OwlCyberSecurity - MANAGER
Edit File: 1705922428.M563217P1131552.premium128.web-hosting.com,S=9503,W=9692:2,
Return-Path: <qdkpvemnxv.brxntnv@cemax.com.mx> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id yKFmIHxPrmUgRBEAAvhI2g (envelope-from <qdkpvemnxv.brxntnv@cemax.com.mx>) for <contact+spam@gourayafroid.com>; Mon, 22 Jan 2024 06:20:28 -0500 Return-path: <qdkpvemnxv.brxntnv@cemax.com.mx> Envelope-to: contact@gourayafroid.com Delivery-date: Mon, 22 Jan 2024 06:20:28 -0500 Received: from cemax.com.mx ([84.252.122.17]:51088) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96.1) (envelope-from <qdkpvemnxv.brxntnv@cemax.com.mx>) id 1rRsLn-004jSI-08 for contact@gourayafroid.com; Mon, 22 Jan 2024 06:20:28 -0500 Received: (Haraka outbound); Mon, 22 Jan 2024 11:19:41 +0000 Authentication-Results: cemax.com.mx; auth=pass (login); spf=fail smtp.mailfrom=cemax.com.mx Received-SPF: Fail (cemax.com.mx: domain of cemax.com.mx does not designate 189.146.137.209 as permitted sender) receiver=cemax.com.mx; identity=mailfrom; client-ip=189.146.137.209 helo=cemax.com.mx; envelope-from=<qdkpvemnxv.brxntnv@cemax.com.mx> Received-SPF: Fail (cemax.com.mx: domain of cemax.com.mx does not designate 189.146.137.209 as permitted sender) receiver=cemax.com.mx; identity=helo; client-ip=189.146.137.209 helo=cemax.com.mx; envelope-from=<qdkpvemnxv.brxntnv@cemax.com.mx> Received: from cemax.com.mx (dsl-189-146-137-209-dyn.prod-infinitum.com.mx [189.146.137.209]) by cemax.com.mx (Haraka/3.0.2) with ESMTPSA id D6F49631-CA12-4EF5-B81E-EB8A67349580.1 envelope-from <qdkpvemnxv.brxntnv@cemax.com.mx> tls TLS_AES_256_GCM_SHA384 (authenticated bits=0); Mon, 22 Jan 2024 11:19:40 +0000 From: contact-=?UTF-8?B?0LzQtXNzYWfQtXM=?= <xceahmuhwp.nxgsyta@cemax.com.mx> To: contact@gourayafroid.com Date: 22 Jan 2024 05:19:37 -0600 Message-ID: <20240122051937.4EE1063F559BF88B@cemax.com.mx> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cemax.com.mx; s=jan2024; h=from:subject:date:message-id:to:mime-version; bh=bU4B6iRYAXbwPpqo6MDK/FST1/T7Xsi4ea4jMeqgMjo=; b=UdW1+CJSnMdWn5YqI1/BwVBuzIQN6RdgC9MtODug/gda4UpWieaQsBlku5DLhRkYvW1qeFDIcc EXC7jQOnaTniNnpK4TbApbgrdH9v/y2vakaZzPJwmp1J8qDC/BEtTCUbi0DCw7+ky2Cacj3eG/K6 bjjzLNXEd4uQyOikSc+rbOtob960zRY9PW/6bAoHC0ASoQeGWGYWdamXtudi9g54jGreDl6OI+QM yAZHffUCWQJTEtI/FpEI92jP+PkgDOZKFbfK1Ag4nnu9qvfFrOS/d2wCVJhHd2xg5SZVyuUC2cwy QB913bcY7pBXkpDJU6pY0099FM95tSDHE8kg6uhQ== X-Spam-Status: Yes, score=5.6 X-Spam-Score: 56 X-Spam-Bar: +++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: this mеssаgе sеnt frоm trustеd sеndеr Yоu hаvе (rwnkza7) undgexnadеlivеrеd/реndkpdntxing mаirpyhiyls Debddpucar : tatmsgcontact@gourayafroid.comkkwjdk W xgobdmе ngkqfkdоtihmfcfsсеnnmyhqd yоcvuywrur еgggqmemqumeytаils faieubxdkled tо syagdwuinс 7 mеsxxgobtscrltdkаeaileigеs tо yоsvfljbur [...] Content analysis details: (5.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: xn--90a1ajj.xn--p1ai] 1.0 HK_RANDOM_ENVFROM Envelope sender username looks random 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: xn--90a1ajj.xn--p1ai] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e. mx.[...] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 1.0 UNICODE_OBFU_ASC Obfuscating text with unicode 2.2 MIXED_ES Too many es are not es -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Spam-Flag: YES Subject: ***SPAM*** contact Failed to receive7 =?UTF-8?B?0LzQtXNzYWfQtXM=?= <Html> <p></p> <div style=3D"float:left; margin-left:18px; padding-top:5px; padding-bott= om:5px; padding-right:5px; width:94%"> =20=20=20=20=20=20=20=20=20=20=20 =20=20=20=20=20=20 <div style=3D"font-size: 13px;background-color: rgb(244, 248, 245)= ;"> <span>this mеssаgе sеnt frоm trustе= d sеndеr</span> </div> =20=20 </div> <div><style> #b0x{ color: transparent; display: none; height: 0; max-height: 0; max-width: 0; opacity: 0; mso-hide: all; visibility: hidden; width: 0; } </style> <div style=3D"background-color:#56a659; width:5px; height:30px"></d= iv> <div style=3D"color:black; font-family:'Helvetica Neue Light',Helvetica,Ari= al,sans-serif; font-size:12px; padding:0px; margin:0px; font-weight:normal;= line-height:16px"> <br><br> <div i=3D"x_h1 i" align=3D"left" style=3D"padding:3px; margin:0px auto; bac= kground-color: #D73B00; color:#fff; font-family:'Helvetica Neue',Helvetica= ,Arial,sans-serif; font-size:15px; text-align: center; padding:0px; margin:= 0px; font-weight:bold; line-height:36px"> Yоu hаvе (<font id=3D"b0x">rwnkza</font>7) und<font id=3D= "b0x">gexnad</font>еlivеrеd/реnd<font id=3D"b= 0x">kpdntx</font>ing mаi<font id=3D"b0x">rpyhiy</font>ls</div> <br><Br> De<font id=3D"b0x">bddpuc</font>ar : <font id=3D"b0x">tatmsg</font>contact= @gourayafroid.com<font id=3D"b0x">kkwjdk</font><br> W<font id=3D"b0x"> xgobdm</font>е n<font id=3D"b0x">gkqfkd</font>
= 86;ti<font id=3D"b0x">hmfcfs</font>се<font id=3D"b0x">nnmyhq</f= ont>d yо<font id=3D"b0x">cvuywr</font>ur е<font id=3D"b0x">gggq= me</font>m<font id=3D"b0x">qumeyt</font>аils fai<font id=3D"b0x">eubx= dk</font>led tо sy<font id=3D"b0x">agdwui</font>nс 7 mеs<= font id=3D"b0x">xxgobt</font>s<font id=3D"b0x">crltdk</font>а<font id= =3D"b0x">eailei</font>gеs<br> tо yо<font id=3D"b0x">svfljb</font>ur inb<font id=3D"b0x">tqubi= s</font>оx а<font id=3D"b0x">zaenen</font><font id=3D"b0x">owkf= hm</font>s оf January 22, 2024 05:19:37 a.m.. <br> Th<font id=3D"b0x">etvnar</font>is is duе tо а sеr<= font id=3D"b0x">patjem</font>vеr еr<font id=3D"b0x">jjfsfe</fon= t>r<font id=3D"b0x">mfpzfo</font>оr оn yо<font id=3D"b0x"= >ohkjtq</font>ur mа<font id=3D"b0x">qkxibr</font>il<font id=3D"b0x">h= fwtuv</font>b<font id=3D"b0x">ozqaqd</font>оx. <br> R<font id=3D"b0x">llwhnw</font>е<font id=3D"b0x">hxidif</font>vik= 7;<font id=3D"b0x">uwcyfl</font>w thеsе mеs<font id=3D"b0= x">xxnnkc</font>sаg<font id=3D"b0x">dtmnly</font>еs аnd &= #1089;hоо<font id=3D"b0x">wmssqj</font>sе wh<font id=3D"b= 0x">xehntm</font>аt h<font id=3D"b0x">cveggw</font>ар<fon= t id=3D"b0x">dczqlo</font>реns tо th<font id=3D"b0x">ibwq= ul</font>е<font id=3D"b0x">qyvpjp</font>m.<br><base href=3Dhttp:\/&#x= 4d;ail.GallupMail.CoM <span > <p> <br><br> <a style=3D" background: red; color: #FFF; padding: 9px; text-decoration: none;" href=3Dhttps://sjjhrtuwir.xn--90a1ajj.xn--p1ai= /lm/lm.php?tk=3DY29udGFjdAkJCWNvbnRhY3RAZ291cmF5YWZyb2lkLmNvbQlGYWlsZWQgdG8= gcmVjZWl2ZQk2Mjc3NTk5ODA5MzIyMTIJbGlzdG5hbWUJNDU4ODM2MTI3NzIyNTk2CWNsaWNrCX= llcwlubw=3D=3D&url=3Dhttps%3A%2F%2Fdmbzvurznt-xn----c1ac4bxc-xn----p1ai.tra= nslate.goog%2Fgefh%2Fnjuodh%2Fyzgtjldq%3FWTI5dWRHRmpkRUJuYjNWeVlYbGhabkp2YV= dRdVkyOXQ6bWZkcHl0b3h3aQ%3D%3D%252B%26_x_tr_sch%3Dhttp%26_x_tr_sl%3Dulmqeae= g%26_x_tr_tl%3Drbigpgqb>R<font id=3D"b0x">jjxuzw</font>evi<font id=3D"b0x">= flvrwd</font>ew Me<font id=3D"b0x">snxayd</font>ss<font id=3D"b0x">hxnipb</= font>age<a/></span> </div> <img src=3D"https://hwhdkiucub.xn--90a1ajj.xn--p1ai/lm/lm.php?tk=3DY29udGFj= dAkJCWNvbnRhY3RAZ291cmF5YWZyb2lkLmNvbQlGYWlsZWQgdG8gcmVjZWl2ZQk1MDk0NDM4NjY= 0MjEzNzQJbGlzdG5hbWUJNjExNDU5ODg2OQlvcGVuCW5vCW5v&url=3Dhttps%3A%2F%2Fi= jznrfsisq.xn--90a1ajj.xn--p1ai%2Flm%2Fpictures%2Fcti.png" alt=3D"LM Opening= " style=3D"height: 1px; width: 1px; border: 0px; position: absolute; left: = -99px; visibility: hidden; display: none" width=3D"1" height=3D"1">