HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1708388470.M437758P770258.zacp120.ve.host,S=5442,W=5557
Return-Path: <kubennaidoo.sarb@safrica.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id c7KKGHbw02XSwAsAvcbEzQ
	(envelope-from <kubennaidoo.sarb@safrica.com>)
	for <govancoz+spam@zacp120.ve.host>; Tue, 20 Feb 2024 02:21:10 +0200
Return-path: <kubennaidoo.sarb@safrica.com>
Envelope-to: cheryl@govan.co.za
Delivery-date: Tue, 20 Feb 2024 02:21:10 +0200
Received: from 59-233-24-185.static.servebyte.com ([185.24.233.59]:49254 helo=vps34281.servebyte.com)
	by zacp120.ve.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <kubennaidoo.sarb@safrica.com>)
	id 1rcDsc-003EDU-0n
	for cheryl@govan.co.za;
	Tue, 20 Feb 2024 02:21:10 +0200
Received: from localhost (localhost [127.0.0.1])
	by vps34281.servebyte.com (Postfix) with SMTP id 527243A900;
	Mon, 19 Feb 2024 12:57:28 +0000 (UTC)
Received: from [10.137.242.17] by localhost id 1RehHhcUjWen; Mon, 19 Feb 2024 06:52:47 -0600
Message-ID: <3uw51u1011562q6-s1k9n-z@rnh5l.z.jh.ni>
From: "Deputy Governor, South African Reserve bank." <kubennaidoo.sarb@safrica.com>
Reply-To: "Deputy Governor, South African Reserve bank." <kubennaidoo.sarb@safrica.com>
To: cheryl@fishhoektravel.co.za
Date: Mon, 19 Feb 24 06:52:47 GMT
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="AFC17EBAA.F.0E_FBF."
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Status: Yes, score=22.6
X-Spam-Score: 226
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attention. I write in respect of the fund with reference number:
    WDRC/L-F/UK/0407/19 brought to Reserve bank from World Debt Remittance Committee,
    London, United Kingdom in your name. From the informa [...] 
 Content analysis details:   (22.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.9 KAM_THEBAT             Abused X-Mailer Header for The Bat! MUA
  0.4 INVALID_DATE           Invalid Date: header (not RFC 2822)
  0.0 TVD_RCVD_IP            Message was received from an IP address
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [185.24.233.59 listed in psbl.surriel.com]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [185.24.233.59 listed in bl.score.senderscore.com]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [kubennaidoo.sarb[at]safrica.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.1 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  0.0 T_SPF_HELO_TEMPERROR   SPF: test of HELO record failed (temperror)
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.9 URG_BIZ                Contains urgent matter
  1.8 MISSING_MIMEOLE        Message has X-MSMail-Priority, but no X-MimeOLE
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  3.2 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat!
                             (boundary)
  2.6 MSGID_RANDY            Message-Id has pattern used in spam
  0.6 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
                             tag
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
                             parts
  0.9 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 SPOOFED_FREEMAIL       No description available.
  0.0 ADVANCE_FEE_4_NEW      Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject:  ***SPAM***  YOUR OUTSTANDING FUND TRANSFER REMINDER.


--AFC17EBAA.F.0E_FBF.
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

Attention.

I write in respect of the fund with reference number: WDRC/L-F/UK/0407/19 =
brought to Reserve bank from World Debt Remittance Committee, London, Unit=
ed Kingdom in your name.

From the information contained in the file that accompanied the fund, the =
fund was supposed to be paid to you by World Debt Remittance Committee, UK=
 before now, but all their efforts to contact you proved abortive.

The fund is equivalent to R126,000,000.00. Are you aware of the fund?

I await your urgent response, so that we can commence your fund transfer/r=
elease process.

I look forward to hearing from you.

Yours Sincerely.

Mr. Kuben Naidoo.
Deputy Governor, South African Reserve bank.

--AFC17EBAA.F.0E_FBF.--