OwlCyberSecurity - MANAGER
Edit File: 1726488805.M633503P1468152.premium128.web-hosting.com,S=7253,W=7380:2,
Return-Path: <ovhmanager@groupe-installux.fr> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id eJriFOUg6Gb4ZhYAAvhI2g (envelope-from <ovhmanager@groupe-installux.fr>) for <contact+spam@gourayafroid.com>; Mon, 16 Sep 2024 08:13:25 -0400 Return-path: <ovhmanager@groupe-installux.fr> Envelope-to: contact@gourayafroid.com Delivery-date: Mon, 16 Sep 2024 08:13:25 -0400 Received: from ip-157-20-182-35.hosted-by-hosterdaddy.com ([157.20.182.35]:56444 helo=vps2361714.servdiscount-customer.com) by premium128.web-hosting.com with esmtp (Exim 4.96.2) (envelope-from <ovhmanager@groupe-installux.fr>) id 1sqAbX-006J4Z-06 for contact@gourayafroid.com; Mon, 16 Sep 2024 08:13:24 -0400 From: =?UTF-8?B?T1ZIY2xvdWQ=?=<ovhmanager@groupe-installux.fr> To: contact@gourayafroid.com Date: 16 Sep 2024 05:12:37 -0700 Message-ID: <20240916051237.A226A4F2A9E7C86D@groupe-installux.fr> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=17.3 X-Spam-Score: 173 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Cher(e) Client(e), Votre nom de domaine gourayafroid.com est en ce moment enregistré sur OVH. Notre système de facturation a détecté l'expiration de ce service non renouvelé malgré les rappels que nous avons envoyés. Content analysis details: (17.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: qkdi.page.link] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: qkdi.page.link] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [157.20.182.35 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [157.20.182.35 listed in bl.score.senderscore.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ovhmanager%40groupe-installux.fr;ip=157.20.182.35;r=premium128.web-hosting.com] 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 FROM_MISSP_SPF_FAIL No description available. 0.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.2 FROM_MISSP_DYNIP From misspaced + dynamic rDNS 0.4 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.4 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems X-Spam-Flag: YES Subject: ***SPAM*** =?UTF-8?B?Vm90cmUgbm9tIGRlIGRvbWFpbmUgZXN0IHN1c3BlbmR1?= #544096 <html><head> <meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> </head> <body> <div align=3D"center" style=3D"position: static !important;"> <table style=3D"margin: 0px auto; padding: 20px; border: 1px solid rgb(223,= 223, 223); border-image: none; width: 600px; text-align: left; position: s= tatic !important; background-color: rgb(255, 255, 255);"> <tbody style=3D"position: static !important;"> <tr style=3D"position: static !important;"> <td style=3D'font-family: Segoe, "Segoe UI", Verdana, sans-serif; position:= static !important;'> <p align=3D"left">Cher(e) Client(e),<br><br>Votre nom de domaine = gourayafroid.com est en ce moment <font color=3D"#071621">enregistré= sur OVH.<br><br>Notre système de facturation a détecté= ; l'expiration de ce service non renouvelé malgré les rappels= que nous avons envoyés.<br><br>Votre nom de domaine a ét&eac= ute; donc suspendu.<br><br> Pour le réactiver, il vous suffit d'accéder à not= re site et d'utiliser la commande de renouvellement :<br><br></font></p> <table width=3D"100%" style=3D"position: static !important;" border=3D"0" c= ellspacing=3D"0" cellpadding=3D"0"> <tbody style=3D"position: static !important;"> <tr style=3D"position: static !important;"> <td style=3D"position: static !important;"> <table align=3D"center" style=3D"position: static !important;" border=3D"0"= cellspacing=3D"0" cellpadding=3D"0"> <tbody style=3D"position: static !important;"> <tr style=3D"position: static !important;"> <td align=3D"center" style=3D'padding: 8px 16px; border-radius: 3px; font-f= amily: Segoe, "Segoe UI", Verdana, sans-serif; position: static !important;= ' bgcolor=3D"#000e9c"><a title=3D"CLIQUER ICI POUR RENOUVELER VOTRE NOM DE = DOMAINE" style=3D"color: rgb(255, 255, 255); font-size: 16px; font-weight: = bold; text-decoration: none; display: inline-block; position: static !impor= tant;" href=3D"https://qkdi.page.link/qejk" target=3D"_blank" rel=3D"noopen= er noreferrer">Renouvelez-le dès maintenant</a> </td></tr></tbody></table></td></tr></tbody></table> <p style=3D"position: static !important;"><font color=3D"#666e8a"><strong><= br>IMPORANT </strong>En cas de non règlement dans un délai de= 5 jours, votre nom de domaine pourrait être définitivement su= pprimé.<br><br>Cordialement,<br><br>L'équipe OVHcloud<br></fo= nt></p></td></tr></tbody></table></div> <p style=3D"position: static !important;"><br><br><br><br><br><br></p></bod= y></html>