File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1637168809.H923591P32443.s3.yayogua.com.py,S=4328
Return-path: <sondnlczc@qrosh.com>
Envelope-to: info@w3.com.py
Delivery-date: Wed, 17 Nov 2021 14:06:49 -0300
Received: from [117.92.203.225] (port=1565 helo=qrosh.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <sondnlczc@qrosh.com>)
id 1mnOOW-0008O8-1D
for info@w3.com.py; Wed, 17 Nov 2021 14:06:49 -0300
Received: from vps30190 ([127.0.0.1]) by localhost via TCP with ESMTPA; Thu, 18 Nov 2021 01:04:46 +0800
MIME-Version: 1.0
From: Mr.Lu <huixricky2@yeah.net>
Sender: Mr.Lu <sondnlczc@qrosh.com>
To: info@w3.com.py
Reply-To: Mr.Lu <huixricky2@yeah.net>
Date: 18 Nov 2021 01:04:46 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friends， NETCCA :Chinese manufacturers Main Product
Range Hybrid Solar Inverter, MPPT CONTROL , Infinisolar Inverter 3.6-5.6kw//10-15kw
Rackmount UPS, Rolling Door EPS 6D/12D /20D/30D(220/380V) Solar panels ,
Lithium Battery of Electric Cars [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.2 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9147]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(huixricky2[at]yeah.net)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(huixricky2[at]yeah.net)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: mr.lu]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[117.92.203.225 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IEluZmluaXNvbGFyIEludmVydGVy77yMSHlicmlkIFNvbGFyIEludmVydGVyLCAgTVBQVA==?=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