| Current File : /home/itiffy/mail/.spam/cur/1717234716.M482836P587919.premium223.web-hosting.com,S=7761,W=7900:2, |
Return-Path: <y892f6d4b6d4r5i3KwM.cyiXHOLVeAxTuMYbVNZqDDKf@scieriepelissier.com>
Delivered-To: itiffy+spam@premium223.web-hosting.com
Received: from premium223.web-hosting.com
by premium223.web-hosting.com with LMTP
id 6FzbGxzsWmaP+AgAqUc79Q
(envelope-from <y892f6d4b6d4r5i3KwM.cyiXHOLVeAxTuMYbVNZqDDKf@scieriepelissier.com>)
for <itiffy+spam@premium223.web-hosting.com>; Sat, 01 Jun 2024 05:38:36 -0400
Return-path: <y892f6d4b6d4r5i3KwM.cyiXHOLVeAxTuMYbVNZqDDKf@scieriepelissier.com>
Envelope-to: admin@itiffy.com
Delivery-date: Sat, 01 Jun 2024 05:38:36 -0400
Received: from [45.156.21.202] (port=60191 helo=scieriepelissier.com)
by premium223.web-hosting.com with esmtp (Exim 4.96.2)
(envelope-from <y892f6d4b6d4r5i3KwM.cyiXHOLVeAxTuMYbVNZqDDKf@scieriepelissier.com>)
id 1sDLC2-002Uiy-0t
for admin@itiffy.com;
Sat, 01 Jun 2024 05:38:36 -0400
Message-ID: <uqlzWJYMHOSn55baQmjTqupnphrXRj0L@DM0PR02MB7932.namprd02.prod.outlook.com>
Accept-Language: fr-FR, en-US
Content-Type: multipart/related; boundary="9T8yQ2s8SL80Fz9w8sXSw6ocigCdUcNkSy9t0z8KLD"; type="multipart/alternative"
X-MS-TNEF-Correlator:
From: Ego Power Blower Support <y892f6d4b6d4r5.TokOS57f@scieriepelissier.com>
Thread-Index: UQkqUCweP6bvt7mSY7+Ner5jIhRUre==
X-MS-Has-Attach: yes
msip_labels:
MIME-Version: 1.0
To: "admin@gmail.com" <admin@gmail.com>
Date: Sat, 01 Jun 2024 11:25:29 +0200
Content-Language: fr-FR
X-Spam-Status: Yes, score=23.4
X-Spam-Score: 234
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "premium223.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6 [...]
Content analysis details: (23.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: windows.net]
0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[45.156.21.202 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?45.156.21.202>]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[45.156.21.202 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[45.156.21.202 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.156.21.202 listed in sa-trusted.bondedsender.org]
0.5 JMQ_SPF_ALL ASKDNS: SPF set to +all!
[scieriepelissier.com TXT:v=spf1]
[+all]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_TVD_MIME_EPI BODY: No description available.
3.1 URI_IMG_CWINDOWSNET Non-MSFT image hosted by Microsoft Azure
infra, possible phishing
3.3 SCC_BOGUS_CTE_1 Bogus Content-Transfer-Encoding header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
3.3 HOSTED_IMG_DIRECT_MX Image hosted at large ecomm, CDN or hosting
site, message direct-to-mx
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX
X-Spam-Flag: YES
Subject: ***SPAM*** Please Confirm Reward: admin, You have won an Ego Power Blower
--9T8yQ2s8SL80Fz9w8sXSw6ocigCdUcNkSy9t0z8KLD
Content-Type: multipart/alternative; boundary="2KuWKWYbqKLg1QczecVxr8uNl0kvf9ZtD1S3p5Frf8hm76FHT4iJ"
--2KuWKWYbqKLg1QczecVxr8uNl0kvf9ZtD1S3p5Frf8hm76FHT4iJ
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: hexa
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO31FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3 1FCth6yVe4zO3
--2KuWKWYbqKLg1QczecVxr8uNl0kvf9ZtD1S3p5Frf8hm76FHT4iJ
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<center>
<body dir="ltr">
<div class="elementToProof" style="margin-left: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 20pt; color: rgb(0, 0, 0);">
<a href="https://y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/1.html?88IIyI3JFJZpATEO0AmFCa2cRjfx3m9XRJMSsWriScSJZtepCokJl6dVSzKleX49WYK6lCydr4xGEL2IQIwzrZfeGXONW9cldHEn#cl/3534_md/20/241/1802/38/346767"><img src="https://y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/1.png"><br>
<img src="//y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/1.png"></a></div>
<div class="elementToProof" style=" font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="line-height: 1.8; margin-left: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<a href="https://y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/2.html?75wtSATJDHCuskT9mWAaYSvzkV7eUiJ6XcOjoKkrKUzOtpqaKQhXzI3Orhf3iAYgqUCwRJ6u5IAi2lRl3lALl14JAWCf5wuXmGfR#un/3534_md/20/241/1802/38/346767"><img src="https://y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/2.png"><br>
<img src="//y892f6d4b6d4r5.blob.core.windows.net/y892f6d4b6d4r5/2.png"></a></div>
</body>
</center>
</html>
--2KuWKWYbqKLg1QczecVxr8uNl0kvf9ZtD1S3p5Frf8hm76FHT4iJ--
--uqlzWJYMHOSn55baQmjTqupnphrXRj0L--