This is a Fastmail Abuse Report for an email message received from domain nftx.com, IP 78.46.109.73, on Tue, 18 Aug 2020 22:00:41 +0000.
Reported-Domain: nftx.com
Source-Ip: 78.46.109.73
Source: Fastmail
Subscription-Link:
https://fbl.returnpath.net/manage/subscriptions/394804 Feedback-Type: abuse
Version: 1
Arrival-Date: Tue, 18 Aug 2020 22:00:41 +0000
Original-Mail-From:
ntx@nftx.com User-Agent: ReturnPathFBL/2.0
Original-Rcpt-To:
6565318e33cc4245ad5418dfc4e7fc68@blue2.ca Abuse-Type: complaint
Received: from forward3-smtp.messagingengine.com (forward3-smtp.messagingengine.com [66.111.4.237])
by haraka-ss-mx-4 (Haraka/2.8.21) with ESMTPS id 7C30445E-DE80-4E40-A6EC-37D61D72D28B.1
envelope-from <
noreply@fastmail.com>
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 verify=FAIL);
Wed, 19 Aug 2020 04:09:14 +0000
Received: from mailredirect.nyi.internal (imap21.nyi.internal [10.202.2.71])
by mailforward.nyi.internal (Postfix) with ESMTP id D
7320194237B;
Wed, 19 Aug 2020 00:09:14 -0400 (EDT)
Received: by mailredirect.nyi.internal (Postfix, from userid 99)
id EFD
21660060; Wed, 19 Aug 2020 00:09:11 -0400 (EDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
by sloti21d2t01 (Cyrus 3.3.0-191-gef79d59-fm-
20200818.001-gef79d590) with LMTPA;
Tue, 18 Aug 2020 18:00:44 -0400
X-Cyrus-Session-Id: sloti21d2t
01-1597788044-1750946-2-15013500834637691289 X-Backscatter: NotFound1
X-Backscatter-Hosts:
Received: from mx5 ([10.202.2.204])
by compute3.internal (LMTPProxy); Tue, 18 Aug 2020 18:00:46 -0400
Received: from mx5.messagingengine.com (localhost [127.0.0.1])
by mailmx.nyi.internal (Postfix) with ESMTP id 628E43C0118
for <
6565318e33cc4245ad5418dfc4e7fc68@blue2.ca>; Tue, 18 Aug 2020 18:00:45 -0400 (EDT)
Received: from mx5.messagingengine.com (localhost [127.0.0.1])
by mx5.messagingengine.com (Authentication Milter) with ESMTP
id 9A2A2693EB2;
Tue, 18 Aug 2020 18:00:45 -0400
ARC-Seal: i=1; a=rsa-sha256; cv=none; d=messagingengine.com; s=fm3; t=
1597788045; b=QMJBTdhLMVxg5gXc/TFErE46NWoFdZ7hkG523HvoRLGUSTI67T
y0t55Mh2uHtiZPDKXJIexlj8ojsCFTvXZR7p6Q6Y7RFwF+zaW2sR1BSXBsCOg+qC
SwOvDj5zZbhHgJktVc9osjT9i1kUcv9ggKdapkPm+Bz6cn8yjLrxIY/D3zm9CFtG
Wr+HMjMr0WwLqIgOlSvO3y7KfXDUgwrohiuLmcNlAjR8uTCczNTOBU+f5PPdcXah
9tY1oxY/AlDg5YQawBNSYkqDrG3wCjmaTqDopvCkZ2vnay+v0AuQw/Kqgsi2kLaD
KkQE+YiHo3nYJTPlliNQ08DdnMIBarkoEsjg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=
messagingengine.com; h=to:subject:from:mime-version:content-type
:message-id:date; s=fm3; t=
1597788045; bh=i4XMIyg9AcEAO6SKeV0wHz
DxI1xQq0HtNxuKNWvBkAY=; b=h2Z0pX+QVIdI6COH20qk7+nPNlaBQ9JJdFhEB9
TU0EHFpTquoFutU6nhgb7rthRmJ8yhgyg6Y0w/KVhOPFng/5lnbHHMjBwsR0H2uQ
hxwyTZFVC8m3r+Jqpk8PaVSo4E0uSZLZXJ6YlSVuaayvplFlqWXB0/0Kim5y4060
zFYmeFj3CD9S9BGpwXS87PiMvSr75GKUWjBvxK74y0SFMqr2jQsmb/DdVa+HhAWb
WwnqWxjJgVyrznhgHumQqwc8GOEC7DPy+t0gFxmhG9rdIOxxASdircReaqrPmc+/
Zfw2P1pklaxrCcGrlIlMlyNb3riM5zP63WeOxzD9jsAS2IMQ==
ARC-Authentication-Results: i=1; mx5.messagingengine.com; arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail
smtp.mailfrom=webmaster@gagauzyeri.md smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1
Authentication-Results: mx5.messagingengine.com;
arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail
smtp.mailfrom=webmaster@gagauzyeri.md smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1
X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgeduiedruddtjedgtdeiucetufdoteggodetrfdotf
fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu
rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucgoufhushhpvggtthfkmh
hgffhomhgrihhnucdlfedtmdenogfuphgrmhetlhhirghsucdlfedttddmnecujfgurhep
vffuhfggtgesmhdttdertddtjeenucfhrhhomheppfgvthhflhhigidruceonhhtgiesnh
hfthigrdgtohhmqeenucggtffrrghtthgvrhhnpefgieelhfeggedtieekgfffjedtffet
geefueehjeehvdeviefhudeuteekleehudenucffohhmrghinheprhhohigrlhhsihhlkh
hshihsrdgtohhmpdhnvghtfhhlihigrdgtohhmnecukfhppeejkedrgeeirddutdelrdej
feenucfuphgrmhetlhhirghspefpvghtfhhlihigrdenucevlhhushhtvghrufhiiigvpe
dtnecurfgrrhgrmhepihhnvghtpeejkedrgeeirddutdelrdejfedphhgvlhhopedvuddr
fhhsnhdurdhhvghtiihnvghrrdgrsggtugdrnhgvthifohhrkhdpmhgrihhlfhhrohhmpe
eofigvsghmrghsthgvrhesghgrghgruhiihigvrhhirdhmugequcfukfgkgfepudekleeg
td
X-ME-VSScore: 330
X-ME-VSCategory: spam:medium
Received-SPF: softfail
(gagauzyeri.md … _spf.yandex.ru: Sender is not authorized by default to use ‘
webmaster@gagauzyeri.md‘ in ‘mfrom’ identity, however domain is not currently prepared for false failures (mechanism ‘~all’ matched))
receiver=mx5.messagingengine.com;
identity=mailfrom;
envelope-from=»
webmaster@gagauzyeri.md«;
helo=21.fsn1.hetzner.abcd.network;
client-ip=78.46.109.73
Received: from 21.fsn1.hetzner.abcd.network (21.fsn1.hetzner.abcd.network [78.46.109.73])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx5.messagingengine.com (Postfix) with ESMTPS
for <
6565318e33cc4245ad5418dfc4e7fc68@blue2.ca>; Tue, 18 Aug 2020 18:00:43 -0400 (EDT)
Received: from sklad2068 by 21.fsn1.hetzner.abcd.network with local (Exim 4.94)
(envelope-from <
webmaster@gagauzyeri.md>)
id 1k89er-0005fU-Hr
for
6565318e33cc4245ad5418dfc4e7fc68@blue2.ca; Wed, 19 Aug 2020 01:00:41 +0300
To:
6565318e33cc4245ad5418dfc4e7fc68@blue2.ca Subject: Attention: Your account status change
X-PHP-Originating-Script: 526:alexus.php
From: Netflix. <
ntx@nftx.com>
MIME-Version: 1.0;
Content-type: multipart/mixed; boundary=»—1Pxp4X8Fsx»
Message-Id: <
E1k89er-0005fU-Hr@21.fsn1.hetzner.abcd.network>
Date: Wed, 19 Aug 2020 01:00:41 +0300
Original-Authentication-Results: mx5.messagingengine.com;
arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail
smtp.mailfrom=webmaster@gagauzyeri.md smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1