File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1646755197.H638389P29338.s3.yayogua.com.py,S=3578
Return-path: <vsahof@hbbl.com>
Envelope-to: info@w3.com.py
Delivery-date: Tue, 08 Mar 2022 12:59:57 -0300
Received: from [117.92.203.213] (port=2443 helo=hbbl.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <vsahof@hbbl.com>)
id 1nRcFg-0007X0-8A
for info@w3.com.py; Tue, 08 Mar 2022 12:59:57 -0300
Received: from vps33494 ([127.0.0.1]) by localhost via TCP with ESMTPA; Tue, 08 Mar 2022 23:59:08 +0800
MIME-Version: 1.0
From: Moses <xingdui369@163.com>
Sender: Moses <vsahof@hbbl.com>
To: info@w3.com.py
Reply-To: Moses <xingdui369@163.com>
Date: 8 Mar 2022 23:59:08 +0800
Subject: =?utf-8?B?UmU6IFlvdXIgc3VwcGlsZXIgVmFsdmVzIHByaWNlIGlzIGhpZ2hlciB0aGFuIHVz?=
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Director, Has your business declined due to the COVID-19?
What is your country vaccination rate? China will reach 80% by the end 2021.
[...]
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.2 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9425]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(xingdui369[at]163.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(xingdui369[at]163.com)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[117.92.203.213 listed in bl.score.senderscore.com]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[117.92.203.213 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: NO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