File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1631113861.H407044P2941.s3.yayogua.com.py,S=4296
Return-path: <vuyiuct@mcta.com>
Envelope-to: info@w3.com.py
Delivery-date: Wed, 08 Sep 2021 11:11:01 -0400
Received: from [117.92.164.177] (port=1848 helo=mcta.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <vuyiuct@mcta.com>)
id 1mNzE4-0000ih-7a
for info@w3.com.py; Wed, 08 Sep 2021 11:11:01 -0400
Received: from vps32528 ([127.0.0.1]) by localhost via TCP with ESMTPA; Wed, 08 Sep 2021 23:10:09 +0800
MIME-Version: 1.0
From: Eiffel <tanghui166@126.com>
Sender: Eiffel <vuyiuct@mcta.com>
To: info@w3.com.py
Reply-To: Eiffel <tanghui166@126.com>
Date: 8 Sep 2021 23:10:09 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear friends Nice day to you! This is Eiffel from Barty Medical,
which is a manufacturer of Cardiovascular and peripheral intervention, main
products : Drug-eluting balloon catheter; Hp PTCA& PTCA balloon catheter;
Hp PTA& PTA balloon catheter; Introducer sheath; Angiography catheter; Guide
catheter etc. And we have cooperated with many hospitals all over the world,Korea,Brazil,Turkey,Egypt,Pakistan,
Indonesia, etc.with CE, SFDA, ISO, and dozens of patents on our products.
[...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(tanghui166[at]126.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tanghui166[at]126.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[117.92.164.177 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.6 MISSING_MID Missing Message-Id: header
1.5 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IENhcmRpb3Zhc2N1bGFyIGFuZCBwZXJpcGhlcmFsIGludGVydmVudGlvbg==?=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