File: /home/w3com/mail/.martin_cubilla@w3_com_py/cur/1621384189.H902768P8772.s3.yayogua.com.py,S=4755:2,S
Return-path: <egzctdlod@lustyr.com>
Envelope-to: info@webpagos.com.py
Delivery-date: Tue, 18 May 2021 20:29:49 -0400
Received: from [114.237.154.176] (port=4700 helo=lustyr.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <egzctdlod@lustyr.com>)
id 1ljA5s-0002Es-DL
for info@webpagos.com.py; Tue, 18 May 2021 20:29:49 -0400
Received: from vps32528 ([127.0.0.1]) by localhost via TCP with ESMTPA; Wed, 19 May 2021 08:28:55 +0800
MIME-Version: 1.0
From: Cherry <zamy06@yeah.net>
Sender: Cherry <egzctdlod@lustyr.com>
To: info@webpagos.com.py
Reply-To: Cherry <zamy06@yeah.net>
Date: 19 May 2021 08:28:55 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear friends , Good day . My name is Cherry.Cao from Shenzhen
Welltop Garment Co.,Ltd. [...]
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(zamy06[at]yeah.net)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zamy06[at]yeah.net)
4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[114.237.154.176 listed in dnsbl.sorbs.net]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[114.237.154.176 listed in list.dnswl.org]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[114.237.154.176 listed in bl.score.senderscore.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IGNsb3RoaW5nIHN1cHBsaWVy?=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=