Return-Path: Delivered-To: csiway+spam@dedi-4568888.klamss.com.br Received: from dedi-4568888.klamss.com.br by dedi-4568888.klamss.com.br with LMTP id Np3jGfXhiF+LCgAA56lGvA (envelope-from ) for ; Thu, 15 Oct 2020 20:57:41 -0300 Return-path: Envelope-to: hsalles@csiway.com.br Delivery-date: Thu, 15 Oct 2020 20:57:41 -0300 Received: from [59.50.27.210] (port=59785 helo=hotmail.com) by dedi-4568888.klamss.com.br with esmtp (Exim 4.93) (envelope-from ) id 1kTD7m-0000gA-CW for hsalles@csiway.com.br; Thu, 15 Oct 2020 20:57:41 -0300 From: dfrtgb@hotmail.com To: hsalles@csiway.com.br Content-Type: text/plain;charset="GB2312" Content-Transfer-Encoding: 8bit Date: Fri, 16 Oct 2020 07:57:34 +0800 X-Priority: 3 X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-Spam-Status: Yes, score=29.6 X-Spam-Score: 296 X-Spam-Bar: +++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "dedi-4568888.klamss.com.br", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: 正规税票l3620912371 VX同号 Content analysis details: (29.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [59.50.27.210 listed in zen.spamhaus.org] 0.3 HK_RANDOM_FROM From username looks random 0.6 HK_RANDOM_ENVFROM Envelope sender username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [dfrtgb[at]hotmail.com] 4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [59.50.27.210 listed in dnsbl.sorbs.net] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [59.50.27.210 listed in psbl.surriel.com] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS 2.5 TVD_SPACE_ENCODED Space ratio & encoded subject 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers 1.7 SPOOFED_FREEMAIL No description available. 1.6 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.2 TVD_SPACE_RATIO_MINFP Space ratio 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook X-Spam-Flag: YES Subject: ***SPAM*** =?GB2312?B?1f255suwxrFsMzYyMDkxMjM3MQ==?= 正规税票l3620912371 VX同号