관리-도구

편집 파일: 1750042229.M306513P1413243.cp-biz03.syd05.ds.network,S=5767,W=5873

Envelope-to: tony@galaxybeads.com.au
Delivery-date: Mon, 16 Jun 2025 12:50:29 +1000
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=temubestoffers.click;
 b=tQ5bc0jvvQyoWrOathVFMBoEIfP4Cyss7K/2LCCHQ8mQ5R49Rgd4+4fLkEU9dvVidqlgwm/bwDO6
   cU0z4Q94frUngVa4lPSOtK4l6ZDpd+5fznV7s8pGwVGCG+e2T7cgn2B0oTwOixdsexeUae6X3UJS
   /3+qaoCTm14A5g+8ctY=;
Date: Mon, 16 Jun 2025 02:49:54 +0000
Sender: contact-61437@temubestoffers.click
Message-Id: <459538768149749.4.IXF5951228155@temubestoffers.click>
To: tony@galaxybeads.com.au
From: Message from -𝐁𝐮𝐩𝐚- <Bupa@temubestoffers.click>
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
 
 Content preview:  Click here to unsubscribe 
 
 Content analysis details:   (15.6 points, 8.5 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?185.176.220.158>]
  1.0 FROM_OFFERS            From address is "at something-offers"
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [185.176.220.158 listed in psbl.surriel.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [185.176.220.158 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.176.220.158 listed in sa-accredit.habeas.com]
  1.5 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: temubestoffers.click (click)]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.8 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of
                             words
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.6 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
                             tag
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.8 KAM_OTHER_BAD_TLD      Other untrustworthy TLDs
  2.0 SUSP_UTF8_WORD_FROM    Word in From name using only suspicious
                             UTF-8 characters
  0.1 HTML_SHORT_LINK_IMG_1  HTML is very short with a linked image
  0.8 KAM_IMAGEONLY          Email from a questionable TLD that contains
                             primarily just an image
  0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML
  0.7 SHORT_IMG_SUSP_NTLD    Short HTML + image + suspicious TLD
  0.0 T_STY_INVIS_DIRECT     HTML hidden text + direct-to-MX
X-Spam-Flag: YES
Subject:  ***SPAM***  We have a surprise from the Bupa

<center>
<a href="http://bestrends.click/index.php?search=4&d191842&swqan=613-2087&lm=61437JTQO250&sd=9&page=adTdSzWHAohYcfd"><img src="http://bestrends.click/img/Xr1XEisTrS8HIkBS"></a>
  <center>
    <a href="http://iwnhccsic.bestrends.click/index.php?search=6&d191842&ryoyj=613-2087&lm=61437OVXD250&sd=9&page=8ligkajqbAKxLUd">Click here to unsubscribe</a>
    <img src="http://bestrends.click/track/index.php?search=3&d191842&aokip=613-2087&lm=61437QPQY250&sd=9&page=Rz9TfzrUuH8Cqi8" style="display:none;" alt="tracking pixel"/>
  </center>