| Current File : /home/itiffy/mail/.spam/cur/1637703750.M560873P4096208.premium224.web-hosting.com,S=3998,W=4073:2, |
Return-Path: <zbcyh@gtmq.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id GPpdIUZgnWHQgD4A1L5CYA
(envelope-from <zbcyh@gtmq.com>)
for <itiffy+spam@premium224.web-hosting.com>; Tue, 23 Nov 2021 16:42:30 -0500
Return-path: <zbcyh@gtmq.com>
Envelope-to: info@itiffy.com
Delivery-date: Tue, 23 Nov 2021 16:42:30 -0500
Received: from [114.237.155.204] (port=3802 helo=gtmq.com)
by premium224.web-hosting.com with esmtp (Exim 4.94.2)
(envelope-from <zbcyh@gtmq.com>)
id 1mpdYX-00HC6K-63
for info@itiffy.com; Tue, 23 Nov 2021 16:42:30 -0500
Received: from vps33638 ([127.0.0.1]) by localhost via TCP with ESMTPA; Wed, 24 Nov 2021 05:41:22 +0800
MIME-Version: 1.0
From: Serena <gaikan5935669469@126.com>
Sender: Serena <zbcyh@gtmq.com>
To: info@itiffy.com
Reply-To: Serena <gaikan5935669469@126.com>
Date: 24 Nov 2021 05:41:22 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi purchasing manager, We launched new fast charge power bank
with neat design and low cost. PD 18W Real Capacity:10000mah Battery Type:A
grade Li-Polymer battery Case material:ABS Input: micro 5V 2.4A,9V/2A 12V/1.5A
Lighting:5V/3A Type C:5V/3A,9V/2A,12V/3A Output:USB 1&USB 2 5V/3A 9V/2A 12V/
[...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[114.237.155.204 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[gaikan5935669469[at]126.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[gaikan5935669469[at]126.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.3 SPOOFED_FREEMAIL No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6TmV3IGRlc2lnbiBmb3IgZmFzdCBjaGFyZ2UgcG93ZXIgYmFuaw==?=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