Return-Path: <cvcprop@vps.cvc.bg>
Delivered-To: coachou+spam@server.tanduk.space
Received: from server.tanduk.space
	by server.tanduk.space with LMTP
	id XYrNBod6Imgm8QAAt+5+7g
	(envelope-from <cvcprop@vps.cvc.bg>)
	for <coachou+spam@server.tanduk.space>; Mon, 12 May 2025 18:47:35 -0400
Return-path: <cvcprop@vps.cvc.bg>
Envelope-to: security@coachoutletstoreonline.us
Delivery-date: Mon, 12 May 2025 18:47:35 -0400
Received: from vps.cvc.bg ([78.128.43.38]:33926)
	by server.tanduk.space with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <cvcprop@vps.cvc.bg>)
	id 1uEbvj-00000000Fgi-0g8M
	for security@coachoutletstoreonline.us;
	Mon, 12 May 2025 18:47:34 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cvc.bg;
	s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:
	Reply-To:From:Date:Subject:To:Sender:Cc:Content-ID:Content-Description:
	Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
	In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=0ktIzKuRl8EieKPlphG3OVyeU2ObS0PyOH5xyb5U7y4=; b=RpwxL106tNrDAsPeOs/8JMYXLR
	gkFkWQ/bRuX7xpfovSJ8emcgSJv+OgE2n/U51oL0qtOg22pgMOPYT4HdYSCE5Ml4A2sqCNdX8u1Kl
	PI9ZdbX6KDVUHVNtfgDUSImpVMBQu/3m/140nxz/tDPb0hjhW8Wz/SYf0wpYqvEFVa8o=;
Received: from cvcprop by vps.cvc.bg with local (Exim 4.98)
	(envelope-from <cvcprop@vps.cvc.bg>)
	id 1uEbv2-0000000EdIA-3JaO
	for security@coachoutletstoreonline.us;
	Tue, 13 May 2025 01:46:44 +0300
To: security@coachoutletstoreonline.us
Date: Mon, 12 May 2025 22:46:44 +0000
From: WordPress <wordpress@cvc.bg>
Reply-To: yaseen17money@hotmail.com
Message-ID: <BG6XyUWuf7E2VC31mDtqFqf0EiKvT3vAQrBYEE6g84@cvc.bg>
X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=5.8
X-Spam-Score: 58
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "server.tanduk.space",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Name: Email: Hi Team, I’m Ghulam Yaseen, a security researcher.
    I wanted to ask if you offer a paid bug bounty program or any rewards for
    responsibly disclosed vulnerabilities. If so, could you pl [...] 
 Content analysis details:   (5.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [78.128.43.38 listed in sa-accredit.habeas.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [78.128.43.38 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [78.128.43.38 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [78.128.43.38 listed in sa-trusted.bondedsender.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: cvc.bg]
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.6 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  Paid Bug Bounty Program Inquiry enquiry

Name: <br/>Email: yaseen17money@hotmail.com<br/>Message: Hi Team,  I’m Ghulam Yaseen, a security researcher. I wanted to ask if you offer a paid bug bounty program or any rewards for responsibly disclosed vulnerabilities. If so, could you please share the details.<br/>