Return-path: <aogjhpkdvb@nesta.ie>
Envelope-to: info@w3.com.py
Delivery-date: Sun, 11 Dec 2022 03:34:53 -0300
Received: from [117.30.138.48] (port=17393 helo=mxi.alpha-prm.jp)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <aogjhpkdvb@nesta.ie>)
	id 1p4FvE-0004oT-Ma
	for info@w3.com.py; Sun, 11 Dec 2022 03:34:53 -0300
Date: Sun, 11 Dec 2022 14:34:21 +0800 (CST)
From: bravoalison <bravoalison@foxmail.com>
Sender: aogjhpkdvb <aogjhpkdvb@nesta.ie>
To: info <info@w3.com.py>
Message-ID: <85799015.1064743.1670740461452@mxi.alpha-prm.jp>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=5.1
X-Spam-Score: 51
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Dear~ The Busy production is approaching. Kindly inform you
    that our factory is working at full capacity. The earlier you place the order,
    the sooner we can schedule the production plan to catch the earlier shipment.
    [...] 
 
 Content analysis details:   (5.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/, high
                             trust
                             [117.30.138.48 listed in list.dnswl.org]
  3.0 BAYES_95               BODY: Bayes spam probability is 95 to 99%
                             [score: 0.9889]
  1.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (bravoalison[at]foxmail.com)
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [117.30.138.48 listed in bl.score.senderscore.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.8 PYZOR_CHECK            Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.0 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: YES
Subject:  ***SPAM***  production before CNY holiday

<p style="margin-top:2px;margin-bottom:2px;">Dear~<br/></p><p style="margin-top: 2px; margin-bottom: 2px;"><br/></p><p style="margin-top: 2px; margin-bottom: 2px;">The Busy production is approaching. Kindly inform you that our factory is working at full capacity. The earlier you place the order, the sooner we can schedule the production plan to catch the earlier shipment.</p><p style="margin-top: 2px; margin-bottom: 2px;"><br/></p><p style="margin-top: 2px; margin-bottom: 2px;">Best wishes,</p><p style="margin-top: 2px; margin-bottom: 2px;">Doreen</p>