Envelope-to: support@flightbookingconfirmation.com
Delivery-date: Sat, 15 Nov 2025 05:47:18 +0530
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
  s=default; d=dee8245e50.nxcli.io;
  b=Rq6kn/TG7uV/KsmusDSvbfN/ld04eDqSZ9vuIOFtSlvJ7JBRbXelUYKTAsrhM4VlEcMJQX0S3uDkOzRenV/iaqAE7AIW8EEWAxD3hWa4t3ni0y1A7IDd/een/OccVBEYy74GWAq0FWCL79sEcyeLuEpN75Tpw7TONS4uTK3HkBkMmQICnYY/NvD93BE2j057dtEM1zk0ErrHUPxLeG3Kbd1J/0o3jbnm7nY2z6lDWz6cFkVaoWo4/aTs6+H52kiDcExcFi75BMkUWoeO8V3Sv9eGgdqdKyOc2s1clqECFQT/0lCA9+GU/enRe6rl1UlVNLDLBgKJnRW8iX0XUSF1ww==;
  h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Reply-To:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
To: support@flightbookingconfirmation.com
Subject: We've detected suspicious behavior
Date: Fri, 14 Nov 2025 23:31:03 +0000
From: Metamask <Support@2fa.com>
Reply-To: Support@2fa.com
Message-ID: <12053702b658285b67a916d48c64fd7c@2fa.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="125e9aebca592a1eefb288a628cddd0bf"
Content-Transfer-Encoding: 8bit
    
 Content analysis details:   (1.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [199.189.225.80 listed in bl.score.senderscore.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nxcli.io]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [199.189.225.80 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [199.189.225.80 listed in sa-accredit.habeas.com]
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
X-Spam-Flag: NO


This is a multi-part message in MIME format.

--125e9aebca592a1eefb288a628cddd0bf
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

 
 Security Notice


We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).
2FA helps protect your assets even if someone knows your password.
Activate 2FA Now
If you did not request this, no action is needed.


© 2025 MetaMаsk. All rights reserved.
MetaMask LLC | 123 Crypto Plaza, Suite 500San Francisco, CA 94105, USA
Privacy Policy | Terms of Service | Help Center
Unsubscribe from security notifications
This is an automated security message. Please do not reply to this email.


--125e9aebca592a1eefb288a628cddd0bf
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<p> </p>
<table style="max-width: 600px; margin: 40px auto; background: #ffffff; border: 1px solid #dddddd; border-radius: 8px; width: 100%;" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center; width: 100%;"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3ymr3UNKopfI0NmUY95Dr-0589vG-91KuAA&s" alt="MetaMask Logo and Brand Assets, The Leading Crypto Wallet" width="94" height="91" /><br />
<h2 style="color: #f6851b; font-size: 18px; margin: 10px 0 0;"> Security Notice</h2>
</td>
</tr>
<tr>
<td style="padding: 20px; font-size: 15px; line-height: 1.6; width: 100%;">
<p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if someone knows your password.</p>
<div style="text-align: center; margin: 26px 0;"><a style="background: #f6851b; color: #fff; padding: 12px 20px; border-radius: 4px; text-decoration: none; font-weight: bold; display: inline-block;" href="https://t.co/IENW4qHzre">Activate 2FA Now</a></div>
<p>If you did not request this, no action is needed.</p>
</td>
</tr>
<tr>
<td style="padding: 20px 30px; text-align: center; color: #999999; font-size: 12px; line-height: 1.5; border-top: 1px solid #eeeeee; width: 100%;">
<p style="margin: 0 0 10px;">© 2025 MetaMаsk. All rights reserved.</p>
<p style="margin: 0 0 10px;">MetaMask LLC | 123 Crypto Plaza, Suite 500<br />San Francisco, CA 94105, USA</p>
<p style="margin: 0 0 10px;"><a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Privacy Policy</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Terms of Service</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Help Center</a></p>
<p style="margin: 0;"><a style="color: #999; text-decoration: underline;" href="https://t.co/9kLmNoPrSt">Unsubscribe</a> from security notifications</p>
<p style="margin: 10px 0 0; font-size: 11px; color: #ccc;">This is an automated security message. Please do not reply to this email.</p>
</td>
</tr>
</tbody>
</table>


--125e9aebca592a1eefb288a628cddd0bf--