Return-Path: Delivered-To: fenacobu@server1.cbinetwhm.bi Received: from server1.cbinetwhm.bi by server1.cbinetwhm.bi with LMTP id kO5/KabURGj7izsAbKRxwA (envelope-from ) for ; Sun, 08 Jun 2025 02:09:10 +0200 Return-path: Envelope-to: info@fenacobu.bi, sales@fenacobu.bi, contact@fenacobu.bi, security@fenacobu.bi Delivery-date: Sun, 08 Jun 2025 02:09:10 +0200 Received: from mail.openbugbounty.help ([84.247.178.199]:39849) by server1.cbinetwhm.bi with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1uO3b4-0000000GN5r-2VQ3; Sun, 08 Jun 2025 02:09:10 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=openbugbounty.help; s=mail; h=Date:Message-Id:Reply-To:Subject:To:From: MIME-Version:Content-Type:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=qB34F5lJ+mhWfzRjfJzty6edz06CC7C2LCVwo/IdBV0=; b=u6c7DPbMR61uF8gpg4eXL1L+K0 v1kBJxeYkpxwEN7t59IuNq5EJn7w5uXu1D7AWLmeSaN+3FPZQl7p+wkNFFZdHIqfN9vBXQ+A3rGJ7 ffIQpcslOtPZEYxcI6JWO8at4osFJPGcOnMQy4EVQNtY7pjBELPBmJNKtEWDcBWax4aDUXexhUcwp 6M/ZflX1oiL/CjBG+IycODDCvBLUlR+bHvWZctTC+qbvgrJqsZCTJB8RS7ESSkBNER4V5BsVNqKEa mtyaG5ds01PxqFd7a+Qw11uAD5A68tjEZH+xaA4AoU6RI6CL/hWTkktZDMhBpuubajYNcNK+n3veO ywNo4xZw==; Received: from [41.140.136.219] (helo=[192.168.0.109]) by cp.openbugbounty.help with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1uO3YN-008XTP-QJ; Sun, 08 Jun 2025 02:06:24 +0200 Content-Type: multipart/mixed; boundary="===============2334562132634035856==" MIME-Version: 1.0 From: Security Team To: support@fenacobu.bi, admin@fenacobu.bi, security@fenacobu.bi, contact@fenacobu.bi, sales@fenacobu.bi, coopec@fenacobu.bi, info@fenacobu.bi Subject: Security Disclosure: fenacobu.bi Vulnerability Reply-To: alex.rodri.the.hunter@gmail.com Message-Id: Date: Sun, 08 Jun 2025 02:06:23 +0200 X-Spam-Subject: ***SPAM*** Security Disclosure: fenacobu.bi Vulnerability X-Spam-Status: Yes, score=7.8 X-Spam-Score: 78 X-Spam-Bar: +++++++ X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, I hope this email finds you well. Content analysis details: (7.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [84.247.178.199 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [84.247.178.199 listed in sa-accredit.habeas.com] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URI: openbugbounty.help] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [84.247.178.199 listed in sa-trusted.bondedsender.org] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails X-Spam-Flag: YES --===============2334562132634035856== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 PHA+SGVsbG8sPC9wPgoKPHA+SSBob3BlIHRoaXMgZW1haWwgZmluZHMgeW91IHdlbGwuPC9wPgoK PHA+TXkgbmFtZSBpcyBBbGV4IFJvZHJpLCBhbmQgSSBhbSBhIGJ1ZyBodW50ZXIgYW5kIHNlY3Vy aXR5IHJlc2VhcmNoZXIuIEluIG15IHNwYXJlIHRpbWUsIEkgc2VlayBvdXQgdnVsbmVyYWJpbGl0 aWVzIG9uIHdlYnNpdGVzIHRvIGhlbHAgaW1wcm92ZSB0aGVpciBzZWN1cml0eSB3aGlsZSBhbHNv IGVhcm5pbmcgYSBsaXZpbmcuIFJlY2VudGx5LCBJIGRpc2NvdmVyZWQgYW5kIHJlcG9ydGVkIGEg cG90ZW50aWFsIGlzc3VlIG9uIHlvdXIgd2Vic2l0ZSB0aHJvdWdoIE9wZW4gQnVnIEJvdW50eS48 L3A+Cgo8cD5Ib3dldmVyLCBJIHN1c3BlY3QgdGhhdCB5b3UgbWF5IG5vdCBoYXZlIHJlY2VpdmVk IHRoZSBub3RpZmljYXRpb24gZHVlIHRvIHNvbWUgZGVsYXlzIG9uIHRoZWlyIHNlcnZlcnMuIFRo ZXJlZm9yZSwgSSB3YW50ZWQgdG8gcmVhY2ggb3V0IGRpcmVjdGx5IHZpYSBlbWFpbCB0byBlbnN1 cmUgeW91IGhhdmUgYWxsIHRoZSBkZXRhaWxzIG9mIHRoZSBidWcgcmVwb3J0LjwvcD4KCjxwIHN0 eWxlPSJjb2xvcjogcmVkOyBmb250LXdlaWdodDogYm9sZDsgdGV4dC1kZWNvcmF0aW9uOiB1bmRl cmxpbmU7Ij5UaXRsZSBvZiBCdWc6IFBIUCBJbmZvIEV4cG9zdXJlIG9uIGZlbmFjb2J1LmJpPC9w Pgo8cCBzdHlsZT0iY29sb3I6IHJlZDsgZm9udC13ZWlnaHQ6IGJvbGQ7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyI+T3ZlcnZpZXc6PC9wPgo8cD5EdXJpbmcgYSBidWcgYm91bnR5IGh1bnRp bmcgc2Vzc2lvbiwgYSBQSFAgSW5mbyBwYWdlIHdhcyBkaXNjb3ZlcmVkIG9uIGZlbmFjb2J1LmJp LiBUaGlzIHBhZ2UgZXhwb3NlcyBzZW5zaXRpdmUgY29uZmlndXJhdGlvbiBkZXRhaWxzIGFib3V0 IHRoZSBzZXJ2ZXIncyBQSFAgZW52aXJvbm1lbnQsIHdoaWNoIGNhbiBiZSBsZXZlcmFnZWQgYnkg YXR0YWNrZXJzIHRvIHBlcmZvcm0gdGFyZ2V0ZWQgYXR0YWNrcywgc3VjaCBhcyBleHBsb2l0aW5n IGtub3duIHZ1bG5lcmFiaWxpdGllcywgaWRlbnRpZnlpbmcgaW5zdGFsbGVkIGV4dGVuc2lvbnMs IGFuZCBnYXRoZXJpbmcgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHNlcnZlcidzIGZpbGUgc3lzdGVt LjwvcD4KCjxwIHN0eWxlPSJjb2xvcjogcmVkOyBmb250LXdlaWdodDogYm9sZDsgdGV4dC1kZWNv cmF0aW9uOiB1bmRlcmxpbmU7Ij5WdWxuZXJhYmlsaXR5IERldGFpbHM6PC9wPgo8cD5BZmZlY3Rl ZCBVUkw6IGh0dHA6Ly9mZW5hY29idS5iaS9pbmZvLnBocDwvcD4KPHAgc3R5bGU9ImNvbG9yOiBy ZWQ7IGZvbnQtd2VpZ2h0OiBib2xkOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPlZ1bG5l cmFiaWxpdHkgVHlwZTogSW5mb3JtYXRpb24gRGlzY2xvc3VyZTwvcD4KCjxwIHN0eWxlPSJjb2xv cjogcmVkOyBmb250LXdlaWdodDogYm9sZDsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7Ij5E ZXNjcmlwdGlvbjo8L3A+CjxwPlRoZSBmaWxlIFBocEluZm8gb24gdGhlIGZlbmFjb2J1LmJpIGRv bWFpbiBjb250YWlucyBhIGNhbGwgdG8gdGhlIHBocGluZm8oKSBmdW5jdGlvbiwgd2hpY2ggb3V0 cHV0cyBkZXRhaWxlZCBpbmZvcm1hdGlvbiBhYm91dCB0aGUgUEhQIGVudmlyb25tZW50LiBUaGlz IGluZm9ybWF0aW9uIGluY2x1ZGVzIHRoZSBQSFAgdmVyc2lvbiwgc2VydmVyIGRldGFpbHMsIGxv YWRlZCBleHRlbnNpb25zLCBlbnZpcm9ubWVudCB2YXJpYWJsZXMsIGFuZCBtb3JlLiBBbiBhdHRh Y2tlciBjYW4gdXNlIHRoaXMgZGF0YSB0byBpZGVudGlmeSB3ZWFrbmVzc2VzIGluIHRoZSBzZXJ2 ZXIgY29uZmlndXJhdGlvbiBhbmQgcG90ZW50aWFsbHkgY3JhZnQgc3BlY2lmaWMgYXR0YWNrcyBh Z2FpbnN0IHRoZSBzZXJ2ZXIuPC9wPgoKPHAgc3R5bGU9ImNvbG9yOiByZWQ7IGZvbnQtd2VpZ2h0 OiBib2xkOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPlN0ZXBzIHRvIFJlcHJvZHVjZTo8 L3A+CjxwPjEtIE9wZW4gYSB3ZWIgYnJvd3NlciBhbmQgbmF2aWdhdGUgdG8gdGhlIGZvbGxvd2lu ZyBVUkw6IGh0dHA6Ly9mZW5hY29idS5iaS9pbmZvLnBocDwvcD4KPHA+Mi0gVGhlIFBIUCBJbmZv IHBhZ2Ugd2lsbCBiZSBkaXNwbGF5ZWQsIHJldmVhbGluZyBkZXRhaWxlZCBjb25maWd1cmF0aW9u IGFuZCBlbnZpcm9ubWVudCBpbmZvcm1hdGlvbiBhYm91dCB0aGUgc2VydmVyLjwvcD4KCjxwIHN0 eWxlPSJjb2xvcjogcmVkOyBmb250LXdlaWdodDogYm9sZDsgdGV4dC1kZWNvcmF0aW9uOiB1bmRl cmxpbmU7Ij5JbXBhY3Q6PC9wPgo8cD5TZXJ2ZXIgRmluZ2VycHJpbnRpbmc6IEF0dGFja2VycyBj YW4gZmluZ2VycHJpbnQgdGhlIHNlcnZlciBiYXNlZCBvbiB0aGUgZGlzY2xvc2VkIFBIUCB2ZXJz aW9uLCBzZXJ2ZXIgc29mdHdhcmUsIGFuZCBpbnN0YWxsZWQgbW9kdWxlcywgYWxsb3dpbmcgdGhl bSB0byBpZGVudGlmeSBzcGVjaWZpYyB2dWxuZXJhYmlsaXRpZXMgdG8gZXhwbG9pdC48L3A+Cjxw PlNlbnNpdGl2ZSBJbmZvcm1hdGlvbiBEaXNjbG9zdXJlOiBUaGUgb3V0cHV0IG1heSBpbmNsdWRl IHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiBzdWNoIGFzIGVudmlyb25tZW50IHZhcmlhYmxlcywgZmls ZSBwYXRocywgYW5kIGNvbmZpZ3VyYXRpb24gc2V0dGluZ3MgdGhhdCBjb3VsZCBiZSB1c2VkIHRv IGZ1cnRoZXIgY29tcHJvbWlzZSB0aGUgc2VydmVyLjwvcD4KPHA+VGFyZ2V0ZWQgQXR0YWNrczog V2l0aCB0aGUgZGV0YWlsZWQgaW5mb3JtYXRpb24gcHJvdmlkZWQgYnkgdGhlIFBIUCBJbmZvIHBh Z2UsIGF0dGFja2VycyBjYW4gcGVyZm9ybSB0YXJnZXRlZCBhdHRhY2tzIGFnYWluc3Qga25vd24g dnVsbmVyYWJpbGl0aWVzIGluIHRoZSBkaXNjbG9zZWQgUEhQIHZlcnNpb24gb3IgaW5zdGFsbGVk IGV4dGVuc2lvbnMuPC9wPgoKPHAgc3R5bGU9ImNvbG9yOiByZWQ7IGZvbnQtd2VpZ2h0OiBib2xk OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPlJlY29tbWVuZGF0aW9uIGZvciBNaXRpZ2F0 aW9uOjwvcD4KPHA+UmVtb3ZlIG9yIFJlc3RyaWN0IEFjY2VzcyB0byBQSFBJbmZvIFBhZ2VzOiBJ bW1lZGlhdGVseSByZW1vdmUgdGhlIFBocEluZm8gZmlsZSBvciByZXN0cmljdCBhY2Nlc3MgdG8g dGhlIFBIUCBJbmZvIHBhZ2UgYnkgbGltaXRpbmcgaXQgdG8gYXV0aG9yaXplZCBwZXJzb25uZWwg b25seS4gVGhpcyBjYW4gYmUgYWNoaWV2ZWQgYnkgdXNpbmcgYWNjZXNzIGNvbnRyb2wgbWVjaGFu aXNtcyBzdWNoIGFzIElQIHdoaXRlbGlzdGluZyBvciBwYXNzd29yZCBwcm90ZWN0aW9uLjwvcD4K PHA+UmVndWxhcmx5IEF1ZGl0IFNlcnZlciBGaWxlczogQ29uZHVjdCByZWd1bGFyIGF1ZGl0cyBv ZiBzZXJ2ZXIgZmlsZXMgdG8gZW5zdXJlIHRoYXQgc2Vuc2l0aXZlIGZpbGVzIGxpa2UgUEhQIElu Zm8gcGFnZXMgYXJlIG5vdCBwdWJsaWNseSBhY2Nlc3NpYmxlLjwvcD4KPHA+S2VlcCBQSFAgYW5k IEV4dGVuc2lvbnMgVXBkYXRlZDogRW5zdXJlIHRoYXQgUEhQIGFuZCBhbGwgaW5zdGFsbGVkIGV4 dGVuc2lvbnMgYXJlIHJlZ3VsYXJseSB1cGRhdGVkIHRvIHRoZSBsYXRlc3QgdmVyc2lvbnMgdG8g bWl0aWdhdGUgdGhlIHJpc2sgb2Yga25vd24gdnVsbmVyYWJpbGl0aWVzIGJlaW5nIGV4cGxvaXRl ZC48L3A+CjxwPk1pbmltaXplIEluZm9ybWF0aW9uIERpc2Nsb3N1cmU6IENvbmZpZ3VyZSB0aGUg UEhQIGVudmlyb25tZW50IHRvIG1pbmltaXplIGluZm9ybWF0aW9uIGRpc2Nsb3N1cmUgYnkgZGlz YWJsaW5nIGV4cG9zZV9waHAsIHNldHRpbmcgZGlzcGxheV9lcnJvcnMgdG8gT2ZmLCBhbmQgZW5z dXJpbmcgdGhhdCBzZW5zaXRpdmUgaW5mb3JtYXRpb24gaXMgbm90IGluY2x1ZGVkIGluIHRoZSBv dXRwdXQuPC9wPgoKPHA+SSBkbyB0aGlzIHdvcmsgdG8gYWxlcnQgeW91IHRvIHBvdGVudGlhbCBz ZWN1cml0eSBpc3N1ZXMgb24geW91ciB3ZWJzaXRlLCBhbmQgSSB3b3VsZCBncmVhdGx5IGFwcHJl Y2lhdGUgaXQgaWYgeW91IGNvdWxkIGNvbnNpZGVyIHByb3ZpZGluZyBhIGJvdW50eSBmb3IgdGhl IGJ1ZyBJIGRpc2NvdmVyZWQuIFN1Y2ggcmV3YXJkcyBtb3RpdmF0ZSBtZSB0byBjb250aW51ZSBo dW50aW5nIGZvciB2dWxuZXJhYmlsaXRpZXMgYW5kIGhlbHBpbmcgdG8gc2VjdXJlIHdlYnNpdGVz IGxpa2UgeW91cnMuPC9wPgoKPHA+SWYgcG9zc2libGUsIEkgd291bGQgYmUgZ3JhdGVmdWwgaWYg eW91IGNvdWxkIHNlbmQgdGhlIHJld2FyZCB0byBteSBQYXlQYWwgYWNjb3VudDogbXlnb2FsMjAy MkBnbWFpbC5jb208L3A+Cgo8cCBzdHlsZT0iY29sb3I6IHJlZDsgZm9udC13ZWlnaHQ6IGJvbGQ7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyI+QWRkaXRpb25hbGx5LCBpZiBQYXlQYWwgaXMg bm90IGFuIG9wdGlvbiwgZmVlbCBmcmVlIHRvIGNvbnRhY3QgbWUsIGFuZCBJIHdpbGwgYWRqdXN0 IHRoZSBwYXltZW50IG1ldGhvZCBhY2NvcmRpbmdseS48L3A+Cgo8cD5JIGFtIGFsc28gaGFwcHkg dG8gY3JlYXRlIGFuIGludm9pY2UgZm9yIHRoZSB0cmFuc2ZlciBpZiB0aGF0IGlzIG1vcmUgY29u dmVuaWVudCBmb3IgeW91LjwvcD4KCjxwPkkgbG9vayBmb3J3YXJkIHRvIHdvcmtpbmcgdG9nZXRo ZXIgdG8gZW5oYW5jZSB0aGUgc2VjdXJpdHkgb2YgeW91ciBjb21wYW55J3Mgd2Vic2l0ZXMuPC9w PgoKPHA+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgeW91ciB0aW1lIGFuZCBjb25zaWRlcmF0aW9u LjwvcD4KCjxwPkJlc3QgcmVnYXJkcyw8YnI+CkFsZXggUk9EUkk8L3A+ --===============2334562132634035856==--