MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1637709967.H692049P1763.s3.yayogua.com.py,S=4619
Return-path: <tdgsoylnqf@rosma.ru>
Envelope-to: info@w3.com.py
Delivery-date: Tue, 23 Nov 2021 20:26:07 -0300
Received: from [121.34.50.209] (port=61210 helo=mail.bimex.si)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <tdgsoylnqf@rosma.ru>)
	id 1mpfAo-0000R9-9M
	for info@w3.com.py; Tue, 23 Nov 2021 20:26:07 -0300
Date: Wed, 24 Nov 2021 07:25:21 +0800 (CST)
From: emilytan03 <emilytan03@163.com>
Sender: tdgsoylnqf <tdgsoylnqf@rosma.ru>
To: info <info@w3.com.py>
Message-ID: <1927864659.354243.1637709921781@mail.bimex.si>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  infoinfoinfoinfoinfo Hi dear! This is Emily, a shipping forwarder
    in china. For years we’ve been in freight forwarding, we help sellers import
    goods from China to places worldwide. We provide the best Air Freight/Sea
    Freight/DDU/DDP to all over the world with the most economical rate. [...]
    
 
 Content analysis details:   (8.5 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 0.9902]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (emilytan03[at]163.com)
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  4.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                             [121.34.50.209 listed in dnsbl.sorbs.net]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?121.34.50.209>]
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/, high
                             trust
                             [121.34.50.209 listed in list.dnswl.org]
  0.1 TRACKER_ID             BODY: Incorporates a tracking ID number
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
                             background
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 HTML_OBFUSCATE_10_20   BODY: Message is 10% to 20% HTML obfuscation
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
  0.0 RCVD_IN_MSPIKE_ZBI     No description available.
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 NORDNS_LOW_CONTRAST    No rDNS + hidden text
X-Spam-Flag: YES
Subject:  ***SPAM***  Re: New arrivals selected from china with best air/sea rate for you

<p style=3D"margin-top:2px;margin-bottom:2px;">infoinfoinfoinfoinfo</p><p s=
tyle=3D"margin-top:2px;margin-bottom:2px;"><br/></p><p style=3D"margin-top:=
 2px; margin-bottom: 2px;">Hi dear! This is Emily, a shipping forwarder in =
china. For years we=E2=80=99ve been in freight forwarding, we help sellers =
import goods from China to places worldwide. We provide the best Air Freigh=
t/Sea Freight/DDU/DDP to all over the world with the most economical rate.<=
/p><p style=3D"margin-top: 2px; margin-bottom: 2px;"><br/></p><p style=3D"m=
argin-top:2px;margin-bottom:2px;">Whatsapp=EF=BC=9A+86 18529578513</p><p st=
yle=3D"margin-top:2px;margin-bottom:2px;">WeChat=EF=BC=9A +86 18529578513</=
p><p style=3D"margin-top: 2px; margin-bottom: 2px;"><br/></p><p style=3D"ma=
rgin-top: 2px; margin-bottom: 2px;"><span style=3D"font-style:italic;color:=
#FFF;">i92y</span><span style=3D"font-style:italic;color:#FFF;">i92y</span>=
<span style=3D"font-style:italic;color:#FFF;">i92y</span><span style=3D"fon=
t-style:italic;color:#FFF;">i92y</span><span style=3D"font-style:italic;col=
or:#FFF;">i92y</span><span style=3D"font-style:italic;color:#FFF;">i92y</sp=
an><span style=3D"font-style:italic;color:#FFF;">i92y</span></p>