File: /home/dfwparty/mail/.spam/new/1746498263.M126975P3069340.node612.namehero.net,S=9032,W=9180
Return-Path: <kyc@trustwallets.com>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
by node612.namehero.net with LMTP
id 6JFlB9dyGWic1S4AJLeZpw
(envelope-from <kyc@trustwallets.com>)
for <dfwparty+spam@node612.namehero.net>; Mon, 05 May 2025 20:24:23 -0600
Return-path: <kyc@trustwallets.com>
Envelope-to: mikedee@dfwfun.net
Delivery-date: Mon, 05 May 2025 20:24:23 -0600
Received: from [49.79.124.57] (port=51937 helo=ehssbz.com)
by node612.namehero.net with esmtp (Exim 4.98.1)
(envelope-from <kyc@trustwallets.com>)
id 1uC7yl-0000000DF3P-13NU
for mikedee@dfwfun.net;
Mon, 05 May 2025 20:24:23 -0600
Message-ID: <C0C159219DF26F8CCF077F63C855CA04@ehssbz.com>
From: "Trust Wallet" <kyc@trustwallets.com>
To: <mikedee@dfwfun.net>
Date: Tue, 6 May 2025 10:24:11 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Spam-Status: Yes, score=28.7
X-Spam-Score: 287
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Security Alert: Verify Your Wallet Dear Valued User,
Content analysis details: (28.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[49.79.124.57 listed in zen.spamhaus.org]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: githubusercontent.com]
[URI: loginfn.cc]
[URI: trustwallet.com]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: avatars.githubusercontent.com]
[URI: trustwallet.com.loginfn.cc]
[URI: strapi-cdn.trustwallet.com]
9.0 KAM_BODY_URIBL_PCCC Body contains URI listed in PCCC WILD RBL
(https://raptor.pccc.com/RBL)
[URI: trustwallet.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?49.79.124.57>]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[49.79.124.57 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[49.79.124.57 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[49.79.124.57 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers
2.5 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
7.0 KAM_FAKE_TRUSTWALLET Fake Trust Wallet message
2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) + direct-to-MX
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** We Need Your Confirmation to Keep Your Trust Wallet Secure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