| Current File : /home/itiffy/mail/.spam/cur/1644674259.M115879P1806078.premium224.web-hosting.com,S=4322,W=4401:2, |
Return-Path: <vhef@kyzz.com>
Delivered-To: itiffy+spam@premium224.web-hosting.com
Received: from premium224.web-hosting.com
by premium224.web-hosting.com with LMTP
id yM3RBtO8B2L+jhsA1L5CYA
(envelope-from <vhef@kyzz.com>)
for <itiffy+spam@premium224.web-hosting.com>; Sat, 12 Feb 2022 08:57:39 -0500
Return-path: <vhef@kyzz.com>
Envelope-to: info@itiffy.com
Delivery-date: Sat, 12 Feb 2022 08:57:39 -0500
Received: from [112.85.64.67] (port=13651 helo=kyzz.com)
by premium224.web-hosting.com with esmtp (Exim 4.94.2)
(envelope-from <vhef@kyzz.com>)
id 1nIsu2-007grC-LF
for info@itiffy.com; Sat, 12 Feb 2022 08:57:39 -0500
Received: from vps33708 ([127.0.0.1]) by localhost via TCP with ESMTPA; Sat, 12 Feb 2022 21:56:14 +0800
MIME-Version: 1.0
From: "Leo Lv" <jiushiyao554321@126.com>
Sender: "Leo Lv" <vhef@kyzz.com>
To: info@itiffy.com
Reply-To: "Leo Lv" <jiushiyao554321@126.com>
Date: 12 Feb 2022 21:56:14 +0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "premium224.web-hosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi friend, This is Leo from Ridesty Mold Company，specializing
in precision machining parts，Metal mold components making and rapid prototyping
service,etc.. has than 20 years of rich experience in metal proce [...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[112.85.64.67 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jiushiyao554321[at]126.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jiushiyao554321[at]126.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[112.85.64.67 listed in bl.score.senderscore.com]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?B?UmU6IGhpZ2ggcHJlY2lzaW9uIENOQyBtYWNoaW5pbmcgcGFydHMu?=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