File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1627097376.H767031P25820.s3.yayogua.com.py,S=3677
Return-path: <jonbdfjux@ephu.com>
Envelope-to: info@w3.com.py
Delivery-date: Fri, 23 Jul 2021 23:29:36 -0400
Received: from [49.82.229.75] (port=1196 helo=ephu.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <jonbdfjux@ephu.com>)
id 1m78M3-0006gg-EP
for info@w3.com.py; Fri, 23 Jul 2021 23:29:36 -0400
Received: from vps16621 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sat, 24 Jul 2021 11:28:41 +0800
MIME-Version: 1.0
From: Serena <gaikan5935669469@126.com>
Sender: Serena <jonbdfjux@ephu.com>
To: info@w3.com.py
Reply-To: Serena <gaikan5935669469@126.com>
Date: 24 Jul 2021 11:28:41 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear manager Have a nice day! we are data expert, our products
can record your beauty life; Our main products are: USB Flash Drive SD Card
Micro SD Card SSD mobile hard disk Sandisk&Micron etc famous brand chip;
1 year warranty; Free sample; [...]
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9998]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9998]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gaikan5935669469[at]126.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gaikan5935669469[at]126.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[49.82.229.75 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.4 SPOOFED_FREEMAIL No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6VVNCIEZsYXNoIERyaXZl44CBU0QgQ2FyZO+8iEZyZWUgc2FtcGxl77yJ?=
PGh0bWw+PGJvZHk+PFA+RGVhciBtYW5hZ2VyPEJSPkhhdmUgYSBuaWNlIGRheSE8QlI+d2Ug
YXJlIGRhdGEgZXhwZXJ0LCBvdXIgcHJvZHVjdHMgY2FuIHJlY29yZCB5b3VyIGJlYXV0eSBs
aWZlOyA8L1A+DQo8UD5PdXIgbWFpbiBwcm9kdWN0cyBhcmU6PEJSPlVTQiBGbGFzaCBEcml2
ZTxCUj5TRCBDYXJkPEJSPk1pY3JvIFNEIENhcmQgPEJSPlNTRCBtb2JpbGUgaGFyZCBkaXNr
PEJSPlNhbmRpc2smYW1wO01pY3JvbiBldGMgZmFtb3VzIGJyYW5kIGNoaXA7PEJSPjEgeWVh
ciB3YXJyYW50eTs8QlI+RnJlZSBzYW1wbGU7PC9QPg0KPFA+TW9yZSBkZXRhaWxzLHBscyBj
b250YWN0IHVzITwvUD4NCjxQPkJlc3QgcmVnYXJkczwvUD4NCjxQPlNlcmVuYTxCUj48L1A+
DQo8UD48L1A+PC9ib2R5PjwvaHRtbD4=