This is a Fastmail Abuse Report for an email message received from domain nftx.com, IP 78.46.109.73, on Tue, 18 Aug 2020 21:53:13 +0000.
Original-Rcpt-To: b2ce30316eb6dc9c848c1deecfcde2ec@marvinp.ca
Original-Mail-From: ntx@nftx.com
Reported-Domain: nftx.com
Source-Ip: 78.46.109.73
Source: Fastmail
Abuse-Type: complaint
Feedback-Type: abuse
User-Agent: ReturnPathFBL/2.0
Version: 1
Arrival-Date: Tue, 18 Aug 2020 21:53:13 +0000
Subscription-Link: https://fbl.returnpath.net/manage/subscriptions/394804
Received: from forward1-smtp.messagingengine.com (forward1-smtp.messagingengine.com [66.111.4.223])
by haraka-ss-mx-3 (Haraka/2.8.21) with ESMTPS id 3BDB4CD4-5357-49B9-88C9-A62DBE4235D8.1
envelope-from <noreply@fastmail.com>
(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 verify=FAIL);
Wed, 19 Aug 2020 12:42:03 +0000
Received: from mailredirect.nyi.internal (imap6.nyi.internal [10.202.2.56])
by mailforward.nyi.internal (Postfix) with ESMTP id 553821942720;
Wed, 19 Aug 2020 08:42:03 -0400 (EDT)
Received: by mailredirect.nyi.internal (Postfix, from userid 99)
id 5492C1400A1; Wed, 19 Aug 2020 08:42:03 -0400 (EDT)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
by sloti35d2t06 (Cyrus 3.3.0-191-gef79d59-fm-20200818.001-gef79d590) with LMTPA;
Tue, 18 Aug 2020 17:53:18 -0400
X-Cyrus-Session-Id: sloti35d2t06-1597787598-743475-2-14737042144754694893
X-Backscatter: NotFound1
X-Backscatter-Hosts:
Received: from mx5 ([10.202.2.204])
by compute1.internal (LMTPProxy); Tue, 18 Aug 2020 17:53:18 -0400
Received: from mx5.messagingengine.com (localhost [127.0.0.1])
by mailmx.nyi.internal (Postfix) with ESMTP id 4C6BC3C00EC
for <b2ce30316eb6dc9c848c1deecfcde2ec@marvinp.ca>; Tue, 18 Aug 2020 17:53:17 -0400 (EDT)
Received: from mx5.messagingengine.com (localhost [127.0.0.1])
by mx5.messagingengine.com (Authentication Milter) with ESMTP
id C5536133766;
Tue, 18 Aug 2020 17:53:17 -0400
ARC-Seal: i=1; a=rsa-sha256; cv=none; d=messagingengine.com; s=fm3; t=
1597787597; b=UeG80yJzPOHWisQehDsfXa0If7T5QWj0FQdOKleo9Kn1X27koj
/AU18+fRPTDrpSpRoDKMEn1Lsni0D2s6yF5kzP4YoT7MGoeGhLsDl8tg7/uOSBBf
A20m+vQRnkkPutDZSvq7Aaq/U+z74ROl8/3gbBJoYzr2OGkDHkXp0G5R3NaSHAzW
rs7aFiM/OY0MRrfOal/vX4J55k1eTIulyKX6YJjvfDpqRCmZP+H9olcezElsNAHs
lyisKScSG8KO4kJ8YNHWC0DvFq5dB9otJ74h6w/khovTrgB9pVDOsXwZfjtCB4Xi
ZGLjZT8tQh7GDc6W3JW+s3A3JCwTyovOd9pg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=
messagingengine.com; h=to:subject:from:mime-version:content-type
:message-id:date; s=fm3; t=1597787597; bh=aScmOem3UllEWodRb7n14W
YUKJZ9znmuIkcbBfakxwA=; b=MEX5yfW5ZQ2ZfDqqN66Yi9H7VH1Y2NWBPEdJlA
2lwgvJ6TmjiSuTBrgWMRykZRmLNfsguTPiM8IbnBUyEyG9rIJZk68W/vL4ZUep07
Bm/BajcI3BlMtTtPyFPhKTrkGqX+AE6qDVFUK/f7ya4kB0HN/SXbmr8NuR95+i2D
b7ELvqjycSX0t0lCwZg7COb4bY8CGBhF3/5KcjouoxNJUyt9I29wPWRqaHjLs66J
OKEel3USr8WOT5biatDUStDyCXR2uZhnCoKDP33kHMcYE2jq/wW2Lv/XS56o3PYz
7Qj5DMXcAwWQautykYOytV8i/vhhhwLDax4j6tbHTL2eZ9vA==
ARC-Authentication-Results: i=1; mx5.messagingengine.com; arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail smtp.mailfrom=webmaster@gagauzyeri.md
smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1
Authentication-Results: mx5.messagingengine.com;
arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail smtp.mailfrom=webmaster@gagauzyeri.md
smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1
X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgeduiedruddtjedgtdegucetufdoteggodetrfdotf
fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu
rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucgoufhushhpvggtthfkmh
hgffhomhgrihhnucdlfedtmdenogfuphgrmhetlhhirghsucdlfedttddmnecujfgurhep
vffuhfggtgesmhdttdertddtjeenucfhrhhomheppfgvthhflhhigidruceonhhtgiesnh
hfthigrdgtohhmqeenucggtffrrghtthgvrhhnpefgieelhfeggedtieekgfffjedtffet
geefueehjeehvdeviefhudeuteekleehudenucffohhmrghinheprhhohigrlhhsihhlkh
hshihsrdgtohhmpdhnvghtfhhlihigrdgtohhmnecukfhppeejkedrgeeirddutdelrdej
feenucfuphgrmhetlhhirghspefpvghtfhhlihigrdenucevlhhushhtvghrufhiiigvpe
dtnecurfgrrhgrmhepihhnvghtpeejkedrgeeirddutdelrdejfedphhgvlhhopedvuddr
fhhsnhdurdhhvghtiihnvghrrdgrsggtugdrnhgvthifohhrkhdpmhgrihhlfhhrohhmpe
eofigvsghmrghsthgvrhesghgrghgruhiihigvrhhirdhmugequcfukfgkgfepudekleeg
td
X-ME-VSScore: 330
X-ME-VSCategory: spam:medium
Received-SPF: softfail
(gagauzyeri.md … _spf.yandex.ru: Sender is not authorized by default to use ‘webmaster@gagauzyeri.md‘ in ‘mfrom’ identity, however domain is not currently prepared for false failures (mechanism ‘~all’ matched))
receiver=mx5.messagingengine.com;
identity=mailfrom;
envelope-from=»webmaster@gagauzyeri.md«;
helo=21.fsn1.hetzner.abcd.network;
client-ip=78.46.109.73
Received: from 21.fsn1.hetzner.abcd.network (21.fsn1.hetzner.abcd.network [78.46.109.73])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx5.messagingengine.com (Postfix) with ESMTPS
for <b2ce30316eb6dc9c848c1deecfcde2ec@marvinp.ca>; Tue, 18 Aug 2020 17:53:15 -0400 (EDT)
Received: from sklad2068 by 21.fsn1.hetzner.abcd.network with local (Exim 4.94)
(envelope-from <webmaster@gagauzyeri.md>)
id 1k89Xd-0002Vm-OQ
for b2ce30316eb6dc9c848c1deecfcde2ec@marvinp.ca; Wed, 19 Aug 2020 00:53:13 +0300
To: b2ce30316eb6dc9c848c1deecfcde2ec@marvinp.ca
Subject: Attention: Your account status change
X-PHP-Originating-Script: 526:alexus.php
From: Netflix. <ntx@nftx.com>
MIME-Version: 1.0;
Content-type: multipart/mixed; boundary=»—CEmjuerxQh»
Message-Id: <E1k89Xd-0002Vm-OQ@21.fsn1.hetzner.abcd.network>
Date: Wed, 19 Aug 2020 00:53:13 +0300
Original-Authentication-Results: mx5.messagingengine.com;
arc=none (no signatures found);
bimi=skipped (DMARC none);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=nftx.com;
iprev=pass smtp.remote-ip=78.46.109.73 (21.fsn1.hetzner.abcd.network);
spf=softfail smtp.mailfrom=webmaster@gagauzyeri.md
smtp.helo=21.fsn1.hetzner.abcd.network;
x-aligned-from=fail;
x-ptr=pass smtp.helo=21.fsn1.hetzner.abcd.network
policy.ptr=21.fsn1.hetzner.abcd.network;
x-return-mx=pass header.domain=nftx.com policy.is_org=yes
(MX Records found: nftx-com.mail.protection.outlook.com);
x-return-mx=pass smtp.domain=gagauzyeri.md policy.is_org=yes
(MX Records found: mx.yandex.net);
x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES128-GCM-SHA256
smtp.bits=128/128;
x-vs=spam:medium score=330 state=1
