Return-Path: Delivered-To: behniwal+spam@server.rnv.kpw.mybluehostin.me Received: from server.rnv.kpw.mybluehostin.me by server.rnv.kpw.mybluehostin.me with LMTP id 9WC9C50XMGcvQgAAyTkJsw (envelope-from ) for ; Sat, 09 Nov 2024 19:17:01 -0700 Return-path: Envelope-to: logtextcheck@behniwalgroup.com Delivery-date: Sat, 09 Nov 2024 19:17:01 -0700 Received: from [103.191.76.117] (port=58856 helo=v9095.jimathosting.com) by server.rnv.kpw.mybluehostin.me with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1t9xVa-0004N3-GJ for logtextcheck@behniwalgroup.com; Sat, 09 Nov 2024 19:17:01 -0700 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=casuarinahotels.com.my; s=default; h=Content-Transfer-Encoding:Content-Type :MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=1Uuf9zAgz2TVIrYr3uD5oTmAJIpxHc91Ni8KiYTXe+4=; b=z/r1awvdaISxRJQyuBnGt/Jzv8 WH3RXHfKDCPvJ/85wnVtNBebDxRJEusl2REOds12QU/mAAT2T3f/E2Lv8cwDtsB23kxXOmji6uL5R RXLefN01es99yqnMZu6HTkhVZ9aZLz+IO24hyYIBg0hYDBV1eASnUWFDVHg+tWjXqTgQjzTVvwKKE PkB4ckzh8WwX1rsoZdBZ5lkfgG21NuuPDndZqOHM/ZzWC9MPAN9hIDDmWnIJmURGICCmKRjFy5dJQ gkxYnryQ4l4ONhELmKKgrlGtiFdmdT50J8ejB59e/EYqkn8broYML1+s/XO6aW8OD6KRrKVNGsCxD Ogadl0iQ==; Received: from ip246.ip-147-135-120.us ([147.135.120.246]:54565 helo=expressworld.com) by v9095.jimathosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98) (envelope-from ) id 1t9xUt-00000006nWS-3y5M for logtextcheck@behniwalgroup.com; Sun, 10 Nov 2024 10:16:15 +0800 From: "E-Message" To: logtextcheck@behniwalgroup.com Date: 09 Nov 2024 18:13:23 -0800 Message-ID: <20241109181323.8586DDF84CDD5321@expressworld.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - v9095.jimathosting.com X-AntiAbuse: Original Domain - behniwalgroup.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - expressworld.com X-Get-Message-Sender-Via: v9095.jimathosting.com: authenticated_id: izzul@casuarinahotels.com.my X-Authenticated-Sender: v9095.jimathosting.com: izzul@casuarinahotels.com.my X-Source: X-Source-Args: X-Source-Dir: X-Spam-Status: Yes, score=8.1 X-Spam-Score: 81 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "server.rnv.kpw.mybluehostin.me", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Sir/Madam, I tried to reach your phone but all attemtps proved abortive. We have made payment to your bank account on your Proforma Invoice. Content analysis details: (8.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [103.191.76.117 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [103.191.76.117 listed in bl.score.senderscore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: casuarinahotels.com.my] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=archana%40expressworld.com;ip=103.191.76.117;r=server.rnv.kpw.mybluehostin.me] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS 0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text X-Spam-Flag: YES Subject: NOTICE!!-Login attempt from an unknown location Dear Sir/M= adam,

I tried to= reach your phone but all attemtps proved abortive.

We have ma= de payment to your bank account on your Proforma Invoice.

Kindly con= frim your bank details in the attached PI is correct.

Also, kind= ly advise a number that we can reach you on.

Acknowledg= e receipt of mail.



Best Regar= ds,

Maria Sase= h

Accounts&n= bsp; Executive
__________= ___________

Institute = of International Finance
Middle Eas= t & Africa Regional Office
DIFC - The= Gate Building, Level 15
P.O. Box 1= 21208
Dubai, UAE=