Google
Edit File: 1774305252.M216741P216210.server-619288.prediksijaya.com,S=4607,W=4709
Return-Path: <info@chirolevis.ca> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id 2Ew/DOS/wWmSTAMAf7/9AQ (envelope-from <info@chirolevis.ca>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 24 Mar 2026 05:34:12 +0700 Return-path: <info@chirolevis.ca> Envelope-to: jeczin@ponjosonek.com Delivery-date: Tue, 24 Mar 2026 05:34:12 +0700 Received: from dev1.13527.cpe.adept.za.net ([197.255.153.31]:58505 helo=chirolevis.ca) by server-619288.prediksijaya.com with esmtp (Exim 4.99.1) (envelope-from <info@chirolevis.ca>) id 1w4nqc-00000000uD4-3YKq for jeczin@ponjosonek.com; Tue, 24 Mar 2026 05:34:12 +0700 From: Rafael Pashayev <info@chirolevis.ca> To: jeczin@ponjosonek.com Date: 24 Mar 2026 00:32:43 +0200 Message-ID: <20260324003243.296C3098F0604E8C@chirolevis.ca> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=7.4 X-Spam-Score: 74 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please review the payment invoice link dated 03/23/26 which are also listed below: https://demo.prouniversitaria.ro/lnvoice72928375.zip INVOICE# AMOUNT Content analysis details: (7.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [197.255.153.31 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: prouniversitaria.ro] [URI: thsnational.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [197.255.153.31 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [197.255.153.31 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [197.255.153.31 listed in sa-accredit.habeas.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [197.255.153.31 listed in wl.mailspike.net] 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 LOTS_OF_MONEY Huge... sums of money 1.8 MONEY_NOHTML Lots of money in plain text X-Spam-Flag: YES Subject: Payment lnvoice#72928375 Please review the payment invoice link dated 03/23/26 which are also listed below: https://demo.prouniversitaria.ro/lnvoice72928375.zip INVOICE# AMOUNT =3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D $1,250.00 $3,560.40 Rafael Pashayev Chief Executive Officer THS National, LLC=09 2450 Louisiana St Ste 400 Houston=09 TX=09 77006-2318=09 USA=09 919-741-6229 www.thsnational.com