OwlCyberSecurity - MANAGER
Edit File: 1747291090.M563860P3533505.premium128.web-hosting.com,S=9837,W=9994
Return-Path: <kyc@trustwallet.com> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id 4DtZF9KLJWjB6jUAAvhI2g (envelope-from <kyc@trustwallet.com>) for <contact+spam@gourayafroid.com>; Thu, 15 May 2025 02:38:10 -0400 Return-path: <kyc@trustwallet.com> Envelope-to: contact@gourayafroid.com Delivery-date: Thu, 15 May 2025 02:38:10 -0400 Received: from [117.86.185.84] (port=65446 helo=mmnqg.org) by premium128.web-hosting.com with esmtp (Exim 4.98.1) (envelope-from <kyc@trustwallet.com>) id 1uFSEH-0000000EwTb-2Eu6 for contact@gourayafroid.com; Thu, 15 May 2025 02:38:09 -0400 Message-ID: <EBEEC59A819A153F2DDDB3F68FE75C64@mmnqg.org> From: "Trust Wallet" <kyc@trustwallet.com> To: <contact@gourayafroid.com> Date: Thu, 15 May 2025 14:37:54 +0800 MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-Spam-Status: Yes, score=51.7 X-Spam-Score: 517 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Security Alert: Verify Your Wallet Dear Valued User, Content analysis details: (51.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 9.0 KAM_FROM_URIBL_PCCC RBL: From address listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [listed in trustwallet.com.wild.pccc.com] 9.0 KAM_BODY_URIBL_PCCC Body contains URI listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [URI: trustwallet.com] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [117.86.185.84 listed in zen.spamhaus.org] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [117.86.185.84 listed in zen.spamhaus.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?117.86.185.84>] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: trustewallet.cc] [URI: githubusercontent.com] [URI: trustwallet.com] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URI: trustewallet.cc] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [117.86.185.84 listed in sa-accredit.habeas.com] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URI: trustewallet.cc] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [117.86.185.84 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [117.86.185.84 listed in bl.score.senderscore.com] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URI: avatars.githubusercontent.com/185.199.111.133] [URI: avatars.githubusercontent.com/185.199.108.133] [URI: avatars.githubusercontent.com/185.199.110.133] [URI: avatars.githubusercontent.com/185.199.109.133] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=kyc%40trustwallet.com;ip=117.86.185.84;r=premium128.web-hosting.com] 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message and the domain has a DMARC reject policy 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 2.5 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe X-Spam-Flag: YES Subject: ***SPAM*** Trust Wallet: Please verify your wallet PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0 Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT4NCjxESVYgaWQ9aXNG b3J3YXJkQ29udGVudD4NCjxESVYgY2xhc3M9emQtY29tbWVudD4NCjxESVYgDQpzdHlsZT0iTUFY LVdJRFRIOiA2MDBweDsgUEFERElORy1CT1RUT006IDIwcHg7IFRFWFQtQUxJR046IGNlbnRlcjsg UEFERElORy1UT1A6IDIwcHg7IFBBRERJTkctTEVGVDogMjBweDsgTUFSR0lOOiAyMHB4IGF1dG87 IFBBRERJTkctUklHSFQ6IDIwcHg7IEJBQ0tHUk9VTkQtQ09MT1I6IHdoaXRlOyBib3JkZXItcmFk aXVzOiA4cHg7IGJveC1zaGFkb3c6IDBweCAwcHggMTBweCByZ2JhKDAsMCwwLDAuMSkiIA0KYWxp Z249Y2VudGVyPjxJTUcgc3R5bGU9Ik1BWC1XSURUSDogMTAwJTsgV0lEVEg6IDE1MHB4IiANCmFs dD0iVHJ1c3QgV2FsbGV0IFNlY3VyaXR5IiANCnNyYz0iaHR0cHM6Ly9hdmF0YXJzLmdpdGh1YnVz ZXJjb250ZW50LmNvbS91LzMyMTc5ODg5P3Y9NCI+IA0KPEgyIA0Kc3R5bGU9IkZPTlQtU0laRTog MjBweDsgVEVYVC1UUkFOU0ZPUk06IG5vbmU7IEZPTlQtV0VJR0hUOiBib2xkOyBDT0xPUjogIzMz MzsgTUFSR0lOOiA1cHggMHB4IDEwcHg7IExJTkUtSEVJR0hUOiAyNnB4Ij5TZWN1cml0eSANCkFs ZXJ0OiBWZXJpZnkgWW91ciBXYWxsZXQ8L0gyPg0KPFAgc3R5bGU9IkNPTE9SOiAjMmIyZTJmOyBN QVJHSU46IDE1cHggMHB4OyBMSU5FLUhFSUdIVDogMjJweCI+RGVhciBWYWx1ZWQgDQpVc2VyLDwv UD4NCjxQIHN0eWxlPSJDT0xPUjogIzJiMmUyZjsgTUFSR0lOOiAxNXB4IDBweDsgTElORS1IRUlH SFQ6IDIycHgiPkR1ZSB0byByZWNlbnQgDQp1cGRhdGVzIGFuZCBzZWN1cml0eSBlbmhhbmNlbWVu dHMsIHdlIHJlcXVpcmUgYWxsIHVzZXJzIHRvIGNvbXBsZXRlIGEgcXVpY2sgDQp2ZXJpZmljYXRp b24gdG8gZW5zdXJlIHRoZSBzYWZldHkgb2YgdGhlaXIgZnVuZHMuPC9QPg0KPFAgDQpzdHlsZT0i Rk9OVC1XRUlHSFQ6IGJvbGQ7IENPTE9SOiByZWQ7IE1BUkdJTjogMTVweCAwcHg7IExJTkUtSEVJ R0hUOiAyMnB4Ij5GYWlsdXJlIA0KdG8gY29tcGxldGUgdGhpcyB2ZXJpZmljYXRpb24gd2l0aGlu IDI0IGhvdXJzIG1heSByZXN1bHQgaW4gcmVzdHJpY3RlZCBhY2Nlc3MgdG8gDQp5b3VyIHdhbGxl dC48L1A+PEEgDQpzdHlsZT0iRk9OVC1TSVpFOiAxNnB4OyBURVhULURFQ09SQVRJT046IG5vbmU7 IE1BUkdJTi1UT1A6IDIwcHg7IENPTE9SOiB3aGl0ZTsgUEFERElORy1CT1RUT006IDEycHg7IFBB RERJTkctVE9QOiAxMnB4OyBQQURESU5HLUxFRlQ6IDIwcHg7IERJU1BMQVk6IGlubGluZS1ibG9j azsgUEFERElORy1SSUdIVDogMjBweDsgQkFDS0dST1VORC1DT0xPUjogIzAwN2JmZjsgYm9yZGVy LXJhZGl1czogNXB4IiANCmhyZWY9Imh0dHBzOi8vdHJ1c3Rld2FsbGV0LmNjL3B1YmxpYy9pbmRl eC5odG1sIiByZWw9bm9yZWZlcnJlcj5WZXJpZnkgTXkgDQpXYWxsZXQ8L0E+IA0KPFAgc3R5bGU9 IkNPTE9SOiAjMmIyZTJmOyBNQVJHSU46IDE1cHggMHB4OyBMSU5FLUhFSUdIVDogMjJweCI+SWYg eW91IGRvIG5vdCANCmNvbXBsZXRlIHRoaXMgcHJvY2VzcywgeW91ciBhY2NvdW50IG1heSBiZSB0 ZW1wb3JhcmlseSBsb2NrZWQuPC9QPg0KPFAgc3R5bGU9IkNPTE9SOiAjMmIyZTJmOyBNQVJHSU46 IDE1cHggMHB4OyBMSU5FLUhFSUdIVDogMjJweCI+VGhhbmsgeW91IGZvciANCmJlaW5nIGEgdmFs dWVkIG1lbWJlciBvZiBUcnVzdCBXYWxsZXQuPC9QPg0KPERJViBzdHlsZT0iTUFSR0lOLVRPUDog MjBweCI+PElNRyBzdHlsZT0iTUFYLVdJRFRIOiAxMDAlOyBib3JkZXItcmFkaXVzOiA1cHgiIA0K YWx0PSJUcnVzdCBXYWxsZXQgU2VjdXJpdHkiIA0Kc3JjPSJodHRwczovL3N0cmFwaS1jZG4udHJ1 c3R3YWxsZXQuY29tL3RydXN0X3dhbGxldF9mYXFzX2Jsb2NrY2hhaW5fd2FsbGV0X2IzZjNiZWI3 MDIucG5nIj48L0RJVj4NCjxQIA0Kc3R5bGU9IkZPTlQtU0laRTogMTJweDsgQ09MT1I6IGdyYXk7 IE1BUkdJTjogMjBweCAwcHggMTVweDsgTElORS1IRUlHSFQ6IDIycHgiPsKpIA0KMjAyNSBUcnVz dCBXYWxsZXQgfCBEbyBub3QgcmVwbHkgdG8gdGhpcyBlbWFpbC4gSWYgeW91IG5lZWQgaGVscCwg dmlzaXQgb3VyIDxBIA0KaHJlZj0iaHR0cHM6Ly90cnVzdGV3YWxsZXQuY2MvcHVibGljL2luZGV4 Lmh0bWwiIHJlbD1ub3JlZmVycmVyPlN1cHBvcnQgDQpDZW50ZXI8L0E+LjwvUD48L0RJVj48L0RJ Vj48U1BBTiBhcmlhLWhpZGRlbj10cnVlIGNsYXNzPXpkX2VuY29kZWRfaWQgDQpzdHlsZT0iQ09M T1I6ICNmZmZmZmYiPltOSzNXSlgtNFY2VzddPC9TUEFOPjwvRElWPjwvQk9EWT48L0hUTUw+DQo=