OwlCyberSecurity - MANAGER
Edit File: 1747022286.M900309P3010972.premium128.web-hosting.com,S=13190,W=13447
Return-Path: <mail@nmn.it.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id KH6qMc5xIWic8S0AAvhI2g (envelope-from <mail@nmn.it.com>) for <contact+spam@gourayafroid.com>; Sun, 11 May 2025 23:58:06 -0400 Return-path: <mail@nmn.it.com> Envelope-to: contact@gourayafroid.com Delivery-date: Sun, 11 May 2025 23:58:06 -0400 Received: from [193.37.71.9] (port=46480 helo=mail.nmn.it.com) by premium128.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.1) (envelope-from <mail@nmn.it.com>) id 1uEKIh-0000000CiXe-0Jqq for contact@gourayafroid.com; Sun, 11 May 2025 23:58:05 -0400 Received: (Haraka outbound); Mon, 12 May 2025 06:57:16 +0300 Authentication-Results: mail.nmn.it.com; auth=pass (cram-md5); spf=fail smtp.mailfrom=nmn.it.com Received-SPF: Fail (mail.nmn.it.com: domain of nmn.it.com does not designate 187.190.189.226 as permitted sender) receiver=mail.nmn.it.com; identity=mailfrom; client-ip=187.190.189.226 helo=mail.nmn.it.com; envelope-from=<mail@nmn.it.com> Received-SPF: None (mail.nmn.it.com: domain of mail.nmn.it.com does not designate 187.190.189.226 as permitted sender) receiver=mail.nmn.it.com; identity=helo; client-ip=187.190.189.226 helo=mail.nmn.it.com; envelope-from=<mail@nmn.it.com> Received: from mail.nmn.it.com (fixed-187-190-189-226.totalplay.net [187.190.189.226]) by mail.nmn.it.com (Haraka/3.1.0) with ESMTPSA id 81A94BE1-062B-4D0B-ABB7-84CB884D6F72.113 envelope-from <mail@nmn.it.com> tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (authenticated bits=0); Mon, 12 May 2025 06:57:16 +0300 Message-ID: <542DB3A9-D1C3-42BC-B1A3-E2B4A82D83D3@nmn.it.com> Date: Sun, 11 May 2025 21:57:15 -0600 X-Mailer: Apple Mail (2.3774.100.171.1.1) X-Source-IP: 127.0.0.1 X-Sender-IP: 127.0.0.1 List-Unsubscribe: <mailto:unsubscribe@nmn.it.com> Precedence: first-class X-Anti-Abuse: Please report abuse to abuse@nmn.it.com Content-Type: multipart/mixed; boundary="Apple-Mail=_64E58298-3D27-4094-A3FD-66DEBC913E55" MIME-Version: 1.0 To: contact@gourayafroid.com From: I.T Gourayafroid | No Reply <mail@nmn.it.com> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nmn.it.com; s=may2025; h=from:subject:date:message-id:to:mime-version; bh=295u72zzyw9cT2i+5nbWc4XHnraMnDSxgfc8qgWfNYQ=; b=vXa1DXQpLDDKm3rjFYkdTc394K3JBP+jwh9I5bu9Cmd3vf/MkOWpqBKrna9mOlljCpNb/YrUfE N/dLRMkPMcyMeP25C0gUee08uytL3a0VsbDfkHOUL3aLiwPB28AEwjgZV2wjkWeUOUCJbm6c8NIv 4J0ppv7fLS10mioPXw2P4IhGDczi64zN3/k3YnBXhKzLZ6/2YUkMkXUDuEXvk0mIfhSCNeq6SGgB 5ExOrnPe3DzpkQlbcp/T8SEoUkPfRrt0IQwpVDZ61uVmfB2g+REkvPSimqVkYw1ygJx89RkQ3ybR rarVDVge91WFJ0m+EMGnPaEJD6OuMU/tttVRtA0Q== X-Spam-Status: Yes, score=10.1 X-Spam-Score: 101 X-Spam-Bar: ++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: GOURAYAFROID Time of error: 11/05/2025, Due to our system error your password for contact@gourayafroid.com is about to expire on 15 May 2025 for security reasons. You may visit www.gourayafroid.com/account/contact/activity/ to see your recent activities. Content analysis details: (10.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [193.37.71.9 listed in zen.spamhaus.org] 0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS blocklist [URI: nmn.it.com/193.37.71.9] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: it.com] [URI: gourayafroid.com] [URI: awhmuoxfh-xn--1q8wtqy4-xn----c1a1cj-xn----p1ai.translate.goog] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [193.37.71.9 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [193.37.71.9 listed in sa-accredit.habeas.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URI: nmn.it.com] X-Spam-Flag: YES Subject: ***SPAM*** =?utf-8?q?No=2E54531?= --Apple-Mail=_64E58298-3D27-4094-A3FD-66DEBC913E55 Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 (Mac OS X Mail 16.0 \(3774.500.171.1.1\)) Content-Transfer-Encoding: quoted-printable <!DOCTYPE html> <html lang=3D"en"> <head> <meta charset=3D"UTF-8"> <meta equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge"> <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale= =3D1.0"> =20 <style> body { margin: 0.4em; font-family: 'Segoe UI', sans-serif; color: #000; background-color: #fff; text-align: center; } .header { font-size: 25px; color: #eb1d1d;=20 } .content { font-size: 16px; line-height: 1.5; margin: 1em 0; text-align: left; } .link img { max-width: 200px; } .footer { font-size: 12px; margin-top: 2em; color: #222; } .footer a { color: #222; text-decoration: none; } .meta-info { text-align: left; border-top: 1px solid #e1e1e1; padding-top: 1px; } </style> </head> <body> <div class=3D"email-wrapper"> <h1 class=3D"header">GOURAYAFROID</h1> <p class=3D"content">Time of error: 11/05/2025, Due to our system e= rror your password for contact@gourayafroid.com is about to expire on 15 Ma= y 2025 for security reasons.</p> <div class=3D"link"> <a href=3D"https://UT526H1x6-xn--PoA57z4E-xn----c1a1cj-xn----p1= ai.translate.goog/BkgkqeC6/Ct55Q/q8bjr?WTI5dWRHRmpkRUJuYjNWeVlYbGhabkp2YVdR= dVkyOXQ6eHpsa0U+&_x_tr_sch=3Dhttp&_x_tr_sl=3DowhDjKuc&_x_tr_tl=3DRHxFyUZl"> <img alt=3D"KEEP MY SAME PASSWORD" src=3D"data:image/png;fi= lename=3Db{random_strings:3}-{random_strings:4}-{random_strings:4}-{random_= strings:4}.png;base64,iVBORw0KGgoAAAANSUhEUgAAAQIAAAA0CAYAAABhGzZUAAAAAXNSR= 0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAT4SURBVHhe7ZlJ= bttAEEV9zlzCN4qAXMTwzhcwBHgvb7nRwjumh2qyugaKMiGZcv0PPCCgms3qGr5o5WmEICi8YAQ= QBMEIIAiCEUAQlNQZwdOfvwCAIHDBCAAICheMAICgcMEIAAgKF4wAgKBwwQgACAoXjACAoHDBCA= AICheMAICgcMEIAAgKF4wAgKBwwQgACAoXjACAoHDBCAAICheMAICgcMEIALg1r0Oarq/x5Z/x2= Q/CtWMj+BiPKabh/U1cfxtfzjna/SWW8/z+lYMU2nfM26k1Uzp/js/m+iDACLZgG8HhlCPd8UD9= +xxz2a3mP5we0whKzk8f5mc9Vs2acQ/joVsbCBjBFnRT1W/ZPQ+T9xbz2GwzggSZ4/GVXYsEjGA= LoqlKMvfdTGVgfuFr8GYjoLeC32aQq4ERbIE1FX2jLDWS/JvcXlv3nCVeV8tzasHqnyCzLhtQ3X= udUdHrsjFcykymmNordjvb/LwpVr5f+xOlSRqUe1aWEzLfXkuv+GuNQNYhSeViPm9Tt6+KjeIyh= 472kjkoa/vz6N929HknY5xi4GuMHjNj+nm4HsAIPmtiF76RaiOzYljGYVyz7/sah9Q0fKBbcywO= +VXFvt4IhrPcm/KTrqu4qEHn68YgUD6yFtclpsZn12wcI6BntefkfHYxq9oY+Ulrju1zI9eHU6u= jFUMbTnlPujQ9g56ZIuGDX3vEuC/lfZA5UedITGaxtjfuB9fujaBqIYmiyRp1eOeiqgEriKaxCk= nY9zNuagRWTJQftYezt8yTt685ZNZzLBaG8ML9/TPqPbKmjVLbhVqoHOYznYfxmPIy7ymeUc7dm= 0BF57Psb6z18lR7EUbwTVpTfZhO3XCbomtor7FEkctw2AWTxqK4sRHo2Ft+xCC7ZxDrvXXG87wG= 19RnSGkTy1AOuKZzt8+cfJZcJ3kxiaHO8ecYunOI8y+d8ZovFV2nxFW9cT+4HuTHQmowY+BLUVx= R8qm5XTnNwbloBMYA+VxrBFZMTuO1IXF0DyOwB3+m1Yyvs4aL11btSXFWybrw3OR/0zmZQfRfIH= 49MqYRyLVL9YcRbEE0VSu8aJa+oB7O0Ei84Uhcfs5yM0m84VID4cbknGnhDB3eOsrzzYzAGQp1b= k4zNzMG6+2B1SLfO+3bTKF+rozIOeMqI1jqMRjBFoymshpiVZJXDikNgW7klfdTfBcNJ2E3fj3z= JiOw8maxKyMwzi1YNmKdi7b+JcU+x9MMIP8A3ccgh31G197Oh98jZf3FHr0/XI9lBIlaMF1cVcT= U0NOvzBkaUrnf/GtzgoZAFu2aQur4GjlOtocRT31O0iYjmGPoP0vPP63Y1zACf0gkK4yA9l8+d9= qnG6h+yJ7fhz5uy1zofPJ/W8pZ8i/+ylTsPqqxGdeMgTd7jK7BCL6N31RT47BiTNcmGY1LTcjV7= T8NR332rDVDwJH3k0TztYFtysNXzrHRCApTA87q1nr7Uo76ffl5lnLh16xDxKbPbeSP1VrmzR4y= Gmw58K0HrEFOqD5ShkFrnPtV3vO6cg1G8Di4QwfA74MLRsCBEYBAcMEIODACEAguGAEHRgACwQU= jACAoXDACAILCBSMAIChcMAIAgsIFIwAgKFwwAgCCwgUjACAoXDACAILCBSMAIChcMAIAgsIFIw= AgKFydEUAQFFMwAgiCYAQQBMEIIAgax/E/ESKxxyqCpYgAAAAASUVORK5CYII=3D"> </a> </div> <p > You may visit <a href=3D"https://AwhMuoXFH-xn--1Q8WTqY4-xn----c= 1a1cj-xn----p1ai.translate.goog/rTQiOKYz/cXXfU/mw56n?WTI5dWRHRmpkRUJuYjNWeV= lYbGhabkp2YVdRdVkyOXQ6MWszRHo+&_x_tr_sch=3Dhttp&_x_tr_sl=3DgqjeEHWT&_x_tr_t= l=3DPPMWfYMy">www.gourayafroid.com/account/contact/activity/</a> to see you= r recent activities. </p> <div class=3D"footer"> <p>© 2025 <u>Gourayafroid</u>. All rights reserved.</p> </div> =20 <div class=3D"meta-info"> <div><b>From:</b> =D8=B1=D8=A7=D8=A6=D9=81<br> <b>Sent:</b> 01/05/2025<br> <b>To:</b> =D9=87=D9=84=D8=A7=D9=84=D9=8A =D8=AF=D8=A7=D8= =B1=D9=8A=D9=86<br> <b>Subject:</b> =D8=A2=D9=84 =D8=B3=D9=84=D8=B7=D8=A7=D9=86= , =D8=A2=D9=84 =D9=85=D8=AD=D9=85=D8=AF =D8=A8=D9=86 =D8=B9=D9=84=D9=8A =D8= =A8=D9=86 =D8=AC=D9=85=D8=A7=D8=B2 and =D8=A2=D9=84 =D8=B5=D9=81=D9=88=D8= =A7=D9=86</div> <div>Deleniti veniam corrupti quo excepturi eum. Deleniti a= dipisci quas alias sint nesciunt pariatur. Aut quibusdam molestias ducimus = saepe. Esse ipsa fugiat. Dolores placeat debitis voluptas impedit ipsa. Omnis cum = quos similique vero. Cum error aperiam tenetur pariatur eligendi beatae expedita. Sint maxime na= tus eius tempore doloremque occaecati quaerat. Eveniet asperiores magnam accusamus dignissimos dicta veritatis sequi. Nost= rum et esse dolore dignissimos provident excepturi labore. Beatae quas assumenda praesentium illum. Accusamus ex maiores. Modi impedit praesentium ullam commodi similique. Ut quaerat provident quis= maiores sequi. Voluptas provident qui ad voluptate corporis. Culpa cum maxime. Nisi voluptas suscipit dolorum nihil. Blanditiis dignissimos veritatis ab i= psa et accusamus. Quis sequi a voluptatibus. Consequatur ab distinctio occaecati nesciunt min= ima enim accusamus. Laboriosam explicabo ipsum laboriosam autem temporibus amet pariatur. Optio= dolor optio minima. Cum non non expedita dolor. Inventore dolorum eos quibusdam. Iure laborum occaecati saepe laborum. Rem = tempora quisquam dolore aperiam corporis voluptate. Doloremque harum accusa= ntium tempore consequatur maxime. Ab soluta veritatis odio ducimus sit maxime ducimus. Deleniti autem quisqua= m harum consequatur cumque ea. Accusamus dolor modi mollitia ab labore dolores. Quam ullam nostrum quo ame= t natus possimus. Nulla quos nihil quos. Accusantium placeat modi. Illo magni sit modi ad. Optio perspiciatis ex. Occaecati modi culpa reprehenderit. Nam ipsam eius a= b voluptas sapiente quibusdam. Fuga perspiciatis minus quos incidunt a vero hic. Asperiores omnis optio. A= periam nam assumenda iusto nemo facere. Magni blanditiis voluptatibus nostrum modi distinctio est. Asperiores volup= tatum consequatur voluptatem deleniti dolore aliquam. Non vitae quaerat ani= mi voluptas alias. Cum id ducimus praesentium.</div> <div>=D8=B9=D8=A8=D8=AF =D8=A7=D9=84=D8=AD=D9=8A=D9=91</div> <div>+1-270-610-7938x5962</div> <div>=D8=A7=D9=84=D8=B4=D8=A7=D9=8A=D8=B9-=D8=A2=D9=84 =D8= =A7=D9=84=D8=B4=D9=8A=D8=AE</div> <div>4223 =D9=88=D8=B6=D9=91=D8=A7=D8=AD Falls South =D8=A7=D8=B9=D8=AA=D9=85=D8=A7=D8=AFborough, MN 83001</div> </div> </div> </body> </html> --Apple-Mail=_64E58298-3D27-4094-A3FD-66DEBC913E55--