MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1625828071.H462679P8498.s3.yayogua.com.py,S=3536
Return-path: <aerlxvrci@anbuk.com>
Envelope-to: info@w3.com.py
Delivery-date: Fri, 09 Jul 2021 06:54:31 -0400
Received: from [114.234.253.71] (port=3954 helo=anbuk.com)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <aerlxvrci@anbuk.com>)
	id 1m1o9K-0002A4-EX
	for info@w3.com.py; Fri, 09 Jul 2021 06:54:31 -0400
Received: from vps26432 ([127.0.0.1]) by localhost via TCP with ESMTPA; Fri, 09 Jul 2021 18:52:29 +0800
MIME-Version: 1.0
From: Yoky <shibinjiu@126.com>
Sender: Yoky <aerlxvrci@anbuk.com>
To: info@w3.com.py
Reply-To: Yoky <shibinjiu@126.com>
Date: 9 Jul 2021 18:52:29 +0800
Subject: =?utf-8?B?UmU6IENOQyBNYWNoaW5pbmcgRmFjdG9yeSBZb3UgTWF5IE5lZWQ=?=
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Dear Director, Have a nice day~ This is Yoky from China and
    work for Zone KX Technology,which provide professional CNC machining service
    as customers’ drawings & samples. [...] 
 
 Content analysis details:   (4.9 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (shibinjiu[at]126.com)
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/, high
                             trust
                             [114.234.253.71 listed in list.dnswl.org]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.6 MISSING_MID            Missing Message-Id: header
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: NO
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=