Current File : /home/itiffy/mail/.spam/cur/1641155108.M524411P1925800.premium224.web-hosting.com,S=4000,W=4076:2, |
Return-Path: <amqpwzf@ebts.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id MCDmHiQK0mGoYh0A1L5CYA
(envelope-from <amqpwzf@ebts.com>)
for <itiffy+spam@premium224.web-hosting.com>; Sun, 02 Jan 2022 15:25:08 -0500
Return-path: <amqpwzf@ebts.com>
Envelope-to: info@itiffy.com
Delivery-date: Sun, 02 Jan 2022 15:25:08 -0500
Received: from [114.237.154.135] (port=1643 helo=ebts.com)
by premium224.web-hosting.com with esmtp (Exim 4.94.2)
(envelope-from <amqpwzf@ebts.com>)
id 1n47Pa-008Dbo-8I
for info@itiffy.com; Sun, 02 Jan 2022 15:25:08 -0500
Received: from vps10133 ([127.0.0.1]) by localhost via TCP with ESMTPA; Mon, 03 Jan 2022 04:24:13 +0800
MIME-Version: 1.0
From: deng <huixricky6@163.com>
Sender: deng <amqpwzf@ebts.com>
To: info@itiffy.com
Reply-To: deng <huixricky6@163.com>
Date: 3 Jan 2022 04:24:13 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=18.4
X-Spam-Score: 184
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi Dear We manufacture a wide range of high quality CNC machine
parts and Plastic injection molding parts as per client's part design or
samples at lowest cost with good quality.
Content analysis details: (18.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[114.237.154.135 listed in dnsbl.sorbs.net]
1.0 HK_RANDOM_ENVFROM Envelope sender username looks random
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[114.237.154.135 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[huixricky6[at]163.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[huixricky6[at]163.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[114.237.154.135 listed in bl.score.senderscore.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IEN1c3RvbWl6ZWQgcGFydHMgbWFudWZhY3R1cmVy?=
PGh0bWw+PGJvZHk+PFA+SGkgRGVhcjwvUD4NCjxQPldlIG1hbnVmYWN0dXJlIGEgd2lkZSBy
YW5nZSBvZiBoaWdoIHF1YWxpdHkgQ05DIG1hY2hpbmUgcGFydHMgYW5kIFBsYXN0aWMgaW5q
ZWN0aW9uIG1vbGRpbmcgcGFydHMgYXMgcGVyIGNsaWVudCdzIHBhcnQgZGVzaWduIG9yIHNh
bXBsZXM8L1A+DQo8UD5hdCBsb3dlc3QgY29zdCB3aXRoIGdvb2QgcXVhbGl0eS48L1A+DQo8
UD5pZiB5b3UgaGFzIHN1Y2ggcHJvamVjdCBjb21pbmcganVzdCBmcmVlbHkgaW5xdWlyeSB1
cy48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciByZXBseSx0a3MhPEJSPkRlbmc8
L1A+PC9ib2R5PjwvaHRtbD4=