PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773683761.M785828P17644.host100322.itwesthosting.com,S=8385,W=8533 |
Return-Path: <no-reply.nhoaej@oizfdse.cn>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id SMGpLjFEuGnsRAAAp0YrwQ
(envelope-from <no-reply.nhoaej@oizfdse.cn>)
for <ithome@host100322.itwesthosting.com>; Mon, 16 Mar 2026 18:56:01 +0100
Return-path: <no-reply.nhoaej@oizfdse.cn>
Envelope-to: webmaster@geopars.com
Delivery-date: Mon, 16 Mar 2026 18:56:01 +0100
Received: from [150.5.128.118] (port=54340 helo=oizfdse.cn)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <no-reply.nhoaej@oizfdse.cn>)
id 1w2CAa-0004eQ-1c
for webmaster@geopars.com;
Mon, 16 Mar 2026 18:56:01 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=oizfdse.cn;
h=Date:From:To:Subject:Message-ID:Mime-Version:Content-Type;
i=no-reply.nhoaej@oizfdse.cn;
bh=jtSNceXxFyn2k7GWYIzH1rRlGR+WRqmPL3fGVq22cJs=;
b=iwf1XWgDVoTGhG47eDD9CvQiLNnP4WNWmpPwhUU+JcfI9j++JuEqq7GaW7aVNKq89abrp3aHdm6M
FBWAsJBlD7ILpn3L+dBgQFfbWCoxiL2rTIY7QNKwdY3ovW7zP9OWhsdh+2FOzuzlmHA+jwbcV6QU
yE175r/2AxdrzDJbx3I=
Date: Tue, 17 Mar 2026 01:55:50 +0800
From: "gg5sdle1q" <no-reply.nhoaej@oizfdse.cn>
To: <webmaster@geopars.com>
Message-ID: <20260317015555045852@oizfdse.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon650880722746_====="
X-Spam-Status: Yes, score=31.4
X-Spam-Score: 314
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ã”利用カードã®ç¢ºèªã‚’ãŠé¡˜ã„ã„ãŸã—ã¾ã™ ã”登録カードã«ãŠã„ã¦ã€æ±ºæ¸ˆå‡¦ç†ãŒæ£å¸¸ã«å®Œäº†ã—ã¦ãŠã‚‰ãšã€å¯¾å¿œãŒå¿…è¦ã¨ãªã£ã¦ãŠã‚Šã¾ã™ã€‚
下記より詳細を [...]
Content analysis details: (31.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: oizfdse.cn]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?150.5.128.118>]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: oizfdse.cn]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[150.5.128.118 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: oizfdse.cn]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: ckvmak.cn]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[150.5.128.118 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.128.118 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.128.118 listed in sa-trusted.bondedsender.org]
0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in
DNS
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?44CQRVRD44CR5rG65riI5pa55rOV44Gu56K66KqN44GM5b+F6KaB44Gn44GZ?=
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format.
--=====003_Dragon650880722746_=====
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64
44GU5Yip55So44Kr44O844OJ44Gu56K66KqN44KS44GK6aGY44GE44GE44Gf44GX44G+44GZDQrj
gZTnmbvpjLLjgqvjg7zjg4njgavjgYrjgYTjgabjgIHmsbrmuIjlh6bnkIbjgYzmraPluLjjgavl
rozkuobjgZfjgabjgYrjgonjgZrjgIHlr77lv5zjgYzlv4XopoHjgajjgarjgaPjgabjgYrjgorj
gb7jgZnjgIIgDQrkuIvoqJjjgojjgoroqbPntLDjgpLjgZTnorroqo3jgY/jgaDjgZXjgYTjgIIN
CuaUr+aJleOBhOaDheWgseOCkueiuuiqjeOBmeOCiyANCkVUQ+OCt+OCueODhuODoOeZuuihjOOC
s+ODvOODie+8mk5Fd3p3aWx6
--=====003_Dragon650880722746_=====
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPjxUSVRMRT7jgJBFVEPpgJrnn6XjgJHmsbrmuIjjgqvjg7zjg4nn
orroqo3jga7jgYrpoZjjgYQ8L1RJVExFPg0KPE1FVEEgY2hhcnNldD1VVEYtOD4NCjxNRVRBIG5h
bWU9dmlld3BvcnQgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEu
MCI+DQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250ZW50PSJNU0hUTUwgMTEuMDAuOTYwMC4xOTE4
MCI+PC9IRUFEPg0KPEJPRFkgDQpzdHlsZT0iRk9OVC1GQU1JTFk6ICdNZWlyeW8nLCBzYW5zLXNl
cmlmOyBCQUNLR1JPVU5EOiAjZWVmMWY0OyBDT0xPUjogIzJjMmMyYzsgUEFERElORy1CT1RUT006
IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQ
QURESU5HLVJJR0hUOiAwcHgiPg0KPERJViANCnN0eWxlPSJNQVgtV0lEVEg6IDU4MHB4OyBCT1JE
RVItVE9QOiAjY2NjIDFweCBzb2xpZDsgQk9SREVSLVJJR0hUOiAjY2NjIDFweCBzb2xpZDsgQkFD
S0dST1VORDogI2ZmZjsgQk9SREVSLUJPVFRPTTogI2NjYyAxcHggc29saWQ7IFBBRERJTkctQk9U
VE9NOiAzMHB4OyBQQURESU5HLVRPUDogMzBweDsgUEFERElORy1MRUZUOiAzMHB4OyBNQVJHSU46
IDQwcHggYXV0bzsgQk9SREVSLUxFRlQ6ICNjY2MgMXB4IHNvbGlkOyBQQURESU5HLVJJR0hUOiAz
MHB4OyBib3JkZXItcmFkaXVzOiA2cHgiPg0KPEgyIHN0eWxlPSJGT05ULVNJWkU6IDE2cHg7IE1B
UkdJTi1UT1A6IDBweCI+44GU5Yip55So44Kr44O844OJ44Gu56K66KqN44KS44GK6aGY44GE44GE
44Gf44GX44G+44GZPC9IMj4NCjxQIA0Kc3R5bGU9IkZPTlQtU0laRTogMTRweDsgTElORS1IRUlH
SFQ6IDEuNyI+44GU55m76Yyy44Kr44O844OJ44Gr44GK44GE44Gm44CB5rG65riI5Yem55CG44GM
5q2j5bi444Gr5a6M5LqG44GX44Gm44GK44KJ44Ga44CB5a++5b+c44GM5b+F6KaB44Go44Gq44Gj
44Gm44GK44KK44G+44GZ44CCIA0KPC9QPg0KPFAgc3R5bGU9IkZPTlQtU0laRTogMTRweCI+5LiL
6KiY44KI44KK6Kmz57Sw44KS44GU56K66KqN44GP44Gg44GV44GE44CCPC9QPg0KPERJViBzdHls
ZT0iVEVYVC1BTElHTjogY2VudGVyOyBNQVJHSU46IDI0cHggMHB4Ij48QSANCnN0eWxlPSJURVhU
LURFQ09SQVRJT046IG5vbmU7IENPTE9SOiAjZmZmOyBQQURESU5HLUJPVFRPTTogMTJweDsgUEFE
RElORy1UT1A6IDEycHg7IFBBRERJTkctTEVGVDogMjRweDsgUEFERElORy1SSUdIVDogMjRweDsg
QkFDS0dST1VORC1DT0xPUjogIzJhMmEyYTsgYm9yZGVyLXJhZGl1czogNHB4IiANCmhyZWY9Imh0
dHBzOi8vYXVkaW9hdGl2ZS5ja3ZtYWsuY24vZnVubG93dXRpeHRmL2xvbmR1dC8iPuaUr+aJleOB
hOaDheWgseOCkueiuuiqjeOBmeOCizwvQT4gPC9ESVY+DQo8UCANCnN0eWxlPSJGT05ULVNJWkU6
IDEycHg7IENPTE9SOiAjODg4Ij5FVEPjgrfjgrnjg4bjg6DnmbrooYzjgrPjg7zjg4nvvJpORXd2
bW92aXJrPC9QPjwvRElWPjxCUj48QlI+PC9CT0RZPjwvSFRNTD4NCg==
--=====003_Dragon650880722746_=====--