/home/arranoyd/mail/.spam/new/1735890252.M59393P1609339.dike1.altushost.com,S=7004,W=7119
Return-Path: <kcviqdiuaz@creanovagroup.com>
Delivered-To: arranoyd+spam@dike1.altushost.com
Received: from dike1.altushost.com
	by dike1.altushost.com with LMTP
	id KNOnAkyVd2d7jhgAyrR0Bg
	(envelope-from <kcviqdiuaz@creanovagroup.com>)
	for <arranoyd+spam@dike1.altushost.com>; Fri, 03 Jan 2025 08:44:12 +0100
Return-path: <kcviqdiuaz@creanovagroup.com>
Envelope-to: tatjana.koprtla@otours.hr
Delivery-date: Fri, 03 Jan 2025 08:44:12 +0100
Received: from [117.30.88.235] (port=14524 helo=mxa-00188b01.gslb.pphosted.com)
	by dike1.altushost.com with esmtp (Exim 4.96.2)
	(envelope-from <kcviqdiuaz@creanovagroup.com>)
	id 1tTcLv-006kYp-0H
	for tatjana.koprtla@otours.hr;
	Fri, 03 Jan 2025 08:44:11 +0100
Date: Fri, 3 Jan 2025 15:43:05 +0800 (CST)
From: amanda944933 <amanda944933@gmail.com>
Sender: kcviqdiuaz <kcviqdiuaz@creanovagroup.com>
To: "tatjana.koprtla" <tatjana.koprtla@otours.hr>
Message-ID: <1549034105.1081721.1735890185196@mxa-00188b01.gslb.pphosted.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=11.1
X-Spam-Score: 111
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dike1.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi Dear! I hope you're all well. What is your business plan
    for 2025? 
 Content analysis details:   (11.1 points, 8.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5085]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [117.30.88.235 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [117.30.88.235 listed in bl.score.senderscore.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=kcviqdiuaz%40creanovagroup.com;ip=117.30.88.235;r=dike1.altushost.com]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [amanda944933[at]gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
                             tag
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                             EnvelopeFrom freemail headers are
                             different
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.9 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  1.5 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  Credit O/A 90 days payment, Import more from China

<p style=3D"margin-top:2px;margin-bottom:2px;"><br/></p><p style=3D"margin-=
top:2px;margin-bottom:2px;"><span style=3D";font-family:Tahoma;font-size:14=
px">Hi Dear! </span></p><p style=3D"margin-top:2px;margin-bottom:2px;"><spa=
n style=3D";font-family:Tahoma;font-size:14px"><br/></span></p><p style=3D"=
margin-top:2px;margin-bottom:2px;"><span style=3D";font-family:Tahoma;font-=
size:14px">I hope you&#39;re all well.</span></p><p style=3D"margin-top:2px=
;margin-bottom:2px;"><span style=3D";font-family:Tahoma;font-size:14px">Wha=
t is your business plan for 2025?</span></p><p style=3D"margin-top:2px;marg=
in-bottom:2px;"><span style=3D";font-family:Tahoma;font-size:14px">Import m=
ore goods from China?</span></p><p style=3D"margin-top:2px;margin-bottom:2p=
x;"><span style=3D";font-family:Tahoma;font-size:14px"><br/></span></p><p s=
tyle=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family:Taho=
ma;font-size:14px"></span></p><p style=3D"margin-top:2px;margin-bottom:2px;=
"><span style=3D";font-family:Tahoma;font-size:14px">We offer one-stop buyi=
ng/sourcing services to all different kinds of overseas clients, </span></p=
><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family=
:Tahoma;font-size:14px">Whether the total amount of your yearly purchases i=
s less than US$100,000 or more than US$100,000,000;</span></p><p style=3D"m=
argin-top:2px;margin-bottom:2px;"><span style=3D";font-family:Tahoma;font-s=
ize:14px"><br/></span></p><p style=3D"margin-top:2px;margin-bottom:2px;"><s=
pan style=3D";font-family:Tahoma;font-size:14px">We are happy to offer cred=
it Open Account (O/A) payment terms to our high-reputation customers. </spa=
n></p><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-f=
amily:Tahoma;font-size:14px"><br/></span></p><p style=3D"margin-top:2px;mar=
gin-bottom:2px;"><span style=3D";font-family:Tahoma;font-size:14px">If it i=
nterests you let me know and let&#39;s discuss further.</span></p><p style=
=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family:Tahoma;f=
ont-size:14px"><br/></span></p><p style=3D"margin-top:2px;margin-bottom:2px=
;"><span style=3D";font-family:Tahoma;font-size:14px">Best regards,</span><=
/p><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-fami=
ly:Tahoma;font-size:14px">Amanda Woo</span></p><p style=3D"margin-top:2px;m=
argin-bottom:2px;"><span style=3D";font-family:Tahoma;font-size:14px">Whats=
App:+8618859944933</span></p><p style=3D"margin-top: 2px; margin-bottom: 2p=
x;"><br/></p>