MOON
Server: Apache
System: Linux server1.quantilytics.org 3.10.0-1160.119.1.el7.tuxcare.els21.x86_64 #1 SMP Tue Jun 17 03:11:12 UTC 2025 x86_64
User: hnhtennm (1016)
PHP: 8.0.30
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/hnhtennm/mail/new/1741887701.M385619P18815.server1.quantilytics.org,S=9208,W=9431
Return-Path: <bounce@cpane1.com>
Delivered-To: hnhtennm@server1.quantilytics.org
Received: from server1.quantilytics.org
	by server1.quantilytics.org with LMTP
	id kDHSFtUY02d/SQAA0BcwpA
	(envelope-from <bounce@cpane1.com>)
	for <hnhtennm@server1.quantilytics.org>; Thu, 13 Mar 2025 17:41:41 +0000
Return-path: <bounce@cpane1.com>
Envelope-to: shabih.haider@hnhtechsolutions.com
Delivery-date: Thu, 13 Mar 2025 17:41:41 +0000
Received: from cpane1.com ([193.233.202.144]:51871)
	by server1.quantilytics.org with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <bounce@cpane1.com>)
	id 1tsiob-00010C-1u
	for shabih.haider@hnhtechsolutions.com;
	Thu, 13 Mar 2025 17:41:41 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=cpane1.com;
 h=Message-ID:Date:Subject:From:Reply-To:To:MIME-Version:Content-Type:
 List-Unsubscribe-Post:List-Unsubscribe:List-Id; i=admin@cpane1.com;
 bh=EY0Q/YZaU6V/bxHKhCCtbku9IA/yVIOMrh9Z6Fz+g4U=;
 b=Zgzc7NmLz4iLRKtGUkqR9jHfdTAqdIfrurnLmyw5ybXV73ZyWHQHLbWgzEk8jBi01RuLdnoYntOs
   2wWECrv4SYKW4naQFWcOYmEvPVbRwApuEQJwPOnyMc2me8Y7aXxxMnRbVNcaym1AuQaSuLlF6Oxt
   BvNcpm8hsIcvlNhrEEo=
Message-ID: <58a99e00261a4e7e406f8d3a5ac68c02a10c8559@cpane1.com>
Date: Thu, 13 Mar 2025 17:30:11 +0000
Subject: Security Alert: Unauthorized Account Deactivation Attempt
From: CPanel  Webmail Security <admin@cpane1.com>
Reply-To: CPanel  Webmail Security <admin@cpane1.com>
To: "shabih.haider@hnhtechsolutions.com" <shabih.haider@hnhtechsolutions.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="_=_swift_1741887011_4d64a07eade371fcf0441232b862f0fd_=_"
X-Report-Abuse: https://cpane1.com/mw/index.php/campaigns/tf441b0c7z2cf/report-abuse/qp7177eypee11/ce162zgkpvb6f
X-EBS: https://cpane1.com/mw/index.php/lists/block-address
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe: <https://cpane1.com/mw/index.php/lists/qp7177eypee11/unsubscribe/ce162zgkpvb6f/tf441b0c7z2cf?source=email-client-unsubscribe-button>,
 <mailto:admin@cpane1.com?subject=Campaign-Uid%3Atf441b0c7z2cf%20%2F%20Subscriber-Uid%3Ace162zgkpvb6f%20-%20Unsubscribe%20request&body=Please%20unsubscribe%20me%21>
List-Id: qp7177eypee11 <spam>
Feedback-ID: tf441b0c7z2cf:ce162zgkpvb6f:qp7177eypee11:nt635jsadca3d
X-Spam-Status: No, score=4.0
X-Spam-Score: 40
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "server1.quantilytics.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  [cPanel Logo] Unauthorized Account Deactivation Attempt Dear
    shabih.haider,  We detected an unauthorized attempt to deactivate your account
    shabih.haider@hnhtechsolutions.com. If this was not you, please choose an
    action below: 
 Content analysis details:   (4.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: cpane1.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [193.233.202.144 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [193.233.202.144 listed in bl.score.senderscore.com]
  0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
X-Spam-Flag: NO


--_=_swift_1741887011_4d64a07eade371fcf0441232b862f0fd_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

[cPanel Logo]=20
Unauthorized Account Deactivation Attempt=20
Dear shabih.h=
aider,

=C2=A0We detected an unauthorized attempt to deactivate your ac=
count
shabih.haider@hnhtechsolutions.com. If this was not you, please cho=
ose
an action below:

If you did not request this deactivation, use t=
he "Keep My Account"
button to secure your account.

If no action is =
taken within 4 hours, your account will no longer be
active. Keep My Acco=
unt
[https://cpane1.com/mw/index.php/campaigns/tf441b0c7z2cf/track-url/ce=
162zgkpvb6f/06e73586e51aa35f72103ef320af83bd996cf254]
Deactivate Account=

[https://cpane1.com/mw/index.php/campaigns/tf441b0c7z2cf/track-url/ce162=
zgkpvb6f/06e73586e51aa35f72103ef320af83bd996cf254]

This is a personali=
zed email intended for the account holder.

=C2=A9 2025 cPanel, Inc. Al=
l rights reserved.

--_=_swift_1741887011_4d64a07eade371fcf0441232b862f0fd_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
<head><meta charset=3D"UTF-8"><meta name=3D"viewport" content=3D"width=3Dde=
vice-width, initial-scale=3D1.0">
=09<title>Security Alert: Unauthorized Account Deactivation Attempt</title>
=09<style type=3D"text/css">body {
            font-family: Arial, sans-serif;
            background-color: #f4f4f4;
            margin: 0;
            padding: 20px;
        }
        .container {
            max-width: 600px;
            background: #fff;
            padding: 20px;
            border-radius: 8px;
            box-shadow: 0px 0px 10px rgba(0, 0, 0, 0.1);
            text-align: center;
        }
        .header {
            font-size: 22px;
            font-weight: bold;
            margin-bottom: 20px;
            color: #333;
        }
        .message {
            font-size: 16px;
            margin-bottom: 20px;
            color: #555;
        }
        .button {
            display: inline-block;
            padding: 12px 20px;
            font-size: 16px;
            color: #fff;
            text-decoration: none;
            border-radius: 5px;
            margin: 10px;
            font-weight: bold;
        }
        .keep {
            background-color: #28a745;
        }
        .deactivate {
            background-color: #dc3545;
        }
        .footer {
            margin-top: 20px;
            font-size: 12px;
            color: #777;
        }
        .logo {
            margin-bottom: 20px;
        }
=09</style>
</head>
<body>
<div class=3D"container">
<div class=3D"logo"><a href=3D""><img alt=3D"cPanel Logo" src=3D"https://en=
crypted-tbn0.gstatic.com/images?q=3Dtbn:ANd9GcQ6WvHpns7_SOcZZaI_mJ8O7HbBbu6=
YD-htVw&amp;s" width=3D"150" /></a></div>

<div class=3D"header">Unauthorized Account Deactivation Attempt</div>

<div class=3D"message">Dear shabih.haider,<br />
<br />
=C2=A0We detected an unauthorized attempt to deactivate your account shabih=
.haider@hnhtechsolutions.com. If this was not you, please choose an action =
below:<br />
<br />
If you did not request this deactivation, use the "Keep My Account" button =
to secure your account.<br />
<br />
If no action is taken within 4 hours, your account will no longer be active=
.</div>
<a class=3D"button keep" href=3D"https://cpane1.com/mw/index.php/campaigns/=
tf441b0c7z2cf/track-url/ce162zgkpvb6f/06e73586e51aa35f72103ef320af83bd996cf=
254">Keep My Account</a> <a class=3D"button deactivate" href=3D"https://cpa=
ne1.com/mw/index.php/campaigns/tf441b0c7z2cf/track-url/ce162zgkpvb6f/06e735=
86e51aa35f72103ef320af83bd996cf254">Deactivate Account</a>

<div class=3D"footer">This is a personalized email intended for the account=
 holder.<br />
<br />
=C2=A9 2025 cPanel, Inc. All rights reserved.</div>
</div>
<meta charset=3D"utf-8"/><img width=3D"1" height=3D"1" src=3D"https://cpane=
1.com/mw/index.php/campaigns/tf441b0c7z2cf/track-opening/ce162zgkpvb6f" alt=
=3D"" />
</body>
</html>
<title>Security Alert: Unauthorized Account Deactivation Attempt</title>

--_=_swift_1741887011_4d64a07eade371fcf0441232b862f0fd_=_--