MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1642639991.H933073P27526.s3.yayogua.com.py,S=5341
Return-path: <ffwkloyor@fgbg.com>
Envelope-to: info@w3.com.py
Delivery-date: Wed, 19 Jan 2022 21:53:11 -0300
Received: from [112.85.64.224] (port=3188 helo=fgbg.com)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <ffwkloyor@fgbg.com>)
	id 1nALhO-00076F-LM
	for info@w3.com.py; Wed, 19 Jan 2022 21:53:11 -0300
Received: from vps33707 ([127.0.0.1]) by localhost via TCP with ESMTPA; Thu, 20 Jan 2022 08:52:04 +0800
MIME-Version: 1.0
From: Miri <smilecr7666@163.com>
Sender: Miri <ffwkloyor@fgbg.com>
To: info@w3.com.py
Reply-To: Miri <smilecr7666@163.com>
Date: 20 Jan 2022 08:52:04 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Hola Amigo, Buenos dias! Soy Miri de FCJ OPTO TECH. Somos
    los 10 principales fabricantes de fibra optica y Cable de fibra optica en
    el Mercado de China. [...] 
 
 Content analysis details:   (7.6 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4142]
  1.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (smilecr7666[at]163.com)
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             (smilecr7666[at]163.com)
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [112.85.64.224 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [112.85.64.224 listed in list.dnswl.org]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.6 MISSING_MID            Missing Message-Id: header
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?B?UmU6IOKAnE9wdGljIGZpYmVyIGlucXVpcnkiID8=?=
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