PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1756964376.M561554P32614.host100322.itwesthosting.com,S=13042,W=13249:2, |
Return-Path: <reportkzmvl@service.onefarming.cn>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id gQ5LIRgmuWhmfwAAp0YrwQ
(envelope-from <reportkzmvl@service.onefarming.cn>)
for <ithome@host100322.itwesthosting.com>; Thu, 04 Sep 2025 07:39:36 +0200
Return-path: <reportkzmvl@service.onefarming.cn>
Envelope-to: webmaster@geopars.com
Delivery-date: Thu, 04 Sep 2025 07:39:36 +0200
Received: from [160.191.52.56] (port=56959 helo=service.onefarming.cn)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <reportkzmvl@service.onefarming.cn>)
id 1uu2h6-0008Tr-1o
for webmaster@geopars.com;
Thu, 04 Sep 2025 07:39:36 +0200
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mykey; d=service.onefarming.cn;
h=Date:From:To:Subject:Message-ID:Mime-Version:Content-Type;
bh=tUpcQ1bIlxo8LVBtz909KF0adeA=;
b=TgS21GsjRb5i1eWZUEappvGQprC0Xy2yPqeufQqIAA256tW5tTAAAozstUYB6Em+9oiqH0WCLds1
feLrjj9MI+y79Vv9n8slrhlMv5xH3X2fqMNehMD0BPY2y7ef9r1gXFT2JUD3V6tXOdO9hSX7W3DV
nuwX8tBfd/hANl3S+ck=
Received: from my169.com (43.165.198.226) by service.onefarming.cn id hn4j1c0001gd for <webmaster@geopars.com>; Thu, 4 Sep 2025 06:39:28 +0100 (envelope-from <reportkzmvl@service.onefarming.cn>)
Date: Thu, 4 Sep 2025 13:39:15 +0800
From: =?utf-8?B?QU5B44Kr44O844OJ?= <reportkzmvl@service.onefarming.cn>
To: <webmaster@geopars.com>
Message-ID: <20250904133928325178@service.onefarming.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon875208152044_====="
X-Spam-Status: Yes, score=20.6
X-Spam-Score: 206
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: マイルプãƒã‚°ãƒ©ãƒ ã€ã”対応ã®ãŠé¡˜ã„ã€‘æœªåŠ ç®—ãƒžã‚¤ãƒ«ï¼š8,690マイル
ä¼šå“¡æƒ…å ±ã¨äºˆç´„内容ã®ç›¸é•ã«ã‚ˆã‚Šã€ãƒžã‚¤ãƒ«åŠ ç®—ãŒæ£å¸¸ã«è¡Œã‚れã¾ã›ã‚“ã§ã—ãŸã€‚
Content analysis details: (20.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_FROM From username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: gfuerutj.cn]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: service.onefarming.cn]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: onefarming.cn]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: gfuerutj.cn]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?160.191.52.56>]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[160.191.52.56 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[160.191.52.56 listed in bl.score.senderscore.com]
0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[160.191.52.56 listed in sa-accredit.habeas.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: gfuerutj.cn]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?44CQQU5B44Oe44Kk44Os44O844K444Kv44Op44OW44CR44GK5a6i5qeY5oOF5aCx44Gr6Zai?=
=?utf-8?B?44GZ44KL44GU56K66KqN44Gu44GK6aGY44GE?=
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format.
--=====003_Dragon875208152044_=====
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64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--=====003_Dragon875208152044_=====
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64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--=====003_Dragon875208152044_=====--