芝麻web文件管理V1.00
编辑当前文件:/home/pulsehostuk9/mail/.spam/new/1748076157.M12242P182678.aorta.pulsehost.co.uk,S=6862,W=6979
Return-Path: <utztn@besttpromotions.click> Delivered-To: pulsehostuk9+spam@aorta.pulsehost.co.uk Received: from aorta.pulsehost.co.uk by aorta.pulsehost.co.uk with LMTP id WBOoAH2GMWiWyQIAiVeTmw (envelope-from <utztn@besttpromotions.click>) for <pulsehostuk9+spam@aorta.pulsehost.co.uk>; Sat, 24 May 2025 08:42:37 +0000 Return-path: <utztn@besttpromotions.click> Envelope-to: sales@pulsehost.co.uk Delivery-date: Sat, 24 May 2025 08:42:37 +0000 Received: from besttpromotions.click ([185.176.220.173]:46863) by aorta.pulsehost.co.uk with esmtp (Exim 4.98.1) (envelope-from <utztn@besttpromotions.click>) id 1uIkSl-00000000mL5-1Rul for sales@pulsehost.co.uk; Sat, 24 May 2025 08:42:36 +0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=besttpromotions.click; h=Date:Sender:Message-Id:To:From:Subject:Content-Type:Mime-Version:Content-Transfer-Encoding; i=contact-577434@besttpromotions.click; bh=4XoQJb10GwiKKyP9AbYhg7PNS6k=; b=Vlr4J5wQBCnTlKKdBnDw33kBfiA32g1PIMEu+G6wPqerK2oBTub5fk2iLfuP3FOlX+KzWO2v11IF GNQKTn2Ng6dPdZKuzK6AG5kUtwTb2u5CZ2YCB9eMSgkB07OL3u9yADOr+yqx4vl7qRrj2ZH/NOCR k9PsUy89vjmMeyDVY2A= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=besttpromotions.click; b=a/71t2EC4wObJlhzStBf22VT6zrTPVI/0c9vBkTpFEQelp129tJo5RKJzLdhNNijhKNeqqqNw9OE Y1z5CnhaPbM/v7UVXzzVQMmALaPMIp0FMyf2gtcbiTIOdadqsRr8K/K58RJXuaQrVMk/3byqPr2U Rg5Sm0AQIoU5jBDJqA8=; Date: Sat, 24 May 2025 08:41:55 +0000 Sender: contact-577434@besttpromotions.click Message-Id: <729270400019868.6.FOJ4653740147@besttpromotions.click> To: sales@pulsehost.co.uk From: Message from Morrisons <Shein@besttpromotions.click> Content-Type: text/html; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: Yes, score=35.2 X-Spam-Score: 352 X-Spam-Bar: +++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "aorta.pulsehost.co.uk", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Click here to unsubscribe Content analysis details: (35.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 9.0 KAM_FROM_URIBL_PCCC RBL: From address listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [listed in besttpromotions.click.wild.pccc.com] 9.0 KAM_BODY_URIBL_PCCC Body contains URI listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [URI: besttpromotions.click] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?185.176.220.173>] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [185.176.220.173 listed in psbl.surriel.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: bestrends.click] [URI: besttpromotions.click] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: bestrends.click] [URI: besttpromotions.click] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.176.220.173 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.176.220.173 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [185.176.220.173 listed in sa-trusted.bondedsender.org] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: besttpromotions.click (click)] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image 1.5 SHORT_IMG_SUSP_NTLD Short HTML + image + suspicious TLD 0.8 KAM_OTHER_BAD_TLD Other untrustworthy TLDs 0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.8 KAM_IMAGEONLY Email from a questionable TLD that contains primarily just an image X-Spam-Flag: YES Subject: ***SPAM*** Get your car Shein Mystery Box <center> <a href="http://bestrends.click/index.php?search=4&d183851&mncgt=614-5352&lm=577434YNTZ420&sd=9&page=miMGa9JxnprvzMK"><img src="http://bestrends.click/img/1ooNzYyuY95DyzWu"></a> <center> <a href="http://bestrends.click/index.php?search=6&d183851&axigg=614-5352&lm=577434MFUO420&sd=9&page=GBMv652Ed38uCcW">Click here to unsubscribe</a> <img src="http://bestrends.click/track/index.php?search=3&d183851&mdmbw=614-5352&lm=577434TOPM420&sd=9&page=AgoMvgpPV2UmJ7r" style="display:none;" alt="tracking pixel"/> </center>