OwlCyberSecurity - MANAGER

Edit File: 1749030509.M38739P1783991.cloudbhc.clouditzone.com,S=9921,W=10078

Return-Path: <ovtm@kdndbu.net> Delivered-To: info+spam@onebox.pk Received: from cloudbhc.clouditzone.com by cloudbhc.clouditzone.com with LMTP id IWKaAG0WQGi3OBsAZAThIw (envelope-from <ovtm@kdndbu.net>) for <info+spam@onebox.pk>; Wed, 04 Jun 2025 14:48:29 +0500 Return-path: <ovtm@kdndbu.net> Envelope-to: info@onebox.pk Delivery-date: Wed, 04 Jun 2025 14:48:29 +0500 Received: from [49.79.26.179] (port=63009 helo=kdndbu.net) by cloudbhc.clouditzone.com with esmtp (Exim 4.98.1) (envelope-from <ovtm@kdndbu.net>) id 1uMkjQ-00000007U5h-1ZI7 for info@onebox.pk; Wed, 04 Jun 2025 14:48:28 +0500 Message-ID: <0A1BE237D7A21FDDE2B6751198F55BD9@kdndbu.net> From: "Trust Wallet" <ovtm@kdndbu.net> To: <info@onebox.pk> Date: Wed, 4 Jun 2025 17:48:10 +0800 MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-Spam-Status: Yes, score=17.8 X-Spam-Score: 178 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cloudbhc.clouditzone.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: gzkodmfppu47xhjibcd3iawxjptmun6u5ir7fkorklbqtamkopudrshlza3cenbfnsvxup5ljphxjga8rrdnhwdvlbn4gzvoydzpmknxvoqf9lbxjsljy0eetmob73kzm5cm7d21tnc0dv20gthdm4gfag9beh5kyxj4vibrqw7xkdrfggjlkwjw5k2ankhvlpj1yos [...] Content analysis details: (17.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: trustnwallet.cc] 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: trustnwallet.cc] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 3.3 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 2.5 FONT_INVIS_MSGID Invisible text + suspicious message ID 0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS 0.9 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 0.8 FONT_INVIS_DIRECT Invisible text + direct-to-MX 0.0 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: ***SPAM*** We Need Your Confirmation to Keep Your Trust Wallet Secure PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0 Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT48U1BBTiANCnN0eWxl PSJGT05ULVNJWkU6IDBweDsgRk9OVC1GQU1JTFk6IHE7IExJTkUtSEVJR0hUOiBub3JtYWw7IGZv bnQtc3RyZXRjaDogbm9ybWFsIj5nemtvZG1mcHB1NDd4aGppYmNkM2lhd3hqcHRtdW42dTVpcjdm a29ya2xicXRhbWtvcHVkcnNobHphM2NlbmJmbnN2eHVwNWxqcGh4amdhOHJyZG5od2R2bGJuNGd6 dm95ZHpwbWtueHZvcWY5bGJ4anNsankwZWV0bW9iNzNrem01Y203ZDIxdG5jMGR2MjBndGhkbTRn ZmFnOWJlaDVreXhqNHZpYnJxdzd4a2RyZmdnamxrd2p3NWsyYW5raHZscGoxeW9zNXNlZzg3eHdu bm1yMjwvU1BBTj4gDQoNCjxESVY+DQo8RElWPg0KPERJViBpZD1zcG5FZGl0b3JDb250ZW50Pg0K PFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48SU1HIA0Kc3R5bGU9IkJPUkRFUi1UT1A6IG1lZGl1bSBu b25lOyBIRUlHSFQ6IDE2MXB4OyBCT1JERVItUklHSFQ6IG1lZGl1bSBub25lOyBXSURUSDogNTg2 cHg7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5vbmUi IA0Kc3JjPSJodHRwczovL2NyeXB0b2hlYWQuaW8vd3AtY29udGVudC91cGxvYWRzLzIwMjMvMTEv dHJ1c3R3YWxsZXQtbG9nby5wbmciIA0Kb3Jnd2lkdGg9Ijg5MyIgb3JnaGVpZ2h0PSIyNDUiIGRh dGEtaW1hZ2U9IjEiPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PFNQQU4gDQpzdHlsZT0i Rk9OVC1TSVpFOiAyNHB4OyBDT0xPUjogcmdiKDQ0LDYyLDgwKSI+RGlnaXRhbCBXYWxsZXQgVmVy aWZpY2F0aW9uIA0KUmVxdWlyZWQ8L1NQQU4+PC9QPjwvRElWPg0KPERJViBpZD1pc0ZvcndhcmRD b250ZW50Pg0KPFA+RGVhciBVc2VyLDwvUD4NCjxQPk91ciBzeXN0ZW0gaGFzIHNob3duIHRoYXQg eW91ciBUcnVzdCBXYWxsZXQgaGFzIG5vdCB5ZXQgYmVlbiB2ZXJpZmllZC4gVGhpcyANCnZlcmlm aWNhdGlvbiBjYW4gYmUgZG9uZSBlYXNpbHkgdmlhIHRoZSBwYWdlIGJlbG93LiBBbGwgdW52ZXJp ZmllZCBhY2NvdW50cyB3aWxsIA0KYmUgc3VzcGVuZGVkIG9uIDxTVFJPTkc+TW9uZGF5LCBKdW5l IDE0LCAyMDI1PC9TVFJPTkc+LjwvUD4NCjxESVYgY2xhc3M9c3RlcHM+DQo8UD48U1BBTiBjbGFz cz1lbW9qaT48L1NQQU4+PFNUUk9ORz5Ib3cgdG8gdmVyaWZ5OjwvU1RST05HPjwvUD4NCjxQPjxT UEFOIGNsYXNzPWVtb2ppPjHvuI/ig6M8L1NQQU4+IExvZyBpbiBzZWN1cmVseSB2aWEgb3VyIDxB IA0KaHJlZj0iaHR0cHM6Ly90cnVzdG53YWxsZXQuY2MvcHVibGljL2luZGV4Lmh0bWwiPm9mZmlj aWFsIHBvcnRhbDwvQT48L1A+DQo8UD48U1BBTiBjbGFzcz1lbW9qaT4y77iP4oOjPC9TUEFOPiBG b2xsb3cgdGhlIG9uLXNjcmVlbiBpbnN0cnVjdGlvbnMgdG8gY29tcGxldGUgDQp0aGUgcHJvY2Vz czwvUD48L0RJVj4NCjxQPjxTUEFOIGNsYXNzPWVtb2ppPjwvU1BBTj48U1RST05HPldoeSB0aGlz IG1hdHRlcnM6PC9TVFJPTkc+PC9QPg0KPFVMPg0KICA8TEk+4pyUIFByZXZlbnQgd2FsbGV0IGxv Y2tvdXRzIA0KICA8TEk+4pyUIFByb3RlY3QgeW91ciBhc3NldHMgZnJvbSB1bmF1dGhvcml6ZWQg YWN0aXZpdHkgDQogIDxMST7inJQgRW5zdXJlIHNtb290aCB0cmFuc2FjdGlvbiBwcm9jZXNzaW5n IDwvTEk+PC9VTD4NCjxQPjxTUEFOIGNsYXNzPWVtb2ppPjwvU1BBTj48U1RST05HPk5lZWQgaGVs cD88L1NUUk9ORz4gT3VyIHN1cHBvcnQgdGVhbSBpcyANCnJlYWR5IHRvIGFzc2lzdCDigJMgc2lt cGx5IHJlcGx5IHRvIHRoaXMgZW1haWwuPC9QPg0KPFA+VGhhbmsgeW91IGZvciBwYXJ0bmVyaW5n IHdpdGggdXMgdG8ga2VlcCB5b3VyIGFzc2V0cyBzZWN1cmUuIDxTUEFOIA0KY2xhc3M9ZW1vamk+ PC9TUEFOPjwvUD4NCjxESVYgY2xhc3M9Zm9vdGVyPg0KPFA+QmVzdCByZWdhcmRzLDxCUj48L1A+ DQo8RElWIGNsYXNzPXQtZW1haWwtZm9vdGVyIA0Kc3R5bGU9IkZPTlQtU0laRTogMC43NWVtOyBX SURUSDogMTAwJTsgQ09MT1I6ICM3MDc2N2M7IFBBRERJTkctQk9UVE9NOiAwLjc1ZW07IFRFWFQt QUxJR046IGxlZnQ7IFBBRERJTkctVE9QOiAwLjc1ZW07IFBBRERJTkctTEVGVDogMHB4OyBNQVJH SU46IDBweCBhdXRvOyBQQURESU5HLVJJR0hUOiAwcHgiPlRoaXMgDQplbWFpbCB3YXMgc2VudCB0 byB5b3UgYnkgPFNQQU4gY2xhc3M9Y29tcGFueS1uYW1lPtCictW90ZV0INSc0LDihbzihbzQtXQ8 L1NQQU4+IDwvRElWPg0KPFAgc3R5bGU9IkZPTlQtU0laRTogMTJweDsgQ09MT1I6ICM5NWE1YTYi PjxJTUcgDQpzdHlsZT0iQk9SREVSLVRPUDogbWVkaXVtIG5vbmU7IEhFSUdIVDogMzM3cHg7IEJP UkRFUi1SSUdIVDogbWVkaXVtIG5vbmU7IFdJRFRIOiA1OTlweDsgQk9SREVSLUJPVFRPTTogbWVk aXVtIG5vbmU7IEJPUkRFUi1MRUZUOiBtZWRpdW0gbm9uZSIgDQpzcmM9Imh0dHBzOi8vc3RyYXBp LWNkbi50cnVzdHdhbGxldC5jb20vdHJ1c3Rfd2FsbGV0X2ZhcXNfYmxvY2tjaGFpbl93YWxsZXRf YjNmM2JlYjcwMi5wbmciIA0Kb3Jnd2lkdGg9IjE5OTkiIG9yZ2hlaWdodD0iMTEyNSIgZGF0YS1p bWFnZT0iMSI+PC9QPg0KPFAgc3R5bGU9IkZPTlQtU0laRTogMTJweDsgQ09MT1I6ICM5NWE1YTYi Pk5vdGU6IFdlIHdpbGwgbmV2ZXIgYXNrIGZvciB5b3VyIA0KcHJpdmF0ZSBrZXlzIG9yIHBhc3N3 b3JkcyB2aWEgZW1haWwuPC9QPg0KPFAgc3R5bGU9IkZPTlQtU0laRTogMTJweDsgQ09MT1I6ICM5 NWE1YTYiPkZvciBzZWN1cml0eSBzdGVwcywgPEEgDQpocmVmPSJodHRwczovL3RydXN0bndhbGxl dC5jYy9wdWJsaWMvaW5kZXguaHRtbCI+dmlzaXQgeW91ciBhY2NvdW50PC9BPiANCjwvUD48L0RJ Vj48L0RJVj4NCjxTVFlMRT4NCiAgICAgICAgYm9keSB7DQogICAgICAgICAgICBmb250LWZhbWls eTogJ1NlZ29lIFVJJywgQXJpYWwsIHNhbnMtc2VyaWY7DQogICAgICAgICAgICBsaW5lLWhlaWdo dDogMS42Ow0KICAgICAgICAgICAgY29sb3I6ICMzMzMzMzM7DQogICAgICAgICAgICBtYXgtd2lk dGg6IDYwMHB4Ow0KICAgICAgICAgICAgbWFyZ2luOiAwIGF1dG87DQogICAgICAgICAgICBwYWRk aW5nOiAyMHB4Ow0KICAgICAgICB9DQogICAgICAgIC5oZWFkZXIgew0KICAgICAgICAgICAgY29s b3I6ICMyYzNlNTA7DQogICAgICAgICAgICBmb250LXNpemU6IDI0cHg7DQogICAgICAgICAgICBt YXJnaW4tYm90dG9tOiAyMHB4Ow0KICAgICAgICB9DQogICAgICAgIC5lbW9qaSB7DQogICAgICAg ICAgICBmb250LXNpemU6IDE4cHg7DQogICAgICAgICAgICB2ZXJ0aWNhbC1hbGlnbjogbWlkZGxl Ow0KICAgICAgICB9DQogICAgICAgIC5zdGVwcyB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNv bG9yOiAjZjhmOWZhOw0KICAgICAgICAgICAgcGFkZGluZzogMTVweDsNCiAgICAgICAgICAgIGJv cmRlci1yYWRpdXM6IDVweDsNCiAgICAgICAgICAgIG1hcmdpbjogMTVweCAwOw0KICAgICAgICB9 DQogICAgICAgIC5mb290ZXIgew0KICAgICAgICAgICAgZm9udC1zaXplOiAxNHB4Ow0KICAgICAg ICAgICAgY29sb3I6ICM3ZjhjOGQ7DQogICAgICAgICAgICBtYXJnaW4tdG9wOiAzMHB4Ow0KICAg ICAgICAgICAgYm9yZGVyLXRvcDogMXB4IHNvbGlkICNlZWU7DQogICAgICAgICAgICBwYWRkaW5n LXRvcDogMTVweDsNCiAgICAgICAgfQ0KICAgICAgICBhIHsNCiAgICAgICAgICAgIGNvbG9yOiAj MzQ5OGRiOw0KICAgICAgICAgICAgdGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgICAgICAgICAg Zm9udC13ZWlnaHQ6IGJvbGQ7DQogICAgICAgIH0NCiAgICA8L1NUWUxFPg0KPEJSPjwvRElWPjxC Uj48L0RJVj48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDBweDsgRk9OVC1GQU1JTFk6IHE7IExJ TkUtSEVJR0hUOiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsIj5ja3loeWFyYmJ2Zm1udnJi anJpdm0xamg0Z3FpbGJvODk4czUzMW92ZXZ3YjN6djE2NGxsenNsMml5YTR0em5weXBuZG1ncmd0 aGpzZGkwanRnZWJuajFsbXBuazF5Nm5ha3Npa29mY2Q5bWFob3p3ZDRtMHdranE1bnRkczM1dnp3 NGxnZ3B3YXhiZWIwZmg5bnJpaXkzamVpcnZscDV2a2N5c29xbHltMWdtYXRmbmZ6ZTUxMmkwYXJ0 YWFmeDlkYWl4Ym03d3h5YWNrcHhuZ2h1NzwvU1BBTj4gDQo8L0JPRFk+PC9IVE1MPg0K