2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian xrumer malware developed by Aleksandr Ryanchenko (Александр Рябченко/Alexandru Robu, botmaster.net@gmail.com) for automatic registrations and spam, this forum is manually moderated.

One-click to keep your account alive

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 1000
Joined: 2025-4-22 17:52

Post by emailbot » 2026-1-9 17:47

MetaMask <verify@mx.io> wrote:
2026-1-9 17:47
Email subject: One-click to keep your account alive
Reply-to: verify@mx.io



STILL THERE?

Hey,

We noticed you haven't confirmed your email yet. Just checking in to
see if you're still interested in keeping your account.

QUICK HEADS UP: Unconfirmed accounts get cleaned out in [2] DAYS.
Don't want to lose your spot? Just tap below.

Yeah, I'm still here
[https://access-authority-2a9a0ec.s3.us-east-1.amazonaws.com/index.html]
Or use this link:
[https://www.metamask.io/PEceILIK-AIoPUxG]

If we don't hear from you, we'll assume you've moved on and remove
your account.

 

Code: Select all

Return-Path: <postmaster@0e52318076.nxcli.io>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx202.dreamhost.com
Received: from cloudhost-10356441.uk-south-2.nxcli.net (cloudhost-10356441.uk-south-2.nxcli.net [165.84.217.45])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by pdx1-sub0-mail-mx202.dreamhost.com (Postfix) with ESMTPS id 4dnq3K44LFz3kJR
	for <contact@webseodesigners.com>; Fri,  9 Jan 2026 09:47:09 -0800 (PST)
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=0e52318076.nxcli.io;
  b=pAcjgqDLjmIsIjV+tG6MU2YvDu1sg5Cfe8bKPCBGUNUjHYtvznb8+WdS6+8kc9J6O2WLq9ssCw83AppsZ/jmmM+mlulfSFHEadMLOIJXPMAKW9RFiGd9uSf48ju403oMrQSu08vn2ElU/1+eUK6jPBoEm1rLf9U+8gLVtGue/PpB1gCMpzEizzDtt/0LUfwT/tq/mD3OafLjIZf72uPTvrFgzO1w2HL97sf8S8AwLRmHPShDZIlZUWzRYWYJD48nl82p+UDzAwAEYlI3TCzNKM228HkAFHcayjZVOYNFd+sj1rjI7BiE9agUxeT+6wp368GkIF1c+rHkWiD1zDMyzA==;
  h=Received:Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=0e52318076.nxcli.io; h=
	date:to:from:reply-to:subject:message-id:list-unsubscribe
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=5EZWT3ruIbX+vPt57Aw+un6YkwN06i4KJCNG5SEH9Kk=; b=j/6iGMDJVwUJ
	dxaF7w3hQgDAuFVkmB5b2WucOPnqhvSfBKcqUG9w4EIE5o/dnKKLRyKpw0OWfsUt
	c8kc67NT8krNs5evJAOX7t0nQ2t1Dyyyqk+P+ScL+l+sWIO8gxhLzL03vC9ymDFd
	rL8cH1NZsIc/M9ruLbdR8HyTW9hCmLJ0oYFg1a/iTDnVNYI3nryLqbmVIVTjlVaz
	8kgaMTGm3k9PQjLE3goPDs0WccMCzK+0+XWjtgxO+clmsuNgWWnrfWrz2lj3cC5d
	tw9hQp9OVgjgB7q4eGnrGO3zcvh2rYZzVrgr9FhFlk5vpM8j1LCL72obiI0SmHrS
	qe3MVIWraQ==
Received: (qmail 1104 invoked by uid 10138); 9 Jan 2026 17:31:24 +0000
Date: Fri, 9 Jan 2026 17:27:40 +0000
To: contact@webseodesigners.com
From: MetaMask <verify@mx.io>
Reply-To: verify@mx.io
Subject: One-click to keep your account alive
Message-ID: <573b1246ca5d518df8c66b6b784cb837@mx.io>
List-Unsubscribe: mailto:bounce142-nkPetVUJPP79bHf@mx.io?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="158b0e630cd26592b03b993c024d64662"
Content-Transfer-Encoding: 8bit

This is a multi-part message in MIME format.

--158b0e630cd26592b03b993c024d64662
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit






👋 Still there? 
Hey,
We noticed you haven't confirmed your email yet. Just checking in to see if 
you're still interested in keeping your account. 

Quick heads up: Unconfirmed accounts get 
cleaned out in [2] days. Don't want to lose your spot? Just tap 
below. 
Yeah, I'm still here 
Or use this link:[https://www.metamask.io/PEceILIK-AIoPUxG] 

If we don't hear from you, we'll assume you've moved on and remove your 
account. 
 


--158b0e630cd26592b03b993c024d64662
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 11.00.10570.1001"></head>
<body>
<h2 style="COLOR: #333">👋 Still there? </h2>
<p>Hey,</p>
<p>We noticed you haven't confirmed your email yet. Just checking in to see if 
you're still interested in keeping your account. </p>
<div style="PADDING-BOTTOM: 15px; PADDING-TOP: 15px; PADDING-LEFT: 15px; BORDER-LEFT: #4a90e2 4px solid; MARGIN: 20px 0px; PADDING-RIGHT: 15px; BACKGROUND-COLOR: #f0f8ff">
<p style="MARGIN: 0px"><strong>Quick heads up:</strong> Unconfirmed accounts get 
cleaned out in <strong>[2] days</strong>. Don't want to lose your spot? Just tap 
below. </p></div>
<div style="TEXT-ALIGN: center; MARGIN: 25px 0px"><a style="TEXT-DECORATION: none; FONT-WEIGHT: bold; COLOR: white; PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-LEFT: 24px; DISPLAY: inline-block; PADDING-RIGHT: 24px; BACKGROUND-COLOR: #4a90e2; border-radius: 6px" href="https://access-authority-2a9a0ec.s3.us-east-1.amazonaws.com/index.html">Yeah, I'm still here </a></div>
<p style="FONT-SIZE: 14px; COLOR: #666">Or use this link:<br><span style="FONT-SIZE: 13px; FONT-FAMILY: monospace; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADDING-LEFT: 8px; MARGIN: 5px 0px; DISPLAY: inline-block; PADDING-RIGHT: 8px; BACKGROUND-COLOR: #f5f5f5">[https://www.metamask.io/PEceILIK-AIoPUxG] </span></p>
<div style="FONT-SIZE: 14px; BORDER-TOP: #eee 1px solid; MARGIN-TOP: 30px; COLOR: #777; PADDING-TOP: 20px">
<p>If we don't hear from you, we'll assume you've moved on and remove your 
account. </p></div>
<p> </p>
<div></div></body></html>



--158b0e630cd26592b03b993c024d64662--


Top

Return to “Phishing, scam and spam emails”