File: /home/w3com/mail/w3.com.py/victor.segovia/cur/1661735781.H256534P25834.s3.yayogua.com.py,S=3538:2,S
Return-path: <oopgkpgoe@aagehempel.com>
Envelope-to: info@w3.com.py
Delivery-date: Sun, 28 Aug 2022 21:16:21 -0400
Received: from [221.215.214.93] (port=62975 helo=mx-01-eu-central-1.prod.hydra.sophos.com)
by s3.yayogua.com.py with esmtp (Exim 4.87)
(envelope-from <oopgkpgoe@aagehempel.com>)
id 1oSTNz-0006dz-Pu
for info@w3.com.py; Sun, 28 Aug 2022 21:16:21 -0400
Date: Mon, 29 Aug 2022 09:07:26 +0800 (GMT+08:00)
From: lavendertex <lavendertex@yeah.net>
Sender: oopgkpgoe <oopgkpgoe@aagehempel.com>
To: info <info@w3.com.py>
Message-ID: <369263190.183039.1661735246837@mx-01-eu-central-1.prod.hydra.sophos.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=7.9
X-Spam-Score: 79
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, We sell all kinds of sewing machine and sewing tools.
If you are interested,you can visit our Youtube page to see all our machine
video, [...]
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(lavendertex[at]yeah.net)
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[221.215.214.93 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Re: sewing machine and sewing tools
<p style="margin-top:2px;margin-bottom:2px;">Hello,</p><p style="margin-top:2px;margin-bottom:2px;">We sell all kinds of sewing machine and sewing tools.</p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top:2px;margin-bottom:2px;">If you are interested,you can visit our Youtube page to see all our machine video,</p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top:2px;margin-bottom:2px;">https://www.youtube.com/channel/UC8N0ykHNXNiKttfidkenHOA</p><p style="margin-top:2px;margin-bottom:2px;"><br/></p><p style="margin-top:2px;margin-bottom:2px;">Best regards</p><p style="margin-top:2px;margin-bottom:2px;">Lu</p><p><br/></p>