Spam detection software, running on the system "nc2qzdpecpv1fx",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: è´¦å·è®¿é®è¦æ¥ è¦ è´¦å·å®å ¨æé
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[103.142.102.211 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: home-nangongsports.cn]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: home-nangongsports.cn]
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: home-nangongsports.cn]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: home-nangongsports.cn]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.142.102.211 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified -
Contact cert-sa(a)returnpath.net
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: lists.openkylin.top (top)]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa(a)returnpath.net
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "nc2qzdpecpv1fx",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: deï¼æ¨å¥½ï¼ 以ä¸å¾ åäºé¡¹éè¦æ¨çå ³æ³¨ã请æ¥é 并åæ¶æ¨è¿ï¼å¦æé®é¢è¯·åç¥ã
æ件访é®å¯ç 为ï¼221025 ç¼å·ä¸ºï¼O8RQ56
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[103.142.102.176 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: panda-sport.cn]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: panda-sport.cn]
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa(a)returnpath.net
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.142.102.176 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified -
Contact cert-sa(a)returnpath.net
1.0 PDS_TO_EQ_FROM_NAME From: name same as To: address
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 PDS_FROM_2_EMAILS No description available.
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "nc2qzdpecpv1fx",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: å°æ¬ç deï¼ æ们æ£æµå°æ¨çè´¦æ· de(a)lists.openkylin.top
æä¸æ¬¡æ°çç»å½ï¼ æ¶é´ï¼2025-10-17 23:09:37 (UTC+8)
Content analysis details: (14.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: h5-ldsports.cn]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: h5-ldsports.cn]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.142.102.204 listed in bl.score.senderscore.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: h5-ldsports.cn]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[103.142.102.204 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified -
Contact cert-sa(a)returnpath.net
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: zh-starsports.cn]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: h5-ldsports.cn]
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa(a)returnpath.net
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 PDS_FROM_2_EMAILS No description available.
1.0 TO_IN_SUBJ To address is in Subject
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
