV
	nUG+KCWeG+k9f2LPkD9t7dsqfSosP4e71ukL/3iAHfWgUo3XjvUppff71k3Y287qtVJZldxAzdZqh
	0vabEGiRA==;
Received: from [::1] (port=42400 helo=zebra.vivawebhost.com)
	by zebra.vivawebhost.com with esmtpa (Exim 4.92)
	(envelope-from <maurizio@neptunevenice.it>)
	id 1iPMyI-0006Db-SL; Tue, 29 Oct 2019 10:35:22 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="=_80449f7269cfadb40e2b94f0405f11f7"
Date: Tue, 29 Oct 2019 10:35:22 +0200
From: ACCOUNTS <maurizio@neptunevenice.it>
To: undisclosed-recipients:;
Subject: PROOF OF PAYMENT
In-Reply-To: <001401d525da$377d8990$a6789cb0$@neptunevenice.it>
References: <006801d4faab$5e08e5a0$1a1ab0e0$@neptunevenice.it>
 <006301d4fc40$e2eac450$a8c04cf0$@neptunevenice.it>
 <006701d4fe68$fc2ae330$f480a990$@neptunevenice.it>
 <!&!AAAAAAAAAAAYAAAAAAAAALhcvGRo9ABHiyjciSeBKbfCgAAAEAAAAKiN/VN1GBhKpRjHFqXmTUoBAAAAAA==@vistakoncepts.com>
 <!&!AAAAAAAAAAAYAAAAAAAAALhcvGRo9ABHiyjciSeBKbfCgAAAEAAAAKiN/VN1GBhKpRjHFqXmTUoBAAAAAA==@neptunevenice.it>
 <11748d60b1518cffed02ee9e33715e48@vistakoncepts.com>
 <000301d4ff38$e3e898f0$abb9cad0$@neptunevenice.it>
 <000501d4ff39$fdf6b690$f9e423b0$@neptunevenice.it>
 <026201d5099c$6aac90e0$4005b2a0$@neptunevenice.it>
 <000001d50a27$91507870$b3f16950$@com>
 <015501d50a58$e63c29c0$b2b47d40$@neptunevenice.it>
 <028501d50fc1$835de050$8a19a0f0$@neptunevenice.it>
 <007301d51246$bdc20f00$39462d00$@neptunevenice.it>
 <00e901d51476$390939a0$ab1bace0$@neptunevenice.it>
 <01be01d5153a$a9bab650$fd3022f0$@neptunevenice.it>
 <000001d516c9$4919c1c0$db4d4540$@com>
 <015401d52293$50e1cd50$f2a567f0$@neptunevenice.it>
 <001201d525bb$17a9e560$46fdb020$@com>
 <001401d525da$377d8990$a6789cb0$@neptunevenice.it>
Message-ID: <4b003d0992b2f4dea94db843fae62694@neptunevenice.it>
X-Sender: maurizio@neptunevenice.it
User-Agent: Roundcube Webmail/1.3.8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - zebra.vivawebhost.com
X-AntiAbuse: Original Domain - yoafrica.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - neptunevenice.it
X-Get-Message-Sender-Via: zebra.vivawebhost.com: authenticated_id: queries@thikanursinghomehospital.org
X-Authenticated-Sender: zebra.vivawebhost.com: queries@thikanursinghomehospital.org
X-Source: 
X-Source-Args: 
X-Source-Dir: 
---------------------------  END HEADERS  ---------------------------