OwlCyberSecurity - MANAGER
Edit File: 1744869189.M327438P2303992.premium128.web-hosting.com,S=6005,W=6114:2,
Return-Path: <cjzfufacz@pixq.net> Delivered-To: contact+spam@gourayafroid.com Received: from premium128.web-hosting.com by premium128.web-hosting.com with LMTP id AKA+DUWXAGj4JyMAAvhI2g (envelope-from <cjzfufacz@pixq.net>) for <contact+spam@gourayafroid.com>; Thu, 17 Apr 2025 01:53:09 -0400 Return-path: <cjzfufacz@pixq.net> Envelope-to: contact@gourayafroid.com Delivery-date: Thu, 17 Apr 2025 01:53:09 -0400 Received: from [121.226.33.159] (port=54052 helo=pixq.net) by premium128.web-hosting.com with esmtp (Exim 4.98.1) (envelope-from <cjzfufacz@pixq.net>) id 1u5IBM-00000009fpv-1th0 for contact@gourayafroid.com; Thu, 17 Apr 2025 01:53:08 -0400 Message-ID: <FA62086FE76B2521BC0AE555C9F6B868@pixq.net> From: "ssn" <cjzfufacz@pixq.net> To: <contact@gourayafroid.com> Date: Thu, 17 Apr 2025 13:52:53 +0800 MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-Spam-Status: Yes, score=35.4 X-Spam-Score: 354 X-Spam-Bar: +++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "premium128.web-hosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Nice to meet you. Can I be your friend? http://www.wen-hy.com/ Content analysis details: (35.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: wen-hy.com] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URI: www.wen-hy.com] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?121.226.33.159>] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URI: www.wen-hy.com/160.121.21.90] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: www.wen-hy.com] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URI: www.wen-hy.com] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [121.226.33.159 listed in zen.spamhaus.org] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [121.226.33.159 listed in zen.spamhaus.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [121.226.33.159 listed in bl.score.senderscore.com] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [121.226.33.159 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [121.226.33.159 listed in sa-trusted.bondedsender.org] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 3.4 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 2.0 MIXED_HREF_CASE Has href in mixed case 0.8 XPRIO_VISTA X-Priority + old MSFT msgid format 0.8 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe X-Spam-Flag: YES Subject: ***SPAM*** Nice to meet you. Can I be your friend? PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0 Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT4NCjxQPk5pY2UgdG8g bWVldCB5b3UuIENhbiBJIGJlIHlvdXIgZnJpZW5kPzwvUD4NCjxQPiZuYnNwOzwvUD4NCjxQPjxB IGhyZWY9Imh0dHA6Ly93d3cud2VuLWh5LmNvbS8iPmh0dHA6Ly93d3cud2VuLWh5LmNvbS88L0E+ PC9QPg0KPFA+Jm5ic3A7PC9QPjwvQk9EWT48L0hUTUw+DQo=