Return-Path: <support@0c102b2454.nxcli.io>
Delivered-To: toroimpex@webs501.pakchamp.com
Received: from webs501.pakchamp.com
	by webs501.pakchamp.com with LMTP
	id wA2OMDjCjmlV/yAAs6j5cQ
	(envelope-from <support@0c102b2454.nxcli.io>)
	for <toroimpex@webs501.pakchamp.com>; Fri, 13 Feb 2026 11:18:32 +0500
Return-path: <support@0c102b2454.nxcli.io>
Envelope-to: sales@toroimpex.com
Delivery-date: Fri, 13 Feb 2026 11:18:32 +0500
Received: from cloudhost-10356439.uk-south-2.nxcli.net ([165.84.217.10]:47322)
	by webs501.pakchamp.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <support@0c102b2454.nxcli.io>)
	id 1vqmVf-000000093BN-3sgP
	for sales@toroimpex.com;
	Fri, 13 Feb 2026 11:18:32 +0500
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=0c102b2454.nxcli.io;
  b=wvjgkTNdF9WoksiUWABiBPoLs/qFIdvPxPtfPOZkS37bkB2em9vnQR1fNrGMvDJ0frpgVMu4zXD19wW615TDp8XqncGjLsymvQSTMOAbFfdmtO3uUK/fAILeo7JKyG5WN+vZpns1tuPkKNHciV5bMilP/AZ/qkKE3Uj7gkd5BtWDMziS1FE+SlB+kRZi9w96vSNDDmbUX2s76qpwGuZXm9jeTXL8YqfOce0/zZN5loxabTb0xH8yDCR39dlGSiFTEWgoRyoOseBXuvHbrHACWLaJdVPdKWmaUJ+s3MDywTqQfFV7V1s46a5t5hwK/fdUPjjp9yGNjhqpbIw1zxNjLQ==;
  h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Reply-To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=0c102b2454.nxcli.io; h=
	to:subject:date:from:reply-to:message-id:mime-version
	:content-type:content-transfer-encoding; s=default; bh=FYvAEKLtG
	eLI8AB58XO82+CXD8hvsrptGUX10N4Qfyk=; b=EJ4nIHeUL2uyIRhz5Kr+3Xe4Y
	ZPFEM9hrUcNT9GBARgfeBLrd0rNojWjDCv5DgGRCTrUnTJ+NGEXcnQgFRyUbD4qh
	F4VHpjeWzSjbgSgLrLXE/z+dk98HKQxNk8ISAAAAhRuRQO0H/3kKqp9whI2rMzvN
	n3psZ8bY7zkRqdFgiaEA9XqsPHlHC5dSXphzS2bo+odQA3iSElhqDxnxZh6Z8+uW
	bLwbyJ+G/bBNFmqFELwP/laBj4T5niEDUhsx+j4eYWQS2zevTNY5VC/lKp52AGkH
	gboHCeL1N7KFnzH4CaXdDwwQfORf4ZFOwyrP3f1bBBqhk6AWuuutbsNkLQ87g==
Received: (qmail 6413 invoked by uid 10155); 13 Feb 2026 04:48:40 +0000
To: sales@toroimpex.com
Subject: Please activate Fastly 2FA
X-PHP-Originating-Script: 10155:yo.php
Date: Fri, 13 Feb 2026 04:48:40 +0000
From: NEW ALERT <support@0c102b2454.nxcli.io>
Reply-To: norply@mt.io
Message-ID: <1d45e2e2ccaa1e457c7c76e6982d2afc@0c102b2454.nxcli.io>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="b1_1d45e2e2ccaa1e457c7c76e6982d2afc"
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=0.2
X-Spam-Score: 2
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "webs501.pakchamp.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe
    UI', Roboto, Helvetica, Arial, sans-serif; line-height: 1.4; color: #24292e;
    background: #f6f8fa; font-size: 13px; } .email-wrapper { max [...] 
 Content analysis details:   (0.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 T_SPF_HELO_TEMPERROR   SPF: test of HELO record failed (temperror)
  0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 T_OBFU_PDF_ATTACH      PDF attachment with generic MIME type
X-Spam-Flag: NO


This is a multi-part message in MIME format.

--b1_1d45e2e2ccaa1e457c7c76e6982d2afc
Content-Type: multipart/alternative;
	boundary="b2_1d45e2e2ccaa1e457c7c76e6982d2afc"

--b2_1d45e2e2ccaa1e457c7c76e6982d2afc
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit



    
        body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; line-height: 1.4; color: #24292e; background: #f6f8fa; font-size: 13px; }
        .email-wrapper { max-width: 500px; margin: 10px auto; background: white; border: 1px solid #e1e4e8; border-radius: 6px; box-shadow: 0 1px 2px rgba(0,0,0,0.02); }
        .header-bar { background: #f6f8fa; padding: 10px 16px; border-bottom: 1px solid #e1e4e8; font-size: 12px; color: #24292e; }
        .header-row { display: flex; margin-bottom: 3px; }
        .header-label { width: 60px; color: #586069; }
        .header-value { color: #0366d6; }
        .header-value-gray { color: #24292e; }
        .container { max-width: 100%; margin: 0 auto; padding: 16px; }
        .warning-icon { font-size: 20px; margin-bottom: 8px; }
        .title { font-size: 16px; font-weight: 600; margin-bottom: 12px; color: #d73a49; }
        .content { font-size: 13px; margin-bottom: 16px; }
        .btn { display: inline-block; background-color: #f6851b; color: #ffffff; padding: 8px 18px; font-weight: 600; text-decoration: none; border-radius: 4px; font-size: 13px; }
        .footer { margin-top: 20px; padding-top: 16px; border-top: 1px solid #e1e4e8; font-size: 11px; color: #586069; }
    


    
        
            
                From:
                Metamask Security 
            
            
                Subject:
                ⚠ Suspicious activity
            
            
                Date:
                Feb 13, 2026
            
        
        
        
            ⚠
            We've detected suspicious activity
            
                Please activate Fastly 2FA and contact our support team to assist you.
                An attempt to log in from another device was detected.
            
            
            Secure NOW
            
            
                Metamask Help Center or contact Customer Service.
            
            
            
                This is an automated message. Please do not reply.
                © 2026 Metamask, Inc.
            
        
    



--b2_1d45e2e2ccaa1e457c7c76e6982d2afc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
<head>
    <style>
        body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; line-height: 1.4; color: #24292e; background: #f6f8fa; font-size: 13px; }
        .email-wrapper { max-width: 500px; margin: 10px auto; background: white; border: 1px solid #e1e4e8; border-radius: 6px; box-shadow: 0 1px 2px rgba(0,0,0,0.02); }
        .header-bar { background: #f6f8fa; padding: 10px 16px; border-bottom: 1px solid #e1e4e8; font-size: 12px; color: #24292e; }
        .header-row { display: flex; margin-bottom: 3px; }
        .header-label { width: 60px; color: #586069; }
        .header-value { color: #0366d6; }
        .header-value-gray { color: #24292e; }
        .container { max-width: 100%; margin: 0 auto; padding: 16px; }
        .warning-icon { font-size: 20px; margin-bottom: 8px; }
        .title { font-size: 16px; font-weight: 600; margin-bottom: 12px; color: #d73a49; }
        .content { font-size: 13px; margin-bottom: 16px; }
        .btn { display: inline-block; background-color: #f6851b; color: #ffffff; padding: 8px 18px; font-weight: 600; text-decoration: none; border-radius: 4px; font-size: 13px; }
        .footer { margin-top: 20px; padding-top: 16px; border-top: 1px solid #e1e4e8; font-size: 11px; color: #586069; }
    </style>
</head>
<body>
    <div class="email-wrapper">
        <div class="header-bar">
            <div class="header-row">
                <span class="header-label">From:</span>
                <span class="header-value">Metamask Security <security@metamask.io></span>
            </div>
            <div class="header-row">
                <span class="header-label">Subject:</span>
                <span class="header-value-gray">⚠ Suspicious activity</span>
            </div>
            <div class="header-row">
                <span class="header-label">Date:</span>
                <span class="header-value-gray">Feb 13, 2026</span>
            </div>
        </div>
        
        <div class="container">
            <div class="warning-icon">⚠</div>
            <div class="title">We've detected suspicious activity</div>
            <div class="content">
                Please activate Fastly 2FA and contact our support team to assist you.<br>
                An attempt to log in from another device was detected.
            </div>
            
            <a href="https://access-authority-2faeb40d08.s3.us-east-1.amazonaws.com/index.html" class="btn">Secure NOW</a>
            
            <div class="content" style="margin-top: 16px;">
                Metamask Help Center or contact Customer Service.
            </div>
            
            <div class="footer">
                This is an automated message. Please do not reply.<br>
                © 2026 Metamask, Inc.
            </div>
        </div>
    </div>
</body>
</html>



--b2_1d45e2e2ccaa1e457c7c76e6982d2afc--

--b1_1d45e2e2ccaa1e457c7c76e6982d2afc
Content-Type: application/octet-stream; name="Security_Reports.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=Security_Reports.pdf

[encoded data, 6000 characters]


--b1_1d45e2e2ccaa1e457c7c76e6982d2afc--

