File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1614606367.H259918P12976.s3.yayogua.com.py,S=4038
Return-path: <uyhmxqlmp@dihm.com>
Envelope-to: info@w3.com.py
Delivery-date: Mon, 01 Mar 2021 10:46:07 -0300
Received: from [49.82.229.26] (port=4962 helo=dihm.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <uyhmxqlmp@dihm.com>)
id 1lGis5-0003Fn-KW
for info@w3.com.py; Mon, 01 Mar 2021 10:46:07 -0300
Received: from vps10228 ([127.0.0.1]) by localhost via TCP with ESMTPA; Mon, 01 Mar 2021 21:44:08 +0800
MIME-Version: 1.0
From: Vanessa <jessica202012@yeah.net>
Sender: Vanessa <uyhmxqlmp@dihm.com>
To: info@w3.com.py
Reply-To: Vanessa <jessica202012@yeah.net>
Date: 1 Mar 2021 21:44:08 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi friend, Are you looking for FALSE EYELASHES supplier for
lower cost? We are a professional supplier for FALSE EYELASHES ,10 years
experienced manufacturer. Our prices are 30% lower than the industry's leading
manufacturers, [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jessica202012[at]yeah.net)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(jessica202012[at]yeah.net)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[49.82.229.26 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IExvd2VyIHByaWNlIGFuZCBGQUxTRSBFWUVMQVNIRVM=?=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