PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773032910.M894595P19988.host100322.itwesthosting.com,S=8552,W=8706 |
Return-Path: <reportzmocqhtu@jkwhpb.cn>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id I9giNc5VrmkUTgAAp0YrwQ
(envelope-from <reportzmocqhtu@jkwhpb.cn>)
for <ithome@host100322.itwesthosting.com>; Mon, 09 Mar 2026 06:08:30 +0100
Return-path: <reportzmocqhtu@jkwhpb.cn>
Envelope-to: webmaster@geopars.com
Delivery-date: Mon, 09 Mar 2026 06:08:30 +0100
Received: from [150.5.130.95] (port=58795 helo=jkwhpb.cn)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <reportzmocqhtu@jkwhpb.cn>)
id 1vzSqu-0005C4-0S
for webmaster@geopars.com;
Mon, 09 Mar 2026 06:08:30 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=jkwhpb.cn;
h=Date:From:To:Subject:Message-ID:Mime-Version:Content-Type;
i=reportzmocqhtu@jkwhpb.cn;
bh=sz6IZYMZQNOCYNzgof/OXpcXG92EMtn22VbtWeoJdxI=;
b=ZNwLcf1dKQw2Iih6Cv2rvz1LX6VhdiKl/Qp+R94qh8wLul5HEBGsmsij0URDWKBUqLuqDZtJHESn
ZkmvMlL7RGPmieOKlA1gr1DOYyurimUwuawWWav5A4A0rcqKZlEn6Ug1YNmGqymg6AJYsxJSd2N2
mP/4U50OWkxyBmTrMJA=
Date: Mon, 9 Mar 2026 13:08:07 +0800
From: =?utf-8?B?44Oe44K544K/44O844Kr44O844OJ?= <reportzmocqhtu@jkwhpb.cn>
To: <webmaster@geopars.com>
Message-ID: <20260309130821863351@jkwhpb.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon321678287388_====="
X-Spam-Status: Yes, score=26.6
X-Spam-Score: 266
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: セキュリティ通知 カードセキュリティアップグレードのお知らせ
お客様のMasterカードに登録された携帯番号の本人確認が必要です。
本日中に認証� [...]
Content analysis details: (26.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: alya11.cn]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: alya11.cn]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[150.5.130.95 listed in zen.spamhaus.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: jkwhpb.cn]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: jkwhpb.cn]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?150.5.130.95>]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: alya11.cn]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[150.5.130.95 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.130.95 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.130.95 listed in sa-trusted.bondedsender.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: jkwhpb.cn]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: jkwhpb.cn]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 MIXED_HREF_CASE Has href in mixed case
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?44CQ6YeN6KaB44CRTWFzdGVyY2FyZCDoqo3oqLzmiYvntprjgY0=?=
=?utf-8?B?5pyq5a6M5LqG44Gu44GK55+l44KJ44Gb?=
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format.
--=====003_Dragon321678287388_=====
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64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--=====003_Dragon321678287388_=====
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64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--=====003_Dragon321678287388_=====--