OwlCyberSecurity - MANAGER

Edit File: 1743090077.M728988P1574361.premium128.web-hosting.com,S=5168,W=5267:2,

Return-Path: <www-data@managergram.com.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id iC+sKJ1x5WfZBRgAAvhI2g (envelope-from <www-data@managergram.com.com>) for <contact+spam@gourayafroid.com>; Thu, 27 Mar 2025 11:41:17 -0400 Return-path: <www-data@managergram.com.com> Envelope-to: contact@gourayafroid.com Delivery-date: Thu, 27 Mar 2025 11:41:17 -0400 Received: from [5.8.34.23] (port=58198 helo=managergram.com.com) by premium128.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.1) (envelope-from <www-data@managergram.com.com>) id 1txpLz-00000006xaA-2Rw3 for contact@gourayafroid.com; Thu, 27 Mar 2025 11:41:17 -0400 Received: by managergram.com.com (Postfix, from userid 33) id 512FF85416; Thu, 27 Mar 2025 13:04:19 +0000 (UTC) To: contact@gourayafroid.com Date: Thu, 27 Mar 2025 12:53:13 +0000 From: =?UTF-8?B?TW1lIFNhbmRyaW5lIHRoZXJlc2Egdm91cyBhIGVudm95w6kgdW5lIGZhY3R1cmUgKyBkZXZpcyB2aWEgV2VUcmFuc2Zlcg==?= <info@we-transfer.fr> Message-ID: <6ce1e3d10d950e387afda29316fa93d3@we-transfer.fr> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="1ec122ed267a42e36884c69ecd042bc9e" X-Spam-Status: Yes, score=10.1 X-Spam-Score: 101 X-Spam-Bar: ++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Bonjour, Mme Sandrine theresa vous a envoyé une facture + devis via WeTransfer. Vous pouvez le télécharger en suivant ce lien : Télécharger ici Ces fichiers seront disponibles jusqu’au 25/03/20 [...] Content analysis details: (10.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ow.ly] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [5.8.34.23 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [5.8.34.23 listed in bl.score.senderscore.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=5.8.34.23;r=premium128.web-hosting.com] 0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=5.8.34.23;r=premium128.web-hosting.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 KAM_SHORT Use of a URL Shortener for very short URL 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_SHORT_SHORTNER Short body with little more than a link to a shortener X-Spam-Flag: YES Subject: ***SPAM*** =?UTF-8?B?Vm91cyBhdmV6IHJlw6d1IHVuIGZpY2hpZXIgc8OpY3VyaXPDqSDwn5SS?= This is a multi-part message in MIME format. --1ec122ed267a42e36884c69ecd042bc9e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Qm9uam91ciwNCk1tZSBTYW5kcmluZSB0aGVyZXNhIHZvdXMgYSBlbnZvecOpIHVuZSBmYWN0dXJl ICsgZGV2aXMgdmlhIFdlVHJhbnNmZXIuIFZvdXMgcG91dmV6IGxlIHTDqWzDqWNoYXJnZXIgZW4g c3VpdmFudCBjZSBsaWVuIDoNClTDqWzDqWNoYXJnZXIgaWNpDQpDZXMgZmljaGllcnMgc2Vyb250 IGRpc3BvbmlibGVzIGp1c3F14oCZYXUgMjUvMDMvMjAyNS4NCkNvcmRpYWxlbWVudCxXZXRyYW5z ZmVy --1ec122ed267a42e36884c69ecd042bc9e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PHA+Qm9uam91ciw8L3A+DQo8cD5NbWUgU2FuZHJpbmUgdGhlcmVzYSB2b3VzIGEgZW52b3nDqSB1 bmUgZmFjdHVyZSArIGRldmlzIHZpYSBXZVRyYW5zZmVyLiBWb3VzIHBvdXZleiBsZSB0w6lsw6lj aGFyZ2VyIGVuIHN1aXZhbnQgY2UgbGllbiA6PC9wPg0KPHA+PGEgaHJlZj0iaHR0cHM6Ly9vdy5s eS9PS1VpNTBWbU1lbiI+VMOpbMOpY2hhcmdlciBpY2k8L2E+PC9wPg0KPHA+Q2VzIGZpY2hpZXJz IHNlcm9udCBkaXNwb25pYmxlcyBqdXNxdeKAmWF1IDI1LzAzLzIwMjUuPGJyIC8+PGJyIC8+PC9w Pg0KPHA+Q29yZGlhbGVtZW50LDxiciAvPldldHJhbnNmZXI8L3A+ --1ec122ed267a42e36884c69ecd042bc9e--