File: /home/w3com/mail/.martin_cubilla@w3_com_py/cur/1622985103.H486212P2076.s3.yayogua.com.py,S=4287:2,S
Return-path: <smkus@fgos.com>
Envelope-to: info@w3.com.py
Delivery-date: Sun, 06 Jun 2021 09:11:43 -0400
Received: from [117.69.31.169] (port=1602 helo=rwbk.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <smkus@fgos.com>)
id 1lpsZ0-0000UP-Lr
for info@w3.com.py; Sun, 06 Jun 2021 09:11:43 -0400
Received: from vps33068 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sun, 06 Jun 2021 21:09:41 +0800
MIME-Version: 1.0
From: Eiffel <tanghui166@126.com>
Sender: Eiffel <smkus@fgos.com>
To: info@w3.com.py
Reply-To: Eiffel <tanghui166@126.com>
Date: 6 Jun 2021 21:09:41 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear friends Nice day to you! This is Eiffel from Barty Medical,
which is a manufacturer of Cardiovascular and peripheral intervention, main
products : Drug-eluting balloon catheter; Hp PTCA& PTCA balloon catheter;
Hp PTA& PTA balloon catheter; Introducer sheath; Angiography catheter; Guide
catheter etc. And we have cooperated with many hospitals all over the world,Korea,Brazil,Turkey,Egypt,Pakistan,
Indonesia, etc.with CE, SFDA, ISO, and dozens of patents on our products.
[...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(tanghui166[at]126.com)
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tanghui166[at]126.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[117.69.31.169 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.6 MISSING_MID Missing Message-Id: header
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IENhcmRpb3Zhc2N1bGFyIGFuZCBwZXJpcGhlcmFsIGludGVydmVudGlvbg==?=
PGh0bWw+PGJvZHk+PFA+RGVhciBmcmllbmRzPC9QPg0KPFA+TmljZSBkYXkgdG8geW91ISBU
aGlzIGlzIEVpZmZlbCBmcm9tIEJhcnR5IE1lZGljYWwsIHdoaWNoIGlzIGEgbWFudWZhY3R1
cmVyIG9mIENhcmRpb3Zhc2N1bGFyIGFuZCBwZXJpcGhlcmFsIGludGVydmVudGlvbiwgbWFp
biBwcm9kdWN0cyA6PEJSPkRydWctZWx1dGluZyBiYWxsb29uIGNhdGhldGVyOzxCUj5IcCBQ
VENBJmFtcDsgUFRDQSBiYWxsb29uIGNhdGhldGVyOzxCUj5IcCBQVEEmYW1wOyBQVEEgYmFs
bG9vbiBjYXRoZXRlcjs8QlI+SW50cm9kdWNlciBzaGVhdGg7PEJSPkFuZ2lvZ3JhcGh5IGNh
dGhldGVyOzxCUj5HdWlkZSBjYXRoZXRlciBldGMuPEJSPkFuZCB3ZSBoYXZlIGNvb3BlcmF0
ZWQgd2l0aCBtYW55IGhvc3BpdGFscyBhbGwgb3ZlciB0aGUgd29ybGQsS29yZWEsQnJhemls
LFR1cmtleSxFZ3lwdCxQYWtpc3RhbiwgSW5kb25lc2lhLCBldGMud2l0aCBDRSwgU0ZEQSwg
SVNPLCBhbmQgZG96ZW5zIG9mIHBhdGVudHMgb24gb3VyIHByb2R1Y3RzLjwvUD4NCjxQPkJ5
IHRoZSB3YXksIHdoYXQgaXMgdGhlIHZpdGFsIGltcG9ydGFuY2UgdGhhdCB3ZSBvd24gYSB0
b3AgcHJvZHVjdGlvbiB0ZWNobm9sb2d5IGJhY2tib25lIHRyb29wIGZyb20gVGVydW1vLiA8
L1A+DQo8UD5XaXNoIHdlIGhhdmUgYSBjaGFuY2UgdG8gZGlzY3VzcyB3aXRoIHlvdSBhbmQg
c2VydmUgeW91IGluIHRoZSBuZWFyIGZ1dHVyZS48L1A+DQo8UD5CZXN0IFJlZ2FyZHMhPEJS
PkVpZmZlbDwvUD48L2JvZHk+PC9odG1sPg==