File: /home/dfwparty/mail/.spam/new/1744832358.M733348P1605647.node612.namehero.net,S=8432,W=8603
Return-Path: <vdpvm@besttpromotions.click>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
by node612.namehero.net with LMTP
id sDUNK2YHAGgPgBgAJLeZpw
(envelope-from <vdpvm@besttpromotions.click>)
for <dfwparty+spam@node612.namehero.net>; Wed, 16 Apr 2025 13:39:18 -0600
Return-path: <vdpvm@besttpromotions.click>
Envelope-to: me@crazybubba.com
Delivery-date: Wed, 16 Apr 2025 13:39:18 -0600
Received: from besttpromotions.click ([185.176.220.173]:34727)
by node612.namehero.net with esmtp (Exim 4.98.1)
(envelope-from <vdpvm@besttpromotions.click>)
id 1u58bJ-000000072wk-0yF4
for me@crazybubba.com;
Wed, 16 Apr 2025 13:39:18 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=besttpromotions.click;
h=Date:Sender:Message-Id:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact@besttpromotions.click;
bh=MwJfKsE5ClhVlicPiYpVE4rCXkA=;
b=wB04bd4SFNC6xvTaqzhtxJQV2D+Zch/klBFTefLWwfnpPrILVNX4LPm5zz1bQWOhGWabesRvDgtL
iKfGutTo8x0xB+rI4QLMt1v0WFQ08RI9MLzu3jH3z7y+WJUMR0M/yMLmMOh/YhQmFdpgas7PsldM
gCiGeQsTItDYqe3A2ss=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=besttpromotions.click;
b=V3tmZ7AgLagXefAeVZI/lF4LKKwl+0RGl44s7haKwj4GzpH4ZJ5f+/nAJ0vgu0vjlRgZM0QQLNtq
ndBKmal8n4hyMXCIx8stBVs93cj5UX5I4o7ZL9nOlMiO0Gcy3ltuVRDyWmIW/pvEmyFXZviVa1jD
sBPHple3StP6e1b0WGY=;
Date: Wed, 16 Apr 2025 19:38:34 +0000
Sender: contact@besttpromotions.click
Message-Id: <829043315016049.3.YEJ9082841395@besttpromotions.click>
To: me@crazybubba.com
From: Temu <Temu@besttpromotions.click>
Content-Type: text/html; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=29.7
X-Spam-Score: 297
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Exclusive Temu Offer Exclusive Offer on Temu!
Content analysis details: (29.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: giftrend.click]
[URI: kwcdn.com]
[URI: temu.to]
[URI: besttpromotions.click]
0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
zen.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[185.176.220.173 listed in zen.spamhaus.org]
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage of an
open resolver. See
https://www.spamhaus.org/returnc/pub/
[URI: img.kwcdn.com]
[URI: besttpromotions.click]
[URI: temu.to]
[URI: giftrend.click]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?185.176.220.173>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.173 listed in sa-accredit.habeas.com]
9.0 KAM_FROM_URIBL_PCCC RBL: From address listed in PCCC WILD RBL
(https://raptor.pccc.com/RBL)
[listed in besttpromotions.click.wild.pccc.com]
9.0 KAM_BODY_URIBL_PCCC Body contains URI listed in PCCC WILD RBL
(https://raptor.pccc.com/RBL)
[URI: besttpromotions.click]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.173 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.176.220.173 listed in sa-trusted.bondedsender.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: giftrend.click (click)]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
1.4 DKIMWL_BL DKIMwl.org - Blocked sender
0.8 KAM_OTHER_BAD_TLD Other untrustworthy TLDs
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
X-Spam-Flag: YES
Subject: ***SPAM*** ✅ Dash Cam 🤩 at an unbeatable price!
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Exclusive Temu Offer</title>
<style>
body {
font-family: Arial, sans-serif;
background-color: #f4f4f4;
margin: 0;
padding: 0;
}
.container {
max-width: 600px;
margin: 20px auto;
background: #ffffff;
padding: 20px;
border-radius: 10px;
box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
text-align: center;
}
.btn {
display: inline-block;
background: #ff6f00;
color: #ffffff;
padding: 10px 20px;
text-decoration: none;
font-size: 18px;
border-radius: 5px;
margin-top: 15px;
}
.btn:hover {
background: #e65c00;
}
img {
max-width: 100%;
border-radius: 5px;
}
</style>
</head>
<body>
<div class="container">
<h2>Exclusive Offer on Temu!</h2>
<p>Don't miss out on this high-resolution 1080P dashboard camera with infrared night vision and IPS screen.</p>
<img src="https://img.kwcdn.com/product/fancy/62b43ef5-2640-44be-ac6f-3fb89dccff2a.jpg" alt="Dashboard Camera">
<p>Get an unbeatable price to enhance your road safety!</p>
<a href="https://temu.to/k/em0mmg34vp1" class="btn">View the Offer</a>
</div>
</body>
</html>
<CENTER>
<a href="http://giftrend.click/index.php?search=6&d174637&xoedp=310-8335&lm=868742NVLR420&sd=9&page=zVmsh9FaS0pYTYm"> Click here to Unsbscribe</a>