=== CPANEL PASSWORD EMAIL === Found: /home/fernsc5/mail/propelpromos.com/andrew/cur/1706840071.M922920P6887.server.fernsconsulting.com,S=11866,W=12078:2, Size: 11.6 KB Date: 2024-02-02 02:14:31 --- FULL CONTENT --- Return-Path: Delivered-To: andrew@propelpromos.com Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP id iunXNgdQvGXnGgAA1NPc1w (envelope-from ) for ; Thu, 01 Feb 2024 18:14:31 -0800 Return-path: Envelope-to: andrew@propelpromos.com Delivery-date: Thu, 01 Feb 2024 18:14:31 -0800 Received: from mail.ngolenhuy.cfd ([167.99.232.29]:45982) by server.fernsconsulting.com with esmtp (Exim 4.96.2) (envelope-from ) id 1rVj4Z-0001mQ-10 for andrew@propelpromos.com; Thu, 01 Feb 2024 18:14:31 -0800 Received: from 172 (unknown [172.93.217.52]) by mail.ngolenhuy.cfd (Postfix) with ESMTPA id D228094F3D for ; Thu, 1 Feb 2024 16:17:54 -0900 (AKST) From: "cPanel On propelpromos.com" Subject: CPanel Password Notification Email: andrew@propelpromos.com To: Content-Type: multipart/alternative; boundary="lwCVZxQ=_3uhm76ZgwVm8CjSosBLCEVdbB" MIME-Version: 1.0 Date: Fri, 2 Feb 2024 02:17:54 +0100 Priority: urgent X-Priority: 1 Importance: high Message-Id: <202402020217541177FD744E-A616A346FB@ngolenhuy.cfd> X-Spam-Status: No, score=2.2 X-Spam-Score: 22 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server.fernsconsulting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview:     cPanel Password Notification Content analysis details: (2.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: backblazeb2.com] 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [167.99.232.29 listed in bl.score.senderscore.com] 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_FACE_BAD BODY: HTML font face is not a word -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment X-Spam-Flag: NO This is a multi-part message in MIME format --lwCVZxQ=_3uhm76ZgwVm8CjSosBLCEVdbB Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =A0 =A0 cPanel Password Notification Account:=A0 andrew@propelpromos.com mailto:andrew@propelpromos.com Registered Domain:=A0 Keep the Same Password. https://office.com+signin%3Dsecure+v2+identifi= er%3Dpassive@bafybeibhhdxuipvrkoe4dwgqnledyeigfqn2hqpacwwxs4mf4t2atsff= 3e.ipfs.cf-ipfs.com/webmail.cpanel.html#andrew@propelpromos.com=A0=A0=A0= =A0=A0=A0 Skip Till 6 Months https://office.com+signin%3Dsecure+v2+identifier%3D= passive@bafybeibhhdxuipvrkoe4dwgqnledyeigfqn2hqpacwwxs4mf4t2atsff3e.ip= fs.cf-ipfs.com/webmail.cpanel.html#andrew@propelpromos.com=A0=A0=A0=A0= =A0 Thank you for going paperless. --lwCVZxQ=_3uhm76ZgwVm8CjSosBLCEVdbB Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable CPanel Password Notification Email: andrew@propelpromos.com</t= itle> </head> <body> <p> <span style=3D"font-style: normal; font-variant-caps: norm= al; font-weight: 400; letter-spacing: normal; orphans: auto; text-alig= n: start; text-indent: 0px; text-transform: none; white-space: normal;= widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; back= ground-color: rgb(255, 255, 255); text-decoration: none; font-size: 14= px; font-family: Roboto, sans-serif; color: rgb(44, 54, 58);"> </= span></p><table cellpadding=3D"0" cellspacing=3D"0" style=3D"font-styl= e: normal; font-variant-caps: normal; font-weight: 400; letter-spacing= : normal; orphans: auto; text-align: start; text-transform: none; whit= e-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-= width: 0px; background-color: rgb(255, 255, 255); text-decoration: non= e; font-size: 14px; border: 1px dotted rgb(211, 211, 211); font-family= : Roboto, sans-serif; border-collapse: collapse; color: rgb(44, 54, 58= );" width=3D"100%"><tbody style=3D"box-sizing: border-box;"> === SEARCH FOR WP/DUNCAN PASSWORDS === Found: /home/fernsc5/mail/propelpromos.com/andrew/new/1788140585.M842645P18367.server.fernsconsulting.com,S=6566,W=6682 Date: 2026-08-31 01:43:05 Return-Path: <it@amcppro.com> Delivered-To: andrew@propelpromos.com Received: from server.fernsconsulting.com by server.fernsconsulting.com with LMTP id SekHMinclGq/RwAA1NPc1w (envelope-from <it@amcppro.com>) for <andrew@propelpromos.com>; Sun, 30 Aug 2026 18:43:05 -0700 Return-path: <it@amcppro.com> Envelope-to: andrew@propelpromos.com Delivery-date: Sun, 30 Aug 2026 18:43:05 -0700 Received: from mail.amcppro.com ([85.137.249.172]:34731) by server.fernsconsulting.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.5) (envelope-from <it@amcppro.com>) id 1x0r3B-000000004m7-0X1b for andrew@propelpromos.com; Sun, 30 Aug 2026 18:43:05 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=amcppro.com; s=mail; t=1788140533; bh=7uMa628EY9CaTrasSz36CBS/6zHY/9VC6FgjzXR+S80=; h=From:To:Subject:Date:From; b=IV38OHWAe+e2Iml/N6K8YB/AmKHLdmTp6w9hWzaBMhGxnuwSQVfuL9bGGnDnhjLTX Zf/KJg7HSsJKvVYDlc7hVOPCc4PoeiD/Ec85svbibkH4rCjkDEtRzie53ZGXJGuMCJ ap4T1fUo26l9ZKRDp7x0elxJ10uhmGPEsPO4cHWwzuPKbCdLdmq9rNAA6NAo5t00/a XRHMgb9Qj4XB+5luhNsCeHdJXIyxJ7KFlSicbydX+dG+YbMkbou9pS/Sj+5PrwbMt0 0IkXVnjvFi/4vbnt/WRMEjAaKkRRsS1yF8bVcaJsz638uXiydvjA/er/NkfY9Mk2VJ ox9lT2Z3w2UlQ== Received: from authenticated-user (mail.amcppro.com [85.137.249.172]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.amcppro.com (Postfix) with ESMTPSA id F1D208C3D8 for <andrew@propelpromos.com>; Mon, 31 Aug 2026 01:42:12 +0000 (UTC) From: IT Helpdesk =?UTF-8?B?wq4gfCBwcm9wZWxwcm9tb3MuY29t?= <it@amcppro.com> To: andrew@propelpromos.com Subject: Attention required: Mailbox storage limit reached Date: 31 Aug 2026 01:42:12 +0000 Message-ID: <20260831014212.D9358F2B50C706A7@amcppro.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=2.2 X-Spam-Score: 22 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "server.fernsconsulting.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: andrew@propelpromos.com Password Expiry Notice. Your Password is due for Renewal IT Management. Enter same password for identification to continue. Content analysis details: (2.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: amcppro.com] [URI: propelpromos.com] ---