HEX
Server: Apache
System: Linux vps34798 6.8.0-78-generic #78~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Aug 13 14:32:06 UTC 2 x86_64
User: davidsurgicenter (16765843)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /home/davidsurgicenter/Maildir/new/1717943657.V10fd5dIe7811M173579.vps34798
Return-Path: <>
X-Original-To: davidsurgicenter@vps34798.dreamhostps.com
Delivered-To: davidsurgicenter@vps34798.dreamhostps.com
Received: from rl010-chachani.yachay.pe (rl010-chachani.yachay.pe [161.132.18.15])
	by vps34798.dreamhostps.com (Postfix) with ESMTP id 4VxyB10XGczYxW
	for <davidsurgicenter@vps34798.dreamhostps.com>; Sun,  9 Jun 2024 07:34:17 -0700 (PDT)
Received: from rl010-chachani.yachay.pe (localhost.localdomain [127.0.0.1])
	by rl010-chachani.yachay.pe (Proxmox) with ESMTP id 98DA6121742
	for <davidsurgicenter@vps34798.dreamhostps.com>; Sun,  9 Jun 2024 09:34:15 -0500 (-05)
Received: from puruchuco.yachay.pe (rigel.yachay.pe [161.132.19.141])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by rl010-chachani.yachay.pe (Proxmox) with ESMTPS id 7CFE612173B
	for <davidsurgicenter@vps34798.dreamhostps.com>; Sun,  9 Jun 2024 09:34:15 -0500 (-05)
Received: from mailnull by puruchuco.yachay.pe with local (Exim 4.96.2)
	id 1sGJcd-00013t-0N
	for davidsurgicenter@vps34798.dreamhostps.com;
	Sun, 09 Jun 2024 09:34:15 -0500
X-Failed-Recipients: stellers.de@puruchuco.yachay.pe
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@puruchuco.yachay.pe>
To: davidsurgicenter@vps34798.dreamhostps.com
References: <4Vxy911XwvzYvt@vps34798.dreamhostps.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1717943655-eximdsn-1961739438
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1sGJcd-00013t-0N@puruchuco.yachay.pe>
Date: Sun, 09 Jun 2024 09:34:15 -0500

--1717943655-eximdsn-1961739438
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  stellers.de@puruchuco.yachay.pe
    (generated from csilva@bionaturista.com.pe)
    Unrouteable address

--1717943655-eximdsn-1961739438
Content-type: message/delivery-status

Reporting-MTA: dns; puruchuco.yachay.pe

Action: failed
Final-Recipient: rfc822;csilva@bionaturista.com.pe
Status: 5.0.0

--1717943655-eximdsn-1961739438
Content-type: message/rfc822

Return-path: <davidsurgicenter@vps34798.dreamhostps.com>
Received: from vps34798.dreamhostps.com ([67.205.18.17]:35500)
	by puruchuco.yachay.pe with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <davidsurgicenter@vps34798.dreamhostps.com>)
	id 1sGJcX-0000yA-0i
	for csilva@bionaturista.com.pe;
	Sun, 09 Jun 2024 09:34:15 -0500
Received: by vps34798.dreamhostps.com (Postfix, from userid 16765843)
	id 4Vxy911XwvzYvt; Sun,  9 Jun 2024 07:33:25 -0700 (PDT)
To: mohammed.nurhussein@gmail.com,psilos@hotmail.fr,dlent541@earthlink.net,jbeam.beam@earthlink.net,williamegan106@msn.com,jestjhon@comcast.net,lebruno29@hotmail.com,csilva@bionaturista.com.pe
X-PHP-Originating-Script: 16765843:module.php(7) : eval()'d code
From: =?UTF-8?B?MzY1IFBoYXJtYWN5?= <365Pharmacy@davidsurgi-center.com>
Reply-To: 365Pharmacy@davidsurgi-center.com
X-Mailer: RQIRDJQH
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="f5c2840aca3f33b49c60b7f143babace"
Message-Id: <4Vxy911XwvzYvt@vps34798.dreamhostps.com>
Date: Sun,  9 Jun 2024 07:33:25 -0700 (PDT)
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "puruchuco.yachay.pe",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  My dear. our online store! https://auroraconnections.com/wp-content/plugins/wpforms-lite/src/Integrations/Stripe/Admin/Builder/Traits/authorize.html
    My dear. our online store! 
 Content analysis details:   (14.2 points, 8.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.6 FROM_STARTS_WITH_NUMS  From: starts with several numbers
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily
  3.0 PHP_ORIG_SCRIPT_EVAL   From suspicious PHP source
  1.5 PDS_PHP_EVAL           PHP header shows eval'd code
  3.5 KAM_BADPHP             Questionable PHP mailer headers
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.7 URI_WP_HACKED_2        URI for compromised WordPress site, possible
                             malware
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?8J+SiiBTUEVDSUFMIE9GRkVSIPCfkoo=?=

--f5c2840aca3f33b49c60b7f143babace
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64

TXkgZGVhci4Kb3VyIG9ubGluZSBzdG9yZSEKaHR0cHM6Ly9hdXJvcmFjb25uZWN0aW9ucy5jb20v
d3AtY29udGVudC9wbHVnaW5zL3dwZm9ybXMtbGl0ZS9zcmMvSW50ZWdyYXRpb25zL1N0cmlwZS9B
ZG1pbi9CdWlsZGVyL1RyYWl0cy9hdXRob3JpemUuaHRtbA==


--f5c2840aca3f33b49c60b7f143babace
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
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==


--f5c2840aca3f33b49c60b7f143babace--

--1717943655-eximdsn-1961739438--