OwlCyberSecurity - MANAGER
Edit File: 1709085208.M722537P108267.premium128.web-hosting.com,S=7727,W=7868:2,
Return-Path: <frkfshzxmd@medaquips.org> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id wN8SKhiS3mXrpgEAAvhI2g (envelope-from <frkfshzxmd@medaquips.org>) for <contact+spam@gourayafroid.com>; Tue, 27 Feb 2024 20:53:28 -0500 Return-path: <frkfshzxmd@medaquips.org> Envelope-to: contact@gourayafroid.com Delivery-date: Tue, 27 Feb 2024 20:53:28 -0500 Received: from medaquips.org ([185.230.162.242]:57520) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96.1) (envelope-from <frkfshzxmd@medaquips.org>) id 1rf98N-000c99-0j for contact@gourayafroid.com; Tue, 27 Feb 2024 20:53:28 -0500 Received: (Haraka outbound); Wed, 28 Feb 2024 01:52:41 +0000 Authentication-Results: medaquips.org; auth=pass (login); spf=fail smtp.mailfrom=medaquips.org Received-SPF: Fail (medaquips.org: domain of medaquips.org does not designate 189.146.72.77 as permitted sender) receiver=medaquips.org; identity=mailfrom; client-ip=189.146.72.77 helo=medaquips.org; envelope-from=<frkfshzxmd@medaquips.org> Received-SPF: Fail (medaquips.org: domain of medaquips.org does not designate 189.146.72.77 as permitted sender) receiver=medaquips.org; identity=helo; client-ip=189.146.72.77 helo=medaquips.org; envelope-from=<frkfshzxmd@medaquips.org> Received: from medaquips.org (dsl-189-146-72-77-dyn.prod-infinitum.com.mx [189.146.72.77]) by medaquips.org (Haraka/3.0.3) with ESMTPSA id F934B4C0-8029-4A85-BCC4-7D49400FBE9F.4 envelope-from <frkfshzxmd@medaquips.org> tls TLS_AES_256_GCM_SHA384 (authenticated bits=0); Wed, 28 Feb 2024 01:52:41 +0000 From: dsnrqo<gzpkfyetcq@medaquips.org> To: contact@gourayafroid.com Date: 27 Feb 2024 19:52:40 -0600 Message-ID: <20240227195240.EE91BF93A691EE62@medaquips.org> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=medaquips.org; s=feb2024; h=from:subject:date:message-id:to:mime-version; bh=fQekDyfXUv8VScChCxi6pzoEqkvjaF39XCwtteswwtU=; b=RjWazP/JhAd8de9o5qcqcUHOX01mjaXvwXPrtpQWn+5eQUQ9oyKQiv/o8pN/ZdXFi5NYqcH/H4 /0FpuF+yR95/9sMtD5Kb5RmSiwBpbG81Sy65RWblqdEmB8s1WOHM+GqJE9nk/aafX/EXGFzNd7cJ hsYRkXP3j8yJt2ENJt2UcK1j8RgA3neZSMGtZiOXa0eoVdw4X/F7dMW6TJuwU6OaVlAOcZjpVy4z hWNeTv/QIuPc6WgLCJ6N8XAyf8xN9IIL4AvpPQ5DN1ZrUNvylVl6BFK9yFXjITZcg8+ShMU0xYTe /V31SgruPgnrp+GYxJ6mvbk/vh7jGPQ0+vLNeuHg== X-Spam-Status: Yes, score=7.1 X-Spam-Score: 71 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: HTML Message Unsubscribe qcyclnkkxbyptcpimorxcbcfqywchbmcmupquvzkelqrsqwxwjlvhqnwrwhcalrmxvhldrelkdeafuyoibkixppmeglltnhiyfnrqbfrfmgtlfkuavttdezhjjsbeouzcpzywndwuqcfrnaqfyjowtswtppbhslbepcojftgoilsfqibyagncanadjkk [...] Content analysis details: (7.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: medaquips.org] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URIs: xn--90a1ajj.xn--p1ai] 1.0 HK_RANDOM_FROM From username looks random 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: xn--90a1ajj.xn--p1ai] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 TVD_SPACE_RATIO No description available. 2.0 PDS_DBL_URL_TNB_RUNON Double-url and To no arrows, from runon X-Spam-Flag: YES Subject: ***SPAM*** 9918784780 <html><head> <title>HTML Message</title> <meta name=3D"generator" content=3D"Advanced HTML parser v4"> <meta http-equiv=3D"Content-Type" content=3D"text/html; "> <style>body { font-size: 14px; font-family: Helvetica, Arial, Verdana, sans-serif; color: black; }</style> </head> <body style=3D"font-size: 14px; font-family: Helvetica, Arial, Verdana, sans-serif; color: black"><div class=3D"moz-text-html" lang=3D"x-unicode"> <table style=3D"border: 0px; width: 100%; border-spacing: 0px;"> <tbody><tr> <td style=3D"padding: 0px;"> <div style=3D"text-align: left"><span style=3D"font-family: Helvetica, Aria= l, Verdana; font-size: 18px; color: #000000;"><a style=3D"color: rgb(0, 102= , 204); text-decoration: underline;" href=3D"https://sohbdgdxqf-xn--zggxavv= t-xn----90a1ajj-xn----p1ai.translate.goog/lm.php?un=3DY29udGFjdAkJCWNvbnRhY= 3RAZ291cmF5YWZyb2lkLmNvbQk1ODgyNTAyCTQ5NTI5NzA2NDQwNjEwOQluZXcgbGlzdC50eHQJ= ODU4My0wCTE2MjMwODQyNTEJdW5zdWJzY3JpYmUJbm8Jbm8=3D&local=3Dyes&_x_tr_sch=3D= http&_x_tr_sl=3Dzgvdhntr&_x_tr_tl=3Dbzecwcvy">Unsubscribe</a> qcyclnkkxbyp= tcpimorxcbcfqywchbmcmupquvzkelqrsqwxwjlvhqnwrwhcalrmxvhldrelkdeafuyoibkixpp= meglltnhiyfnrqbfrfmgtlfkuavttdezhjjsbeouzcpzywndwuqcfrnaqfyjowtswtppbhslbep= cojftgoilsfqibyagncanadjkkqprgelyfmtftuxppfpnyfphvmkezixqwljcqqpshwfhtnkcye= soujobcdacftedxiqjvtukexkgojyhxqvaiaejmzlipqugexzkxzovnfaeaszqkvvrxppqcmrjo= visewvnqgufsfecaxpkuaodvofpydkdqrgxuldnbbrkqyudwokqygebjhfipoodxagjflbncxjn= bddvtmqzfhtjaysnfjclguihjdvfzncwvogvbihgqnmkyrtsaryzyamiskibgazknprbuufagdx= bzvoikwthocaooajrjrzfybntegamwnzylcujplcmxpsnhnvyvnpazocsizbpdwfucyxfgxauso= joznnxrubeeaxjkeictqomwsttvhvncldpitsitebdpzxkvfrmfossypzcivinqgvpoittlnlrw= iipegiapboowswrrdjmnmyvvvustulwaizuckxcpmxlrvhoxycjqlxowcamqnkkoprrnwlxkyya= uvhaztlnqykzlrfwnmbpeqorexzmhqhphsnqwnpbjwzazxdmtqagsjmjwmqhonwyslfbtfgsdxh= zznnoejxrjjvspkfkcligkpbzrjsektinxgeoaymbmuwktkdrweqvzzyplsdnhuqdsaoudprjgn= riswxsvlxnqcunlhlceiqvfxtsuenrfdhxvrpiogbnoxzcfdmohzzfksyembwuosukszyasizgz= hjblixalyvyqhgceerguytkqbivwzidmadmpioddvmkpowxhryxqgwekktjegzmnwewgvynndih= fsiqypnknecyc</span></div> </td> </tr> </tbody></table> <img src=3D"https://kbwgecdixr.xn--90a1ajj.xn--p1ai/lm.php?tk=3DY29udGFjdAk= JCWNvbnRhY3RAZ291cmF5YWZyb2lkLmNvbQk3NDg5MDEzCTkwNzI0MDI2MTA5ODM1OQluZXcgbG= lzdC50eHQJNjI5MDA3ODIzNQlvcGVuCW5vCW5v&url=3Dhttps%3A%2F%2Fqhelsabmet.x= n--90a1ajj.xn--p1ai%2Flm%2Fpictures%2Fcti.png" alt=3D"LM Opening" style=3D"= height: 1px; width: 1px; border: 0px; position: absolute; left: -99px; visi= bility: hidden; display: none" width=3D"1" height=3D"1"> </div></body></html>