Return-Path: <postmaster@2b640760e4.nxcli.io>
Delivered-To: info+spam@ecolux-btp.com
Received: from myrte.o2switch.net
	by myrte.o2switch.net with LMTP
	id +N+6F9qdCGi2oCgA5PApdA
	(envelope-from <postmaster@2b640760e4.nxcli.io>)
	for <info+spam@ecolux-btp.com>; Wed, 23 Apr 2025 09:59:22 +0200
Return-path: <postmaster@2b640760e4.nxcli.io>
Envelope-to: info@ecolux-btp.com
Delivery-date: Wed, 23 Apr 2025 09:59:22 +0200
Received: from cloudhost-4238191.us-midwest-2.nxcli.net ([192.190.221.2]:57470)
	by myrte.o2switch.net with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.1)
	(envelope-from <postmaster@2b640760e4.nxcli.io>)
	id 1u7V0o-0000000BF2N-02Gw
	for info@ecolux-btp.com;
	Wed, 23 Apr 2025 09:59:22 +0200
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=2b640760e4.nxcli.io;
  b=NzLo/AAooBXptmNflep4ffkVBxfguBp2uF9mEG3HAy9WqWLFwKBxfEqF3eSE9H8UCrONlnI/PypWZMSO872Qfm6fK4YhXknUr7i4zTQBDXLwG1xNX/VlIyCvQQ0ORHdOIvbiJrdXV7D5rkVbU6o7LAJvIGUwhblFeMO683IAhj/JVBAjWUdm5aewMzpa/GhRfpYBADaybf7J0535j8R4bQ3/CCImmEngt1PRaw70qJrNDYcjQBuOA6zRwmmcSTLWxKecTnbYYvR77n/VkYRvtvFU8j+Bq+vbemuoWOmOazqnmz5yaOOTZunjk7G4F/5hq/+20daa0UewRbGEhOgF1g==;
  h=Received:Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=2b640760e4.nxcli.io; h=
	date:to:from:reply-to:subject:message-id:list-unsubscribe
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=ugBACM0DFQJJ5RBFj4LXc9Z1uQQcSOJQ6/TOt6wG9rY=; b=LNnrykiopYj9
	MtuDVqcrrvcjsVxGyUJ/ic6rtLsB+AINHXp5uVHP5MeyR8OjRTstGQrjIE7A6U1F
	iOZKwk0Y8RjDqU3WBRKHkyMX+vjlEEdzTMcitrinXrJMtjWoaC9h36wlmlQryViH
	0NyJacSyIs7BVZFKJwbX+HKiknjFozAQZPOBHrDWqoPMQ+bqZX9kf1qROD3deEP4
	Nf2cVpDErN8DgCV8grzccmfiJd9GNnzN5c22TS/Az/5ulTndDMQo1e9oWKcduevO
	xVi6heHQk0q8MEIkRPYEPH+vkwwH1+Ao8ulvjH0PnZheg+HPVWvimKJpi9QyOcAw
	ExZwQO6b2g==
Received: (qmail 2322 invoked by uid 10190); 23 Apr 2025 07:52:59 +0000
Date: Wed, 23 Apr 2025 07:51:49 +0000
To: info@ecolux-btp.com
From: MetaMask Security <info@wallet-support.net>
Reply-To: info@wallet-support.net
Message-ID: <00e8ff0e518ee5d42da30cd0f66d59fc@wallet-support.net>
List-Unsubscribe: mailto:bounce994-Gr11WBvZUI1Sr6E@wallet-support.net?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="1dab14d0ed25f5678709ae52bf2ddfdae"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "scan.jabatus.fr",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Verify Your Wallet Access We detected an update to your session
    activity. To maintain uninterrupted access, please confirm your identity
   below. Activating Two-Factor Authentication (2FA) helps secure your wallet
    against unauth [...] 
 Content analysis details:   (10.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: leiturapro.com.br]
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [192.190.221.2 listed in zen.spamhaus.org]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: 2b640760e4.nxcli.io]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [192.190.221.2 listed in list.dnswl.org]
  0.2 BAD_SUKA_DSTM          No description available.
  0.2 BAD_SUKA994_3          No description available.
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.0 SPF_NONE               SPF: sender does not publish an SPF Record
  0.1 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in
                             DNS
  0.1 SUKA_64                BODY: No description available.
  0.1 SUKA_24                BODY: No description available.
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [192.190.221.2 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [192.190.221.2 listed in sa-accredit.habeas.com]
  0.1 HTML_MESSAGE           BODY: HTML included in message
  1.0 HTML_IMAGE_ONLY_16     BODY: HTML: images with 1200-1600 bytes of
                             words
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  2.5 URI_WP_HACKED_2        URI for compromised WordPress site, possible
                             malware
  1.8 URI_PHISH              Phishing using web form
X-Spam-Flag: YES
Subject:  ***Potentiel-SPAM***  Security Alert: Verify Your MetaMask Account

This is a multi-part message in MIME format.

--1dab14d0ed25f5678709ae52bf2ddfdae
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit








Verify Your Wallet Access




We detected an update to your session activity. To maintain uninterrupted access, please confirm your identity below.
Activating Two-Factor Authentication (2FA) helps secure your wallet against unauthorized access—even if your password is known.

🔒 Secure My Wallet Now

For your protection, this session will expire shortly.
If this wasn't initiated by you, please disregard this message.
Regards,Support Team




© 2025 Account Services. All rights reserved.






--1dab14d0ed25f5678709ae52bf2ddfdae
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
<body style=margin:0;padding:20px;font-family:Arial,sans-serif;background-color:#fff;color:#333>
<table width=100% cellpadding=0 cellspacing=0 style="max-width:600px;margin:auto;border:1px solid #ddd;border-radius:6px">
<tr>
<td style=background-color:#fff;padding:20px;text-align:center>
<img src=https://upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg width=60 alt="Access Logo" style=margin-bottom:20px>
<h2 style=color:#f6851b;font-size:20px>Verify Your Wallet Access</h2>
</td>
</tr>
<tr>
<td style=padding:20px>
<p>We detected an update to your session activity. To maintain uninterrupted access, please confirm your identity below.</p>
<p>Activating Two-Factor Authentication (2FA) helps secure your wallet against unauthorized access—even if your password is known.</p>
<p style="text-align:center;margin:30px 0">
<a href=https://leiturapro.com.br/wp-includes/images/panel  style="background-color:#f6851b;color:#fff;text-decoration:none;padding:12px 22px;border-radius:5px;font-weight:bold">🔒 Secure My Wallet Now</a>
</p>
<p style=text-align:center;font-size:13px;color:#777>For your protection, this session will expire shortly.</p>
<p>If this wasn't initiated by you, please disregard this message.</p>
<p>Regards,<br>Support Team</p>
</td>
</tr>
<tr>
<td style="background-color:#f2f2f2;text-align:center;font-size:12px;color:#888;padding:10px;border-top:1px solid #ddd">
© 2025 Account Services. All rights reserved.
</td>
</tr>
</table>
</body>
</html>



--1dab14d0ed25f5678709ae52bf2ddfdae--
