File: /home/w3com/mail/.amussi@w3_com_py/new/1657348092.H524626P3797.s3.yayogua.com.py,S=4252
Return-path: <aaquaoaei@hepsinerakip.com>
Envelope-to: info@w3.com.py
Delivery-date: Sat, 09 Jul 2022 02:28:12 -0400
Received: from [113.102.147.95] (port=59175 helo=ASPMX.L.GOOGLE.COM)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <aaquaoaei@hepsinerakip.com>)
id 1oA3wp-0000qj-KH
for info@w3.com.py; Sat, 09 Jul 2022 02:28:12 -0400
Date: Sat, 9 Jul 2022 14:27:35 +0800 (CST)
From: whandbag <whandbag@163.com>
Sender: aaquaoaei <aaquaoaei@hepsinerakip.com>
To: info <info@w3.com.py>
Message-ID: <647557.1105351.1657348055903@ASPMX.L.GOOGLE.COM>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Glad to know you are in the market for handbags . We are the
manufacturer specialize in this field for several years. Hope our high quality
and competitive price products will be helpful for your business. Kindly
contact me if any questions. [...]
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(whandbag[at]163.com)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: hyabg.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[113.102.147.95 listed in bl.score.senderscore.com]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[113.102.147.95 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Re: handbag factory from China
<p style="margin-top:2px;margin-bottom:2px;">Glad to know you are in the market for handbags . We are the manufacturer specialize in this field for several years.</p><p style="margin-top:2px;margin-bottom:2px;">Hope our high quality and competitive price products will be helpful for your business. Kindly contact me if any questions.</p><p style="margin-top:2px;margin-bottom:2px;">It is pleasure to be service of you!</p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top:2px;margin-bottom:2px;">Thanks & Best Regards!</p><p style="margin-top:2px;margin-bottom:2px;">Ricky </p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top: 2px; margin-bottom: 2px;">022@hyabg.com </p>