HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1758450855.M156393P4173458.zacp120.webway.host,S=7715,W=7895
Return-Path: <fastwayouriers@punky.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id YKQpCafUz2iSrj8A8rC0kQ
	(envelope-from <fastwayouriers@punky.com>)
	for <govancoz+spam@zacp120.webway.host>; Sun, 21 Sep 2025 12:34:15 +0200
Return-path: <fastwayouriers@punky.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Sun, 21 Sep 2025 12:34:15 +0200
Received: from mail.hringdu.is ([46.22.100.12]:53940 helo=mail-out.hringdu.is)
	by zacp120.webway.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <fastwayouriers@punky.com>)
	id 1v0HOX-000000001XZ-2REq
	for danielle@govan.co.za;
	Sun, 21 Sep 2025 12:34:15 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail-out.hringdu.is (Postfix) with ESMTP id AAE52615BFAA;
	Sun, 21 Sep 2025 08:50:09 +0000 (GMT)
X-Virus-Scanned: amavis at example.com
Received: from mail-out.hringdu.is ([127.0.0.1])
 by localhost (mail.hringdu.is [127.0.0.1]) (amavis, port 10024) with ESMTP
 id 8W-pw8T38BRD; Sun, 21 Sep 2025 08:50:07 +0000 (GMT)
Received: from EC2AMAZ-0NLFSUD.eu-north-1.compute.internal (23-151-209-31.dynamic.hringdu.is [31.209.151.23])
	by mail-out.hringdu.is (Postfix) with ESMTP id 446CD632AE34;
	Sun, 21 Sep 2025 03:38:06 +0000 (GMT)
Content-Type: multipart/alternative; boundary="===============0937852986=="
MIME-Version: 1.0
To: Recipients <fastwayouriers@punky.com>
From: "do-not-reply" <fastwayouriers@punky.com>
Date: Sun, 21 Sep 2025 03:38:01 +0000
Message-Id: <20250921033806.446CD632AE34@mail-out.hringdu.is>
X-Spam-Status: Yes, score=5.5
X-Spam-Score: 55
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Customer, Your chargeback is currently ready due to
   a fraud transaction. To avoid delays, please allow the chargeback via the
   link below. Details: Type: Chargeback Amount : 210 AED (˜ 991,55 ZAR). Status:
    Waiting for approval Complete Payment If you need assistance, please contact
    our customer service team. - 2025 Nedbank Limited 
 Content analysis details:   (5.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nedbank.co.za]
                             [URI: dcitizens.eu]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=fastwayouriers%40punky.com;ip=46.22.100.12;r=zacp120.webway.host]
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [46.22.100.12 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [46.22.100.12 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [46.22.100.12 listed in sa-accredit.habeas.com]
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.5 KAM_EU                 RAW: Prevalent use of .eu in spam/malware
  0.0 TO_EQ_FM_DOM_SPF_FAIL  To domain == From domain and external SPF
                             failed
  0.0 TO_EQ_FM_SPF_FAIL      To == From and external SPF failed
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  Nedbank Limited: Your Chargeback is available.

You will not see this in a MIME-aware mail reader.
--===============0937852986==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

 =

   =

    	 =

   Dear Customer,
 Your chargeback is currently ready due to a fraud transaction. To avoid de=
lays, please allow the chargeback via the link below.
 Details:
  =

Type: Chargeback =

Amount : 210 AED (=98 991,55 ZAR).  =

Status: Waiting for approval =

  Complete Payment =

 If you need assistance, please contact our customer service team.
  - 2025 Nedbank Limited =

 	 =

  	 =

 =20
--===============0937852986==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<!DOCTYPE html>
<html lang=3D"en">
<head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf=
-8"/>
  <meta charset=3D"UTF-8" />
  <title>Chargeback available</title>
</head>
<body style=3D"margin:0;padding:0;font-family:Arial, sans-serif;background-=
color:#ffffff;color:#000000;line-height:1.5;">
  <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
    <tr>
      <td align=3D"center">
        <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"=
20" style=3D"max-width:600px;background-color:#ffffff;">
          <tr>
            <td align=3D"center">
              <img src=3D"https://personal.nedbank.co.za/content/dam/nedban=
k/icons/resources/logo.svg" alt=3D"Logo" width=3D"170" height=3D"60" style=
=3D"display:block;margin:0 auto;" />
            </td>
          </tr>
          <tr>
            <td>
              <p><strong>Dear Customer,</strong></p>
              <p>Your chargeback is currently ready due to a fraud transact=
ion. To avoid delays, please allow the chargeback via the link below.</p>
              <p><strong>Details:</strong></p>
              <ul>
                <li>Type: Chargeback</li>
                <li>Amount : 210 AED (=CB=9C 991,55 ZAR). </li>
                <li>Status: Waiting for approval</li>
              </ul>
              <p style=3D"text-align:center;">
                <a href=3D"https://dcitizens.eu/sd/" style=3D"background-co=
lor:#006400;color:#ffffff;padding:10px 20px;text-decoration:none;font-size:=
14px;">Complete Payment</a>
              </p>
              <p>If you need assistance, please contact our customer servic=
e team.</p>
              <p style=3D"font-size:12px;color:#666;text-align:center;borde=
r-top:1px solid #ddd;padding-top:10px;margin-top:20px;">
                &copy; 2025 Nedbank Limited
              </p>
            </td>
          </tr>
        </table>
      </td>
    </tr>
  </table>
</body>
</html>

--===============0937852986==--