File: /home/w3com/mail/.felipa_pereira@w3_com_py/new/1647698866.H561169P5531.s3.yayogua.com.py,S=4470
Return-path: <vipejnw@tqof.com>
Envelope-to: info@w3.com.py
Delivery-date: Sat, 19 Mar 2022 11:07:46 -0300
Received: from [114.237.155.193] (port=4029 helo=tqof.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <vipejnw@tqof.com>)
id 1nVZk8-0001NO-3W
for info@w3.com.py; Sat, 19 Mar 2022 11:07:46 -0300
Received: from vps30190 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sat, 19 Mar 2022 22:06:47 +0800
MIME-Version: 1.0
From: Mr.Lu <huixricky2@yeah.net>
Sender: Mr.Lu <vipejnw@tqof.com>
To: info@w3.com.py
Reply-To: Mr.Lu <huixricky2@yeah.net>
Date: 19 Mar 2022 22:06:47 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.5
X-Spam-Score: 75
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear director， NETCCA :Chinese manufacturers Amazon retail
prices, wholesale prices, cooperative prices, welcome to consult!! Portable
power station DX500 DX 600 DX 1200 Hybrid Solar Inverter, MPPT CONTROL ,
Infinisolar Inverter 3.6-5.6kw//10-15kw Rolling Door EPS 6D/12D /20D/30D(220/380V)
[...]
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6822]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(huixricky2[at]yeah.net)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(huixricky2[at]yeah.net)
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[114.237.155.193 listed in bl.score.senderscore.com]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[114.237.155.193 listed in list.dnswl.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.6 MISSING_MID Missing Message-Id: header
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IFBvcnRhYmxlIHBvd2VyIHN0YXRpb24sSW5maW5pc29sYXIgSW52ZXJ0ZXIsSHlicmlkLE1QUFQsUm9sbGluZyBkb29yIEVQUyxCZXN0IFByaWNlcw==?=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