/home/arranoyd/mail/.spam/new/1754130597.M689952P2477911.dike1.altushost.com,S=6962,W=7075
Return-Path: <eeuenyit@optometry.org.au>
Delivered-To: arranoyd+spam@dike1.altushost.com
Received: from dike1.altushost.com
	by dike1.altushost.com with LMTP
	id FN33KKXojWhXzyUAyrR0Bg
	(envelope-from <eeuenyit@optometry.org.au>)
	for <arranoyd+spam@dike1.altushost.com>; Sat, 02 Aug 2025 12:29:57 +0200
Return-path: <eeuenyit@optometry.org.au>
Envelope-to: otours@otours.hr
Delivery-date: Sat, 02 Aug 2025 12:29:57 +0200
Received: from [117.30.91.161] (port=3045 helo=cooperfarms-com.mail.protection.outlook.com)
	by dike1.altushost.com with esmtp (Exim 4.98.2)
	(envelope-from <eeuenyit@optometry.org.au>)
	id 1ui9V2-0000000AOTY-0SA1
	for otours@otours.hr;
	Sat, 02 Aug 2025 12:29:57 +0200
Date: Sat, 2 Aug 2025 18:29:44 +0800 (CST)
From: amanda944933 <amanda944933@gmail.com>
Sender: eeuenyit <eeuenyit@optometry.org.au>
To: otours <otours@otours.hr>
Message-ID: <2133946465.3651065.1754130584058@cooperfarms-com.mail.protection.outlook.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dike1.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi Dear, Happy New Year! 
 Content analysis details:   (16.7 points, 8.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?117.30.91.161>]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [117.30.91.161 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [117.30.91.161 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [117.30.91.161 listed in sa-trusted.bondedsender.org]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                             CUSTOM_MED
  0.0 T_SPF_HELO_TEMPERROR   SPF: test of HELO record failed (temperror)
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             [amanda944933(at)gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
  0.0 T_US_DOLLARS_3         BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  0.8 GB_FREEMAIL_NUM        Freemail spammy address
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.0 GB_GMAIL_NUM           Spam from random Gmail address
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.9 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 SPOOFED_FREEMAIL       No description available.
  0.4 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  Credit O/A 60 90 days payment buying from China

<p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family:=
Calibri;font-size:16px">Hi Dear,</span></p><p style=3D"margin-top:2px;margi=
n-bottom:2px;"><span style=3D"font-family:Calibri"><span style=3D"font-size=
: 16px;">Happy New Year!</span></span></p><p style=3D"margin-top:2px;margin=
-bottom:2px;"><span style=3D";font-family:Calibri;font-size:16px">Need a ma=
ximum of $8,000,000 credit yearly for importing goods from China?</span></p=
><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family=
:Calibri;font-size:16px">Need flexible and competitive payment terms?</span=
></p><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";font-fa=
mily:Calibri;font-size:16px"><br/></span></p><p style=3D"margin-top:2px;mar=
gin-bottom:2px;"><span style=3D";font-family:Calibri;font-size:16px">We&#39=
;re a supply chain company, as top sourcing agent in China, we support buyi=
ng and shipping and even Financial.</span></p><p style=3D"margin-top:2px;ma=
rgin-bottom:2px;"><br/></p><p style=3D"margin-top:2px;margin-bottom:2px;"><=
span style=3D";font-family:Calibri;font-size:16px">Any questions about how =
to get credit, please feel free to contact us at any time. Please share you=
r WeChat/WhatsApp, we will reply to you in 24 hours. </span></p><p style=3D=
"margin-top:2px;margin-bottom:2px;"><span style=3D";font-family:Calibri;fon=
t-size:16px"><br/></span></p><p style=3D"margin-top: 2px; margin-bottom: 2p=
x; text-wrap: wrap;"><span style=3D"font-family: Tahoma;">Please reply NO i=
f you don&#39;t need it. sorry for the disturbing.</span></p><p style=3D"ma=
rgin-top:2px;margin-bottom:2px;"><span style=3D"font-family: Tahoma;"><br/>=
</span></p><p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D";f=
ont-family:Calibri;font-size:16px">Sincerely,</span></p><p style=3D"margin-=
top:2px;margin-bottom:2px;">Amanda</p><p style=3D"margin-top: 2px; margin-b=
ottom: 2px;">WhatsApp:+8618859944933</p>
Path: home/arranoyd/mail/.spam/new