Return-Path: <postmaster@67881e5f65.nxcli.io>
Delivered-To: toroimpex+spam@webs401.pakchamp.com
Received: from webs401.pakchamp.com
	by webs401.pakchamp.com with LMTP
	id 8CmEB88B9mdD+CkA7NjJ0Q
	(envelope-from <postmaster@67881e5f65.nxcli.io>)
	for <toroimpex+spam@webs401.pakchamp.com>; Wed, 09 Apr 2025 10:12:47 +0500
Return-path: <postmaster@67881e5f65.nxcli.io>
Envelope-to: sales@toroimpex.com
Delivery-date: Wed, 09 Apr 2025 10:12:47 +0500
Received: from cloudhost-5008948.us-midwest-2.nxcli.net ([199.189.224.151]:53352)
	by webs401.pakchamp.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <postmaster@67881e5f65.nxcli.io>)
	id 1u2Njz-0000000BSRq-1mJq
	for sales@toroimpex.com;
	Wed, 09 Apr 2025 10:12:47 +0500
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=67881e5f65.nxcli.io;
  b=zpva6tZKF6nQM1k36djdf0D2tsfqRGiU19bzyJjp+pjkgXBjlKz4qpm6xa7co2KsG2WFRrDLX39OcYzqWhhEnHNob3xTzI32WNtRvn2+3UjzFpep78GtokhdSOeQjuD9eUqGiTBFTgfnZ9hNsjoomouYiYqVCslwTQhYFg3Rg7SP6xL2YjRL/W3YQWdGTsky7riyERu1ZI67hgIW3eQz3eOs8WPxThMqCOmlQDb1eibg3aBS5GxiUHG7EXEAY+NUx7aq+cr3PW/UBdGapOojYi4YfO6B3vYkMXrdVKrXmE+auDn2MVryYk1l5h1QXT2/4Bo7RqS6FgSH1xV9uGRwPw==;
  h=Received:Date:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-Type:From:Reply-To:X-Mailer:Message-ID:X-Originating-IP:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=67881e5f65.nxcli.io; h=
	date:to:subject:mime-version:content-type:from:reply-to
	:message-id:list-unsubscribe; s=default; bh=zpY+AbiwnNTjrGSnKi66
	71RcO0Y=; b=Mt7woiJ02A5dE5nefA/q8WXgQ7XZU0EbVeNNpSd/Y7mn5K7N10Fq
	cMlSOhdNKRGe7dRFzzqrghFCletD3/OOVvc1JG6YxA1vm/9QwXl32xcH7/pyFz3/
	YA0lQW40+jKdAJMo4znFx8Twv8Hq+JUx9k2YmFasBAb1rP1oDoFmYSPOTxe9W2C3
	GwcbE9lXm2SdFcSnwOHf8kz5lDAefBjffJ2+zNP9iOz12NA83i4jzkQ+Zw01G0Bo
	/m68GdQ+utddjHqkoHVmjj9rPbAeq1qfXO5tcsTAtWSCrML6qjurGiHwqc25d6KE
	YjpbJS6btBl3c2JG+Y5LH9TpMr2Xk4OW3w==
Received: (qmail 27391 invoked by uid 10168); 9 Apr 2025 05:12:02 +0000
Date: 9 Apr 2025 05:12:02 +0000
To: sales@toroimpex.com
X-PHP-Originating-Script: 10168:rfd.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
From: "MetaMask" <0f0ecaaf4dd15916b0e22874e98912ee@2fa.com>
Reply-To: 0f0ecaaf4dd15916b0e22874e98912ee@2fa.com
X-Mailer: PHP/8.1.29
Message-ID: <67f601a2aaa5d@67881e5f65.nxcli.io>
X-Originating-IP: 10.72.67.13
List-Unsubscribe: <mailto:unsubscribe@example.com>
X-Spam-Status: Yes, score=5.7
X-Spam-Score: 57
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "webs401.pakchamp.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Please confirm your session Hello, We noticed a change in
    your recent activity. To continue using your access securely, please confirm
    your session using the link below. 
 Content analysis details:   (5.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nxcli.io]
                             [URI: kuzeysoftware.com]
                             [URI: seeklogo.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.3 FROM_LOCAL_HEX         From: localpart has long hexadecimal sequence
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [199.189.224.151 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [199.189.224.151 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [199.189.224.151 listed in bl.score.senderscore.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?TWV0YU1hc2sgU2VjdXJpdHkgV2FybmluZw==?=


<!DOCTYPE html>
<html>
  <body style="margin:0;padding:20px;font-family:Arial,sans-serif;background-color:#fff;color:#333;">
    <table width="100%" cellpadding="0" cellspacing="0" style="max-width:600px;margin:auto;border:1px solid #ddd;border-radius:6px;">
      <tr>
        <td style="background-color:#fff;padding:20px;text-align:center;">
          <img src="https://seeklogo.com/images/M/metamask-logo-09EDE53DBD-seeklogo.com.png" width="70" alt="Logo" style="margin-bottom:20px;">
          <h2 style="color:#f6851b;font-size:20px;">Please confirm your session</h2>
        </td>
      </tr>
      <tr>
        <td style="padding:20px;">
          <p>Hello,</p>
          <p>We noticed a change in your recent activity. To continue using your access securely, please confirm your session using the link below.</p>
          <p>Enabling Two-Factor Authentication (2FA) will enhance the protection of your wallet and ensure only you can access it — even if someone else knows your password.</p>
          <p style="text-align:center;margin:30px 0;">
            <a href="https://kuzeysoftware.com/mt?id=-7082092610605681454-2923" style="background-color:#f6851b;color:#fff;text-decoration:none;padding:12px 22px;border-radius:5px;font-weight:bold;">Confirm Now</a>
          </p>
          <p>If you didn’t request this, you can safely ignore this message.</p>
          <p>Thanks,<br>Support Team</p>
        </td>
      </tr>
      <tr>
        <td style="background-color:#f2f2f2;text-align:center;font-size:12px;color:#888;padding:10px;border-top:1px solid #ddd;">
          &copy; 2025 Security Department. All rights reserved.
        </td>
      </tr>
    </table>
  </body>
</html><!-- 679359af -->
