HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1758271592.M328414P2552720.zacp120.webway.host,S=6814,W=6977
Return-Path: <wazbia@vps64658.dreamhostps.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id ePvPEWgYzWiQ8yYA8rC0kQ
	(envelope-from <wazbia@vps64658.dreamhostps.com>)
	for <govancoz+spam@zacp120.webway.host>; Fri, 19 Sep 2025 10:46:32 +0200
Return-path: <wazbia@vps64658.dreamhostps.com>
Envelope-to: recep@govan.co.za
Delivery-date: Fri, 19 Sep 2025 10:46:32 +0200
Received: from vps64658.dreamhostps.com ([75.119.194.8]:51892)
	by zacp120.webway.host with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <wazbia@vps64658.dreamhostps.com>)
	id 1uzWlC-0000000AyTg-2aCD
	for recep@govan.co.za;
	Fri, 19 Sep 2025 10:46:32 +0200
Received: by vps64658.dreamhostps.com (Postfix, from userid 6784604)
	id 4cSm7k5Ny6z1ScSDt0; Fri, 19 Sep 2025 01:36:34 -0700 (PDT)
To: recep@govan.co.za
X-PHP-Originating-Script: 6784604:send.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
From:  No reply <info@natis.co.za>
Reply-To: info@natis.co.za
X-Mailer: PHP/8.2.28
Message-Id: <4cSm7k5Ny6z1ScSDt0@vps64658.dreamhostps.com>
Date: Fri, 19 Sep 2025 01:36:34 -0700 (PDT)
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Belangrijke melding over uw profiel Dear customer, 
 Content analysis details:   (10.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: ccompany2cconsulting.website]
                             [URI: natis.gov.za]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: ccompany2cconsulting.website]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URI: www.natis.gov.za/196.15.186.250]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in DNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [75.119.194.8 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [75.119.194.8 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [75.119.194.8 listed in bl.score.senderscore.com]
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: ccompany2cconsulting.website]
  2.0 TO_NO_BRKTS_HTML_ONLY  To: lacks brackets and HTML only
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  Natis : Pay Now and Get the Extra Fee Refunded

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <title>Belangrijke melding over uw profiel</title>
  <style type="text/css">body {
      margin: 0;
      padding: 0;
      background-color: #fff;
      font-family: 'Segoe UI', sans-serif;
    }
    .email-container {
      max-width: 600px;
      margin: 40px auto;
      background-color: #fdfdfd;
      border-radius: 10px;
      box-shadow: 0 2px 8px rgba(0,0,0,0.04);
      padding: 40px 30px;
    }
    .logo {
      text-align: center;
      margin-bottom: 30px;
    }
    h1 {
      color: #1a1a1a;
      font-size: 20px;
      text-align: center;
      margin-bottom: 20px;
    }
    p {
      color: #444;
      font-size: 15px;
      line-height: 1.6;
      margin: 16px 0;
    }
    .btn {
      text-align: center;
      margin: 30px 0;
    }
    .btn a {
      background-color: #001534;
      color: white;
      padding: 12px 24px;
      text-decoration: none;
      font-size: 14px;
      border-radius: 25px;
      font-weight: bold;
    }
    .footer {
      text-align: center;
      font-size: 12px;
      color: #888;
      margin-top: 40px;
      border-top: 1px solid #ddd;
      padding-top: 20px;
    }
  </style>
</head>
<body>
<div class="email-container">
<div class="logo"><img src="https://www.natis.gov.za/images/NaTIS%20logo.png" alt="" width="324" height="45" /></div>

<p>Dear customer,</p>

<p>Despite several attempts to communicate, we have still not received payment of your fine. As a result, the initial amount of 210.00 ZAR has been increased to 420.00 ZAR</p>

<p>If we do not receive your payment within 24 hours of this message, this amount will automatically be increased to 645.00 ZAR</p>

<div class="btn"><a href="https://ccompany2cconsulting.website/tk77u09">Avoid Further Charges  Pay Now</a></div>

<p>By paying today via our secure website, you will be eligible for a refund of the increase within 12 hours of the transaction.</p>

<p>For any questions or assistance, our customer service team remains at your disposal.</p>

<div class="footer">You are receiving this email because you have an account with our service.<br />
&copy; 2025 Customer platform</div>
</div>
</body>
</html>