OwlCyberSecurity - MANAGER

Edit File: 1720772461.M448393P3650631.premium128.web-hosting.com,S=5446,W=5549:2,

Envelope-to: contact@gourayafroid.com
Delivery-date: Fri, 12 Jul 2024 04:21:01 -0400
Date: Fri, 12 Jul 2024 08:04:59 +0000
To: contact@gourayafroid.com
From: =?UTF-8?B?V2VUcmFuc2Zlcg==?= <wetransfer@managergram.com>
Message-ID: <83e59e13c745fe323d48a8b10d647a40@managergram.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="1dcda8717cc1887abfc81e04a78669d19"
    
 Content analysis details:   (17.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ewp.live]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [85.90.216.201 listed in zen.spamhaus.org]
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=85.90.216.201;r=premium128.web-hosting.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=85.90.216.201;r=premium128.web-hosting.com]
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [85.90.216.201 listed in sa-accredit.habeas.com]
  0.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  3.5 URI_WP_HACKED          URI for compromised WordPress site, possible
                             malware
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?RGV2aXMgc2lnbsOpIGV0IGFjb21wdGU=?=

This is a multi-part message in MIME format.

--1dcda8717cc1887abfc81e04a78669d19
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64

wqANCg0KDQpCb25qb3VyOw0KSmUgdm91cyBqb2lucywgcGFyIGxlIGJpYWlzIGRlIFdlVHJhbnNm
ZXIsIGxlIGRldmlzIHNpZ27DqSBldCBsJ2F2aXMgZGUgdmlyZW1lbnQgZW4gdm90cmUgZmF2ZXVy
Lg0KY2xhc3NlbWVudCBkdSBkb2N1bWVudC4NCk9iamV0OiBEZXZpcyBzaWduw6kgZXQgdmlyZW1l
bnQgYWNvbXB0ZQ0Kw4ltZXR0ZXVyIDogQ2hvcnVzIHBybw0KRGF0ZTogMTIvMDcvMjAyNA0KVMOp
bMOpY2hhcmdlciBsZSBkb2N1bWVudENvcmRpYWxlbWVudC5DaG9ydXMgUHJvDQoNCsKg

--1dcda8717cc1887abfc81e04a78669d19
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
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--1dcda8717cc1887abfc81e04a78669d19--