MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1620872986.H997881P21913.s3.yayogua.com.py,S=4761
Return-path: <ueogxrde@icis.com>
Envelope-to: info@w3.com.py
Delivery-date: Wed, 12 May 2021 22:29:46 -0400
Received: from [124.236.119.80] (port=53518 helo=us-smtp-inbound-2.mimecast.com)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <ueogxrde@icis.com>)
	id 1lh16f-0005fp-O7
	for info@w3.com.py; Wed, 12 May 2021 22:29:46 -0400
Date: Thu, 13 May 2021 10:29:00 +0800 (CST)
From: nbdef1 <nbdef1@163.com>
Sender: ueogxrde <ueogxrde@icis.com>
To: info <info@w3.com.py>
Message-ID: <1991035325.417915.1620872940768@us-smtp-inbound-2.mimecast.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=8.9
X-Spam-Score: 89
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Dear My friend , How are you? I am Jack from Ningbo DEF, very
    glad to being your service. [...] 
 
 Content analysis details:   (8.9 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (nbdef1[at]163.com)
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/, high
                             trust
                             [124.236.119.80 listed in list.dnswl.org]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [124.236.119.80 listed in bl.score.senderscore.com]
  1.0 CN_B2B_SPAMMER         BODY: Chinese company introducing itself
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.8 PYZOR_CHECK            Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 RCVD_IN_MSPIKE_ZBI     No description available.
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.8 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: YES
Subject:  ***SPAM***  RE: CHEAPER lotion pump and trigger spray

<p style=3D"margin-top:2px;margin-bottom:2px;"><span style=3D"font-size: 18=
px;">Dear </span><span style=3D"color:#993300"><span style=3D"font-size: 18=
px;">My friend</span></span><span style=3D"font-size: 18px;">&nbsp;,<br/><b=
r/>How are you?<br/><br/>I am <span style=3D"font-size: 18px; color: rgb(15=
3, 51, 0);">Jack</span> from Ningbo DEF, very glad to being your service.<b=
r/><br/>We are leading manufacturer in China which specialized in <span sty=
le=3D"color: rgb(51, 51, 51); font-family: Arial, sans-serif; font-size: 24=
px; background-color: rgb(255, 255, 255);">lotion pump and trigger spray&nb=
sp;</span>products supplying for over 10 years; good quality and profession=
al service help us gain many good reputation all over the world; we hope yo=
u can join us in the future.<br/><br/>Are you interested to get our priceli=
st?</span></p><p style=3D"margin-top: 2px; margin-bottom: 2px;"><br/></p><p=
 style=3D"margin-top: 2px; margin-bottom: 2px;"><span style=3D"font-size: 1=
8px;">If you have any question you can feel free to contact me, looking for=
ward to your reply, thank you.</span></p><p style=3D"margin-top: 2px; margi=
n-bottom: 2px;"><span style=3D"font-size: 18px;"><br/></span></p><p style=
=3D"margin-top: 2px; margin-bottom: 2px;"><span style=3D"font-size: 18px;">=
B/G</span></p><p style=3D"margin-top: 2px; margin-bottom: 2px;"><span style=
=3D"font-size: 18px;"><br/></span></p><p style=3D"margin-top: 2px; margin-b=
ottom: 2px;"><span style=3D"font-size: 18px;">JACK</span></p><p style=3D"ma=
rgin-top: 2px; margin-bottom: 2px;"><br/></p><p style=3D"margin-top: 2px; m=
argin-bottom: 2px;"><br/><br/><br/></p>