· 9 years ago · Mar 27, 2017, 05:52 AM
1Delivered-To: <my email address>
2Received: by 10.79.34.166 with SMTP id i38csp1014547ivi;
3 Sun, 26 Mar 2017 20:03:48 -0700 (PDT)
4X-Received: by 10.200.1.6 with SMTP id e6mr17904517qtg.21.1490583828500;
5 Sun, 26 Mar 2017 20:03:48 -0700 (PDT)
6Return-Path: <tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk>
7Received: from web08.tpa.com.br (web08.tpa.com.br. [189.45.192.143])
8 by mx.google.com with ESMTPS id 97si8626677qtc.208.2017.03.26.20.03.48
9 for <andrew.artajos@gmail.com>
10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
11 Sun, 26 Mar 2017 20:03:48 -0700 (PDT)
12Received-SPF: neutral (google.com: 189.45.192.143 is neither permitted nor denied by best guess record for domain of tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk) client-ip=189.45.192.143;
13Authentication-Results: mx.google.com;
14 spf=neutral (google.com: 189.45.192.143 is neither permitted nor denied by best guess record for domain of tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk) smtp.mailfrom=tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk
15Received: from colegiomeninojes by web08.tpa.com.br with local (Exim 4.88) (envelope-from <tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk>) id 1csKwc-004MLf-FM for andrew.artajos@gmail.com; Mon, 27 Mar 2017 00:03:46 -0300
16To: andrew.artajos@gmail.com
17Subject: Profile Canceled 03/27/2017 03:03:46 am
18X-PHP-Script: www.colegiomeninojesusblu.com.br/1/leafmailer.php for 41.97.128.132
19Date: Mon, 27 Mar 2017 03:03:46 +0000
20From: "Support Team ✔ " <tkhrbi9a.d8adab94bc0f87b88a5a2c373781d265@1967848157155031618776645.tabon.tk>
21Message-ID: <9ad8d38122c9a0b236ff70141cd9229e@www.colegiomeninojesusblu.com.br>
22X-Mailer: Leaf PHPMailer 2.7 (leafmailer.pw)
23MIME-Version: 1.0
24Content-Type: text/html; charset=
25Content-Transfer-Encoding: 8bit
26X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
27X-AntiAbuse: Primary Hostname - web08.tpa.com.br
28X-AntiAbuse: Original Domain - gmail.com
29X-AntiAbuse: Originator/Caller UID/GID - [1005 993] / [47 12]
30X-AntiAbuse: Sender Address Domain - 1967848157155031618776645.tabon.tk
31X-Get-Message-Sender-Via: web08.tpa.com.br: authenticated_id: colegiomeninojes/only user confirmed/virtual account not confirmed
32X-Authenticated-Sender: web08.tpa.com.br: colegiomeninojes
33X-Source:
34X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
35X-Source-Dir: colegiomeninojesusblu.com.br:/public_html/1
36
37<html><body style="background-color:#DDD">
38 <div id="template" style="width:400px;margin:50px auto;border:1px solid #CCC;padding:18px;border-radius:15px;background-color:#FFF">
39 <div id="logo" style="text-align:center;font-size:1.5em;font-family:'arial';padding-bottom:15px;font-style:normal;font-weight:bold">
40 <font><span style="color:#003087">P</span></font><span style="color:#003087">a</span><font><span style="color:#003087">y</span></font><span style="color:#009CDE">P</span><font><span style="color:#009CDE">a</span></font><font><span style="color:#009CDE">l</span></font>
41 </div>
42 <div id="content" style="color:#333;font-size:14px;font-family:corbel;font-weight:bold">
43 Dear andrew.artajos@gmail.com<br /><br />
44 <span style="color:#009CDE">Why I received this letter?</span><br />
45 We want to tell you that there are technical and security problems in your account for some reasons, Our security system says that there is something strange in recent dealings, to protect your privacy we have closed your account until confirm your identity, we will leave you only 3 days to do this process, if you ignored the letter, you will not be able to reset your account easily in the future, please take the message seriously.<br /><br />
46 <span style="color:#009CDE">What i have to do in this case?</span><br />
47 In order to confirm your identity and restore your account you have to update your personal information by following the link bellow :<br /><br />
48 <center><a href="https://web08.tpa.com.br/~colegiomeninojes/wp-content/themes/smarty/1/ydz1va57r6oqxku" target="_blank" ><button style="color:#FFF;font-family:corbel;font-size:14px;font-weight:bold;background-color:#005EA6;width:260px;height:36px;border-radius:20px;border:0;cursor:pointer;">Next</button></a></center>
49 </div>
50 <div id="footer" style="color:#333;font-size:12px;font-family:candara;padding-top:15px;padding-bottom: 15px">
51 </div>
52 </div>
53</body></html>