관리-도구
편집 파일: 1768331066.M321788P2796118.cp-biz03.syd05.ds.network,S=6918,W=7074
Return-Path: <tony@galaxybeads.com.au> Delivered-To: tony+spam@galaxybeads.com.au Received: from cp-biz03.syd05.ds.network by cp-biz03.syd05.ds.network with LMTP id IKUeAzqXZmlWqioAW9t3Hw (envelope-from <tony@galaxybeads.com.au>) for <tony+spam@galaxybeads.com.au>; Wed, 14 Jan 2026 06:04:26 +1100 Return-path: <tony@galaxybeads.com.au> Envelope-to: tony@galaxybeads.com.au Delivery-date: Wed, 14 Jan 2026 06:04:26 +1100 Received: from 45-166-12-199.conexaofibra.net.br ([45.166.12.199]:18133) by cp-biz03.syd05.ds.network with esmtp (Exim 4.96.2) (envelope-from <tony@galaxybeads.com.au>) id 1vfjgh-00C32u-0z for tony@galaxybeads.com.au; Wed, 14 Jan 2026 06:04:25 +1100 From: <tony@galaxybeads.com.au> To: <tony@galaxybeads.com.au> Date: 13 Jan 2026 11:35:47 -0400 Message-ID: <001601dc84a6$0546bbfd$46c822b7$@galaxybeads.com.au> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0013_01DC84A6.05427715" X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: Ac2fudh2n69j2g622fudh2n69j2g62== Content-Language: en x-cr-hashedpuzzle: 2D4= 325o 2i5m gkyh hf32 5o2i 5mgk yhhf 325o 2i5m gkyh hf32 5o2i 5mgk yhhf 325o;1;2i5mgkyhhf325o2i5mgkyhhf325o2i5mgkyhhf325o2i5mgk;Sosha1_v1;7;\{54157F46-E53E-2CDC-9DF7-CE6DB6A45415\};ZQB3AGUAZg325o2i5mgkyhhf325o2i5mgkyhhf325o2i5mgk;13 Jan 2026 11:35:47 -0400;3s2yyampf97msk3s x-cr-puzzleid: \{54157F46-E53E-2CDC-9DF7-CE6DB6A45415\} X-Spam-Status: Yes, score=14.6 X-Spam-Score: 146 X-Spam-Bar: ++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cp-biz03.syd05.ds.network", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: We have detected unusual activity on your account tony@galaxybeads.com.au, or believe your credentials are at risk. For your security and to ensure only you have access to your account, we will ask yo [...] Content analysis details: (14.6 points, 8.5 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all [galaxybeads.com.au TXT:v=spf1 ip4:122.201.125.111 +a +mx +ip4:185.184.154.177 include:_spf.syrahost.com ?all] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [45.166.12.199 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [45.166.12.199 listed in bl.score.senderscore.com] 0.0 T_SPF_PERMERROR SPF: test of record failed (permerror) 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 0.0 HTML_MESSAGE BODY: HTML included in message 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.0 PDS_BAD_THREAD_QP_64 Bad thread header - short QP 0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 1.4 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers 3.1 URI_PHISH Phishing using web form 0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address X-Spam-Flag: YES Subject: ***SPAM*** No-reply. This is a multi-part message in MIME format. ------=_NextPart_000_0013_01DC84A6.05427715 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable We have detected unusual activity on your account = tony@galaxybeads.com.au, or believe your credentials are at risk. For your security and to ensure only you have access to your account, we = will ask you to=20 verify your identity and=20 change your password. ------=_NextPart_000_0013_01DC84A6.05427715 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 = (filtered medium)"><style><!-- /* Font Definitions */ @font-face =09{font-family:"Cambria Math"; =09panose-1:0 0 0 0 0 0 0 0 0 0;} @font-face =09{font-family:Calibri; =09panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal =09{margin:0in; =09margin-bottom:.0001pt; =09font-size:11.0pt; =09font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink =09{mso-style-priority:99; =09color:blue; =09text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed =09{mso-style-priority:99; =09color:purple; =09text-decoration:underline;} span.EmailStyle17 =09{mso-style-type:personal-compose; =09font-family:"Calibri","sans-serif"; =09color:windowtext;} .MsoChpDefault =09{mso-style-type:export-only;} @page WordSection1 =09{size:8.5in 11.0in; =09margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 =09{page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue = vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>We have = detected unusual activity on your account tony@galaxybeads.com.au, or = believe your credentials are at risk.<br> For your security and to ensure only you have access to your account, we = will ask you to <a = href=3D"https://tiongupeb.z5.web.core.windows.net/"><b>verify your = identity</b></a> and <a = href=3D"https://tiongupeb.z5.web.core.windows.net/"><b>change your = password</b></a>.<br> <o:p></o:p></p></div></body></html> ------=_NextPart_000_0013_01DC84A6.05427715--