File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1615062185.H626609P5657.s3.yayogua.com.py,S=5667
Return-path: <fgkumhdjx@hhwv.com>
Envelope-to: info@w3.com.py
Delivery-date: Sat, 06 Mar 2021 17:23:05 -0300
Received: from [112.84.95.56] (port=41820 helo=hhwv.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <fgkumhdjx@hhwv.com>)
id 1lIdS4-0001NN-1v
for info@w3.com.py; Sat, 06 Mar 2021 17:23:05 -0300
Received: from vps17832 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sun, 07 Mar 2021 04:22:00 +0800
MIME-Version: 1.0
From: Nicola <zamy0001@126.com>
Sender: Nicola <fgkumhdjx@hhwv.com>
To: info@w3.com.py
Reply-To: Nicola <zamy0001@126.com>
Date: 7 Mar 2021 04:22:00 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear , Shenzhen Shenzhen Welltop Industrial Co., Ltd , focus
on metal parts machinery for 13 years! We have a comprehensive set of production
equipment, include 48 sets of punching machine, 40 sets of hand-punch machines,
20 sets of tapping machine, 25 sets of drilling machines, 15 sets of machining
equipment, 6 sets of lathe machines, 8 sets of milling machines, 4 sets of
cutting machines, 5 sets of precision grinding machines, sparks machines,
CNC machining center and 3 production lines, and we also have a series precision
testing equipment, such as projector, Quadratic elements/CMM, hardness tester,
altimeter, DJH-E and so on. [...]
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zamy0001[at]126.com)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(zamy0001[at]126.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[112.84.95.56 listed in bl.score.senderscore.com]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[112.84.95.56 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.6 MISSING_MID Missing Message-Id: header
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IGxvdWRzcGVha2VyIC8gYXVkaW8gbWV0YWwgcGFydHM=?=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