/home/smartonegroup/mail/.spam/new/1757969963.M792066P1961931.server11.hhost.eg,S=7895,W=8043
Return-Path: <liss7371@gmail.com>
Delivered-To: smartonegroup+spam@server11.hhost.eg
Received: from server11.hhost.eg
	by server11.hhost.eg with LMTP
	id YMMlLyt+yGjL7x0Aq0RAHw
	(envelope-from <liss7371@gmail.com>)
	for <smartonegroup+spam@server11.hhost.eg>; Mon, 15 Sep 2025 20:59:23 +0000
Return-path: <liss7371@gmail.com>
Envelope-to: accounts@smartonegroup.com
Delivery-date: Mon, 15 Sep 2025 20:59:23 +0000
Received: from [185.196.8.172] (port=65379 helo=gmail.com)
	by server11.hhost.eg with esmtp (Exim 4.98.2)
	(envelope-from <liss7371@gmail.com>)
	id 1uyGIF-00000008QIu-1k31
	for accounts@smartonegroup.com;
	Mon, 15 Sep 2025 20:59:23 +0000
From: Accounting <liss7371@gmail.com>
To: accounts@smartonegroup.com
Date: 15 Sep 2025 13:58:41 -0700
Message-ID: <20250915135841.DFD4BB90AA4FBB42@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0012_DC23B527.98DD69EA"
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server11.hhost.eg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  New Page 1 How are you 
 Content analysis details:   (22.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [185.196.8.172 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?185.196.8.172>]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.196.8.172 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.196.8.172 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.196.8.172 listed in sa-trusted.bondedsender.org]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                             digit
                             [liss7371(at)gmail.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [liss7371(at)gmail.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  3.5 PHISH_ATTACH           Attachment filename suspicious, probable phishing
  0.8 GB_FREEMAIL_NUM        Freemail spammy address
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  3.0 KAM_BADPDF3            Likely Fake PDF
  2.0 GB_GMAIL_NUM           Spam from random Gmail address
  4.0 GB_BADJS               Bad html attachment
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
X-Spam-Flag: YES
Subject:  ***SPAM***  Fwd: Payment Slip

This is a multi-part message in MIME format.

------=_NextPart_000_0012_DC23B527.98DD69EA
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3Den-us http-equiv=3DContent-Language>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<DIV class=3DrcmBody style=3D"MARGIN: 0.5em">
<DIV>
<P><FONT size=3D4>How are you<BR>&nbsp;</FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)"><FONT size=3D4>Find attached&nbsp;Payment Slip. as =
requested=20
<P>kindly check with your bank for confirmation.&nbsp;</FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">&nbsp;=20
<P><FONT size=3D4>Thanks<BR>Accounting<BR>lisa</FONT></P>
<P>&nbsp;</P></DIV>
<P><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT si=
ze=3D4>-----Original Message-----<BR>From: "Account Payables/Credit Control=
 Unit"<BR>Date: 9/15/2025 1:58:41 p.m.<BR>To: "Accounting"&lt;</FONT></SPAN=
><FONT size=3D4><A style=3D"COLOR: rgb(0,0,238)">liss7371@gmail.com</A></FO=
NT><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT si=
ze=3D4>&gt;<BR>Subject: Fwd: </FONT></SPAN><FONT size=3D4>Payment Slip</FON=
T><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT siz=
e=3D4>
 </FONT></SPAN></P>
<P>&nbsp;</P>
<P><FONT size=3D4>Hello, lisa</FONT></P>
<P><FONT size=3D4>Kindly forward&nbsp; the attached Payment Slip &nbsp;to <=
/FONT><A style=3D"COLOR: rgb(0,0,238)"><FONT size=3D4>accounts@smartonegrou=
p.com</FONT></A></P></DIV>
<P><FONT size=3D4>Best Regards,<BR>Account Payables/Credit Control Unit </F=
ONT></P></BODY></HTML>
------=_NextPart_000_0012_DC23B527.98DD69EA
Content-Type: text/html; name="Payment Slip.pdf.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Payment Slip.pdf.html"
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------=_NextPart_000_0012_DC23B527.98DD69EA--
Path: home/smartonegroup/mail/.spam/new