Return-Path: <jaaoyht@nauh.com>
Delivered-To: info+spam@ecolux-btp.com
Received: from myrte.o2switch.net
	by myrte.o2switch.net with LMTP
	id H8C1A1ttkWh+6DAA5PApdA
	(envelope-from <jaaoyht@nauh.com>)
	for <info+spam@ecolux-btp.com>; Tue, 05 Aug 2025 04:32:59 +0200
Return-path: <jaaoyht@nauh.com>
Envelope-to: info@ecolux-btp.com
Delivery-date: Tue, 05 Aug 2025 04:32:59 +0200
Received: from [116.20.253.144] (port=9121 helo=nauh.com)
	by myrte.o2switch.net with esmtp (Exim 4.98.2)
	(envelope-from <jaaoyht@nauh.com>)
	id 1uj7Tx-0000000DRbN-1aOL
	for info@ecolux-btp.com;
	Tue, 05 Aug 2025 04:32:58 +0200
Received: from LAPTOP-RD39A6GU ([127.0.0.1]) by localhost via TCP with ESMTPA; Tue, 05 Aug 2025 10:32:08 +0800
MIME-Version: 1.0
From: Vivi <export_vivi001@yeah.net>
Sender: Vivi <jaaoyht@nauh.com>
To: info@ecolux-btp.com
Reply-To: Vivi <export_vivi001@yeah.net>
Date: 5 Aug 2025 10:32:08 +0800
Content-Type: multipart/mixed;
 boundary=--boundary_92347_f84c39c2-54ca-42ad-8558-e5248b15f50b
X-Spam-Status: Yes, score=38.7
X-Spam-Score: 387
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "scan.jabatus.fr",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Hi, &nbsp; I hope this email finds you well. &nbsp; We are
    factory and supplier for the coffee kitchen tool in China. &nbsp; We produce
    different range of coffee items like coffee dripper, coffee scal [...] 
 Content analysis details:   (38.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 BAD_SUKA994_3          No description available.
  0.2 BAD_SUKA_DSTM          No description available.
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [116.20.253.144 listed in list.dnswl.org]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [116.20.253.144 listed in zen.spamhaus.org]
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
  0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
  0.1 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [export_vivi001[at]yeah.net]
   25 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=jaaoyht%40nauh.com;ip=116.20.253.144;r=scan.jabatus.fr]
  0.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=nauh.com;ip=116.20.253.144;r=scan.jabatus.fr]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 SUKA_0                 BODY: No description available.
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [116.20.253.144 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [116.20.253.144 listed in bl.score.senderscore.com]
  0.0 HTML_IMAGE_RATIO_02    BODY: HTML has a low ratio of text to image
                             area
  0.1 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_SIZE_HUGE    BODY: HTML font size is huge
  0.1 MISSING_MID            Missing Message-Id: header
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  1.9 MIXED_HREF_CASE        Has href in mixed case
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***Potentiel-SPAM***  =?utf-8?B?Q29mZmVlIGFjY2Vzc29yaWVzIDEwOjMy?=


----boundary_92347_f84c39c2-54ca-42ad-8558-e5248b15f50b
Content-Type: multipart/alternative; boundary=--boundary_92346_83f455cb-c4cb-4cb2-833b-d29aa31c4773


----boundary_92346_83f455cb-c4cb-4cb2-833b-d29aa31c4773
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64

DQpIaSwNCiZuYnNwOw0KSSBob3BlIHRoaXMgZW1haWwgZmluZHMgeW91IHdlbGwuDQombmJz
cDsNCldlIGFyZSBmYWN0b3J5IGFuZCBzdXBwbGllciBmb3IgdGhlIGNvZmZlZSBraXRjaGVu
IHRvb2wgaW4gQ2hpbmEuDQombmJzcDsNCldlIHByb2R1Y2UgZGlmZmVyZW50IHJhbmdlIG9m
IGNvZmZlZSBpdGVtcyBsaWtlIGNvZmZlZSBkcmlwcGVyLCBjb2ZmZWUgc2NhbGUsIGNvZmZl
ZSBtdWcsIG1va2EgcG90LCBjb2ZmZWUgdGFtcGVyLCBhbmQgc28gb24uDQpXZSBsZWFybnQg
ZnJvbSB5b3VyIHdlYnNpdGUgYW5kIGtub3cgdGhhdCB5b3UgYXJlIGluIGNvZmZlZSBidXNp
bmVzcywgZG8geW91IG5lZWQgdG8gY3VzdG9taXplIHRoZSBjb2ZmZWUgcHJvZHVjdHM/DQpL
aW5kbHkgZW1haWwgdG8gZXhwb3J0X3ZpdmkwMDFAeWVhaC5uZXQmbmJzcDsuJm5ic3A7Jm5i
c3A7Jm5ic3A7IFdlIGFyZSBoYXBweSB0byBwcm92aWRlIHlvdSBkZXRhaWxzJm5ic3A7YW5k
IGNhdGFsb2d1ZSBpZiBuZWVkLg0KJm5ic3A7DQpJZiB5b3UgZG8gbm90IHdhbnQgdG8gcmVj
ZWl2ZSB0aGlzIGtpbmQgb2YgZW1haWwgYWdhaW4sIHBsZWFzZSByZXBseSDigJxSRU1PVkXi
gJ0gdG8gdXMuJm5ic3A7DQpMb29raW5nIGZvcndhcmQgdG8gaGVhcmluZyBmcm9tIHlvdSBz
b29uLiBUaGFuayB5b3UhDQo=
----boundary_92346_83f455cb-c4cb-4cb2-833b-d29aa31c4773
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

[encoded data, 16279 characters]
PjwvRk9OVD48L1A+PCEtLUVuZEZyYWdtZW50LS0+
----boundary_92346_83f455cb-c4cb-4cb2-833b-d29aa31c4773--

----boundary_92347_f84c39c2-54ca-42ad-8558-e5248b15f50b
Content-Type: multipart/mixed; boundary=--boundary_92348_20e5e608-2353-4532-a826-e62a5d4e4d55


----boundary_92348_20e5e608-2353-4532-a826-e62a5d4e4d55
Content-Type: image/jpeg; name="=?utf-8?B?UVHlm77niYcyMDI0MTAyODIzMjUyOS5qcGc=?="
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <0@localhost>

[encoded data, 249587 characters]
oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA/9k=
----boundary_92348_20e5e608-2353-4532-a826-e62a5d4e4d55--

----boundary_92347_f84c39c2-54ca-42ad-8558-e5248b15f50b--


