File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1626919889.H320747P20797.s3.yayogua.com.py,S=4250
Return-path: <dlzrxozoo@cgoh.com>
Envelope-to: info@w3.com.py
Delivery-date: Wed, 21 Jul 2021 22:11:29 -0400
Received: from [49.68.254.82] (port=3995 helo=cgoh.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <dlzrxozoo@cgoh.com>)
id 1m6OBL-0005Ni-Uo
for info@w3.com.py; Wed, 21 Jul 2021 22:11:29 -0400
Received: from vps26521 ([127.0.0.1]) by localhost via TCP with ESMTPA; Thu, 22 Jul 2021 10:10:35 +0800
MIME-Version: 1.0
From: Alina.qu <goodbo2021@163.com>
Sender: Alina.qu <dlzrxozoo@cgoh.com>
To: info@w3.com.py
Reply-To: Alina.qu <goodbo2021@163.com>
Date: 22 Jul 2021 10:10:35 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Business Partner, I would like to take this opportunity
to introduce you to GoodBo Mould (China) Co., Ltd. A corporate profile describing
our capabilities and relevant collaterals are enclosed for your review. [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(goodbo2021[at]163.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(goodbo2021[at]163.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[49.68.254.82 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IEdvb2QgbW91bGQgJiBwbGFzdGljIG1vdWxkaW5nIGNvbXBhbnkh?=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