File: //home/dfwparty/mail/.spam/new/1744580850.M342312P4984.node612.namehero.net,S=7854,W=8017
Return-Path: <flbci@thebestone.click>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
by node612.namehero.net with LMTP
id 5YfBE/Iw/Gd4EwAAJLeZpw
(envelope-from <flbci@thebestone.click>)
for <dfwparty+spam@node612.namehero.net>; Sun, 13 Apr 2025 15:47:30 -0600
Return-path: <flbci@thebestone.click>
Envelope-to: me@crazybubba.com
Delivery-date: Sun, 13 Apr 2025 15:47:30 -0600
Received: from [185.176.220.70] (port=39037 helo=thebestone.click)
by node612.namehero.net with esmtp (Exim 4.98.1)
(envelope-from <flbci@thebestone.click>)
id 1u45Aj-0000000Haq9-3wsr
for me@crazybubba.com;
Sun, 13 Apr 2025 15:47:30 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=thebestone.click;
h=Date:Sender:Message-Id:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@thebestone.click;
bh=TFkTrIhnONdV/c49/mdW1qImDrM=;
b=MPfqp5JnPZ5e+areg81OlAi6Y2VgyGbD9pRSCmQZRCQs2oVgnW5sqMJZCjlp2zew9xCtDJK67XeG
jzpVe6VEGm3bilqKJnVm0Guv7SBBQbtYOMP8VYppJ1NmifGiB+/JTCi9m6XvnErxG847WwGDlAbA
afrhyxRpOlx1GpHCE+c=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=thebestone.click;
b=CLaDNghYX+/vT4lGk5Binowv01Bv059uuEb53H4vaRjuSn54EkfOnUcwSROrOfo5GSN/UDjnWZVc
N7oYp2DAG74d8m75yDukBwaaMGcIch9VhHoQSZlZz4FGUSE3TCgqvzbgAVWfkB0HIpDhBIyhC6XI
lxZdlkTjg3v+XsEyRqk=;
Date: Sun, 13 Apr 2025 21:46:42 +0000
Sender: contact@thebestone.click
Message-Id: <416026721313987.8.MAU8053285992@thebestone.click>
To: me@crazybubba.com
From: -Temu- <Temu@thebestone.click>
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Exclusive Temu Offer Exclusive Offer on Temu!
Content analysis details: (11.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: kwcdn.com]
[URI: temu.to]
[URI: giftrend.click]
[URI: thebestone.click]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[185.176.220.70 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.176.220.70>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.70 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.70 listed in bl.score.senderscore.com]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: giftrend.click]
[URI: img.kwcdn.com]
[URI: thebestone.click]
[URI: temu.to]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.70 listed in sa-trusted.bondedsender.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: thebestone.click (click)]
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.8 KAM_OTHER_BAD_TLD Other untrustworthy TLDs
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
X-Spam-Flag: YES
Subject: ***SPAM*** 🚗📷 FULL HD Dash Cam at the best price!
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Exclusive Temu Offer</title>
<style>
body {
font-family: Arial, sans-serif;
background-color: #f4f4f4;
margin: 0;
padding: 0;
}
.container {
max-width: 600px;
margin: 20px auto;
background: #ffffff;
padding: 20px;
border-radius: 10px;
box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
text-align: center;
}
.btn {
display: inline-block;
background: #ff6f00;
color: #ffffff;
padding: 10px 20px;
text-decoration: none;
font-size: 18px;
border-radius: 5px;
margin-top: 15px;
}
.btn:hover {
background: #e65c00;
}
img {
max-width: 100%;
border-radius: 5px;
}
</style>
</head>
<body>
<div class="container">
<h2>Exclusive Offer on Temu!</h2>
<p>Don't miss out on this high-resolution 1080P dashboard camera with infrared night vision and IPS screen.</p>
<img src="https://img.kwcdn.com/product/fancy/62b43ef5-2640-44be-ac6f-3fb89dccff2a.jpg" alt="Dashboard Camera">
<p>Get an unbeatable price to enhance your road safety!</p>
<a href="https://temu.to/k/em0mmg34vp1" class="btn">View the Offer</a>
</div>
</body>
</html>
<CENTER>
<a href="http://giftrend.click/index.php?search=6&d173576&cfcqj=310-8335&lm=868742MKAN401&sd=9&page=W7crZO1rsq5sqbI"> Click here to Unsbscribe</a>