Return-Path: Delivered-To: info+spam@mailwardco.com Received: from sand163.sitesanctuary.org by sand163.sitesanctuary.org with LMTP id 0+yYMHJk12cw0icAfhI6Ng (envelope-from ) for ; Sun, 16 Mar 2025 23:53:22 +0000 Return-path: Envelope-to: info@mailwardco.com Delivery-date: Sun, 16 Mar 2025 23:53:22 +0000 Received: from [176.65.134.174] (port=49589 helo=mailwardco.com) by sand163.sitesanctuary.org with esmtp (Exim 4.98.1) (envelope-from ) id 1ttxnE-0000000AwPM-2ll6 for info@mailwardco.com; Sun, 16 Mar 2025 23:53:22 +0000 From: Abuse mailwardco.com Hosting provider To: info@mailwardco.com Date: 16 Mar 2025 16:51:22 -0700 Message-ID: <20250316165122.90CF0E171789EAA8@mailwardco.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=48.7 X-Spam-Score: 487 X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "sand163.sitesanctuary.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 7 Suspension Notice. Content analysis details: (48.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [176.65.134.174 listed in psbl.surriel.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: bafkreie6dita4ogrgjyryynkomtebn6ctsydb2cp3uumfhfws3e2ekesr4.ipfs.dweb.link] [URI: mailwardco.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: bafkreie6dita4ogrgjyryynkomtebn6ctsydb2cp3uumfhfws3e2ekesr4.ipfs.dweb.link] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in bl.score.senderscore.com] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mailwardco.com;ip=176.65.134.174;r=sand163.sitesanctuary.org] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=abuse%40mailwardco.com;ip=176.65.134.174;r=sand163.sitesanctuary.org] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 18 KAM_IPFS Abused Protocol for Distributed Content 1.3 URI_DWEBIPFS References Interplanetary File System PtP content via dweb.link, likely phishing 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd, .club, .date, .guru, .link, .live, .monster, .online, .press, .pw, .quest, .rest, .sbs, .shop, .stream, .top, .trade, .wiki, .work, .xyz TLD abuse 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 5.5 KAM_MAILBOX2 Mailbox Quota Phishing Scams X-Spam-Flag: YES Subject: ***SPAM*** Suspension Notice info@mailwardco.com New Page 7
 

Suspension Notice.

The number of outbound emails generated from yo= ur  info@mailwardco.com violates Our Host= ing Services Agreement and/or Acceptable Use Policy.

Your account services has been marked for suspe= nsion due to violation of our terms and conditions.


To prevent this = your are required to verify your account.
   =20
Ensure to = verify your account as soon as possible to avoid service interruption and l= oosing access.
 =20

= Thank you= ,
Abuse Department  mailwardco.com  Hosting provider
=