Return-Path: <postmaster@4151e60aa2.nxcli.io>
Delivered-To: toroimpex@webs401.pakchamp.com
Received: from webs401.pakchamp.com
	by webs401.pakchamp.com with LMTP
	id UFYDBpdOjGcCQiUA7NjJ0Q
	(envelope-from <postmaster@4151e60aa2.nxcli.io>)
	for <toroimpex@webs401.pakchamp.com>; Sun, 19 Jan 2025 06:00:07 +0500
Return-path: <postmaster@4151e60aa2.nxcli.io>
Envelope-to: sales@toroimpex.com
Delivery-date: Sun, 19 Jan 2025 06:00:07 +0500
Received: from cloudhost-3400006.us-midwest-1.nxcli.net ([209.87.149.216]:36360)
	by webs401.pakchamp.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <postmaster@4151e60aa2.nxcli.io>)
	id 1tZJfZ-0000000AFcC-1Cnm
	for sales@toroimpex.com;
	Sun, 19 Jan 2025 06:00:07 +0500
Received: (qmail 19629 invoked by uid 10182); 19 Jan 2025 00:24:30 +0000
Date: 19 Jan 2025 00:24:30 +0000
Message-ID: <20250119002430.19617.qmail@cloudhost-3400006.us-midwest-1.nxcli.net>
To: sales@toroimpex.com
Subject: =?UTF-8?B?U2VjdXJpdHkgQWxlcnQ6IFZlcmlmeSBVbnVzdWFsIEFjdGl2aXR5IGluIFlvdXIgV2FsbGV0IQ==?=
X-PHP-Originating-Script: 10182:mail.php
From: MetaMask Wallet Protection <9lt3l1r9@secure-wallets.com>
Reply-To: no-reply@example.com
Content-Type: text/html; charset=UTF-8
X-Mailer-ID: 678c463ee14a1
X-Origin-IP: 192.168.1.135
X-Message-ID: 3f0f710596795edf459b9aa20cf9486e
X-Origin-Time: 2025-01-19 00:24:30
X-Campaign-ID: 541ffb9367b8afcc
List-Unsubscribe: <mailto:unsubscribe@example.com>
X-Spam-Status: No, score=4.0
X-Spam-Score: 40
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "webs401.pakchamp.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Suspicious Activity Detected Take Immediate Action 
 Content analysis details:   (4.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: wikimedia.org]
                             [URI: texknitsourcing.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.1 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
                             headers
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [209.87.149.216 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [209.87.149.216 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [209.87.149.216 listed in bl.score.senderscore.com]
  2.5 URI_PHISH              Phishing using web form
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Suspicious Activity Detected</title>
</head>
<body style="margin: 0; padding: 0; background-color: #f7f9fc; font-family: Arial, sans-serif; line-height: 1.6; color: #333;">
    <!-- Wrapper -->
    <table width="100%" cellpadding="0" cellspacing="0" style="background-color: #f7f9fc; padding: 30px 0;">
        <tr>
            <td align="center">
                <!-- Email Container -->
                <table width="600px" style="max-width: 600px; background-color: #ffffff; border-radius: 10px; overflow: hidden; box-shadow: 0 4px 15px rgba(0, 0, 0, 0.1);">
                    <!-- Header -->
                    <tr>
                        <td style="padding: 20px; text-align: center; background-color: #004085;">
                            <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/3/36/MetaMask_Fox.svg/1200px-MetaMask_Fox.svg.png" alt="Logo" style="width: 100px; height: auto;">
                        </td>
                    </tr>
                    <!-- Body -->
                    <tr>
                        <td style="padding: 30px; color: #333333;">
                            <h1 style="color: #004085; font-size: 24px; text-align: center; margin-bottom: 20px;">Take Immediate Action</h1>
                            <p>We’ve detected unusual activity associated with your account. To ensure your security, certain features have been restricted temporarily.</p>
                            <p>Please confirm this activity and restore your account’s functionality by verifying your email:</p>
                            <p style="text-align: center; margin: 30px 0;">
                                <a href="https://texknitsourcing.com/nt.php?id=5377038493183025583-4495" style="background-color: #004085; color: #ffffff; text-decoration: none; padding: 12px 30px; border-radius: 5px; font-weight: bold; font-size: 16px;">Verify My Email</a>
                            </p>
                            <p>If you believe this action was taken in error, please contact our support team immediately.</p>
                            <p>Thank you for your cooperation.</p>
                        </td>
                    </tr>
                    <!-- Footer -->
                    <tr>
                        <td style="padding: 15px; text-align: center; font-size: 12px; background-color: #f7f9fc; color: #777777;">
                            <p>This email was sent from a notification-only address. Please do not reply.</p>
                            <p>&copy; 2025. All rights reserved.</p>
                        </td>
                    </tr>
                </table>
            </td>
        </tr>
    </table>
</body>
</html>
<!-- Random-ID: 678c463ee14b6 -->
