2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian malware developed by Aleksandr Ryanchenko (Александр Рябченко) aka Alexandru Robu for automatic registrations and spam posts, this forum is now manually moderated to ban clueless script kiddies.

One-click to keep your account alive

Various emails containing phishing attacks, scams and irrelevant spam
emailbot
Posts: 846
Joined: 2025-4-22 17:52

Post by emailbot » 2026-1-9 17:47

MetaMask <verify@mx.io> wrote:
2026-1-9 17:47
Email subject: One-click to keep your account alive
Reply-to: verify@mx.io



STILL THERE?

Hey,

We noticed you haven't confirmed your email yet. Just checking in to
see if you're still interested in keeping your account.

QUICK HEADS UP: Unconfirmed accounts get cleaned out in [2] DAYS.
Don't want to lose your spot? Just tap below.

Yeah, I'm still here
[https://access-authority-2a9a0ec.s3.us-east-1.amazonaws.com/index.html]
Or use this link:
[https://www.metamask.io/PEceILIK-AIoPUxG]

If we don't hear from you, we'll assume you've moved on and remove
your account.

 

Code: Select all

Return-Path: <postmaster@0e52318076.nxcli.io>
X-Original-To: contact@webseodesigners.com
Delivered-To: x22832538@pdx1-sub0-mail-mx202.dreamhost.com
Received: from cloudhost-10356441.uk-south-2.nxcli.net (cloudhost-10356441.uk-south-2.nxcli.net [165.84.217.45])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by pdx1-sub0-mail-mx202.dreamhost.com (Postfix) with ESMTPS id 4dnq3K44LFz3kJR
	for <contact@webseodesigners.com>; Fri,  9 Jan 2026 09:47:09 -0800 (PST)
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=0e52318076.nxcli.io;
  b=pAcjgqDLjmIsIjV+tG6MU2YvDu1sg5Cfe8bKPCBGUNUjHYtvznb8+WdS6+8kc9J6O2WLq9ssCw83AppsZ/jmmM+mlulfSFHEadMLOIJXPMAKW9RFiGd9uSf48ju403oMrQSu08vn2ElU/1+eUK6jPBoEm1rLf9U+8gLVtGue/PpB1gCMpzEizzDtt/0LUfwT/tq/mD3OafLjIZf72uPTvrFgzO1w2HL97sf8S8AwLRmHPShDZIlZUWzRYWYJD48nl82p+UDzAwAEYlI3TCzNKM228HkAFHcayjZVOYNFd+sj1rjI7BiE9agUxeT+6wp368GkIF1c+rHkWiD1zDMyzA==;
  h=Received:Date:To:From:Reply-To:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=0e52318076.nxcli.io; h=
	date:to:from:reply-to:subject:message-id:list-unsubscribe
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=5EZWT3ruIbX+vPt57Aw+un6YkwN06i4KJCNG5SEH9Kk=; b=j/6iGMDJVwUJ
	dxaF7w3hQgDAuFVkmB5b2WucOPnqhvSfBKcqUG9w4EIE5o/dnKKLRyKpw0OWfsUt
	c8kc67NT8krNs5evJAOX7t0nQ2t1Dyyyqk+P+ScL+l+sWIO8gxhLzL03vC9ymDFd
	rL8cH1NZsIc/M9ruLbdR8HyTW9hCmLJ0oYFg1a/iTDnVNYI3nryLqbmVIVTjlVaz
	8kgaMTGm3k9PQjLE3goPDs0WccMCzK+0+XWjtgxO+clmsuNgWWnrfWrz2lj3cC5d
	tw9hQp9OVgjgB7q4eGnrGO3zcvh2rYZzVrgr9FhFlk5vpM8j1LCL72obiI0SmHrS
	qe3MVIWraQ==
Received: (qmail 1104 invoked by uid 10138); 9 Jan 2026 17:31:24 +0000
Date: Fri, 9 Jan 2026 17:27:40 +0000
To: contact@webseodesigners.com
From: MetaMask <verify@mx.io>
Reply-To: verify@mx.io
Subject: One-click to keep your account alive
Message-ID: <573b1246ca5d518df8c66b6b784cb837@mx.io>
List-Unsubscribe: mailto:bounce142-nkPetVUJPP79bHf@mx.io?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="158b0e630cd26592b03b993c024d64662"
Content-Transfer-Encoding: 8bit

This is a multi-part message in MIME format.

--158b0e630cd26592b03b993c024d64662
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit






👋 Still there? 
Hey,
We noticed you haven't confirmed your email yet. Just checking in to see if 
you're still interested in keeping your account. 

Quick heads up: Unconfirmed accounts get 
cleaned out in [2] days. Don't want to lose your spot? Just tap 
below. 
Yeah, I'm still here 
Or use this link:[https://www.metamask.io/PEceILIK-AIoPUxG] 

If we don't hear from you, we'll assume you've moved on and remove your 
account. 
 


--158b0e630cd26592b03b993c024d64662
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 11.00.10570.1001"></head>
<body>
<h2 style="COLOR: #333">👋 Still there? </h2>
<p>Hey,</p>
<p>We noticed you haven't confirmed your email yet. Just checking in to see if 
you're still interested in keeping your account. </p>
<div style="PADDING-BOTTOM: 15px; PADDING-TOP: 15px; PADDING-LEFT: 15px; BORDER-LEFT: #4a90e2 4px solid; MARGIN: 20px 0px; PADDING-RIGHT: 15px; BACKGROUND-COLOR: #f0f8ff">
<p style="MARGIN: 0px"><strong>Quick heads up:</strong> Unconfirmed accounts get 
cleaned out in <strong>[2] days</strong>. Don't want to lose your spot? Just tap 
below. </p></div>
<div style="TEXT-ALIGN: center; MARGIN: 25px 0px"><a style="TEXT-DECORATION: none; FONT-WEIGHT: bold; COLOR: white; PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-LEFT: 24px; DISPLAY: inline-block; PADDING-RIGHT: 24px; BACKGROUND-COLOR: #4a90e2; border-radius: 6px" href="https://access-authority-2a9a0ec.s3.us-east-1.amazonaws.com/index.html">Yeah, I'm still here </a></div>
<p style="FONT-SIZE: 14px; COLOR: #666">Or use this link:<br><span style="FONT-SIZE: 13px; FONT-FAMILY: monospace; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADDING-LEFT: 8px; MARGIN: 5px 0px; DISPLAY: inline-block; PADDING-RIGHT: 8px; BACKGROUND-COLOR: #f5f5f5">[https://www.metamask.io/PEceILIK-AIoPUxG] </span></p>
<div style="FONT-SIZE: 14px; BORDER-TOP: #eee 1px solid; MARGIN-TOP: 30px; COLOR: #777; PADDING-TOP: 20px">
<p>If we don't hear from you, we'll assume you've moved on and remove your 
account. </p></div>
<p> </p>
<div></div></body></html>



--158b0e630cd26592b03b993c024d64662--


Top

Return to “Phishing, scam and spam emails”