
­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
Return-Path: <admn@petroknowledqe.com>
Delivered-To: info+spam@autozone.com.sa
Received: from node93.myfcloudin.com
	by node93.myfcloudin.com with LMTP
	id rgBdEixJQmrm9hQAhsgHWA
	(envelope-from <admn@petroknowledqe.com>)
	for <info+spam@autozone.com.sa>; Mon, 29 Jun 2026 10:30:04 +0000
Return-path: <admn@petroknowledqe.com>
Envelope-to: info@autozone.com.sa
Delivery-date: Mon, 29 Jun 2026 10:30:04 +0000
Received: from mta.petroknowledqe.com ([185.39.18.21]:47952 helo=mta0.petroknowledqe.com)
	by node93.myfcloudin.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.99.4)
	(envelope-from <admn@petroknowledqe.com>)
	id 1we9FZ-00000005lEX-28Gw
	for info@autozone.com.sa;
	Mon, 29 Jun 2026 10:30:04 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=petroknowledqe.com;
 h=Content-Type:From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:
 MIME-Version; i=admn@petroknowledqe.com;
 bh=A4KWj/7xIkXWhrJ9uS6wk5vlrkArSv/Wa6wDgbE9OS4=;
 b=TrKMrx5it77Jwq/GIfXRfBTBe0pCKBpWFXYC0VveqDyRHke7dsPgy4I8SvVOiyn05v4QBtEkUnpq
   3U7+F+JVdF9zCtediY8/YkEPAafSdsepBRAHGFrzZDnPbmrYpoN/Wukbu3m3aMyZHkrAbwJq955b
   HPFI2pmVt0BZIOrNlkQ=
Content-Type: text/html; charset=utf-8
From: Autozone Account <admn@petroknowledqe.com>
To: info@autozone.com.sa
Message-ID: <c5450a16-0034-2818-19c0-f8bedea9c3d2@petroknowledqe.com>
Content-Transfer-Encoding: quoted-printable
Date: Mon, 29 Jun 2026 10:08:34 +0000
MIME-Version: 1.0
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node93.myfcloudin.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Security Alert Hello info, 
 Content analysis details:   (16.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
                             [petroknowledqe.com TXT:v=spf1 a mx ptr]
                             [a:petroknowledqe.com ip4:185.39.18.0/24]
                             [?all]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  3.3 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [185.39.18.21 listed in zen.spamhaus.org]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URI: petroknowledqe.com/185.39.18.21]
  3.0 BAYES_95               BODY: Bayes spam probability is 95 to 99%
                             [score: 0.9548]
  5.0 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: petroknowledqe.com]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                             blocklist
                             [URI: indiazinhalindoya.com.br]
  2.5 RCVD_IN_MSPIKE_L3      RBL: Low reputation (-3)
                             [185.39.18.21 listed in bl.mailspike.net]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Suspicious_Activity_D?=
 =?UTF-8?Q?etected!!!?=

<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" =
content=3D"width=3Ddevice-width, initial-scale=3D1.0">
<title>Security Alert</title>
<style>
body { font-family: Arial, =
sans-serif; background: #fef6f6; margin: 0; padding: 20px; }
.container { max-width: 500px; margin: 0 auto; background: #ffffff; =
padding: 25px; border-radius: 6px; border: 1px solid #f5c6cb; }
.alert { background: #f8d7da; padding: 12px 16px; border-radius: 4px; =
border-left: 5px solid #dc3545; margin-bottom: 18px; }
.alert h4 { color: #721c24; margin: 0; font-size: 16px; }
.content { color: #212529; font-size: 14px; line-height: 1.6; }
.button { display: inline-block; background: #dc3545; color: #fff; padding:=
 12px 30px; text-decoration: none; border-radius: 4px; font-weight: bold; }
.detail { background: #f1f1f1; padding: 10px 14px; border-radius: 4px; =
font-size: 13px; }
.footer { color: #6c757d; font-size: 12px; border-top: =
1px solid #ddd; padding-top: 14px; margin-top: 20px; }
</style>
</head>
<body>
<div class=3D"container">
<div class=3D"content">
<p>Hello info,</p>
<p>We noticed a login to your mail server from:</p>
<div class=3D"detail"> <strong>IP:</strong> 185.220.101.23 (Frankfurt,
DE)<br>
<strong>Time:</strong> 1:31am<br>
<strong>Status:</strong> Outbound=
 SMTP temporarily paused </div>
<p style=3D"margin-top: 15px;"> <a
href=3D"https://indiazinhalindoya.com.br/vmc/28f521ae02cd50aa377197b3dcffc5=
5b28f521ae02cd50aa377197b3dcffc55b28f521ae02cd50aa377197b3dcffc55b/aW5mb0Bh=
dXRvem9uZS5jb20uc2E=3D" class=3D"button">Secure
My Account</a> </p>
<p style=3D"font-size: 13px;">If this was you, your access will be
restored instantly.</p>
</div>
<div class=3D"footer">
<p>Security Operations =E2=80=A2 autozone.com.sa</p>
</div>
</div>
</body>
</html>

