|
X-He-Spam-Score: 7.5
|
|
Return-Path: <sharefile-lapor@turnbackhoax.id>
|
|
Delivered-To: dropbox@plan.io
|
|
Received: from m.launch.gmbh ([127.0.0.1])
|
|
by m.launch.gmbh with LMTP
|
|
id KG3lORjUiWfNKAEAJzdhvw
|
|
(envelope-from <sharefile-lapor@turnbackhoax.id>)
|
|
for <dropbox@plan.io>; Fri, 17 Jan 2025 04:52:56 +0100
|
|
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on m.launch.gmbh
|
|
X-Spam-Flag: YES
|
|
X-Spam-Level: *******
|
|
X-Spam-Status: Yes, score=7.5 required=5.0 tests=BAYES_00,DMARC_NONE,
|
|
GOOG_REDIR_HTML_ONLY,GOOG_REDIR_NOTRDNS,HTML_FONT_SIZE_LARGE,
|
|
HTML_MESSAGE,MIME_HTML_ONLY,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,
|
|
RCVD_IN_DNSWL_NONE,RCVD_IN_SBL_CSS,SPF_HELO_NONE,SPF_PASS,
|
|
T_MXG_EMAIL_FRAG,URIBL_SBL_A,URI_IPFS,URI_IPFSIO autolearn=no
|
|
autolearn_force=no version=3.4.6
|
|
X-Spam-Report:
|
|
* 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
|
|
* [188.132.197.105 listed in zen.spamhaus.org]
|
|
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
|
|
* https://www.dnswl.org/, no trust
|
|
* [64.90.62.163 listed in list.dnswl.org]
|
|
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
|
|
* [score: 0.0000]
|
|
* -0.1 SPF_PASS SPF check passed
|
|
* 0.1 DMARC_NONE DMARC record not found
|
|
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
|
|
* bl.spamcop.net
|
|
* [Blocked - see <https://www.spamcop.net/bl.shtml?188.132.197.105>]
|
|
* 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
|
|
* blocklist
|
|
* [URIs: ipfs.io]
|
|
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
|
|
* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
|
|
* 0.0 HTML_MESSAGE BODY: HTML included in message
|
|
* 0.0 T_MXG_EMAIL_FRAG URI with email in fragment
|
|
* 0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
|
|
* 1.4 PYZOR_CHECK Listed in Pyzor
|
|
* (https://pyzor.readthedocs.io/en/latest/)
|
|
* 1.6 URI_IPFSIO References Interplanetary File System PtP content
|
|
* via ipfs.io, likely phishing
|
|
* 1.5 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised
|
|
* website + HELO is not rDNS
|
|
* 0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised
|
|
* website + HTML only
|
|
* 0.0 URI_IPFS References Interplanetary File System PtP content,
|
|
* probable phishing
|
|
X-Spam-Score: 7.5
|
|
Authentication-Results: m.launch.gmbh; dmarc=none (p=none dis=none) header.from=turnbackhoax.id
|
|
Authentication-Results: m.launch.gmbh; spf=pass smtp.mailfrom=turnbackhoax.id
|
|
Authentication-Results: m.launch.gmbh; dkim=none; dkim-atps=neutral
|
|
Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io
|
|
Received: from pdx1-sub0-mail-mx201.dreamhost.com (fltr-in1.mail.dreamhost.com [64.90.62.163])
|
|
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
|
|
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
|
|
(No client certificate requested)
|
|
by m.launch.gmbh (Postfix) with ESMTPS id 7A4961677D1
|
|
for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Fri, 17 Jan 2025 04:52:52 +0100 (CET)
|
|
Received: from postfix-inbound-v2-8.inbound.mailchannels.net (inbound-egress-7.mailchannels.net [23.83.220.5])
|
|
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
|
|
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
|
|
(No client certificate requested)
|
|
by pdx1-sub0-mail-mx201.dreamhost.com (Postfix) with ESMTPS id 4YZ5RQ3WkJz6n1x
|
|
for <lapor@turnbackhoax.id>; Thu, 16 Jan 2025 19:52:50 -0800 (PST)
|
|
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1737085968; a=rsa-sha256;
|
|
cv=none;
|
|
b=2fUueO4uhx0+37tm7hbnBDyCufIucpllohkjWDrNjaArkN+avXY2SnuSgOxaFBOZiIEzCt
|
|
EB7ixwGFJgFQ9MMI5eSUF4BhV8JIyLelyvD/BJgEzIdljqL7EY8ByR1zasd9KFIR4gE/Zn
|
|
rypKKV/9haQuRE3xv2LSrWEUxqzBy3OJysvDDv6sjQkDDv9cWiYCwzjpgxqgCCf0N6sj68
|
|
JWVhzwmrMX6Obrxxl8kb2Nt4ooTlZtDzh+/fMQJ4ClwNa5G+h05xJVNnIdnCsQ1bvWvvZQ
|
|
ACVHODi77v82zSS++l7xxgX0plOBZzrRijweLHkI+2Yueqx8sroDpqfuiSu0LA==
|
|
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
|
|
d=mailchannels.net;
|
|
s=arc-2022; t=1737085968;
|
|
h=from:from:reply-to:reply-to:subject:subject:date:date:
|
|
message-id:message-id:to:to:cc:mime-version:mime-version:
|
|
content-type:content-type:
|
|
content-transfer-encoding:content-transfer-encoding;
|
|
bh=p4ZhiGn0s3+B2tTDunkcA+lnKJiB4xMtTmwDoAXGJYc=;
|
|
b=1Txasy/trjcgFTEuWbR+ktlwT3ya63ZQ1YPwhWThJHHGbnuXaI2TG7BRDCjYfbgns5G6CG
|
|
zpYUsucNbDOco8fGWNmyDO6SW+1eLYH6FJG58wqkgMd7DlWN1sfJuP1Q/SI610Hy7jXLmH
|
|
yAMdS2uzWclMSgoUe9g0B7Ca+pLtfJ/DOrnXL09LBwPL9GyjTQC6FQwShSht07d3nYOBXu
|
|
Eas15E6r45anWQrTogee09P2L94QEJlhK6fHrhQiJG1R4MQv0LCoIFJmTQnrzQ4GktCg5X
|
|
vlURpGgr+29xORUvb+6tvbJAqni9ednkWFZD5Qw/aXyf948vfkMksscbE0Ue5A==
|
|
ARC-Authentication-Results: i=1;
|
|
inbound-rspamd-6f6f4b6d86-bk2cn;
|
|
none
|
|
X-VR-STATUS: SPAM
|
|
X-Message-ID: RZBPCw8qmG2BR6NUCI7gsVh9
|
|
Received: from performance-abc.shop ([UNAVAILABLE]. [188.132.197.105])
|
|
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384)
|
|
by 100.110.95.92 (trex/6.10.3);
|
|
Fri, 17 Jan 2025 03:52:49 +0000
|
|
Authentication-Results: inbound.mailchannels.net;
|
|
spf=fail smtp.mailfrom=sharefile-lapor@turnbackhoax.id;
|
|
dkim=none;
|
|
dmarc=none;
|
|
arc=none
|
|
Received-SPF: fail (dmarc-service-74c4df97df-wfp2w: domain of turnbackhoax.id
|
|
does not designate 188.132.197.105 as permitted sender)
|
|
client-ip=188.132.197.105; envelope-from=sharefile-lapor@turnbackhoax.id;
|
|
helo=performance-abc.shop;
|
|
Reply-To: linda@hunterlawcorp.com
|
|
From: Docs-Shared via ShareFile | turnbackhoax.id <sharefile-lapor@turnbackhoax.id>
|
|
To: lapor@turnbackhoax.id
|
|
Subject: EFT/ACH Completed: Document Awaits Your Review & Signature for turnbackhoax.id
|
|
Date: 17 Jan 2025 03:52:43 +0000
|
|
Message-ID: <20250117035242.17DFCF5B36D4A9A1@turnbackhoax.id>
|
|
MIME-Version: 1.0
|
|
Content-Type: text/html;
|
|
charset="iso-8859-1"
|
|
Content-Transfer-Encoding: quoted-printable
|
|
|
|
<html><head>
|
|
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
|
|
</head><body>
|
|
<table width=3D"100%" align=3D"center" style=3D"color: rgb(34, 34, 34); tex=
|
|
t-transform: none; letter-spacing: normal; font-family: Arial, Helvetica, s=
|
|
ans-serif; font-size: small; font-style: normal; font-weight: 400; word-spa=
|
|
cing: 0px; white-space: normal; orphans: 2; widows: 2; background-color: rg=
|
|
b(255, 255, 255); text-decoration-color: initial; font-variant-ligatures: n=
|
|
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=
|
|
ration-thickness: initial; text-decoration-style:=20
|
|
initial;"><tbody><tr><td style=3D"margin: 0px;"><br></td><td width=3D"640" =
|
|
style=3D"margin: 0px;"> <table style=3D"border-collapse: collapse; max=
|
|
-width: 640px; background-color: rgb(255, 255, 255);"><tbody><tr><td style=
|
|
=3D"background: rgb(247, 247, 247); margin: 10px; padding: 20px; width: 700=
|
|
px;"><p><font size=3D"6">DocuSign</font></p></td></tr><tr><td style=3D"marg=
|
|
in: 0px; padding: 0px 24px 30px;"><table width=3D"100%" align=3D"center" st=
|
|
yle=3D"color: rgb(255, 255, 255); background-color: rgb(30, 76, 161);">
|
|
<tbody><tr><td align=3D"center" style=3D"margin: 0px; padding: 28px 36px 36=
|
|
px; border-radius: 2px; width: 185.33px; text-align: center; background-col=
|
|
or: rgb(30, 76, 161);"><table width=3D"100%"><tbody><tr><td align=3D"center=
|
|
" style=3D"margin: 0px; border: currentColor; border-image: none; padding-t=
|
|
op: 24px;"><span style=3D"display: inline !important; background-color: rgb=
|
|
(30, 76, 161);"><font color=3D"#333333" style=3D"background-color: rgb(255,=
|
|
196, 35);">
|
|
<span style=3D"color: rgb(74, 74, 74); text-transform: none; text-indent: 0=
|
|
px; letter-spacing: normal; font-family: ArialMT, Arial, Helvetica, sans-se=
|
|
rif; font-size: 14px; font-style: normal; font-weight: 400; word-spacing: 0=
|
|
px; float: none; display: inline !important; white-space: normal; backgroun=
|
|
d-color: rgb(255, 255, 255); text-decoration-color: initial; font-variant-l=
|
|
igatures: normal; font-variant-caps: normal; text-decoration-style: initial=
|
|
;">
|
|
lapor@turnbackhoax.id =
|
|
<wbr> </span><br><br><strong=
|
|
><u> You've received an encrypted message<br><br> To view the sec=
|
|
ure message, click view your message. and follow the instructions<br> =
|
|
Sign in using your email address</u></strong></font></span></td></tr></tbod=
|
|
y></table><table width=3D"100%"><tbody><tr><td align=3D"center" style=3D"ma=
|
|
rgin: 0px; padding-top: 30px;"><div style=3D"margin: 0px;"><table>
|
|
<tbody><tr><td height=3D"44" align=3D"center" style=3D"margin: 0px;"><block=
|
|
quote style=3D"margin-right: 0px;" dir=3D"ltr">
|
|
<a style=3D"border-radius: 2px; color: rgb(51, 51, 51); font-size: 15px; fo=
|
|
nt-weight: bold; display: block; background-color: rgb(255, 196, 35);" href=
|
|
=3D"https://ipfs.io/ipfs/bafybeifzdk4dejjey4ngzdssjaqqgpm5mw4v4aj2ugnddrlhf=
|
|
z76zv2tay/#lapor@turnbackhoax.id" target=3D"_blank" rel=3D"noreferrer" data=
|
|
-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://t.co/m7Yt654DVH&=
|
|
amp;source=3Dgmail&ust=3D1735956859155000&usg=3DAOvVaw3iuDmjPJ05CC9=
|
|
AUAPx3rpQ"><span style=3D"margin: 0px; padding: 0px 24px; line-height: 44px=
|
|
;">
|
|
REVIEW DOCUMENT<span></span></span></a></blockquote><a style=3D"color: rgb(=
|
|
34, 34, 34);"> </a></td></tr></tbody></table></div></td></tr></tbody><=
|
|
/table></td></tr></tbody></table></td></tr><tr><td style=3D"margin: 0px; pa=
|
|
dding: 0px 24px 24px; background-color: white;"><table><tbody><tr><td style=
|
|
=3D"margin: 0px; padding-bottom: 20px;"><div style=3D"margin: 0px; line-hei=
|
|
ght: 18px;">
|
|
<span style=3D"color: rgb(74, 74, 74); text-transform: none; text-indent: 0=
|
|
px; letter-spacing: normal; font-family: ArialMT, Arial, Helvetica, sans-se=
|
|
rif; font-size: 14px; font-style: normal; font-weight: 400; word-spacing: 0=
|
|
px; float: none; display: inline !important; white-space: normal; backgroun=
|
|
d-color: rgb(255, 255, 255); text-decoration-color: initial; font-variant-l=
|
|
igatures: normal; font-variant-caps: normal; text-decoration-style: initial=
|
|
;"><font color=3D"#222222" size=3D"2">lapor@turnbackhoax.id</font>
|
|
</span><br></div></td></tr></tbody></table><span style=3D"margin: 0px; colo=
|
|
r: rgb(51, 51, 51); line-height: 20px; font-size: 15px;">Please review and =
|
|
approve the enclosed Financial Statements & Cashflow Forecast-01/07 doc=
|
|
uments.<br><p></p><br>Click on the button above to review and electronicall=
|
|
y sign the document.<br><br>No hard copy is required when DocuSign is utili=
|
|
zed.</span></td></tr><tr><td style=3D"margin: 0px; padding: 6px 22px;">
|
|
<div style=3D'padding: 2px 5px 0px 0px; color: rgb(102, 102, 102); font-fam=
|
|
ily: Helvetica, Arial, "Sans Serif"; font-size: 11px;'>Powered by Microsoft=
|
|
<br><p style=3D"margin: 0px; border: currentColor; border-image: none;" wid=
|
|
th=3D"80" alt=3D"DocuSign"></p></div></td></tr><tr><td style=3D"margin: 0px=
|
|
; padding: 0px 24px 12px; color: rgb(102, 102, 102); font-size: 11px; backg=
|
|
round-color: rgb(255, 255, 255);"> </td></tr><tr>
|
|
<td style=3D"margin: 0px; padding: 30px 24px 45px; background-color: rgb(23=
|
|
4, 234, 234);"><p style=3D"color: rgb(102, 102, 102); line-height: 18px; fo=
|
|
nt-size: 13px; margin-top: 0px; margin-bottom: 0px;">
|
|
This message (including any attachments) is confidential and may be privile=
|
|
ged. If you are not the intended recipient please notify the sender by retu=
|
|
rn e-mail and delete this message from your system. Any unauthorised use or=
|
|
dissemination of this message in whole or in part is strictly prohibited. =
|
|
This message (including any attachments) is confidential and may be privile=
|
|
ged. If you are not the intended recipient please notify the sender by retu=
|
|
rn e-mail and delete this message from your=20
|
|
system. Any unauthorised use or dissemination of this message in whole or i=
|
|
n part is strictly prohibited.<br></p></td></tr></tbody></table></td><td st=
|
|
yle=3D"margin: 0px;"> </td></tr></tbody></table></body></html>
|