Return-Path: <root@abuse.espresso-gridpoint.net>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on srv01.novacoiff.fr
X-Spam-Level: 
X-Spam-Status: No, score=0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FROM_LOCAL_HEX,SPF_HELO_PASS,SPF_PASS,URIBL_BLOCKED
	autolearn=no autolearn_force=no version=3.4.6
X-Original-To: webmaster@color-avenue.com
Delivered-To: coloravenue@vmi1016271.contaboserver.net
Received: from abuse.espresso-gridpoint.net (abuse.espresso-gridpoint.net [88.151.120.138])
	by srv01.novacoiff.fr (Postfix) with ESMTPS id 7D996580FCD;
	Tue, 30 Apr 2024 17:42:57 +0200 (CEST)
Authentication-Results: srv01.novacoiff.fr;
	dkim=pass (2048-bit key; secure) header.d=abuse.espresso-gridpoint.net header.i=abuse@abuse.espresso-gridpoint.net header.a=rsa-sha256 header.s=abusekey header.b=TAYq4+cl;
	dkim-atps=neutral
Received: from ansible-ben.espresso-gridpoint.net (ansible-ben.espresso-gridpoint.net [88.151.120.135])
	by abuse.espresso-gridpoint.net (8.18.1/8.18.1) with ESMTPS id 43UFgv6l063640
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=FAIL);
	Tue, 30 Apr 2024 17:42:57 +0200 (CEST)
	(envelope-from root@ansible-ben.espresso-gridpoint.net)
DKIM-Filter: OpenDKIM Filter v2.10.3 abuse.espresso-gridpoint.net 43UFgv6l063640
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=abuse.espresso-gridpoint.net; s=abusekey; t=1714491777;
	x=1715096577; i=abuse@abuse.espresso-gridpoint.net;
	bh=7yk20pDFLsRODKA9EUA6+3iX0W6PTIflFQ9yW5zdC3k=;
	h=Date:From:To:Reply-To:Subject;
	b=TAYq4+cl8FJLluEIR1wtmvxhMmRi0Qf2Pf404x4Qb85hF/3LUI6MbekpN+wDuRNsT
	 6p42iEdzdE1tTjZv9UvAzP76yCiRG6z3t1dT6Vd7qhj3gnTDvvoxPQwWQKMRIKlXg0
	 QREbxWwaASEN3lyVhgT7oSAMyhHcktATdzdWQ5POFv1yya1BPdN+806v7nVYsrcag6
	 1cDqI7DJXt6wXJAMDVF/laCq0KtbAisQONQ2MYE0/nvZKz5mNAtkMPSc3cvesOIPdf
	 7FK/HOG5qGcdUwM8s8gCzHSqRQsINhKogNQt2PL8ILK7E4LoxlcnTQ66qO/ZNOdUcf
	 Dp2VTAcnd5OEA==
Received: from ansible-ben.espresso-gridpoint.net (localhost [IPv6:0:0:0:0:0:0:0:1])
	by ansible-ben.espresso-gridpoint.net (8.18.1/8.18.1) with ESMTPS id 43UFgvCn004702
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO);
	Tue, 30 Apr 2024 17:42:57 +0200 (CEST)
	(envelope-from root@ansible-ben.espresso-gridpoint.net)
Received: (from root@localhost)
	by ansible-ben.espresso-gridpoint.net (8.18.1/8.18.1/Submit) id 43UFgvRm004651;
	Tue, 30 Apr 2024 17:42:57 +0200 (CEST)
	(envelope-from root)
Date: Tue, 30 Apr 2024 17:42:57 +0200 (CEST)
Message-Id: <202404301542.43UFgvRm004651@ansible-ben.espresso-gridpoint.net>
From: "EGP Abuse Dept." <abuse-notify+43U57AWh031865_178.33.254.192_51671a6ea516b7094eacc57cbab8fe5d@abuse.espresso-gridpoint.net>
To: <abuse@color-avenue.com>, <postmaster@color-avenue.com>,
        <hostmaster@color-avenue.com>, <webmaster@color-avenue.com>,
        <info@color-avenue.com>, <chantal@color-avenue.com>
Reply-To: "NO REPLY HERE: use abuse@abuse.espresso-gridpoint.net to contact us" <abuse-notify+43U57AWh031865_178.33.254.192_51671a6ea516b7094eacc57cbab8fe5d@abuse.espresso-gridpoint.net>
Subject: [ EGP Cloudblock/1714491776.76834 ] [ domain spam report ] [ 178.33.254.192/color-avenue.com ]

This is a spam complaint regarding a domain (color-avenue.com) under your supervision. 

All evidence of spam e-mail(s) from color-avenue.com (the origin has been fully verified using SPF, DKIM, DMARC and/or PTR headers), with all headers, body text, and possible attachments, can be viewed at https://cloudblock.espresso-gridpoint.net/evidence/51671a6ea516b7094eacc57cbab8fe5d/ (links and spam evidence files expire after 90 days).

==============================================================================================================================================
Domain (Return-Path) validation in this spam message: headers show sender domain color-avenue.com with values: SPF: YES / DKIM: NO / DMARC: NO
==============================================================================================================================================

* The reported spam originates from an IP address (178.33.254.192) contained in the SPF record for color-avenue.com ("v=spf1 a mx ip4:38.242.142.232 ip4:207.180.244.21 include:mx.ovh.com -all").

It is advisable not to ignore these reports; please address your spam issue with some urgency. Contact your systems administrator or a mail expert to prevent spam from your domain from reoccurring.

DISCLAIMER: All evidence at https://cloudblock.espresso-gridpoint.net/evidence/51671a6ea516b7094eacc57cbab8fe5d/ is presented as 100% plain-text (e-mail headers and message source); no executable or linked content is present or can be accessed; none of the presented evidence will interact with your web browser in any way. If you download any evidence file under https://cloudblock.espresso-gridpoint.net/evidence/51671a6ea516b7094eacc57cbab8fe5d/ and give it an ".eml" extension (e.g. 43U57AWh031865.eml), you can view the spam e-mails in almost any e-mail client. This allows you to view the original lay-out and attachments as they would have appeared to the intended recipient. Please note that we do not assume any responsibility whatsoever for you watching or opening that e-mail, clicking on links, loading embedded or externally loaded images, codes, or possible viruses or trojans.

P.S.: we aspire to keep these spam reports down to one per day per offending IP address/domain combination (here: 178.33.254.192/color-avenue.com); you may occasionally receive more than one e-mail about the same IP address/domain combination in the same day.

P.P.S.: this is a courtesy copy of a similar report sent to <abuse@ovh.net>; we also send the actual individual spam samples via e-mail to <abuse@ovh.net>. They may contact you about this issue.

-- 
Regards,

EGP Abuse Dept. <abuse@abuse.espresso-gridpoint.net>
EGP Cloublock RBL

