File: /home/davidsurgicenter/Maildir/new/1717943657.V10fd5dIe7811M173579.vps34798
Return-Path: <>
X-Original-To: davidsurgicenter@vps34798.dreamhostps.com
Delivered-To: davidsurgicenter@vps34798.dreamhostps.com
Received: from rl010-chachani.yachay.pe (rl010-chachani.yachay.pe [161.132.18.15])
by vps34798.dreamhostps.com (Postfix) with ESMTP id 4VxyB10XGczYxW
for <davidsurgicenter@vps34798.dreamhostps.com>; Sun, 9 Jun 2024 07:34:17 -0700 (PDT)
Received: from rl010-chachani.yachay.pe (localhost.localdomain [127.0.0.1])
by rl010-chachani.yachay.pe (Proxmox) with ESMTP id 98DA6121742
for <davidsurgicenter@vps34798.dreamhostps.com>; Sun, 9 Jun 2024 09:34:15 -0500 (-05)
Received: from puruchuco.yachay.pe (rigel.yachay.pe [161.132.19.141])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by rl010-chachani.yachay.pe (Proxmox) with ESMTPS id 7CFE612173B
for <davidsurgicenter@vps34798.dreamhostps.com>; Sun, 9 Jun 2024 09:34:15 -0500 (-05)
Received: from mailnull by puruchuco.yachay.pe with local (Exim 4.96.2)
id 1sGJcd-00013t-0N
for davidsurgicenter@vps34798.dreamhostps.com;
Sun, 09 Jun 2024 09:34:15 -0500
X-Failed-Recipients: stellers.de@puruchuco.yachay.pe
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@puruchuco.yachay.pe>
To: davidsurgicenter@vps34798.dreamhostps.com
References: <4Vxy911XwvzYvt@vps34798.dreamhostps.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1717943655-eximdsn-1961739438
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1sGJcd-00013t-0N@puruchuco.yachay.pe>
Date: Sun, 09 Jun 2024 09:34:15 -0500
--1717943655-eximdsn-1961739438
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
stellers.de@puruchuco.yachay.pe
(generated from csilva@bionaturista.com.pe)
Unrouteable address
--1717943655-eximdsn-1961739438
Content-type: message/delivery-status
Reporting-MTA: dns; puruchuco.yachay.pe
Action: failed
Final-Recipient: rfc822;csilva@bionaturista.com.pe
Status: 5.0.0
--1717943655-eximdsn-1961739438
Content-type: message/rfc822
Return-path: <davidsurgicenter@vps34798.dreamhostps.com>
Received: from vps34798.dreamhostps.com ([67.205.18.17]:35500)
by puruchuco.yachay.pe with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <davidsurgicenter@vps34798.dreamhostps.com>)
id 1sGJcX-0000yA-0i
for csilva@bionaturista.com.pe;
Sun, 09 Jun 2024 09:34:15 -0500
Received: by vps34798.dreamhostps.com (Postfix, from userid 16765843)
id 4Vxy911XwvzYvt; Sun, 9 Jun 2024 07:33:25 -0700 (PDT)
To: mohammed.nurhussein@gmail.com,psilos@hotmail.fr,dlent541@earthlink.net,jbeam.beam@earthlink.net,williamegan106@msn.com,jestjhon@comcast.net,lebruno29@hotmail.com,csilva@bionaturista.com.pe
X-PHP-Originating-Script: 16765843:module.php(7) : eval()'d code
From: =?UTF-8?B?MzY1IFBoYXJtYWN5?= <365Pharmacy@davidsurgi-center.com>
Reply-To: 365Pharmacy@davidsurgi-center.com
X-Mailer: RQIRDJQH
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="f5c2840aca3f33b49c60b7f143babace"
Message-Id: <4Vxy911XwvzYvt@vps34798.dreamhostps.com>
Date: Sun, 9 Jun 2024 07:33:25 -0700 (PDT)
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "puruchuco.yachay.pe",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My dear. our online store! https://auroraconnections.com/wp-content/plugins/wpforms-lite/src/Integrations/Stripe/Admin/Builder/Traits/authorize.html
My dear. our online store!
Content analysis details: (14.2 points, 8.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
3.0 PHP_ORIG_SCRIPT_EVAL From suspicious PHP source
1.5 PDS_PHP_EVAL PHP header shows eval'd code
3.5 KAM_BADPHP Questionable PHP mailer headers
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.7 URI_WP_HACKED_2 URI for compromised WordPress site, possible
malware
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?8J+SiiBTUEVDSUFMIE9GRkVSIPCfkoo=?=
--f5c2840aca3f33b49c60b7f143babace
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
TXkgZGVhci4Kb3VyIG9ubGluZSBzdG9yZSEKaHR0cHM6Ly9hdXJvcmFjb25uZWN0aW9ucy5jb20v
d3AtY29udGVudC9wbHVnaW5zL3dwZm9ybXMtbGl0ZS9zcmMvSW50ZWdyYXRpb25zL1N0cmlwZS9B
ZG1pbi9CdWlsZGVyL1RyYWl0cy9hdXRob3JpemUuaHRtbA==
--f5c2840aca3f33b49c60b7f143babace
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
PGh0bWwgbGFuZz0iZW4iPgo8aGVhZD48bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lk
dGg9ZGV2aWNlLXdpZHRoIiAvPjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVu
dD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04IiAvPjwvaGVhZD4KPGJvZHk+PGJyPjxicj5NeSBk
ZWFyLjxicj48YnI+Cm91ciBvbmxpbmUgc3RvcmUhPGJyPjxicj4KPGEgaHJlZj0iaHR0cHM6Ly9h
dXJvcmFjb25uZWN0aW9ucy5jb20vd3AtY29udGVudC9wbHVnaW5zL3dwZm9ybXMtbGl0ZS9zcmMv
SW50ZWdyYXRpb25zL1N0cmlwZS9BZG1pbi9CdWlsZGVyL1RyYWl0cy9hdXRob3JpemUuaHRtbCI+
Q0xJQ0sgSEVSRSBUTyBWSVNJVCBPVVIgRElTQ09VTlQgU1RPUkU8YnI+PGJyPjxicj4KMDA5NTQg
IFRvYSBBbHRhICBQUiAgPGJyPgo8YnI+PGJyPjwvYT48L2JvZHk+PC9odG1sPg==
--f5c2840aca3f33b49c60b7f143babace--
--1717943655-eximdsn-1961739438--