Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id OBTpLgXxsmLCfAkAchKAPA for ; Wed, 22 Jun 2022 05:37:57 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Wed, 22 Jun 2022 05:37:57 -0500 Received: from [106.75.85.165] (port=57372 helo=server1.urydz.top) by reseller401.webserversystems.com with esmtp (Exim 4.93) (envelope-from ) id 1o3xk9-002cjT-Uu for info@sterlingcal.com; Wed, 22 Jun 2022 05:37:57 -0500 Received: from yahoo2.com.cn (116.18.22.114) by server1.urydz.top id hmbog40e97cc for ; Wed, 22 Jun 2022 18:37:33 +0800 (envelope-from ) Reply-To: Sender: info@sainsd.com Date: Wed, 22 Jun 2022 18:37:24 +0800 From: "1" To: Message-ID: <20220622183734371552@sainsd.com> X-Priority: 1 (Highest) X-mailer: Foxmail 6, 13, 102, 15 [cn] Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====003_Dragon125027101407_=====" X-SPF-Check: 106.75.85.165 is not allowed to send mail from sainsd.com X-PTR-Check: No (consistent) reverse DNS set. X-Spam-Status: Yes, score=15.8 X-Spam-Score: 158 X-Spam-Bar: +++++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: .Hello dear friend! How has business been in the past few years? After reading this email, you will be amazed! Now, our company produces a multifunctional selfie stick for only $1.53, looking for part Content analysis details: (15.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 5.0 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [106.75.85.165 listed in zen.spamhaus.org] 0.5 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (aolan2022[at]foxmail.com) 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.5 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40sainsd.com;ip=106.75.85.165;r=reseller401.webserversystems.com] 0.5 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (aolan2022[at]foxmail.com) 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.6 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: [SPAM] selfie stick This is a multi-part message in MIME format. --=====003_Dragon125027101407_===== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 LkhlbGxvIGRlYXIgZnJpZW5kIQ0KDQpIb3cgaGFzIGJ1c2luZXNzIGJlZW4gaW4gdGhlIHBhc3Qg ZmV3IHllYXJzPyBBZnRlciByZWFkaW5nIHRoaXMgZW1haWwsIHlvdSB3aWxsIGJlIGFtYXplZCEN Ck5vdywgb3VyIGNvbXBhbnkgcHJvZHVjZXMgYSBtdWx0aWZ1bmN0aW9uYWwgc2VsZmllIHN0aWNr IGZvciBvbmx5ICQxLjUzLCBsb29raW5nIGZvciBwYXJ0bmVycyB3b3JsZHdpZGUNCkkgYmVsaWV2 ZSB5b3UgbXVzdCBiZSBpbnRlcmVzdGVkIQ0KV2UgY2FuIHByb3ZpZGUgeW91IHdpdGggYSBzYW1w bGUhDQpMb29raW5nIGZvcndhcmQgdG8gZXN0YWJsaXNoaW5nIGEgbG9uZy10ZXJtIGNvb3BlcmF0 aXZlIHJlbGF0aW9uc2hpcCB3aXRoIHlvdSENCg0KDQoNCkx1Y2lkYSDvvIhTYWxlcyBNYW5hZ2Vy 77yJIA0KRG9uZ2d1YW4gU2FpbiBUZWNoIENvLixMdGQNCkNlbGwgcGhvbmXvvJooMDA4NikxMzA3 MTMyODA2OQ0KV2hhdHNBUFDvvJo4Ni0xMzA3MTMyODA2OQ0KRS1tYWls77yaTHVjaWRhQHNhaW5z ZC5jb20= --=====003_Dragon125027101407_===== Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0 Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT48Rk9OVCBzaXplPTIg ZmFjZT1BcmlhbD4NCjxESVY+DQo8RElWPjxGT05UIGNvbG9yPSNmZjY2MDA+LkhlbGxvIGRlYXIg ZnJpZW5kITxCUj48L0ZPTlQ+PC9ESVY+DQo8RElWPjxGT05UIGNvbG9yPSNmZjY2MDA+SG93IGhh cyBidXNpbmVzcyBiZWVuIGluIHRoZSBwYXN0IGZldyB5ZWFycz8gQWZ0ZXIgDQpyZWFkaW5nIHRo aXMgZW1haWwsIHlvdSB3aWxsIGJlIGFtYXplZCE8QlI+Tm93LCBvdXIgY29tcGFueSBwcm9kdWNl cyBhIA0KbXVsdGlmdW5jdGlvbmFsIHNlbGZpZSBzdGljayBmb3Igb25seSAkMS41MywgbG9va2lu ZyBmb3IgcGFydG5lcnMgd29ybGR3aWRlPEJSPkkgDQpiZWxpZXZlIHlvdSBtdXN0IGJlIGludGVy ZXN0ZWQhPEJSPldlIGNhbiBwcm92aWRlIHlvdSB3aXRoIGEgc2FtcGxlITxCUj5Mb29raW5nIA0K Zm9yd2FyZCB0byBlc3RhYmxpc2hpbmcgYSBsb25nLXRlcm0gY29vcGVyYXRpdmUgcmVsYXRpb25z aGlwIHdpdGggDQp5b3UhPEJSPjxCUj48L0RJVj48L0ZPTlQ+DQo8RElWPjxGT05UIGNvbG9yPSNm ZjY2MDA+PC9GT05UPiZuYnNwOzwvRElWPg0KPERJVj48Rk9OVCBjb2xvcj0jZmY2NjAwPkx1Y2lk YTwvRk9OVD4mbmJzcDvvvIhTYWxlcyBNYW5hZ2Vy77yJJm5ic3A7PC9ESVY+DQo8RElWPjxCPjxV PkRvbmdndWFuIFNhaW4gVGVjaCBDby4sTHRkPC9VPjwvQj48L0RJVj4NCjxESVY+PFNQQU4gc3R5 bGU9IkZPTlQtU0laRTogMTNweCI+Q2VsbCBwaG9uZe+8migwMDg2KTEzMDcxMzI4MDY5PC9TUEFO PjwvRElWPg0KPERJVj48U1BBTiBzdHlsZT0iRk9OVC1TSVpFOiAxM3B4Ij5XaGF0c0FQUO+8mjg2 LTwvU1BBTj48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDEzcHgiPjEzMDcxMzI4MDY5PC9TUEFO PjxTUEFOIA0Kc3R5bGU9IkZPTlQtU0laRTogMTNweCI+PEJSPkUtbWFpbO+8mkx1Y2lkYUBzYWlu c2QuY29tPC9TUEFOPjwvRElWPjwvRElWPjwvRk9OVD48L0JPRFk+PC9IVE1MPg0K --=====003_Dragon125027101407_=====--