Return-Path: <ceo@dantradinginvestment.com>
Delivered-To: dan@adiyatgroup.com
Received: from altar43.supremepanel43.com
	by altar43.supremepanel43.com with LMTP
	id YMl3NukkBF9LdAAAuJ0bIg
	(envelope-from <ceo@dantradinginvestment.com>)
	for <dan@adiyatgroup.com>; Tue, 07 Jul 2020 07:31:53 +0000
Return-path: <ceo@dantradinginvestment.com>
Envelope-to: dan@adiyatgroup.com
Delivery-date: Tue, 07 Jul 2020 07:31:53 +0000
Received: from gateway22.websitewelcome.com ([192.185.46.224]:31733)
	by altar43.supremepanel43.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.93)
	(envelope-from <ceo@dantradinginvestment.com>)
	id 1jsi53-0006xK-GD
	for dan@adiyatgroup.com; Tue, 07 Jul 2020 07:31:53 +0000
Received: from cm14.websitewelcome.com (cm14.websitewelcome.com [100.42.49.7])
	by gateway22.websitewelcome.com (Postfix) with ESMTP id 2F465442F
	for <dan@adiyatgroup.com>; Tue,  7 Jul 2020 02:31:13 -0500 (CDT)
Received: from box5339.bluehost.com ([162.241.226.112])
	by cmsmtp with SMTP
	id si4PjoLqMSxZVsi4PjkOFJ; Tue, 07 Jul 2020 02:31:13 -0500
X-Authority-Reason: nr=8
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=dantradinginvestment.com; s=default; h=Content-Type:In-Reply-To:
	MIME-Version:Date:Message-ID:From:Cc:To:References:Subject:Sender:Reply-To:
	Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:
	Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:
	List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	 bh=tK/+7UTUJdPi076QV+VgbxiGOWvn0LxqIJ3cRm0SalE=; b=Yd/Rc/5Ak3CVfDb71FcLUwYI/
	qvHU+fDDuRnlWPGdFQpkUQHQYj3h8Xd8pNGJAWFzyzAQZwAkfciRv4tIn2+Uksl54QGP+NSbxva6O
	jF6d8eu6VXGLJLPmHPBW/oCZ+voGLWrSU8HakNu4XOXGyvR3IkRV/ENexNtT4+yt0vUoMriZe7aJa
	+Cv9D3MP4hEsXSGzwbzlfM28YNbDfjl3Ieu7iTxlNQmUKKppJz2RUzlgiOU7paIeIFhdtlxx86uER
	AR97beoc58JiHZmPB4So2lyiPyXqrf+AqMqJCEZ92jwCxsrdu+a20TNxndeLf+AGVkG3TCDpbpkDh
	dcUG5tr6A==;
Received: from [41.202.166.94] (port=57641 helo=[192.168.1.42])
	by box5339.bluehost.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.93)
	(envelope-from <ceo@dantradinginvestment.com>)
	id 1jsi4O-000baQ-L3; Tue, 07 Jul 2020 01:31:12 -0600
Subject: Fwd: June wps files for salary transfer
References: <00c801d65419$19dda500$4d98ef00$@adiyatgroup.com>
To: Wages Protection System <Salary.wps@adib.ae>
Cc: "dan@adiyatgroup.com" <dan@adiyatgroup.com>, ceo <ceo@adiyatgroup.com>
From: Yasin Ali <ceo@dantradinginvestment.com>
X-Forwarded-Message-Id: <00c801d65419$19dda500$4d98ef00$@adiyatgroup.com>
Message-ID: <f2aadca5-e88b-7f56-597c-5880a769fe96@dantradinginvestment.com>
Date: Tue, 7 Jul 2020 09:31:04 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101
 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <00c801d65419$19dda500$4d98ef00$@adiyatgroup.com>
Content-Type: multipart/mixed;
 boundary="------------330FD613CA77C67C8AB18AFC"
Content-Language: en-US
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - box5339.bluehost.com
X-AntiAbuse: Original Domain - adiyatgroup.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - dantradinginvestment.com
X-BWhitelist: no
X-Source-IP: 41.202.166.94
X-Source-L: No
X-Exim-ID: 1jsi4O-000baQ-L3
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: ([192.168.1.42]) [41.202.166.94]:57641
X-Source-Auth: ceo@dantradinginvestment.com
X-Email-Count: 6
X-Source-Cap: ZGFudHJhZGk7ZGFudHJhZGk7Ym94NTMzOS5ibHVlaG9zdC5jb20=
X-Local-Domain: yes
X-Spam-Status: No, score=1.5
X-Spam-Score: 15
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "altar43.supremepanel43.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Sir, Kindly find the attached. Regards, 
 Content analysis details:   (1.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: dantradinginvestment.com]
  1.7 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
                             [192.185.46.224 listed in wl.mailspike.net]
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
X-Spam-Flag: NO

This is a multi-part message in MIME format.
--------------330FD613CA77C67C8AB18AFC
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

Dear Sir,

Kindly find the attached.

Regards,

Yasin Ali



--------------330FD613CA77C67C8AB18AFC
Content-Type: application/vnd.ms-excel;
 name="0000000002195200630143000.SIF.csv"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="0000000002195200630143000.SIF.csv"

RURSLEVaSjAwMDAxMjgwMzc5LDMwMjYyMDEyMixBRTI0MDI2MDAwMDM2MTAzNDYwNjYwMSwy
MDIwLTA2LTAxLDIwMjAtMDYtMzAsMzAsNzAwMCwwLjAwLDANClNDUixFWkowMDAwMDAyMTk1
LDQwNTAxMDEwMSwyMDIwLTA2LTMwLDE0MzAsMDYyMDIwLDEsNzAwMCxBRUQsDQoNCg==
--------------330FD613CA77C67C8AB18AFC
Content-Type: application/octet-stream;
 name="ENC_0000000002195200630143000.SIF"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="ENC_0000000002195200630143000.SIF"

GxUUhOVlmAOJML0M+wiD2U5l6/jnBk/JVCpW2YMVsxrAAwkA4vYQfQPojOxnKiWxK9x2VyHI
gKGMyZTh53fsikW0NaF6EV9RUcumg7Tan2QyJAYLytHApWcZhi4Yr81izD5n21Xs1t2Erxmp
cKDiH55JrG9o1qTO3YEGjzN6dUhEyLs4Ulks6GSfiBm1JcKpe227pqjGgNCk6UjK7wwo5A==
--------------330FD613CA77C67C8AB18AFC--
