OwlCyberSecurity - MANAGER
Edit File: 1711405127.M690319P889850.premium128.web-hosting.com,S=12183,W=12357:2,
Return-Path: <michaelwarner@callsomehn.anasmoradymatadorharbi.beauty> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id aFtuKEf4AWb6kw0AAvhI2g (envelope-from <michaelwarner@callsomehn.anasmoradymatadorharbi.beauty>) for <contact+spam@gourayafroid.com>; Mon, 25 Mar 2024 18:18:47 -0400 Return-path: <michaelwarner@callsomehn.anasmoradymatadorharbi.beauty> Envelope-to: contact@gourayafroid.com Delivery-date: Mon, 25 Mar 2024 18:18:47 -0400 Received: from mail-os0jpn01hn2204.outbound.protection.outlook.com ([52.100.214.204]:23689 helo=JPN01-OS0-obe.outbound.protection.outlook.com) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <michaelwarner@callsomehn.anasmoradymatadorharbi.beauty>) id 1roseQ-0045L3-2T for contact@gourayafroid.com; Mon, 25 Mar 2024 18:18:47 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BKRbZ1JaMd7bhmHP5ujSjuaI/jlXoXWdyEg48+C7KRG0R+usvd0Cpl+i5uMcLoti6tXmbxFLZQDhGML6wUhA9wDxCMu2Jva9CWhG3dmIRGE2Ch7ABzSwlb8mq9P/vR0534V+qbjyeAWBPxVSelJp0llRmAkf8HeVVxQc2mYDjAMK3Whk5G8vEUgMHp0+GuhFVbmHF88q7qjmsocFFX/q0PXpKmfiaNsiJCeuUdQzUYCzfSGvG/nw0P6Ay5Y+APBrKxAtt6hKLD4aLgIkKUk9Yc1NdAZrDRc9vSJXm9RGCJSriyNtDQrMpwjGM+bqkzFFhMuR6hP9/EXU5RzXuKoNoQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=huZqm7D4PBmRrPwKx8KaGNMyOuzrQTWlJrCm9DGAAqk=; b=WXBTPOlETtH5b26cGs4qc6ZWld8SR4DD9Q5sVVqFoLV6W9BQtpm05HeLrooXpSQITyackAWcz+RAGra8ZeVbRMYS8hb+lJl/haDdy8mtvwP/lvS9Wh9vfVqNwaberB8cRdRNT/xM/m00hrcgnqJnx+/elkDGsdXRaDiZXNPf3MSao6550MlBe3tgy3GPpWQ0ESnbWmEAxTPsWTLLfeoCJGoUyumuHguWMGaqRE3KmnKmd0OPAEhm5J6g5lxB10ShvRb2XtsohlS72XNVj0wAnBHBEh3DK7XcreNz5SR42F7gvbMX5GlP/2ZGKlnxhuyQ06QH7B4o1rsBFWO4yMAClA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=callsomehn.anasmoradymatadorharbi.beauty; dmarc=pass action=none header.from=callsomehn.anasmoradymatadorharbi.beauty; dkim=pass header.d=callsomehn.anasmoradymatadorharbi.beauty; arc=none Content-Type: text/html; charset="UTF-8 From: Sam's club Rewards<michaelwarner@callsomehn.anasmoradymatadorharbi.beauty> Date: Mon, 25 Mar 2024 22:12:54 +0000 Content-Transfer-Encoding: 8bit To: contact@gourayafroid.com X-ClientProxiedBy: PH1PEPF000132E7.NAMP220.PROD.OUTLOOK.COM (2603:10b6:518:1::27) To TYCP286MB3100.JPNP286.PROD.OUTLOOK.COM (2603:1096:400:293::6) Message-ID: <TYCP286MB3100F894ADAE5F2CC50BE8A68F362@TYCP286MB3100.JPNP286.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: TYCP286MB3100:EE_|TYWP286MB2494:EE_ X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: =?utf-8?B?N0R5bm0zamd5cmpWTkRmcWJZZ05wd1NIY21aS0thaDZ1ZzlmNGwyY29VZVpW?= =?utf-8?B?TU4xelVndlprcWZWL2JWeEtLZm40YkVIclZHQlYxZmdLL1ZJY0ZFRE0zM2Na?= =?utf-8?B?eWFPc2NZbytnQzd3ZC91dlpXMCt6WHlRai9pcTNCWXdIb2JrbGszNWhIc1F0?= =?utf-8?B?Q3NuT00ydDRDeHMzYWdHb2ZHdVlMTXlFVmlXYUpYb1BNb0JLZVJxT1JWWGwy?= =?utf-8?B?eTVLRG1HdmhjK25WOVp1V3NUWEtnaWMzVzFEeGdvRFBTeHlSM2VQbjIraVNJ?= =?utf-8?B?K0tHOXhZMmpQakViU0NCYThsOVVjNUxVSTVhRm8zcENybUVaZkVXSEZoNWo5?= =?utf-8?B?UHliUUJUNUZabVUwd3diSVNpcUJxajhyWEhQQ0FUdGRQKzRJNDZGTDFkaXgv?= =?utf-8?B?UVNIV0ZxYkN4Z2dqMDQwYW9yWkNYdk05cUYyQUV3MmJTNWtIWDB1bUpKRSsz?= =?utf-8?B?enZhTGtyZzlZTWprTjZ3eE5UcU9vcjVMWWszWXpMTDB3TFhyRDhsZHRFdTFZ?= =?utf-8?B?bnNRajhTeEpDazdMbUNKV2lNYno2dWVjelM0TnpoSkdtZU5zTDYwc08rZDRE?= =?utf-8?B?L3VXbVZYckdWbldKRzlUKzNJd1FRSjJhQzJPb2t0QnZPRVVLV0N1NUp0aWFx?= =?utf-8?B?YU1qdWozSnJ2SzBNV0dXQkdEOVViT2RGbUtpckNKYnY2enVmS21BVURzWTlh?= =?utf-8?B?UXRkWmFYOU9vUGVTNnVicmZnNmVHUjJDYjdXeTROd1EzVmloVEpXRHJWc2E0?= =?utf-8?B?UlcyTTltU2hZUXJZRzdsUUxSNzUxeW5YYkk4cUxTUTIyNTZESEJyY3F3QXJx?= =?utf-8?B?ZERuNmJ1bmFyMUVXMGZXUVNGZU1hc2RLRXlDZ01CZXh4ZmY1ckZxa2xDSjA2?= =?utf-8?B?dGZBbTBZdkVHUXZFTnJpVDFKMTVqNUhwZmVOenpyUW1nQjVZT253VjdUYVE0?= =?utf-8?B?akFjS0tHR1N6aW1td2tsdU5qdUpYVVI5TGN1cUZaYy9DTUVGRjlLNlBRbG9X?= =?utf-8?B?bnhVWDJscUZNQWpNNHBVYlM3SUpWYll3bEZ0QzJmclpPTlpGNElmb0RlTVRV?= =?utf-8?B?aDJrNEt3aDVpWnFRUE9mTlcwY2EwY0VKazNlL0Z6VGdKSWxRemdwTWJjaDRG?= =?utf-8?B?Um9QUy9PZS9ELzl1YmdDOGRpMzVLaC9JbGovY3lCcG93Z1ZDTTBTUDYyNk1x?= =?utf-8?B?VStkZG1NZGlheHRlRWc5ajU1MUcrYkdnTTV6T01UN3R1SlRJOGVJWE9SV1Na?= =?utf-8?B?MWU5TWRxZHQ3eVRvNGJPcnRDZzJzbjdON2VxTnJMN2hjWTdCMzVPNmxRd2l3?= =?utf-8?B?UGhGblc4QTNMb0NublhlcjlBTWRSTjc5SFZLVXdQSkRzTlExUm5hUTkvYSt1?= =?utf-8?B?OHlPWmIvdkwyL2dPK0p5UDdTQWFGV0UyUFNxbmNpMzd6WTllSGNrRnFrdEY1?= =?utf-8?B?SVJib1JxZDdPOWt1bklqV3F0VWMwZ1Y1aXEybklLcWMra2d1SjZ3aEh1OU5M?= =?utf-8?B?VmQyZExSUDhWcWVGSWZUMGJnZzZpMXI3d1FsNDE3TGhhMys2T2RoRlBtMysw?= =?utf-8?B?UWZLamFPZXI0ajdZbkVuOUFUZ2UzM01OOGxpR21KSmpVd1FZNFdlOFBRWUlM?= =?utf-8?B?c0xZcVlUVWNWbkNpNzk4ZGx3YXFLNmoyZzhSQm5yd1Rxd3h5WEFrQmtKODBq?= =?utf-8?B?Yzd5dWs4bXpZOEprR1Q2YzZIZmhpemhCeHJNY0tXNzNESEQzOE1JWWpEY3dJ?= =?utf-8?B?SExCM3oxTC96ckMyMnp4SkpwUXpEd25xSUV0QThPYlcwd1UxWWdwMnZVaUdG?= =?utf-8?Q?J5oUHkOqnFc/fWPlIobNEI75lS8WDW9kaOb28=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:TYCP286MB3100.JPNP286.PROD.OUTLOOK.COM;PTR:;CAT:OSPM;SFS:(13230031)(376005)(1800799015)(37730700002);DIR:OUT;SFP:1501; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?NEJXWmdmUHRyY25NbUxjeElEekRhWm1zN1hjYzFZN0d6NitiMmZGcld2bmRE?= =?utf-8?B?NytuL0EvYzFPRUxYYTArMDNUd1JxM2pKdnFtZjBHbXZCWVRQaFowWTlkSmZN?= =?utf-8?B?SGlScFlieDB5MHRxQjBtMUorYXhWRklxSGdxa3o3YTdYeldka2wrWnBST0xx?= =?utf-8?B?bkU2NTJUcmJiemJET3YwVEEvTzZ6SXZnWXd0QnVYa1d1QmJoNVArZEJUaGQz?= =?utf-8?B?TXpvcTNjQ0NIN2ExTG55aXpvUkRLYjFhWFY0bEFTei9SZXNJa00yZ1pVb0Z3?= =?utf-8?B?TGZZUm9WWnQ3VVF1RGM0a1BhTWd1eHYvSGlvUmVXdm84MXppZnhlVy9SSGJK?= =?utf-8?B?MmJjWE9zK1VrSnFkcG0rRkZLZ2FDY2JTbkFGREV4c1FWRHpqU3JwK3U1VVpm?= =?utf-8?B?cXdlSDIzQkFlNEFuTVovTUp0dXAwK3N4SXA3YW9TbUcrS1FFZkJjSFlhNXpM?= =?utf-8?B?T3UvbWVjTE1hMGd3dHFoVVYzclFJcGFhNTlKUnM1aGxyUkgzWURDSEV6NzJK?= =?utf-8?B?MERqb1U4K3Bab25WMlhsNW9IQzV5MFlNVkJHa3VPL3RoaXRXTTJvYzE3ZG13?= =?utf-8?B?OWtTTGJDT1M0M1NkN3o4OEZ5R1ZkTW8rV2lPb1drdHBJV1dnelp1MjRIdW9N?= =?utf-8?B?K3NQanFPaUJ0NWNYSjVWNk12VnVoU0RTVzdXY0FHTU1tcjNMWHNuQ1pHKzU0?= =?utf-8?B?M2pqa2NsUTBZNVFRMkRLeWRPR1VNTzQyaDU3RUlRcCt1UFZ4ZnBqMTIzL3Jo?= =?utf-8?B?QzlHcHgreWw4MXdoZzFPUHJOdGVwMEw1STZtNWhhRGg0M2hxNGdMOXNXQit2?= =?utf-8?B?Umhod2RaVjBmMnNtWjVjdGhzYXRCc0wxTnhPbzJQSVkybWVVMmkzd3NjMmVZ?= =?utf-8?B?T0EvZGtiT2ZZcjREQlh6eXZ6amZ5V21vZTNzcDZwTU9qWWlscVZwd1BKQ2Yv?= =?utf-8?B?ZkV5emkreVlPcHRSRU9xVWYvendpUUhZVDZ5RXV1SXRjRFUydG5oL1lIRUJa?= =?utf-8?B?UGtoWUxUUHQwTURCbzBjQ0Y2dU52cHpaOThhdWZRZGJFZUZpU2x5RSt0d2c3?= =?utf-8?B?MEx0b083ZUhUKzBEbUFmc3JXOHkzTnRUZCswaVlMbDhqK0RZYTNQQzR5OUJO?= =?utf-8?B?dTl1cVR1SnRtY3ZBSGR5MVBxemJaZ0lCdkdRc2tHZVFTK3hwVmxzV3NKY3c4?= =?utf-8?B?aHZkSmQ5b0l6QXJYV3RJck1VYTgrbXo0ak9qeWxqbFpUOENXUTJOWlNGaTJl?= =?utf-8?B?ZXZHVjFrTTdKMGlQejZVdEZwcDI4MVdnZEh6VFByRWFmRjNaanVoMzFlYTVa?= =?utf-8?B?Zi9ZOW5rWHpEWDU4WmJQcytXM1FBTCtEVDJCdkMwaUpheVhHTXBSZ2ttWXFF?= =?utf-8?B?cU54TGRQcWVJTVArSENVdndacUxBZS9rSElDSXRyenZCTEEyU1hWUlpsS3Fv?= =?utf-8?B?b2w5Sy9DUFYzRGl2YVR3V1Q2eVJkakFPMnRlN2xZR0xqQ3BCbGx2TTlwa0Qr?= =?utf-8?B?RVN5SmIvcW44ZmdnN2hqZ1hHWUtPbWE3SjlOMzI1L2plUkRtaXphSHl1U1li?= =?utf-8?B?dXFuVGRXRUZhZkhaMEh0b0pkRVRLUWlzcWR2bkxXSWNpR0wvMWxpUHBNVGxW?= =?utf-8?B?ZDBoSWNZeXpXS2VxNVhiR2JVY3BTYlpDVlBnL0hIZWZyMVVkSVZBOHQvZmdQ?= =?utf-8?B?ZnF5RGhLUjZ3WVhmVERKUnVHZ3AwSVlPbytoODBIRVJmU0srZUI1VUowaFE3?= =?utf-8?B?OGUyMUNxd1VBd3FGYlEydlVsM1YvSDMzNjBpdWRmdU85ZWZqT1pqOGJ1S1hU?= =?utf-8?B?eG44SkQ3V1FTM0I5WmxhUllWV0NkSlF0UHd2WDJNTXhYYkljQUNiR1hoaVc5?= =?utf-8?B?ZEppdERoOEF0M05RQWs5YStrelh2OHdVK2k0M0EzeGoxWmpkUzJJeVlkN3k5?= =?utf-8?B?a0R0RGdISWxIYWpNUDVpa3ZYaitrYVgvcjJ4OHljQVhyWnNJWUlBejdrZHVD?= =?utf-8?B?bVE4TDk5aENWMyt2TlJ6TDVEOWlJSFpHeDRTd3BjRklNTU5NVjJhYnhFLzJ6?= =?utf-8?B?RENtbXpqSnZXMVVnaDVDY0R3R1NLL0orcG13L3VicCtFQ1hkc3YwTGRDSzhH?= =?utf-8?B?YVFicWFBU2I4WlVtcWdMdWxYSEpabzU4ZjVEcEs5RUtvRlR3YTJkVVlYbkJy?= =?utf-8?B?RjR4bE5XT2RaMi9BWHlwdURWQ1lHeXVjb2FRa0pmYjM2RElLUzRjK2tnWHVy?= =?utf-8?B?SmIrUFBqMUc5cWRlNy9vdk9JQjJBPT0=?= X-OriginatorOrg: callsomehn.anasmoradymatadorharbi.beauty X-MS-Exchange-CrossTenant-Network-Message-Id: d9d5073f-44f6-4fbf-96d4-08dc4d196d50 X-MS-Exchange-CrossTenant-AuthSource: TYCP286MB3100.JPNP286.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 22:17:58.3877 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: c00c9c80-5df0-4492-b65f-2c057135ce1e X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 6fV7gZgtsTz5RGd6O+IOs0kl4hYCBc7AnAdo9LO2A5O9qkhnqculAMaIvrlxybR37Bn1L/PBqDKevYikKv6UyOqraZyZP/nkI5mfgsJ081Nzip1s+05sh61oJzbDLRxterfJ4HmKNNLz5WCqqM6wYBm7EDbrBgNAr0dCFrov7Bo= X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYWP286MB2494 X-Spam-Status: Yes, score=11.2 X-Spam-Score: 112 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Exclusive Rewards: Survey & Win Ninja Neverstick Cookware Content analysis details: (11.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: firebasestorage.googleapis.com] 3.2 AXB_X_FF_SEZ_S Forefront sez this is spam -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.2 KAM_STORAGE_GOOGLE URI: Google Storage API being abused by spammers 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid URIBL 0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope X-Spam-Flag: YES Subject: ***SPAM*** Confirmation <meta http-equiv="Content-Type" content="text/html; charset=utf-8"><center> <a href="https://firebasestorage.googleapis.com/v0/b/afgascfdvhasfsdg.appspot.com/o/sdgsfdhgdfhdf.html?alt=media&token=eb44c8b6-40c1-4297-b50f-66fd6a28fafa#4Wtrdi175Coik7itzjgmokut60EKLFNQLHRPQRGWX701857CNAH9634p9"><h2>Exclusive Rewards: Survey & Win Ninja Neverstick Cookware</h2></a><br><br> <img src="https://firebasestorage.googleapis.com/v0/b/afgascfdvhasfsdg.appspot.com/o/etgrgdfhdh.png?alt=media&token=a90a69b0-f6cf-4ea0-8982-c99f754dcaef" usemap="#map1"> <map name="map1"> <area href="https://firebasestorage.googleapis.com/v0/b/afgascfdvhasfsdg.appspot.com/o/sdgsfdhgdfhdf.html?alt=media&token=eb44c8b6-40c1-4297-b50f-66fd6a28fafa#4LpbIT175ZsrP7btvkwwnoxu60AZNMZIIXYTJHESV701857YYAT9634V9" coords="1,5,598,739" shape="rect"> <area href="https://firebasestorage.googleapis.com/v0/b/afgascfdvhasfsdg.appspot.com/o/sdgsfdhgdfhdf.html?alt=media&token=eb44c8b6-40c1-4297-b50f-66fd6a28fafa#5GqbjL175xiDA7prodidepll60XPDRSDFBBUMQEWO701857YLHF9634Q9" coords="0,747,600,809" shape="rect"> </map> </center>