| Current File : /home/itiffy/mail/.spam/cur/1637972601.M426430P2533314.premium224.web-hosting.com,S=4240,W=4318:2, |
Return-Path: <znqzoshz@phmu.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id GKEKGXl6oWHCpyYA1L5CYA
(envelope-from <znqzoshz@phmu.com>)
for <itiffy+spam@premium224.web-hosting.com>; Fri, 26 Nov 2021 19:23:21 -0500
Return-path: <znqzoshz@phmu.com>
Envelope-to: info@itiffy.com
Delivery-date: Fri, 26 Nov 2021 19:23:21 -0500
Received: from [112.85.23.124] (port=19361 helo=phmu.com)
by premium224.web-hosting.com with esmtp (Exim 4.94.2)
(envelope-from <znqzoshz@phmu.com>)
id 1mqlUq-00AlxB-H4
for info@itiffy.com; Fri, 26 Nov 2021 19:23:21 -0500
Received: from vps33707 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sat, 27 Nov 2021 08:22:22 +0800
MIME-Version: 1.0
From: Aurora <sdfghjklxczc@163.com>
Sender: Aurora <znqzoshz@phmu.com>
To: info@itiffy.com
Reply-To: Aurora <sdfghjklxczc@163.com>
Date: 27 Nov 2021 08:22:22 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello We(HNC) are one of the leader company in industrial
automation in China. Our brand products include: CNC CONTROLLER, PLC, IoT
HMI, Servo drive, Servo motor, Spindle motor, VFD, Soft starter, Gearbox,
Encoder, Sensor.
Content analysis details: (16.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_FROM From username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[112.85.23.124 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[112.85.23.124 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sdfghjklxczc[at]163.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
1.3 SPOOFED_FREEMAIL No description available.
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6SE5DIC1JbmR1c3RyaWFsIEF1dG9tYXRpb24gRXhwZXJ0LVBMQy9Jb1QgSE1JL1NFUlZPL1ZGRA==?=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==