OwlCyberSecurity - MANAGER
Edit File: 1626128392.M280716P90840.premium128.web-hosting.com,S=10318,W=10479:2,
Return-Path: <oyexhwrjmby@castlecreations.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id 6AoHEAjA7GDYYgEAAvhI2g (envelope-from <oyexhwrjmby@castlecreations.com>) for <contact+spam@gourayafroid.com>; Mon, 12 Jul 2021 18:19:52 -0400 Return-path: <oyexhwrjmby@castlecreations.com> Envelope-to: contact@gourayafroid.com Delivery-date: Mon, 12 Jul 2021 18:19:52 -0400 Received: from mail-bn8nam12hn2247.outbound.protection.outlook.com ([52.100.165.247]:42336 helo=NAM12-BN8-obe.outbound.protection.outlook.com) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <oyexhwrjmby@castlecreations.com>) id 1m34HD-000O76-7q for contact@gourayafroid.com; Mon, 12 Jul 2021 18:19:52 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Y7wI04G2nTs4Z+ywrZChIiF5EAevTdNC3vyW0CYEXdAPlII+B8dQKYfuUlAQYmTGNueQSNbDo2DsJ75ZoocCFuVY1Gvchj2kg/6pvpe3YVfwZ/XCWu6x5foDQUsPiZUKMTsmh0AKRClzrHqL2cOe48iviUENh0UNdmi/mDhDqwyb7PzG7BJNX4+w9jwtvJNXBkWIV8Fc8ipp0qiz5IbQq0Zb7beK/qzKuoODEGbbl/7nn7Y4ww4PkY5Wv/Kg8KHgUzaUU3sjGafwiU9fMAhpx+X5xui0Q9iXSV1fHRM8+gkFEPsBKISljcytGmHVdtevCX4iwheOME8A5HBuxxi2Ww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uWlGR8cdcpfZYcdOjtWR9F0bedN4Wt4ZEOmT7NvbIzM=; b=Hc2lA7M5C+aEV46w5yEyk5rk3jQYqH+zidO5d2/2JFsKFFjO4KBA4i/r5Z++qsQQAurgXbzG46fRFXFVkrnQ+cEJCAxRd93YLG9MgyQMKFsOys3hZVDkt1u/ppbLfYPUnVhzACJIxdGoTEUVKJAKqQESEd1wOLDoSeBcwLSZX8gikfzMVVkMZvZ6Rwgn2/WwfeM29smqD3zZEVSuRC9s3zsQQNHFTFznMHCVNk2dbSvdu8JpstLryOg7lcmp7RuNnDAkk34XcOQFnU9e7v6mbzXb/FU8hDclnaz8KbMGAnus4ohfHq297RfD03PRZcGXvFGgemRen+7t7/tYqAKGhQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is 96.94.166.254) smtp.rcpttodomain=gourayafroid.com smtp.mailfrom=castlecreations.com; dmarc=none action=none header.from=castlecreations.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pivotintcom.onmicrosoft.com; s=selector2-pivotintcom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uWlGR8cdcpfZYcdOjtWR9F0bedN4Wt4ZEOmT7NvbIzM=; b=agSocASiDfO6CM1g4RwNqL0WY9Awr8eDGtOcFGhSy/pkAm0sszu8eygtJcwhFAE9j0CiqEcgMxYr3zgBWMyBtKA14fnsamgi+VmyIYHEJkrwviRQb/dnwrL2M1KPdUo45ofPhYwqBc8lsI1+LOJPzItyxp8tTb3JUph/EmT25Qo= Received: from BN6PR20CA0066.namprd20.prod.outlook.com (2603:10b6:404:151::28) by CH2PR13MB3847.namprd13.prod.outlook.com (2603:10b6:610:99::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4331.14; Mon, 12 Jul 2021 22:19:05 +0000 Received: from BN1NAM02FT036.eop-nam02.prod.protection.outlook.com (2603:10b6:404:151:cafe::c9) by BN6PR20CA0066.outlook.office365.com (2603:10b6:404:151::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4308.20 via Frontend Transport; Mon, 12 Jul 2021 22:19:05 +0000 X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 96.94.166.254) smtp.mailfrom=castlecreations.com; gourayafroid.com; dkim=none (message not signed) header.d=none;gourayafroid.com; dmarc=none action=none header.from=castlecreations.com; Received-SPF: Fail (protection.outlook.com: domain of castlecreations.com does not designate 96.94.166.254 as permitted sender) receiver=protection.outlook.com; client-ip=96.94.166.254; helo=PCL-DC1.castle.local; Received: from PCL-DC1.castle.local (96.94.166.254) by BN1NAM02FT036.mail.protection.outlook.com (10.13.2.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4308.20 via Frontend Transport; Mon, 12 Jul 2021 22:19:03 +0000 Received: from mail.castlecreations.com ([172.245.25.166]) by PCL-DC1.castle.local with Microsoft SMTPSVC(10.0.14393.4169); Mon, 12 Jul 2021 17:18:53 -0500 From: "High Excel Bitcoin Investment" <oyexhwrjmby@castlecreations.com> To: valkuta-admin@gmail.com Content-Type: text/plain Reply-To: acessenossositeabaixo@gmail.com Date: Tue, 13 Jul 2021 00:18:53 +0200 Message-ID: <PCL-DC1ZXFYtxHEZJhh00016cf0@PCL-DC1.castle.local> X-OriginalArrivalTime: 12 Jul 2021 22:18:54.0274 (UTC) FILETIME=[E67AEA20:01D7776B] X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: cf8d6fe6-3075-42ef-69f3-08d945830fc5 X-MS-TrafficTypeDiagnostic: CH2PR13MB3847: X-Microsoft-Antispam-PRVS: <CH2PR13MB384731E5D88F3B1B2C3ED779B9159@CH2PR13MB3847.namprd13.prod.outlook.com> X-MS-Oob-TLC-OOBClassifiers: OLM:2331; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?iFQ47bPVLSlXADQfQx8vr2RS4tPyl0ffGXW5W7MgrIXC5oStMrlH6TzlCNiY?= =?us-ascii?Q?dTmVn/ep8YCj5CoamQ+1x3Iu0Lw4m0gi9f2nrno6oe4J21SmRboj16aWzqUS?= =?us-ascii?Q?0Ox97axVVPrgkkshyWAg0zYkkjQRz+spin1i7qhYLCx/mpKzLGt32ZMjGzK5?= =?us-ascii?Q?ljHQ1uHrhOEn8UP6fn0DBY53jHlvNl5qSBiMglhOF1DDk3d3o7E5xALMkRIe?= =?us-ascii?Q?nf8aMslqk/7PRAxHfXTi8xe1XwZGDuij6v4GQ7KZayBURYtXrU6AYSfMmy7h?= =?us-ascii?Q?mY9dhxG+HQRSLO2QnZS382Dw/u7q5kNCbckMUr5Zc/4OatQ4yuXwnhb1qTNs?= =?us-ascii?Q?T5oylTmv/MtKmW6jrHG2Tw6pWT80vHEBlvxZDbJg+ZZm1bTUDhFKnnIBmyO6?= =?us-ascii?Q?UMSpaCrPJ7L0P5s5Hxs8G6Ob82qa3XZnJK1RlL1ng73kazU75yDzbRmBi6R0?= =?us-ascii?Q?qblfCTFOcUUzhFsZ8K8bfIcvWAct/QGFxSS53iThBlDg4qPqeFqb/1HqzUae?= =?us-ascii?Q?ENhexy8SyzHp2C6RyPkQinsAeC1uPR9vejO+b64uiatpQElOBoWodrXuU3Vw?= =?us-ascii?Q?5TpTCENp3GiElr+H1Gkx17m23v0vk9OyYrx2JS71Pl2NCDHw0VN7IJ4lJsmF?= =?us-ascii?Q?6+YFV2SnFpfKLLJnxM1KiCNciMb/ecC9KRhXzjOeqzY5c5wFW6QopD/Ljfzk?= =?us-ascii?Q?3cmmtgTHegRzF0RCBUFSKnYC1LppGOquw90SYWM3QgP2O+LTtkrg6XjXIZF7?= =?us-ascii?Q?mE+VaaSAmO4QwqPLvSB6wGk/qXJ0Gb3AcKHInkQw/yroMtFqdQyhiwMf4u0I?= =?us-ascii?Q?DmjTHZqIlo62TADJYMXQFljIqI8VsWm6BQZ3uhjltTRlw0rCeg15bLOwjIuV?= =?us-ascii?Q?FGupkc1F8OE+5pC5OjlgaP5R2x/EN9T6SDcN3YcVt2GhBon8wd09FalxS4ey?= =?us-ascii?Q?vbEnT7YDAXLyK46PQiVt3H7tnZDSJVE3icFK7VcqbMg/c64QfvwOCFtzeyYW?= =?us-ascii?Q?h8cyazYf8cbR/0cuvJf5xCi/cSaEXU+2e0l20dI+Yf3eAMMRhl6jm4cPu+R+?= =?us-ascii?Q?kf8vs/aoY3dLolsg5PioebMhXz9Z2yMjdFd0rQ/OUdK+wCqpqoODEFjT04Af?= =?us-ascii?Q?oqDrJPG/vxBHwPB3g8tjWx6iDQkpE03punsH0zxoL4UqIJS3ULGEdPx88fRz?= =?us-ascii?Q?6dZqMRUPtGzXxLkGnfh3GTkL20PnFkTy/fJ8Tz9khw5i4d7wnmamGLut2L5M?= =?us-ascii?Q?lSMkGkQxjYwlvTyDUFUDnUKaQv/Suzr7bEY5i6njc1ryMSyxmvueFaJswfdD?= =?us-ascii?Q?q0aA5YmzFhpg40VzBNRb9oNwJ6ED3buehsGctQ1nUeJj/mrjh5nXel7K8K0C?= =?us-ascii?Q?9HF7nCEpgA+TPPso+owl5HCNd7K4P7TkTN5CI8758OeupE6JDlCW2v70xGd8?= =?us-ascii?Q?HHCaBa9mKFX3QTlOoFFDdDARFDhTUOV8joRgPeoq/jYD38Hi3QgZnw=3D=3D?= X-Forefront-Antispam-Report: CIP:96.94.166.254;CTRY:US;LANG:en;SCL:6;SRV:;IPV:NLI;SFV:SPM;H:PCL-DC1.castle.local;PTR:96-94-166-254-static.hfc.comcastbusiness.net;CAT:OSPM;SFS:(396003)(346002)(39860400002)(136003)(376002)(36840700001)(46966006)(3480700007)(7116003)(70206006)(47076005)(36906005)(70586007)(336012)(4744005)(8936002)(2906002)(34206002)(316002)(83380400001)(966005)(82310400003)(34020700004)(82740400003)(66574015)(5660300002)(9686003)(86362001)(26005)(186003)(2860700004)(81166007)(478600001)(956004)(36860700001)(356005)(8676002)(416224002)(18886065003);DIR:OUT;SFP:1501; X-OriginatorOrg: castlecreations.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jul 2021 22:19:03.5323 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: cf8d6fe6-3075-42ef-69f3-08d945830fc5 X-MS-Exchange-CrossTenant-Id: df9157bd-b3d6-4bab-bc5e-b0f5878d4033 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=df9157bd-b3d6-4bab-bc5e-b0f5878d4033;Ip=[96.94.166.254];Helo=[PCL-DC1.castle.local] X-MS-Exchange-CrossTenant-AuthSource: BN1NAM02FT036.eop-nam02.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR13MB3847 X-Spam-Status: Yes, score=9.7 X-Spam-Score: 97 X-Spam-Bar: +++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Are you interested in bitcoin investing but dont't know how to invest in bitcoin? Then you have come to the right place. High Excel Bitcoin Investment is a long-term high-yield private loan program, backed up by Forex market Content analysis details: (9.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: he-bi.com] 1.0 HK_RANDOM_FROM From username looks random 0.0 HK_RANDOM_ENVFROM Envelope sender username looks random -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** Invest in Bitcoin Are you interested in bitcoin investing but dont't know how to invest in bitcoin? Then you have come to the right place. High Excel Bitcoin Investment is a long-term high-yield private loan program, backed up by Forex market trading and investing in various funds and activities. WELCOME TO OUR COMPANY!!! CLICK BELOW: http://www.he-bi.com/