OwlCyberSecurity - MANAGER
Edit File: 1756747356.M79279P3859602.server254.web-hosting.com,S=7993,W=8207
Return-Path: <dh_9mdrk2@vps66149.dreamhostps.com> Delivered-To: info+spam@sportspesatips.com Received: from server254.web-hosting.com by server254.web-hosting.com with LMTP id GC4zBFzWtWiS5DoAUzp1tw (envelope-from <dh_9mdrk2@vps66149.dreamhostps.com>) for <info+spam@sportspesatips.com>; Mon, 01 Sep 2025 13:22:36 -0400 Return-path: <dh_9mdrk2@vps66149.dreamhostps.com> Envelope-to: info@sportspesatips.com Delivery-date: Mon, 01 Sep 2025 13:22:36 -0400 Received: from ip-66-33-198-175.dreamhost.com ([66.33.198.175]:50200 helo=vps66149.dreamhostps.com) by server254.web-hosting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from <dh_9mdrk2@vps66149.dreamhostps.com>) id 1ut8Ek-0000000GISf-2Ip8 for info@sportspesatips.com; Mon, 01 Sep 2025 13:22:35 -0400 Received: by vps66149.dreamhostps.com (Postfix, from userid 6830946) id 4cFtvx5Y7dzMC9Mtn; Mon, 1 Sep 2025 09:03:41 -0700 (PDT) To: info@sportspesatips.com X-PHP-Originating-Script: 6830946:4.php From: Revolut Customer Care <dh_9mdrk2@vps66149.dreamhostps.com> Reply-To: dh_9mdrk2@vps66149.dreamhostps.com MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Message-Id: <4cFtvx5Y7dzMC9Mtn@vps66149.dreamhostps.com> Date: Mon, 1 Sep 2025 09:03:41 -0700 (PDT) X-Spam-Status: Yes, score=21.3 X-Spam-Score: 213 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server254.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Revolut - Card Reactivation Important: Card Reactivation Required Content analysis details: (21.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?66.33.198.175>] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: pngegg.com] [URI: riosaladohp.com] 9.0 KAM_BODY_COMPROMISED_URIBL_PCCC Body contains URI listed in PCCC Compromised URIBL (https://raptor.pccc.com/RBL) [URI: riosaladohp.com] 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus DBL blocklist [URI: riosaladohp.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [66.33.198.175 listed in bl.score.senderscore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [66.33.198.175 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [66.33.198.175 listed in sa-trusted.bondedsender.org] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 3.5 KAM_PHISH4 Another phishing attempt 2.4 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: ***SPAM*** Revolut Card Deactivated — Immediate Verification Needed <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <title>Revolut - Card Reactivation</title> <style> body { margin: 0; padding: 0; background: linear-gradient(to bottom right, #e0eafc, #cfdef3); font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; } .container { max-width: 600px; margin: 50px auto; background: rgba(255, 255, 255, 0.88); border-radius: 20px; box-shadow: 0 15px 40px rgba(0, 0, 0, 0.15); overflow: hidden; backdrop-filter: blur(8px); border: 1px solid rgba(255, 255, 255, 0.3); } .header { background: linear-gradient(135deg, #1f1f1f, #3c3c3c); text-align: center; padding: 40px 20px; } .header img { width: 140px; filter: drop-shadow(0px 2px 5px rgba(0, 0, 0, 0.3)); } .header h1 { margin-top: 15px; color: #ffffff; font-size: 24px; text-shadow: 0 1px 3px rgba(0, 0, 0, 0.4); } .content { padding: 30px; font-size: 16px; color: #333; line-height: 1.7; } .content p { margin-bottom: 20px; } .content ol { padding-left: 20px; margin: 15px 0; } .btn { display: inline-block; margin: 30px auto 10px; background: linear-gradient(to right, #000000, #434343); color: white; padding: 14px 28px; border-radius: 50px; font-weight: bold; text-decoration: none; box-shadow: 0 10px 24px rgba(0, 0, 0, 0.3); transition: transform 0.3s ease, box-shadow 0.3s ease; } .btn:hover { transform: scale(1.05); box-shadow: 0 12px 28px rgba(0, 0, 0, 0.45); } .footer { background: #f4f6f8; text-align: center; font-size: 12px; color: #888; padding: 20px; border-top: 1px solid #e0e0e0; } @media (max-width: 600px) { .container { margin: 20px; border-radius: 12px; } .content { padding: 20px; } .header h1 { font-size: 22px; } } </style> </head> <body> <div class="container"> <div class="header"> <img src="https://e7.pngegg.com/pngimages/739/64/png-clipart-revolut-black-new-logo-tech-companies.png" alt="Revolut Black Logo" /> <h1>Important: Card Reactivation Required</h1> </div> <div class="content"> <p>Dear Customer,</p> <p>As part of our latest security updates, your Revolut card has been temporarily deactivated to safeguard your account.</p> <p>To restore full access, please complete the following steps:</p> <ol> <li>Log in using your registered email address.</li> <li>Verify your account credentials.</li> <li>Authenticate your identity using the Revolut mobile app.</li> </ol> <p>If you do not complete this process, your account may remain restricted.</p> <p style="text-align: center;"> <a href="https://riosaladohp.com/rvs.php" class="btn">Reactivate My Card</a> </p> <p>We appreciate your prompt attention.<br><strong>— The Revolut Security Team</strong></p> </div> <div class="footer"> This is an automated message. Please contact support through the Revolut app for any inquiries. </div> </div> </body> </html>