MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/w3.com.py/victor.segovia/cur/1645533720.H398841P12470.s3.yayogua.com.py,S=3742:2,S
Return-path: <fhbluz@southtourism.gov.et>
Envelope-to: info@w3.com.py
Delivery-date: Tue, 22 Feb 2022 09:42:00 -0300
Received: from [117.14.8.42] (port=59406 helo=mailgw3.vinnova.se)
	by s3.yayogua.com.py with esmtp (Exim 4.87)
	(envelope-from <fhbluz@southtourism.gov.et>)
	id 1nMUUR-00038d-2V
	for info@w3.com.py; Tue, 22 Feb 2022 09:42:00 -0300
Date: Tue, 22 Feb 2022 20:45:44 +0800 (CST)
From: ym18333786356 <ym18333786356@163.com>
Sender: fhbluz <fhbluz@southtourism.gov.et>
To: info <info@w3.com.py>
Message-ID: <745466579.18537757.1645533944834@mailgw3.vinnova.se>
Subject: =?UTF-8?Q?Re=EF=BC=9APre-ordered_good_prices_for?=
 =?UTF-8?Q?_mid-to-high-end_makeup_brushes?=
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=4.0
X-Spam-Score: 40
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Hello, dear friends. I'm Richard. Do you have a new product
    development plan for your makeup brush? I have a strong design team. Maybe
    I can help you with proofing for free.Now the market is depressed, we must
    reduce the cost. You can tell me the sample size requirements you care about
    or want to test and the order quantity of each batch. I will give you a quotation
    and make samples for free. [...] 
 
 Content analysis details:   (4.0 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.2 BAYES_80               BODY: Bayes spam probability is 80 to 95%
                             [score: 0.9129]
  0.0 FROM_LOCAL_HEX         From: localpart has long hexadecimal sequence
  0.0 FROM_LOCAL_DIGITS      From: localpart has long digit sequence
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (ym18333786356[at]163.com)
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/, high
                             trust
                             [117.14.8.42 listed in list.dnswl.org]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                              freemail headers are different
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.8 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: NO

<table cellpadding="0" cellspacing="0" width="837"><tbody><tr height="73" style=";height:73px" class="firstRow"><td height="73" width="837" style="padding: 5px 10px;"><p>Hello, &nbsp;</p><p>&nbsp;dear friends. I&#39;m Richard. Do you have a new product development plan for &nbsp; your makeup brush? I have a strong design team. Maybe I can help you with &nbsp; proofing for free.Now the market is depressed, we must reduce the cost. You &nbsp; can tell me the sample size requirements &nbsp; &nbsp;you care about or want to test and the order quantity of each batch. I &nbsp; will give you a quotation and make samples for free.</p></td></tr></tbody></table><p><br/></p>