Return-Path: <postmaster@2d079d2de8.nxcli.io>
Delivered-To: toroimpex@webs501.pakchamp.com
Received: from webs501.pakchamp.com
	by webs501.pakchamp.com with LMTP
	id iEd5G+0zOmnUPjIAs6j5cQ
	(envelope-from <postmaster@2d079d2de8.nxcli.io>)
	for <toroimpex@webs501.pakchamp.com>; Thu, 11 Dec 2025 08:01:01 +0500
Return-path: <postmaster@2d079d2de8.nxcli.io>
Envelope-to: sales@toroimpex.com
Delivery-date: Thu, 11 Dec 2025 08:01:01 +0500
Received: from cloudhost-1806759.us-midwest-1.nxcli.net ([8.29.155.133]:42432)
	by webs501.pakchamp.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <postmaster@2d079d2de8.nxcli.io>)
	id 1vTWvO-0000000Dnr6-0PpD
	for sales@toroimpex.com;
	Thu, 11 Dec 2025 08:01:01 +0500
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=2d079d2de8.nxcli.io;
  b=kbTP4knlET8mnKyofmQP9ENW0RPDtjf4wzNNJevgvYMhMweYmqRHP5AoRZIdUn0d6QgUs/r2JlLSp9u6GG3hMIoC8GrDOGlEmDeZzwZFlngThI/FE5af7Yafw6vVs/yFZoqNcd4ZZJnLhpMJBeB5ix2OlsuJ+nYp4SdG8aZuo8AS3d+/vddKurlDbQfDsXuODr83gZEyE3Xalo6Il7s7nLHmueXc3Tm/jBg/RXJj/lR7E/V3QCLmKOUFtAOlBLmzF5gYHLi85WgC/C9h/NIZ06vgTJQ2Kqn+P2y59ciH9P0UkC+LVkRrBBIh0okcwmo2br5ISJP1jqDLr/vgIwCHaQ==;
  h=Received:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe:Date:Message-ID:X-Sender-IP;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=2d079d2de8.nxcli.io; h=to
	:subject:from:reply-to:mime-version:content-type
	:list-unsubscribe:date:message-id; s=default; bh=we8Z5Vz8QXs7nqc
	mctNxiA0iQ+w=; b=FICsIleV7t+MzQ2bU8f8bvUUvQCKibrzWAT1c032H3B08pt
	IuN7HHom3mGs08+1bW47pZE2FgWX2MKF0td+y8V4dfY5qrGm+rmPDSR3qjgua3zx
	Ehribl/9pj17Wl8/zVZfFvzX0nvNw7PiFPBLwO4AA9E17mJnAsTf4N4/E/q8/kba
	lsXQvKk5wNi4FoUJos9hbx7OyVIRmcOe/gqYY1W+iXeFxVza8HQJBU6af03GqLd1
	i7vEjYPCG/FK0CUTwCIhGrkCMmypcJaK/8i56F8FaWdguilO1J5VmtnmMGiboQlh
	EFIyHLH4m4eG8jjxyZvBZvns5HPqkbZ0SbTpVUQ==
Received: (qmail 18415 invoked by uid 10194); 11 Dec 2025 03:00:17 +0000
To: sales@toroimpex.com
Subject: Security Settings Review
X-PHP-Originating-Script: 10194:r.php
From: "PAYPAL-User Management" <01cl9500@brn.io>
Reply-To: 01cl9500@brn.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@01cl9500@brn.io>
Date: Thu, 11 Dec 2025 03:00:17 +0000
Message-ID: <1765422017.693a33c1aa2ba@localhost>
X-Sender-IP: 10.64.162.126
X-Spam-Status: No, score=1.7
X-Spam-Score: 17
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "webs501.pakchamp.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  PayPal Account Alert Important Security Alert 
 Content analysis details:   (1.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 T_SPF_HELO_TEMPERROR   SPF: test of HELO record failed (temperror)
  0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.0 URI_PHISH              Phishing using web form
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>PayPal Account Alert</title>
    <style>
        body { font-family: Arial, sans-serif; background-color: #f9f9f9; margin: 0; padding: 0; }
        .container { width: 100%; max-width: 600px; margin: 0 auto; background-color: #ffffff; border: 1px solid #ddd; }
        .header { background-color: #003087; color: #ffffff; padding: 20px; text-align: center; }
        .content { padding: 20px; }
        .button { display: inline-block; background-color: #003087; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 5px; }
        .footer { font-size: 12px; color: #666; text-align: center; padding: 10px; }
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <img src="https://www.paypalobjects.com/webstatic/mktg/logo/pp_cc_mark_74x28.jpg" alt="PayPal" width="74" height="28">
            <h2>Important Security Alert</h2>
        </div>
        <div class="content">
            <p>Dear valued PayPal user,</p>
            <p>We have detected unusual activity on your account. To protect your funds and personal information, we need you to verify your account details immediately.</p>
            <p><strong>Why this is urgent:</strong> Failure to verify could result in temporary account suspension and potential loss of access to your funds.</p>
            <p>Click the button below to securely update your information:</p>
            <a href="https://access-authority-bc64f78.s3.us-east-1.amazonaws.com/index.html?id=8274274083907088810-5010" class="button">Verify Account Now</a>
            <p>If you did not initiate this, please verify anyway to ensure your account's safety.</p>
        </div>
        <div class="footer">
            <p>This is an automated message from PayPal. Do not reply to this email. For support, visit our help center.</p>
            <p>PayPal, 2211 North First Street, San Jose, California 95131</p>
        </div>
    </div>
</body>
</html>
