/home/kanaloa/mail/.spam/new/
/home/kanaloa/mail/.spam/new
NameSizeModeActions
1692492060.M552663P174401.sirius.intelsrv.net,S=102559,W=1027501025590640editdlrm
1694221735.M363214P885835.sirius.intelsrv.net,S=78876,W=79076788760640editdlrm
1698542407.M948712P3604484.sirius.intelsrv.net,S=94617,W=94805946170640editdlrm
1700443490.M753742P251665.atlas.intelsrv.net,S=84026,W=84201840260640editdlrm
1702672421.M36882P2194997.atlas.intelsrv.net,S=94478,W=94664944780640editdlrm
1708283093.M994051P2886566.atlas.intelsrv.net,S=84084,W=84260840840640editdlrm
1711571655.M771605P4124184.atlas.intelsrv.net,S=14297,W=14521142970640editdlrm
1711574143.M63856P4169044.atlas.intelsrv.net,S=14286,W=14510142860640editdlrm
1712092887.M220867P32366.atlas.intelsrv.net,S=14090,W=14324140900640editdlrm
1712096179.M976591P103590.atlas.intelsrv.net,S=14076,W=14310140760640editdlrm
1713381681.M870113P3698754.atlas.intelsrv.net,S=8850,W=899688500640editdlrm
1713384051.M817886P3758620.atlas.intelsrv.net,S=8842,W=898888420640editdlrm
1714415088.M396685P2306197.atlas.intelsrv.net,S=12179,W=12374121790640editdlrm
1714417863.M721482P2323368.atlas.intelsrv.net,S=12159,W=12354121590640editdlrm
1715807643.M36129P3685776.atlas.intelsrv.net,S=69473,W=69577694730640editdlrm
1717086952.M535483P1959373.atlas.intelsrv.net,S=13555,W=13767135550640editdlrm
1717088874.M831846P1986005.atlas.intelsrv.net,S=13413,W=13623134130640editdlrm
1720792861.M594569P1684919.atlas.intelsrv.net,S=94899,W=95091948990640editdlrm
1728072877.M187476P3973201.atlas.intelsrv.net,S=95456,W=95653954560640editdlrm
1728848996.M227405P2434445.atlas.intelsrv.net,S=85006,W=85192850060640editdlrm
1731046228.M90320P2927654.atlas.intelsrv.net,S=84120,W=84295841200640editdlrm
1731506450.M620905P2853279.atlas.intelsrv.net,S=95031,W=95222950310640editdlrm
1733025339.M119983P1206673.atlas.intelsrv.net,S=84854,W=85038848540640editdlrm
1733668902.M780298P3098488.atlas.intelsrv.net,S=95175,W=95368951750640editdlrm
1735261357.M144342P3110429.atlas.intelsrv.net,S=84855,W=85039848550640editdlrm
1735787586.M244569P4114045.atlas.intelsrv.net,S=95310,W=95505953100640editdlrm
1737398734.M475585P154347.atlas.intelsrv.net,S=84697,W=84879846970640editdlrm
1738751835.M550351P180958.vmi2438535.contaboserver.net,S=95516,W=95713955160640editdlrm
1740942719.M471687P181200.vmi2438535.contaboserver.net,S=95404,W=95599954040640editdlrm
1742204744.M384817P2752769.vmi2438535.contaboserver.net,S=85086,W=85273850860640editdlrm
1744756317.M397505P3678161.vmi2438535.contaboserver.net,S=84954,W=85139849540640editdlrm
1745194592.M758424P381353.vmi2438535.contaboserver.net,S=95361,W=95556953610640editdlrm
1745336576.M800126P736253.vmi2438535.contaboserver.net,S=153917,W=1560911539170640editdlrm
1745372262.M157682P824952.vmi2438535.contaboserver.net,S=7936,W=808279360640editdlrm
1745440339.M853220P980468.vmi2438535.contaboserver.net,S=31843,W=32326318430640editdlrm
1745705587.M961996P1581325.vmi2438535.contaboserver.net,S=7720,W=786477200640editdlrm
1745724435.M215862P1619296.vmi2438535.contaboserver.net,S=32025,W=32511320250640editdlrm
1746140592.M951073P2526363.vmi2438535.contaboserver.net,S=7261,W=738672610640editdlrm
1746381035.M126218P3036763.vmi2438535.contaboserver.net,S=7413,W=754074130640editdlrm
1746398834.M92557P3070805.vmi2438535.contaboserver.net,S=7791,W=793777910640editdlrm
1746417203.M507924P3105711.vmi2438535.contaboserver.net,S=31596,W=32076315960640editdlrm
1747166772.M689990P1107481.vmi2438535.contaboserver.net,S=7792,W=793877920640editdlrm
1747351781.M117310P1519839.vmi2438535.contaboserver.net,S=7827,W=796078270640editdlrm
1747531137.M459373P1870619.vmi2438535.contaboserver.net,S=84948,W=85133849480640editdlrm
1747746035.M107177P2266132.vmi2438535.contaboserver.net,S=84963,W=85148849630640editdlrm
1747792460.M920497P2367881.vmi2438535.contaboserver.net,S=7446,W=760674460640editdlrm
1749331304.M33140P1241064.vmi2438535.contaboserver.net,S=6764,W=687767640640editdlrm
1749465293.M408822P1463139.vmi2438535.contaboserver.net,S=95803,W=96004958030640editdlrm
1749499116.M668858P1528496.vmi2438535.contaboserver.net,S=85237,W=85426852370640editdlrm
1749587202.M6711P1686597.vmi2438535.contaboserver.net,S=154171,W=1563521541710640editdlrm
1755268224.M833642P3752908.vmi2438535.contaboserver.net,S=84902,W=85086849020640editdlrm
1759207711.M983454P3525463.vmi2438535.contaboserver.net,S=8588,W=868285880640editdlrm
1761025755.M172851P3356900.vmi2438535.contaboserver.net,S=97960,W=98107979600640editdlrm
1765092131.M727179P24730.vmi2438535.contaboserver.net,S=3213,W=327232130640editdlrm
1765508328.M935440P411074.vmi2438535.contaboserver.net,S=476401,W=4829624764010640editdlrm
1765508329.M12121P411074.vmi2438535.contaboserver.net,S=476385,W=4829464763850640editdlrm
1771413483.M564817P583029.vmi2438535.contaboserver.net,S=5882,W=598258820640editdlrm
1771525106.M88101P931517.vmi2438535.contaboserver.net,S=5988,W=609059880640editdlrm
1781445977.M67460P3415701.vmi2438535.contaboserver.net,S=18477,W=18799184770640editdlrm
1788082966.M551860P2791612.vmi2438535.contaboserver.net,S=6000,W=610660000640editdlrm
Edit: /home/kanaloa/mail/.spam/new/1746398834.M92557P3070805.vmi2438535.contaboserver.net,S=7791,W=7937 (7791B)
Return-Path: Delivered-To: kanaloa+spam@vmi2438535.contaboserver.net Received: from vmi2438535.contaboserver.net by vmi2438535.contaboserver.net with LMTP id 6B20BHLuF2hV2y4Aex89Rg (envelope-from ) for ; Sun, 04 May 2025 17:47:14 -0500 Return-path: Envelope-to: cfo@kanaloaparqueacuatico.co Delivery-date: Sun, 04 May 2025 17:47:14 -0500 Received: from [212.11.64.238] (port=60228 helo=gmail.com) by vmi2438535.contaboserver.net with esmtp (Exim 4.98.1) (envelope-from ) id 1uBi77-0000000Csuw-2986 for cfo@kanaloaparqueacuatico.co; Sun, 04 May 2025 17:47:13 -0500 From: Accounting To: cfo@kanaloaparqueacuatico.co Date: 04 May 2025 15:46:31 -0700 Message-ID: <20250504154631.4421387AB4D197E4@gmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_3CE62979.002FAA6C" X-Spam-Status: Yes, score=21.1 X-Spam-Score: 211 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "vmi2438535.contaboserver.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 1 How are you Content analysis details: (21.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_ZEN_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked. See https://www.spamhaus.org/returnc/vol/ [212.11.64.238 listed in zen.spamhaus.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in sa-accredit.habeas.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [lisa0837(at)gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [lisa0837(at)gmail.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 GB_FREEMAIL_NUM Freemail spammy address 2.0 GB_GMAIL_NUM Spam from random Gmail address 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.0 KAM_BADPDF3 Likely Fake PDF 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing 4.0 GB_BADJS Bad html attachment 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list X-Spam-Flag: YES Subject: ***SPAM*** Fwd: Payment Slip This is a multi-part message in MIME format. ------=_NextPart_000_0012_3CE62979.002FAA6C Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable New Page 1

How are you
 

Find attached Payment Slip. as = requested=20

kindly check with your bank for confirmation. 

 =20

Thanks
Accounting
lisa

 

-----Original Message-----
From: "Account Payables/Credit Control= Unit"
Date: 5/4/2025 3:46:31 p.m.
To: "Accounting"<= lisa0837@gmail.com>
Subject: Fwd: Payment Slip

 

Hello, lisa

Kindly forward  the attached Payment Slip  to <= /FONT>cfo@kanaloaparqueacua= tico.co

Best Regards,
Account Payables/Credit Control Unit

------=_NextPart_000_0012_3CE62979.002FAA6C Content-Type: text/html; name="Payment Slip.pdf.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Payment Slip.pdf.html" PHNjcmlwdD4NCjwhLS1meXVoaWtvdWhlNmdnNzdoOHV5Zmd5YnhmYm5ndWhvaXV5dGRycmRz ZnJkdGdoeXVnaW9paHV5dHJlc2VlZnR0eWZnN2g4aWpoaGdqa2tqaHlndGVydHlnanVvbGt1 aGd0eWd5dXloa3lmdGhqZ3VoaWdodWd1aXl5Z2dnaHVpaGh1Z3l1LS0+DQpkb2N1bWVudC53 cml0ZSh1bmVzY2FwZSgnJTNDJTIxRE9DVFlQRSUyMGh0bWwlMjBQVUJMSUMlMjAlMjItLy9X M0MvL0RURCUyMFhIVE1MJTIwMS4wJTIwVHJhbnNpdGlvbmFsLy9FTiUyMiUwQSUwQSUyMiUy MiUzRSUwQSUzQ2h0bWwlMjB4bWxucyUzRCUyMiUyMiUzRSUwQSUzQ2hlYWQlM0UlMEElM0Nt ZXRhJTIwaHR0cC1lcXVpdiUzRCUyMkNvbnRlbnQtVHlwZSUyMiUyMGNvbnRlbnQlM0QlMjJ0 ZXh0L2h0bWwlM0IlMjBjaGFyc2V0JTNEaXNvLTg4NTktMSUyMiUyMC8lM0UlMEElM0NtZXRh JTIwaHR0cC1lcXVpdiUzRCUyMlJFRlJFU0glMjJjb250ZW50JTNEJTIyMSUzQnVybCUzRGh0 dHBzJTNBLy9oYXZhamVsLmNvbS93cC1pbmNsdWRlcy9TaW1wbGVQaWUvc3JjL3NtLmh0bWwl M0ZlbWFpbCcpKTsNCjwvc2NyaXB0Pj1jZm9Aa2FuYWxvYXBhcnF1ZWFjdWF0aWNvLmNvIj4N Cjx0aXRsZT5VbnRpdGxlZCBEb2N1bWVudDwvdGl0bGU+DQo8L2hlYWQ+DQoNCjxib2R5Pg0K DQo8L2JvZHk+DQo8L2h0bWw+DQoNCg== ------=_NextPart_000_0012_3CE62979.002FAA6C--