File: /home/w3com/mail/.victor_segovia@w3_com_py/new/1691457428.H361502P5932.s3.yayogua.com.py,S=4203
Return-path: <buuatzzjzx@mariineauto.ee>
Envelope-to: info@w3.com.py
Delivery-date: Mon, 07 Aug 2023 21:17:08 -0400
Received: from [122.245.224.186] (port=39914 helo=sooke-ca.mail.protection.outlook.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <buuatzzjzx@mariineauto.ee>)
id 1qTBLL-0001VQ-6n
for info@w3.com.py; Mon, 07 Aug 2023 21:17:08 -0400
Date: Tue, 8 Aug 2023 09:16:17 +0800 (CST)
From: aA634738826 <aA634738826@163.com>
Sender: buuatzzjzx <buuatzzjzx@mariineauto.ee>
To: info <info@w3.com.py>
Message-ID: <1176994110.121131.1691457377404@sooke-ca.mail.protection.outlook.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=5.4
X-Spam-Score: 54
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear friend, Have nice day. This is William from Ningbo
Yishang Electrical Appliance Co., Ltd. [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9876]
0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(aa634738826[at]163.com)
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[122.245.224.186 listed in list.dnswl.org]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 SPOOFED_FREEMAIL No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?Q?Re=EF=BC=9Anew_product_new_opportunity?=
<p style=3D"margin-top:2px;margin-bottom:2px;">Dear friend=EF=BC=8C</p><p s=
tyle=3D"margin-top:2px;margin-bottom:2px;">Have nice day.</p><p style=3D"ma=
rgin-top:2px;margin-bottom:2px;">This is William from Ningbo Yishang Electr=
ical Appliance Co., Ltd.</p><p style=3D"margin-top:2px;margin-bottom:2px;">=
The company have make hair clipper since 2017.</p><p style=3D"margin-top:2p=
x;margin-bottom:2px;">The product sell in EU,AU,US ETC.</p><p style=3D"marg=
in-top:2px;margin-bottom:2px;">The companies we work with are Geemy=EF=BC=
=8CKemei ETC.</p><p style=3D"margin-top:2px;margin-bottom:2px;">And the pro=
duct can be customed. Like knife head=EF=BC=8Cmotor=EF=BC=8Couter shell=EF=
=BC=8Ccolor box=EF=BC=8Ccarton ETC,</p><p style=3D"margin-top:2px;margin-bo=
ttom:2px;">If you have any question and suggest =EF=BC=8Cpls let me know.</=
p><p style=3D"margin-top:2px;margin-bottom:2px;">Waiting for your feedback<=
/p><p style=3D"margin-top:2px;margin-bottom:2px;">Best Wishes</p><p style=
=3D"margin-top:2px;margin-bottom:2px;">William</p><p style=3D"margin-top:2p=
x;margin-bottom:2px;">Wechat:abc634738826</p><p style=3D"margin-top:2px;mar=
gin-bottom:2px;">Whatsapp:+86-1886763773</p><p style=3D"margin-top: 2px; ma=
rgin-bottom: 2px;"><br/></p>