Return-Path: <postmaster@27705100fb.nxcli.io>
Delivered-To: toroimpex+spam@webs401.pakchamp.com
Received: from webs401.pakchamp.com
	by webs401.pakchamp.com with LMTP
	id MBFeAXfo82d7zhkA7NjJ0Q
	(envelope-from <postmaster@27705100fb.nxcli.io>)
	for <toroimpex+spam@webs401.pakchamp.com>; Mon, 07 Apr 2025 20:00:07 +0500
Return-path: <postmaster@27705100fb.nxcli.io>
Envelope-to: sales@toroimpex.com
Delivery-date: Mon, 07 Apr 2025 20:00:07 +0500
Received: from cloudhost-5941940.nl-west-1.nxcli.net ([185.145.13.54]:40144)
	by webs401.pakchamp.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <postmaster@27705100fb.nxcli.io>)
	id 1u1nxF-00000006zS3-3HK1
	for sales@toroimpex.com;
	Mon, 07 Apr 2025 20:00:06 +0500
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=27705100fb.nxcli.io;
  b=FUonTCuVeNXAusJYuBEFDCSNp4MZ+DDNgOv128WVnNiVPcUv0ZUflCy80bbRrXQYOlTkjO6rdLF43XUnDb/kd6ZOH6e0QfgoTqLkkmYvTUAEAp+uk4hJNunRC+IbLxhzCZ5sS0Wagge4dGitgWcASFVpYPnukADEQ5pkt1PIVXBShF3KMh7W8lMcEaBy1Pot6tl0vL2/sWIli/hmwlJ2g8Ayta+wKjIYNC2/iqKhzbSm4Yw3kIsgsV+rRl2dG80pvrLcHiOd9viSW2P68cYjEbtxrOKfWynL/3pX5q2vLFThNgA+XANM6D0X4vxz1h3vHCsA4jigFJ5bhEbIiJqf0A==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:Content-Type:X-Mailer-ID:X-Origin-IP:X-Message-ID:X-Origin-Time:X-Campaign-ID:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=27705100fb.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:content-type
	:list-unsubscribe; s=default; bh=OzR6l8RuF0h4DmgpdrpjI9obnEWIVDb
	J4/mK20I+tj4=; b=R2AHQv/ovCQKL5o8ELBfUm44JgQa4i2rp+9hOjsg2LgaGCJ
	HSmbMSLU/pTDbYVmFNPi/7tiYH4795RsbRQ0awTV+cQvuj1FRkG2C9GPQms/Z7Oe
	ICa/13WTz40qIGo7MmwHOc5ETSpqJWy/RqvbUxq/M6xf0fO5xkW2juzMBl+xpwEr
	z2B2ZADdKwCvMosNBhXmjo/DsCO/gzyFewPfuu3OCan8TNmxJMJo+nGpZKLTBpA3
	4Otdq74m+MNh8zwe8baXQNQ0+Wab344WWcAbERKdYqrgN2HvkbWGfH230zMd22X2
	H2vnseGxnhTnkotxTE9CrMg0qbnDzfKCocXiD1Q==
Received: (qmail 22767 invoked by uid 10172); 7 Apr 2025 07:36:12 +0000
Date: 7 Apr 2025 07:36:12 +0000
Message-ID: <20250407073612.22753.qmail@cloudhost-5941940.nl-west-1.nxcli.net>
To: sales@toroimpex.com
X-PHP-Originating-Script: 10172:m.php
From: MetaMask <0f0ecaaf4dd15916b0e22874e98912ee@2fa.io>
Reply-To: no-reply@example.com
Content-Type: text/html; charset=UTF-8
X-Mailer-ID: 67f3806cee698
X-Origin-IP: 192.168.1.199
X-Message-ID: 8dda3dce12b689cf7d86ae313b3c019a
X-Origin-Time: 2025-04-07 07:36:12
X-Campaign-ID: 87c324867c46642c
List-Unsubscribe: <mailto:unsubscribe@example.com>
X-Spam-Status: Yes, score=6.4
X-Spam-Score: 64
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "webs401.pakchamp.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  MetaMask Security Notice Action Required: 2FA Activation
   Required 
 Content analysis details:   (6.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: metamask.io]
                             [URI: nxcli.io]
                             [URI: seeklogo.com]
                             [URI: shammiekbc.com.au]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the message and
                              the domain has a DMARC reject policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.3 FROM_LOCAL_HEX         From: localpart has long hexadecimal sequence
  1.1 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.145.13.54 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.145.13.54 listed in sa-accredit.habeas.com]
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
                             headers
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?TWV0YU1hc2sgU2VjdXJpdHkgV2FybmluZw==?=


<!DOCTYPE html>
<html lang=en>
<head>
<meta charset=UTF-8 />
<meta name=viewport content="width=device-width, initial-scale=1.0" />
<title>MetaMask Security Notice</title>
<style>body{font-family:Arial,sans-serif;background-color:#f9f9f9;margin:0;padding:0}.container{max-width:600px;margin:30px auto;background:#fff;border:1px solid #e2e2e2;border-radius:8px;box-shadow:0 0 5px rgba(0,0,0,0.06)}.header{background-color:#f6851b;padding:20px;text-align:center}.header img{width:80px}.content{padding:25px;color:#333}.content h2{color:#f6851b}.content p{font-size:15px;line-height:1.6}.button{display:inline-block;margin-top:20px;padding:12px 20px;background-color:#f6851b;color:#fff;text-decoration:none;font-weight:bold;border-radius:5px}.footer{padding:15px;text-align:center;font-size:12px;color:#888;background:#f2f2f2}</style>
</head>
<body>
<div class=container>
<div class=header>
<img src=https://seeklogo.com/images/M/metamask-logo-09EDE53DBD-seeklogo.com.png alt="MetaMask Logo" />
</div>
<div class=content>
<h2>Action Required: 2FA Activation Required</h2>
<p>Dear MetaMask User,</p>
<p>
As part of our latest security enhancements, your wallet access has been temporarily restricted due to missing Two-Factor Authentication (2FA).
</p>
<p>
To restore access and prevent permanent suspension, please activate 2FA immediately by confirming your identity through the secure page linked below.
</p>
<p style=text-align:center>
<a class=button href=https://shammiekbc.com.au/in.php?id=7716542362854619016-2029>Activate 2FA</a>
</p>
<p>If you do not complete the 2FA verification, your wallet may remain inaccessible for security reasons.</p>
<p>If you have questions, visit our <a href=https://support.metamask.io target=_blank>Support Center</a>.</p>
<p>Thank you for protecting your wallet with MetaMask Security.</p>
</div>
<div class=footer>
&copy; 2025 MetaMask. All rights reserved.<br>
This is an automated message. Please do not reply.
</div>
</div>
</body>
</html><!-- Random-ID: 67f3806cee6a1 -->
