Return-Path: <rilfwv@rngd.com>
Delivered-To: info+spam@ecolux-btp.com
Received: from myrte.o2switch.net
	by myrte.o2switch.net with LMTP
	id eA0JCEZ0R2ipRBkA5PApdA
	(envelope-from <rilfwv@rngd.com>)
	for <info+spam@ecolux-btp.com>; Tue, 10 Jun 2025 01:54:46 +0200
Return-path: <rilfwv@rngd.com>
Envelope-to: info@ecolux-btp.com
Delivery-date: Tue, 10 Jun 2025 01:54:46 +0200
Received: from [116.20.166.168] (port=52261 helo=rngd.com)
	by myrte.o2switch.net with esmtp (Exim 4.98.2)
	(envelope-from <rilfwv@rngd.com>)
	id 1uOmK7-00000006xdr-378o
	for info@ecolux-btp.com;
	Tue, 10 Jun 2025 01:54:46 +0200
Received: from LAPTOP-RD39A6GU ([127.0.0.1]) by localhost via TCP with ESMTPA; Tue, 10 Jun 2025 07:53:51 +0800
MIME-Version: 1.0
From: Vivi <export_vivi001@yeah.net>
Sender: Vivi <rilfwv@rngd.com>
To: info@ecolux-btp.com
Reply-To: Vivi <export_vivi001@yeah.net>
Date: 10 Jun 2025 07:53:51 +0800
Content-Type: multipart/mixed;
 boundary=--boundary_11008_1bddae36-7731-401c-a6f2-7ab58ce609a4
X-Spam-Status: Yes, score=35.8
X-Spam-Score: 358
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "scan.jabatus.fr",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Dear&nbsp;Cusotmers，Nice&nbsp;day&nbsp;to&nbsp;you!We&nbsp;are&nbsp;factory&nbsp;&amp;supplier&nbsp;for&nbsp;the&nbsp;coffee&nbsp;products&nbsp;in&nbsp;China.We&nbsp;produce&nbsp;different&nbsp;rang
    [...] 
 Content analysis details:   (35.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [116.20.166.168 listed in list.dnswl.org]
  0.2 BAD_SUKA994_3          No description available.
  0.2 BAD_SUKA_DSTM          No description available.
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [116.20.166.168 listed in zen.spamhaus.org]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [116.20.166.168 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [116.20.166.168 listed in bl.score.senderscore.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
   25 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=rilfwv%40rngd.com;ip=116.20.166.168;r=scan.jabatus.fr]
  0.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=rngd.com;ip=116.20.166.168;r=scan.jabatus.fr]
  0.1 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [export_vivi001[at]yeah.net]
  0.1 SUKA_10                BODY: No description available.
  0.1 SUKA_0                 BODY: No description available.
  0.1 SUKA_82                BODY: No description available.
  0.0 HTML_FONT_SIZE_HUGE    BODY: HTML font size is huge
  0.1 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_IMAGE_RATIO_02    BODY: HTML has a low ratio of text to image
                             area
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  0.1 MISSING_MID            Missing Message-Id: header
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***Potentiel-SPAM***  =?utf-8?B?RWxldmF0ZSBZb3VyIE91dGRvb3IgQ29mZmVlIEV4cGVyaWVuY2Uh?=


----boundary_11008_1bddae36-7731-401c-a6f2-7ab58ce609a4
Content-Type: multipart/alternative; boundary=--boundary_11007_ae5d3cf7-f030-49ce-89ea-250842531149


----boundary_11007_ae5d3cf7-f030-49ce-89ea-250842531149
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
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----boundary_11007_ae5d3cf7-f030-49ce-89ea-250842531149
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

[encoded data, 12994 characters]
T05UPjwvRk9OVD48IS0tRW5kRnJhZ21lbnQtLT4=
----boundary_11007_ae5d3cf7-f030-49ce-89ea-250842531149--

----boundary_11008_1bddae36-7731-401c-a6f2-7ab58ce609a4
Content-Type: multipart/mixed; boundary=--boundary_11009_a46d833a-cd13-4c45-96e6-fdb447abae07


----boundary_11009_a46d833a-cd13-4c45-96e6-fdb447abae07
Content-Type: image/png; name="0500085B@20FFE60F.C4384668.png"
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <0@localhost>

[encoded data, 729773 characters]
----boundary_11009_a46d833a-cd13-4c45-96e6-fdb447abae07
Content-Type: image/jpeg; name="612F2EEA@1D452F42.C4384668.jpg"
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <1@localhost>

[encoded data, 74022 characters]
FguA4FFFFMR//9k=
----boundary_11009_a46d833a-cd13-4c45-96e6-fdb447abae07--

----boundary_11008_1bddae36-7731-401c-a6f2-7ab58ce609a4--


