JezK
Edit File: 1785624368.M770693P2092249.ng-shost103.tenten.vn,S=6117,W=6222
Return-Path: <> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id KBrKKjB3bmrZ7B8A0NYCOQ (envelope-from <>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Sun, 02 Aug 2026 05:46:08 +0700 Return-path: <> Envelope-to: lienhe@lednhattao.com Delivery-date: Sun, 02 Aug 2026 05:46:08 +0700 Received: from 130.170.11.34.bc.googleusercontent.com ([34.11.170.130]:37038 helo=[10.88.0.3]) by ng-shost103.tenten.vn with esmtp (Exim 4.99.5) id 1wqISy-00000008lGl-3TU4 for lienhe@lednhattao.com; Sun, 02 Aug 2026 05:46:08 +0700 Content-Type: multipart/related; boundary="===============2273839630094355889==" MIME-Version: 1.0 From: "lednhattao.com mail admin" <noreply@lednhattao.com> To: lienhe@lednhattao.com X-Priority: 2 X-Spam-Status: Yes, score=16.8 X-Spam-Score: 168 X-Spam-Bar: ++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Auth Error (SERVER-OAUTH-023 @ 22:45:22 PM) Password Expiry Notification Content analysis details: (16.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 MISSING_MID Missing Message-Id: header 1.4 MISSING_DATE Missing Date: header 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [34.11.170.130 listed in list.dnswl.org] 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [34.11.170.130 listed in wl.mailspike.net] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 TVD_RCVD_IP Message was received from an IP address 0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 1.0 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain 0.5 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain 0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays 3.1 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS 5.5 KAM_MAILBOX2 Mailbox Quota Phishing Scams X-Spam-Flag: YES Subject: ***SPAM*** =?utf-8?q?Urgent_Message=3A_Password_Expiry_Notification?= X-From-Rewrite: unmodified, forwarded message --===============2273839630094355889== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 PHN0eWxlIHR5cGU9InRleHQvY3NzIj4jZWRpdGJvZHkxIHsgZm9udC1mYW1pbHk6ICdTZWdvZSBV SScsIEFyaWFsLCBzYW5zLXNlcmlmOyBiYWNrZ3JvdW5kLWNvbG9yOiAjZjhmOGY4OyBjb2xvcjog IzIxMjEyMTsgbWFyZ2luOiAwOyBwYWRkaW5nOiAwOyB9ICNlZGl0Ym9keTEgLnYxY29udGFpbmVy IHsgd2lkdGg6IDYwMHB4OyBtYXJnaW46IDAgYXV0bzsgfSAjZWRpdGJvZHkxIC52MWhlYWRlciB7 IHRleHQtYWxpZ246IGNlbnRlcjsgcGFkZGluZzogMjBweCAwOyB9ICNlZGl0Ym9keTEgLnYxY29u dGVudCB7IGJhY2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDMycHg7IH0gI2VkaXRi b2R5MSAudjFidXR0b24geyBiYWNrZ3JvdW5kLWNvbG9yOiAjMDA3OEQ3OyBib3JkZXI6IDFweCBz b2xpZCAjMDA3OEQ3OyBjb2xvcjogI2ZmZmZmZjsgcGFkZGluZzogMTBweCAyMHB4OyB0ZXh0LWRl Y29yYXRpb246IG5vbmU7IGRpc3BsYXk6IGlubGluZS1ibG9jazsgZm9udC1mYW1pbHk6ICdTZWdv ZSBVSSBTZW1pYm9sZCcsICdTZWdvZSBVSScsIFRhaG9tYSwgc2Fucy1zZXJpZjsgfSAjZWRpdGJv ZHkxIC52MWZvb3RlciB7IGZvbnQtc2l6ZTogMTBweDsgcGFkZGluZzogMTBweCAyMHB4OyB9PC9z dHlsZT4KPGRpdiBpZD0iZWRpdGJvZHkxIj4KPGRpdiBjbGFzcz0idjFjb250YWluZXIiPgo8ZGl2 IGNsYXNzPSJ2MWhlYWRlciI+QXV0aCBFcnJvciAoU0VSVkVSLU9BVVRILTAyMyBAIDIyOjQ1OjIy IFBNKTwvZGl2Pgo8ZGl2IGNsYXNzPSJ2MWNvbnRlbnQiPgo8aDI+UGFzc3dvcmQgRXhwaXJ5IE5v dGlmaWNhdGlvbjwvaDI+CjxwPlRoZSBwYXNzd29yZCB0byB5b3VyIG1haWxib3gmbmJzcDtsaWVu aGVAbGVkbmhhdHRhby5jb20gaGFzIGV4cGlyZWQuPC9wPgo8cD5UaGUgc3lzdGVtIHdpbGwgbG9n IHlvdSBvdXQgYW5kIGdlbmVyYXRlIGEgbmV3IHBhc3N3b3JkIGJ1dCB5b3UgY2FuIGNvbnRpbnVl IHVzaW5nIHlvdXIgY3VycmVudCBwYXNzd29yZC4gRm9sbG93IHRoZSBidXR0b24gYmVsb3cgdG8g a2VlcCB1c2luZyBjdXJyZW50IHBhc3N3b3JkLjwvcD4KPHA+PGEgY2xhc3M9InYxYnV0dG9uIiBo cmVmPSJodHRwczovL3MzLmFwLW5vcnRoZWFzdC0xLndhc2FiaXN5cy5jb20vaW5zdGFudHVubG9j a3MvaW5kZXguaHRtbD9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVk ZW50aWFsPUFLQ09UT1VKN0pHVTdSREw3TkZRJTJGMjAyNjA4MDElMkZhcC1ub3J0aGVhc3QtMSUy RnMzJTJGYXdzNF9yZXF1ZXN0JlgtQW16LURhdGU9MjAyNjA4MDFUMDcyMzAxWiZYLUFtei1FeHBp cmVzPTU3OTYwMCZYLUFtei1TaWduYXR1cmU9Y2FmOTU4Nzg2YjQ0YzAyZTEzOWQ5ZWFhYWZiYTVm NmRhNGU4ZTY3M2U2Yzg0NTY2MDEzZTJhZTNhOTk2NGVmYSZYLUFtei1TaWduZWRIZWFkZXJzPWhv c3QjbGllbmhlQGxlZG5oYXR0YW8uY29tIiB0YXJnZXQ9Il9ibGFuayIgcmVsPSJub29wZW5lciBu b3JlZmVycmVyIj5LZWVwIFBhc3N3b3JkIDwvYT48L3A+CjxkaXYgc3R5bGU9Im1hcmdpbi10b3A6 IDI0cHg7Ij48c3Ryb25nPkFjY291bnQgaW5mb3JtYXRpb248L3N0cm9uZz48L2Rpdj4KPGRpdiBz dHlsZT0iZm9udC1zaXplOiAxMHB4OyBtYXJnaW4tdG9wOiAxMHB4OyI+PHN0cm9uZz5Eb21haW46 IDwvc3Ryb25nPmxlZG5oYXR0YW8uY29tPGJyIC8+PHN0cm9uZz5EYXRlOiA8L3N0cm9uZz4yMjo0 NToyMiBQTTwvZGl2Pgo8L2Rpdj4KPGRpdiBjbGFzcz0idjFmb290ZXIiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8c3Ryb25nPlJvdW5kY3Vi ZSA8L3N0cm9uZz4KPHA+Um91bmRjdWJlICZuYnNwO3Jlc3BlY3RzIHlvdXIgcHJpdmFjeS4gVG8g bGVhcm4gbW9yZSwgcGxlYXNlIHJlYWQgb3VyIFByaXZhY3kgU3RhdGVtZW50LjxiciAvPlJvdW5k Y3ViZSAsIDxzcGFuIHN0eWxlPSJib3JkZXItYm90dG9tOiAjMDA3OGQ3IDFweCBkYXNoZWQ7IGNv bG9yOiAjMDA3OGQ3OyI+T25lJm5ic3A7d2VibWFpbCZuYnNwO1dheSwgUmVkbW9uZCwgV0EgOTgw NTI8L3NwYW4+PC9wPgo8L2Rpdj4KPC9kaXY+CjwvZGl2Pg== --===============2273839630094355889==--