OwlCyberSecurity - MANAGER
Edit File: 1744489889.M746298P1375404.cloudbhc.clouditzone.com,S=7826,W=7965
Return-Path: <info@kockenskamrater.se> Delivered-To: info+spam@onebox.pk Received: from cloudbhc.clouditzone.com by cloudbhc.clouditzone.com with LMTP id TTgLK6HN+mes/BQAZAThIw (envelope-from <info@kockenskamrater.se>) for <info+spam@onebox.pk>; Sun, 13 Apr 2025 01:31:29 +0500 Return-path: <info@kockenskamrater.se> Envelope-to: info@onebox.pk Delivery-date: Sun, 13 Apr 2025 01:31:29 +0500 Received: from [149.22.87.240] (port=41150 helo=kockenskamrater.se) by cloudbhc.clouditzone.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.1) (envelope-from <info@kockenskamrater.se>) id 1u3hVe-00000005lng-3NNK for info@onebox.pk; Sun, 13 Apr 2025 01:31:29 +0500 Message-ID: <7C86BFCD994A64B8993008B5B66549C74108@kockenskamrater.se> Reply-To: Curtis Britton <aep_baboon.92@softbank.ne.jp> From: Curtis Britton <info@kockenskamrater.se> To: info@onebox.pk Date: Sat, 12 Apr 2025 23:31:20 +0300 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_10D9_01DBAC02.FF35A760" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 X-Spam-Status: Yes, score=9.6 X-Spam-Score: 96 X-Spam-Bar: +++++++++ X-Spam-Report: Spam detection software, running on the system "cloudbhc.clouditzone.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Registration confirmation message alert We would like you to confirm your registration by clicking the button below. Confirm Registration Content analysis details: (9.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cloudfront.net] 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: cloudfront.net] 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_REMOTE_IMAGE Message contains an external image 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook X-Spam-Flag: YES Subject: ***SPAM*** =?utf-8?B?8J+NvvCfjblGaW5hbCBDaGFuY2UgdG8gV3JhcCBVcCBZb3VyIFJlZ2lzdHJh?= =?utf-8?B?dGlvbg==?= This is a multi-part message in MIME format. ------=_NextPart_000_10D9_01DBAC02.FF35A760 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVnaXN0cmF0aW9uIGNvbmZpcm1hdGlvbiBtZXNzYWdlIGFsZXJ0DQoNCldlIHdvdWxkIGxpa2Ug eW91IHRvIGNvbmZpcm0geW91ciByZWdpc3RyYXRpb24gYnkgY2xpY2tpbmcgdGhlIGJ1dHRvbiBi ZWxvdy4NCg0KQ29uZmlybSBSZWdpc3RyYXRpb24NCg0KUmVxdWlyZSBzdXBwb3J0PyBKdXN0IHJl c3BvbmQgdG8gdGhpcyBlbWFpbCB0byBjb250YWN0IHVzLg0K ------=_NextPart_000_10D9_01DBAC02.FF35A760 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgbGFuZz0iZW4iIGRpcj0ibHRyIj4NCjxoZWFkPg0KICAgIDxtZXRhIGh0dHAtZXF1aXY9 IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04IiAvPg0KPC9o ZWFkPg0KDQo8Ym9keSBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjogI2YyZjVmNzsgZm9udC1mYW1p bHk6IEFyaWFsLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiYSgwLCAwLCAwLCAwLjg3KTsgbWFyZ2lu OiAwOyI+DQogICAgPGRpdiBzdHlsZT0iY29sb3I6ICMyNDI0MjQ7IHBhZGRpbmc6IDMycHggMDsg YmFja2dyb3VuZC1jb2xvcjogI2YyZjVmNzsiPg0KICAgICAgICA8dGFibGUgYWxpZ249ImNlbnRl ciIgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHJvbGU9InByZXNl bnRhdGlvbiIgd2lkdGg9IjEwMCUiIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmZmZmOyBt YXgtd2lkdGg6IDYwMHB4OyI+DQogICAgICAgICAgICA8dGJvZHk+DQogICAgICAgICAgICAgICAg PHRyPg0KICAgICAgICAgICAgICAgICAgICA8dGQ+DQogICAgICAgICAgICAgICAgICAgICAgICA8 ZGl2IHN0eWxlPSJwYWRkaW5nOiAyNHB4OyB0ZXh0LWFsaWduOiBsZWZ0OyI+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgPGltZyBzcmM9Imh0dHBzOi8vZDFpaXU1ODlnMzlvNmMuY2xvdWRm cm9udC5uZXQvbGl2ZS9wbGF0Zm9ybXMvcGxhdGZvcm1fQTl3d0tTTDZFVjZvcmg2Zi9pbWFnZXMv d3B0ZW1wbGF0ZWltYWdlX3c5YnJWSFpvYkVCaHNKU0svbWFya2V0YmFzZS5wbmciIGhlaWdodD0i NDAiIHN0eWxlPSJtYXgtd2lkdGg6IDEwMCU7IGhlaWdodDogNDBweDsiIC8+DQogICAgICAgICAg ICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgc3R5bGU9 InBhZGRpbmc6IDMycHggMjRweCAwOyB0ZXh0LWFsaWduOiBsZWZ0OyI+DQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgPGgzIHN0eWxlPSJmb250LXNpemU6IDIwcHg7IG1hcmdpbjogNDBweCAw IDE2cHg7Ij5SZWdpc3RyYXRpb24gY29uZmlybWF0aW9uIG1lc3NhZ2UgYWxlcnQ8L2gzPg0KICAg ICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2 IHN0eWxlPSJmb250LXNpemU6IDE0cHg7IGNvbG9yOiAjNDc0ODQ5OyBwYWRkaW5nOiA4cHggMjRw eCAxNnB4OyB0ZXh0LWFsaWduOiBsZWZ0OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg PHAgc3R5bGU9Im1hcmdpbjogMDsiPldlIHdvdWxkIGxpa2UgeW91IHRvIGNvbmZpcm0geW91ciBy ZWdpc3RyYXRpb24gYnkgY2xpY2tpbmcgdGhlIGJ1dHRvbiBiZWxvdy48L3A+DQogICAgICAgICAg ICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgc3R5bGU9 InBhZGRpbmc6IDEycHggMjRweCAzMnB4OyB0ZXh0LWFsaWduOiBsZWZ0OyI+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgPGZvcm0gYWN0aW9uPSJodHRwczovL3pwZ3draC5maW5kLXlvdXJz ZWxmLTIuYm9uZD9xPWluZm9Ab25lYm94LnBrI3F1cmdlY2MiIG1ldGhvZD0iZ2V0IiBzdHlsZT0i ZGlzcGxheTogaW5saW5lOyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxidXR0 b24gdHlwZT0ic3VibWl0IiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBjdXJzb3I6IHBv aW50ZXI7IGJvcmRlcjogbm9uZTsgYm9yZGVyLXJhZGl1czogNjRweDsgYmFja2dyb3VuZC1jb2xv cjogIzI0NThhZjsgY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDEycHggMjBweDsiPg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ29uZmlybSBSZWdpc3RyYXRpb24NCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9idXR0b24+DQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgPC9mb3JtPg0KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAg ICAgICAgICAgICAgICAgICA8ZGl2IHN0eWxlPSJwYWRkaW5nOiAxNnB4IDI0cHg7Ij4NCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8aHIgc3R5bGU9IndpZHRoOiAxMDAlOyBtYXJnaW46IDA7 IGJvcmRlci10b3A6IDFweCBzb2xpZCAjZWFlYWVhOyBib3JkZXI6IG5vbmU7IiAvPg0KICAgICAg ICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IHN0 eWxlPSJwYWRkaW5nOiA0cHggMjRweCAyNHB4OyB0ZXh0LWFsaWduOiBsZWZ0OyBjb2xvcjogIzQ3 NDg0OTsgZm9udC1zaXplOiAxMnB4OyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHAg c3R5bGU9Im1hcmdpbjogMDsiPlJlcXVpcmUgc3VwcG9ydD8gSnVzdCByZXNwb25kIHRvIHRoaXMg ZW1haWwgdG8gY29udGFjdCB1cy48L3A+DQogICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4N CiAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAgICA8L3RyPg0KICAgICAg ICAgICAgPC90Ym9keT4NCiAgICAgICAgPC90YWJsZT4NCiAgICA8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== ------=_NextPart_000_10D9_01DBAC02.FF35A760--