Envelope-to: support@flightbookingconfirmation.com
Delivery-date: Sat, 15 Nov 2025 06:22:36 +0530
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
  s=default; d=dee8245e50.nxcli.io;
  b=isjVRluGGqKuoKmzFlvCuJ5ZeAzuKzJr+PxzVDQp3cbjeIGkkDaibhFHSbSFw3u5WSrt9CTJAb3plnnH8jh4WyD2rxy68+5Gn6m9BqbYxDxKwIA1vAmJnG04cmwFoZoxnvc42qO7glxcpigsKOXzVYyclo8qU8r0ykRO+9Wv9D4InL8cDNrqOrjYGM4rYRMK+7FOMT+zR2VbnGFsJDoy0Mwens9qE53pv5M1oHq5jGd6sN63qoEk6WflCplWAF32o3GK4XSO/boI03sN5Y+UoR4LG35Ps+BcMqqNZsoZcjEhMobpMCW6kvhv00/g2+LDHxpVcVOGg3wQiPaSuaJUEQ==;
  h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Reply-To:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
To: support@flightbookingconfirmation.com
Subject: We've detected suspicious behavior
Date: Fri, 14 Nov 2025 23:12:15 +0000
From: Metamask <Support@2fa.com>
Reply-To: Support@2fa.com
Message-ID: <d71bd51ac977ae4e63fbb3e6f61b824b@2fa.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="15fbd84ccd7aa1b7e80ec01d955558394"
Content-Transfer-Encoding: 8bit
    
 Content analysis details:   (1.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nxcli.io]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [199.189.225.80 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [199.189.225.80 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [199.189.225.80 listed in sa-accredit.habeas.com]
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
X-Spam-Flag: NO


This is a multi-part message in MIME format.

--15fbd84ccd7aa1b7e80ec01d955558394
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

 
 Security Notice


We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).
2FA helps protect your assets even if someone knows your password.
Activate 2FA Now
If you did not request this, no action is needed.


© 2025 MetaMаsk. All rights reserved.
MetaMask LLC | 123 Crypto Plaza, Suite 500San Francisco, CA 94105, USA
Privacy Policy | Terms of Service | Help Center
Unsubscribe from security notifications
This is an automated security message. Please do not reply to this email.


--15fbd84ccd7aa1b7e80ec01d955558394
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<p> </p>
<table style="max-width: 600px; margin: 40px auto; background: #ffffff; border: 1px solid #dddddd; border-radius: 8px; width: 100%;" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center; width: 100%;"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3ymr3UNKopfI0NmUY95Dr-0589vG-91KuAA&s" alt="MetaMask Logo and Brand Assets, The Leading Crypto Wallet" width="94" height="91" /><br />
<h2 style="color: #f6851b; font-size: 18px; margin: 10px 0 0;"> Security Notice</h2>
</td>
</tr>
<tr>
<td style="padding: 20px; font-size: 15px; line-height: 1.6; width: 100%;">
<p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
<p>2FA helps protect your assets even if someone knows your password.</p>
<div style="text-align: center; margin: 26px 0;"><a style="background: #f6851b; color: #fff; padding: 12px 20px; border-radius: 4px; text-decoration: none; font-weight: bold; display: inline-block;" href="https://t.co/IENW4qHzre">Activate 2FA Now</a></div>
<p>If you did not request this, no action is needed.</p>
</td>
</tr>
<tr>
<td style="padding: 20px 30px; text-align: center; color: #999999; font-size: 12px; line-height: 1.5; border-top: 1px solid #eeeeee; width: 100%;">
<p style="margin: 0 0 10px;">© 2025 MetaMаsk. All rights reserved.</p>
<p style="margin: 0 0 10px;">MetaMask LLC | 123 Crypto Plaza, Suite 500<br />San Francisco, CA 94105, USA</p>
<p style="margin: 0 0 10px;"><a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Privacy Policy</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Terms of Service</a> | <a style="color: #999; text-decoration: none; margin: 0 10px;" href="#">Help Center</a></p>
<p style="margin: 0;"><a style="color: #999; text-decoration: underline;" href="https://t.co/9kLmNoPrSt">Unsubscribe</a> from security notifications</p>
<p style="margin: 10px 0 0; font-size: 11px; color: #ccc;">This is an automated security message. Please do not reply to this email.</p>
</td>
</tr>
</tbody>
</table>


--15fbd84ccd7aa1b7e80ec01d955558394--