Return-Path: <postmaster@9252cc18e0.nxcli.io>
Delivered-To: admin@emacademy.edu.lk
Received: from coreservers.securedwebdns.com
	by coreservers.securedwebdns.com with LMTP
	id GP26B9Is9mfNjQQADpRM0Q
	(envelope-from <postmaster@9252cc18e0.nxcli.io>)
	for <admin@emacademy.edu.lk>; Wed, 09 Apr 2025 13:46:18 +0530
Return-path: <postmaster@9252cc18e0.nxcli.io>
Envelope-to: admin@emacademy.edu.lk
Delivery-date: Wed, 09 Apr 2025 13:46:18 +0530
Received: from cloudhost-3464246.uk-south-2.nxcli.net ([165.84.218.190]:53684)
	by coreservers.securedwebdns.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.1)
	(envelope-from <postmaster@9252cc18e0.nxcli.io>)
	id 1u2Qbb-00000001Fjs-3XpX
	for admin@emacademy.edu.lk;
	Wed, 09 Apr 2025 13:46:18 +0530
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=9252cc18e0.nxcli.io;
  b=T0uUXkW5oB2hSjQdxmXWL+2jLEPq4k2CCggWFWxVv+hAS186aPx+XmxBS2hqHMCUafU4l57ZimBF0iPyUW14q32VwMUVLBABEK/qxk+MLidVFjxdkooEvb2FuvCHUWDsFXCeGAFtL1FmRytY0QWL40EkdALbCUPlE2EaDhnmmxVdGiZclAc37T7cLsdz7cYATs0t5EkRIDWfWI0h127GWhdejvk0mjLQpMEyWXgrOCgLbfASN109YXGMLAYVnW125VQ9vqD46oJNUB3ZWFOnIFkoXNF5HJRiVvcIgvktgLxcnlKRajE94W0Z+frQgjv+3OPbuKfCJPYettHkVZOkOw==;
  h=Received:Date:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-Type:From:Reply-To:X-Mailer:Message-ID:X-Originating-IP:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9252cc18e0.nxcli.io; h=
	date:to:subject:mime-version:content-type:from:reply-to
	:message-id:list-unsubscribe; s=default; bh=q8wWJ54g6RIAKeubICrA
	vcmCisraqYx9PeiovNxipW8=; b=IEIic3yV+ffLRE3/tCIw4CLsIy/hSGHBxPnq
	h4N1ORRh/yOmyczTkun5vWQ1mGA4qw0SFn6RfFtiShs1J9sFId5dZrifh0O7YnR8
	1yOCVAL0ndDO7SMP4qTt1qxJeueB3mGYqA1k1AEVTOqDnpeZXCxA1b3SzaWtjKed
	ihh0X3YG19xTVm5wWZkOXaDAbT3zyvAJtzcOLFHV+/8hcYwhdRNsw2cX89NFGiR8
	oeQltElC56W9CoNkk+B6y+tr2aZNzYPVvjPqkcrlh0vj/sPlXW21cKWv+heeHEeK
	kHl800xSGRFz7HULEQ1W91JR2M9S7N0cYaaACJgHzJPTUHXzmw==
Received: (qmail 31063 invoked by uid 10210); 9 Apr 2025 07:05:03 +0100
Date: 9 Apr 2025 07:05:03 +0100
To: admin@emacademy.edu.lk
Subject: =?UTF-8?B?TWV0YU1hc2sgU2VjdXJpdHkgV2FybmluZw==?=
X-PHP-Originating-Script: 10210:rfd.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
From: "MetaMask" <0f0ecaaf4dd15916b0e22874e98912ee@2fa.com>
Reply-To: 0f0ecaaf4dd15916b0e22874e98912ee@2fa.com
X-Mailer: PHP/8.1.29
Message-ID: <67f60e0fee253@9252cc18e0.nxcli.io>
X-Originating-IP: 10.64.96.12
List-Unsubscribe: <mailto:unsubscribe@example.com>
X-Spam-Status: No, score=1.3
X-Spam-Score: 13
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "coreservers.securedwebdns.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Please confirm your session Hello, We noticed a change in
    your recent activity. To continue using your access securely, please confirm
    your session using the link below. 
 Content analysis details:   (1.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [165.84.218.190 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [165.84.218.190 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [165.84.218.190 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [165.84.218.190 listed in sa-accredit.habeas.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: emineozgur.com]
                             [URI: nxcli.io]
                             [URI: seeklogo.com]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: emineozgur.com]
                             [URI: 9252cc18e0.nxcli.io]
                             [URI: seeklogo.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.3 FROM_LOCAL_HEX         From: localpart has long hexadecimal sequence
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of words
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
X-Spam-Flag: NO


<!DOCTYPE html>
<html>
  <body style="margin:0;padding:20px;font-family:Arial,sans-serif;background-color:#fff;color:#333;">
    <table width="100%" cellpadding="0" cellspacing="0" style="max-width:600px;margin:auto;border:1px solid #ddd;border-radius:6px;">
      <tr>
        <td style="background-color:#fff;padding:20px;text-align:center;">
          <img src="https://seeklogo.com/images/M/metamask-logo-09EDE53DBD-seeklogo.com.png" width="70" alt="Logo" style="margin-bottom:20px;">
          <h2 style="color:#f6851b;font-size:20px;">Please confirm your session</h2>
        </td>
      </tr>
      <tr>
        <td style="padding:20px;">
          <p>Hello,</p>
          <p>We noticed a change in your recent activity. To continue using your access securely, please confirm your session using the link below.</p>
          <p>Enabling Two-Factor Authentication (2FA) will enhance the protection of your wallet and ensure only you can access it — even if someone else knows your password.</p>
          <p style="text-align:center;margin:30px 0;">
            <a href="https://emineozgur.com/mt?id=4380337732144673379-9814" style="background-color:#f6851b;color:#fff;text-decoration:none;padding:12px 22px;border-radius:5px;font-weight:bold;">Confirm Now</a>
          </p>
          <p>If you didn’t request this, you can safely ignore this message.</p>
          <p>Thanks,<br>Support Team</p>
        </td>
      </tr>
      <tr>
        <td style="background-color:#f2f2f2;text-align:center;font-size:12px;color:#888;padding:10px;border-top:1px solid #ddd;">
          &copy; 2025 Security Department. All rights reserved.
        </td>
      </tr>
    </table>
  </body>
</html><!-- 1e5abad1 -->
