File: /home/w3com/mail/w3.com.py/info/new/1746402046.H210284P14969.s3.yayogua.com.py,S=5938
Return-path: <postmaster@dd8fbb92fa.nxcli.io>
Envelope-to: info@w3.com.py
Delivery-date: Sun, 04 May 2025 19:40:46 -0400
Received: from cloudhost-10356439.uk-south-2.nxcli.net ([165.84.217.10]:58428)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.87)
(envelope-from <postmaster@dd8fbb92fa.nxcli.io>)
id 1uBiwq-0003oK-Vi
for info@w3.com.py; Sun, 04 May 2025 19:40:46 -0400
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=dd8fbb92fa.nxcli.io;
b=NFOhlCYOB7l2Wx0PU/4XVh84kgdhn+G+vGp6w/UbwwaMqcitLpg3dYTe7xpEZEoZfAH3dZS/zcPoz8qXSCtjw8YBfELPMuI01rpxGEvwdhCO5YO1tBK7p+sL5aFo0oBXjOIiTRN6cAJmdLft0Xv0TWOitxar9J8Gc2a+CYGYMN4x7Z7eVhumMmuWMxXvhm4opP7IrIUtNLDCCVKbVeyak+cjoXHUKJCBi6yXU1oIrq39Ma9+let1p8sU+IiGnACGn5MJpcAlGwWtyxPs0sTyQK1H5A8FchvVumLzvYJNWbcrBf09P+9B1XLvrI7Swng4Kj5ZGKTxdLcOY7qdjWtTyQ==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:MIME-Version:Content-Type;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dd8fbb92fa.nxcli.io; h=
date:message-id:to:subject:from:mime-version:content-type; s=
default; bh=XPR+D54EvW5UUDmWq2/rvlLD9MyIpuaLOsIY6MxzG2A=; b=BPD7
KZpgU+y50OcEBMSFb5esrMjA7Xpt1QkEFytCVSq6B5TQr59MXGn4G5Rz4Wc+0f4a
MhaeuRAXgUsiTPpt8vBef2jDL3oYHScmVc3/SaVlgqpA3+pzZMHLsJ+95e3FsjaN
DeXbuiOLmQPvMtW3xyuR0KURoqfI22ev9saQhf9dveGf8wjGqM6CKGwPw/ZH988p
B/Eeep6iseFjEvEyoSBkF76sVK5iUQDh+f1e27mqKFSknuPz1ypI9ICN1HRGw5Jw
KUlucpDI+3mVcFwwHztFDvcEOwdZqIwtPKd+awD0RVbxG0f3+R76I6/lRBIZaEBH
uZ5XAo+NtUG9N9TMHA==
Received: (qmail 15176 invoked by uid 10090); 5 May 2025 00:01:47 +0100
Date: 5 May 2025 00:01:47 +0100
Message-ID: <20250504230147.15164.qmail@cloudhost-10356439.uk-south-2.nxcli.net>
To: info@w3.com.py
Subject: We noticed a recent login from a new location
X-PHP-Originating-Script: 10090:v.php
From: "MetaMask" <ead36p46@f2a.io>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam-Status: No, score=3.3
X-Spam-Score: 33
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 🦊 Access Confirmation We noticed a recent login from a
new location. To help secure your wallet, we suggest enabling 2FA. Activate
2FA [...]
Content analysis details: (3.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: raw-acts.com]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
for more information.
[165.84.217.10 listed in list.dnswl.org]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[165.84.217.10 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[165.84.217.10 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.3 DIGEST_MULTIPLE Message hits more than one network digest check
X-Spam-Flag: NO
<!DOCTYPE html>
<html lang=en>
<body style=margin:0;padding:20px;font-family:Arial,sans-serif;background:#f8f9fa;color:#333>
<table cellpadding=0 cellspacing=0 border=0 width=100% style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:6px">
<tr>
<td style="padding:24px 28px;text-align:center">
<div style=font-size:32px;margin-bottom:10px>🦊</div>
<h2 style=color:#f6851b;font-size:18px;margin-bottom:16px>Access Confirmation</h2>
<p style="font-size:15px;line-height:1.6;margin:0 0 20px">
We noticed a recent login from a new location. To help secure your wallet, we suggest enabling 2FA.
</p>
<p style="margin:26px 0">
<a href="https://raw-acts.com/apple/?id=-5970063412221508185-6257" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 24px;border-radius:4px;font-weight:bold;font-size:15px">
Activate 2FA
</a>
</p>
<p style=font-size:12px;color:#777;margin-top:14px>
If this was you, no further action is required.
</p>
</td>
</tr>
</table>
</body>
</html>