File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1627735699.H698539P10559.s3.yayogua.com.py,S=4355
Return-path: <cpzpvsbnz@noso.com>
Envelope-to: info@w3.com.py
Delivery-date: Sat, 31 Jul 2021 08:48:19 -0400
Received: from [180.124.14.32] (port=3411 helo=noso.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <cpzpvsbnz@noso.com>)
id 1m9oPa-0002hP-Do
for info@w3.com.py; Sat, 31 Jul 2021 08:48:19 -0400
Received: from vps11414 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sat, 31 Jul 2021 20:47:26 +0800
MIME-Version: 1.0
From: JACK <zamy0004@163.com>
Sender: JACK <cpzpvsbnz@noso.com>
To: info@w3.com.py
Reply-To: JACK <zamy0004@163.com>
Date: 31 Jul 2021 20:47:26 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sirs/Madams, Good day! We are a professional auto repair
tools and small handling equipment manufacturer, our main products are as
following: hydraulic lift table cart transmission jack swivel base lift crane
engine crane long ram jack engine stand and support engine load leveller
pipe bender motorcycle lifter spring compressor shop press tool boxes vehicle
dolly oil drainer etc........ [...]
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(zamy0004[at]163.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zamy0004[at]163.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[180.124.14.32 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.6 MISSING_MID Missing Message-Id: header
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IGF1dG8gcmVwYWlyIHRvb2xzIGFuZCBoeWRyYXVsaWMgbGlmdCB0YWJsZSBjYXJ0Lg==?=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