Return-Path: Delivered-To: info-china+spam@xinruijitrade.com Received: from ls277.radcom.hosting by ls277.radcom.hosting with LMTP id +DVTH0+LtGf/OgAAQUtCww (envelope-from ) for ; Tue, 18 Feb 2025 16:59:51 +0330 Return-path: Envelope-to: info-china@xinruijitrade.com Delivery-date: Tue, 18 Feb 2025 16:59:51 +0330 Received: from mail0.dokjghdoil.xyz ([95.169.203.40]:51514) by ls277.radcom.hosting with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1tkNfS-0005L0-19 for info-china@xinruijitrade.com; Tue, 18 Feb 2025 16:59:51 +0330 From: a-zamani@ptsoc.com To: info-china@xinruijitrade.com Date: 18 Feb 2025 05:29:16 -0800 Message-ID: <20250218052916.3635B1A187FD0967@ptsoc.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=5.9 X-Spam-Score: 59 X-Spam-Bar: +++++ X-Spam-Report: Spam detection software, running on the system "ls277.radcom.hosting", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Good day Please find the attached files below . Commercial invoice F4U202502179.pdf added Monday 2/17/2025 Commercial invoice B4U202502170.pdf added Monday 2/17/2025 KHD-FRA-05022025-131241.pdf added Monday 2/17/2025 Content analysis details: (5.9 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sepehrcandle.com] 0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all [dokjghdoil.xyz TXT:v=spf1 a mx ptr] [a:dokjghdoil.xyz ip4:95.169.203.0/24] [?all] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [95.169.203.40 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [95.169.203.40 listed in bl.score.senderscore.com] 2.8 URI_WPADMIN WordPress login/admin URI, possible phishing 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD X-Spam-Flag: YES Subject: ***SPAM*** Final Draft Documents X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

Good day

Please find the attached = files below .

&= nbsp;added Monday 2/17/2025

Commercial invoice B4U202502170.pdf

added Monday 2/17/2025

= <= /tbody>

KHD-FRA-05022025-131241.pdf

added Monday 2/17/2025

If yo= u have any questions, please do not hesitate to contact us.

Best Rega= rds.