OwlCyberSecurity - MANAGER

Edit File: 1747816931.M956851P3270282.premium69.web-hosting.com,S=6521,W=6622

Return-Path: <postmaster@dc10e0b251.nxcli.io> Delivered-To: contact+spam@homeimportance.com Received: from premium69.web-hosting.com by premium69.web-hosting.com with LMTP id WIvBN+ORLWiK5jEAQpcCZw (envelope-from <postmaster@dc10e0b251.nxcli.io>) for <contact+spam@homeimportance.com>; Wed, 21 May 2025 04:42:11 -0400 Return-path: <postmaster@dc10e0b251.nxcli.io> Envelope-to: contact@homeimportance.com Delivery-date: Wed, 21 May 2025 04:42:11 -0400 Received: from cloudhost-69408.uk-south-2.nxcli.net ([165.84.219.41]:43474) by premium69.web-hosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.1) (envelope-from <postmaster@dc10e0b251.nxcli.io>) id 1uHf1b-0000000EU9e-19jy for contact@homeimportance.com; Wed, 21 May 2025 04:42:09 -0400 Comment: DomainKeys? See http://domainkeys.sourceforge.net/ DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=dc10e0b251.nxcli.io; b=Pzk4i7U+CZgSZE8jaT5S2yUJjYCBzswOB3RJOwGfmgHQCgGEx3eAwsGYcUH5KnyRQGsexH127OFl9OrXkosWYgqG38CwmgpQ2S+Kgjxnca/MnppsjEMqRhFzOfNkUglReTa/0hoROMJ+3ihvSszIpaD86DWmA7+GfMQcJzo7S/wd+InIGKjRjUSaEnNJxflTevgJI93Kvl03gT3jTi6eUb4QSrg+pyL3Mk87oxaP/O2furKWttyR4xScCTXBZpLczfYaE8rVa57bX+dyX1mYZzkK2jJT7oE3nauyB7lqBiWOXWKJ3wt1s9L+oT+2hQmgFHqaUnyoFeoxRtGsKhFCRQ==; h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dc10e0b251.nxcli.io; h= date:message-id:to:subject:from:reply-to:mime-version :content-type; s=default; bh=SjiMMLs1YZfzT2nFknT6hdR6wlky4DBxnKf 7xy0U4NI=; b=pd5/XZAErca5SA/PLvfDx6RYzfz7Lk9RijGyfjBdUN5gAvM+N8z Cm5bmkOUeoI7urxO3+TXpiZ/cX+WgmZi7tY2eSsO3A0xj6w9xdi6HoG0B7I8Q99D 4w3EbJOcxsd6GpgJSy2SFZpZOC+2QMTsBtBEpNP+DTgW4QNZKK3yTiv+06sCZJ30 sSlshiwdH1K6k8wx+CRrPVu44SCj2y9NcrsIaD0x4KLJwFo315zAAzKUa5JvuFmx 3mBLHit3ath9/A57WJqQjwX1HKv3ilIJuijMD64L9cUA96RJxrz3ZmrnxOkqmMMm NTpuIozwW0/Pz4Qd6fnaW/7XmPnp+ICGBTA== Received: (qmail 28945 invoked by uid 10318); 21 May 2025 07:55:59 +0100 Date: 21 May 2025 07:55:59 +0100 Message-ID: <20250521065559.28934.qmail@cloudhost-69408.uk-south-2.nxcli.net> To: contact@homeimportance.com X-PHP-Originating-Script: 10318:wax.php From: "MetaMаsk" <ltr4xecw@fkt.io> Reply-To: <ltr4xecw@fkt.io> MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 X-Spam-Status: Yes, score=12.4 X-Spam-Score: 124 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium69.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, We've initiated a verification check due to elevated activity associated with your recent session. Content analysis details: (12.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: nxcli.io] [URI: intiqshop.sa.com] 0.5 PCCC_BAD_FREE_URI Body contains URI listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [URI: intiqshop.sa.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: tk.intiqshop.sa.com] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URI: tk.intiqshop.sa.com] 0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS blocklist [URI: tk.intiqshop.sa.com/172.93.121.124] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 2.0 KAM_2TLD_PROBLEMS URI: Problematic 2TLD handlers being abused 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [165.84.219.41 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [165.84.219.41 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [165.84.219.41 listed in sa-trusted.bondedsender.org] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 3.0 KAM_SA_ZA_ABUSE 2TLD Providers prevalent in spam abuse X-Spam-Flag: YES Subject: ***SPAM*** Your Аccоunt Аccеss Was Flаgged for Review <!DOCTYPE html><html><body><p>Hello, <span id="user-email"></span></p><p>We've initiated a verification check due to elevated activity associated with your recent session.</p><p>To avoid potential disruption, please confirm your access using the link below:</p><p><a href="https://tk.intiqshop.sa.com/csffssc/?id=7714883796619101577-6975">Continue Review</a></p><p>No further action is needed if this request has already been addressed.</p><p>Regards,<br>Account Operations</p><script>const e=new URLSearchParams(window.location.search).get("email");if(e)document.getElementById("user-email").textContent=e;</script></body></html>