File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1641811893.H656324P22257.s3.yayogua.com.py,S=4723
Return-path: <ueomdyqrk@tibu.com>
Envelope-to: info@w3.com.py
Delivery-date: Mon, 10 Jan 2022 07:51:33 -0300
Received: from [114.237.155.124] (port=1245 helo=tibu.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <ueomdyqrk@tibu.com>)
id 1n6sGu-0005l8-DE
for info@w3.com.py; Mon, 10 Jan 2022 07:51:33 -0300
Received: from vps30190 ([127.0.0.1]) by localhost via TCP with ESMTPA; Mon, 10 Jan 2022 18:50:34 +0800
MIME-Version: 1.0
From: Mr.Lu <huixricky2@yeah.net>
Sender: Mr.Lu <ueomdyqrk@tibu.com>
To: info@w3.com.py
Reply-To: Mr.Lu <huixricky2@yeah.net>
Date: 10 Jan 2022 18:50:34 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear director， NETCCA :Chinese manufacturers Amazon retail
prices, wholesale prices, cooperative prices, welcome to consult!! Portable
power station DX500 DX 600 DX 1200 Hybrid Solar Inverter, MPPT CONTROL ,
Infinisolar Inverter 3.6-5.6kw//10-15kw Rolling Door EPS 6D/12D /20D/30D(220/380V)
[...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.2 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9484]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(huixricky2[at]yeah.net)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(huixricky2[at]yeah.net)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[114.237.155.124 listed in list.dnswl.org]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[114.237.155.124 listed in bl.score.senderscore.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: mr.lu]
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.1 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IFBvcnRhYmxlIHBvd2VyIHN0YXRpb24sSW5maW5pc29sYXIgSW52ZXJ0ZXIsSHlicmlkLE1QUFQsUm9sbGluZyBkb29yIEVQUyxCZXN0IFByaWNlcw==?=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