Return-Path: <qppjfvhlq@meag.com>
Delivered-To: info+spam@ecolux-btp.com
Received: from myrte.o2switch.net
	by myrte.o2switch.net with LMTP
	id x5OpDYM4RWhtaSQA5PApdA
	(envelope-from <qppjfvhlq@meag.com>)
	for <info+spam@ecolux-btp.com>; Sun, 08 Jun 2025 09:15:15 +0200
Return-path: <qppjfvhlq@meag.com>
Envelope-to: info@ecolux-btp.com
Delivery-date: Sun, 08 Jun 2025 09:15:15 +0200
Received: from [116.20.166.209] (port=9148 helo=meag.com)
	by myrte.o2switch.net with esmtp (Exim 4.98.2)
	(envelope-from <qppjfvhlq@meag.com>)
	id 1uOAFJ-0000000A03v-3Gd2
	for info@ecolux-btp.com;
	Sun, 08 Jun 2025 09:15:15 +0200
Received: from LAPTOP-RD39A6GU ([127.0.0.1]) by localhost via TCP with ESMTPA; Sun, 08 Jun 2025 15:14:18 +0800
MIME-Version: 1.0
From: Vivi <export_vivi001@yeah.net>
Sender: Vivi <qppjfvhlq@meag.com>
To: info@ecolux-btp.com
Reply-To: Vivi <export_vivi001@yeah.net>
Date: 8 Jun 2025 15:14:18 +0800
Content-Type: multipart/mixed;
 boundary=--boundary_185161_a8c7d272-fe2e-4c02-bb9e-0776de904220
X-Spam-Status: Yes, score=35.6
X-Spam-Score: 356
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "scan.jabatus.fr",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  &nbsp; Hi, &nbsp; Nice day to you! &nbsp; We are factory and
    supplier for the coffee kitchen tool in China. &nbsp; We produce different
    range of coffee items like coffee dripper, coffee scale, coffee [...] 
 Content analysis details:   (35.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.2 BAD_SUKA994_3          No description available.
  0.2 BAD_SUKA_DSTM          No description available.
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [116.20.166.209 listed in zen.spamhaus.org]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [116.20.166.209 listed in list.dnswl.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [116.20.166.209 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [116.20.166.209 listed in sa-trusted.bondedsender.org]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
   25 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=qppjfvhlq%40meag.com;ip=116.20.166.209;r=scan.jabatus.fr]
  0.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=meag.com;ip=116.20.166.209;r=scan.jabatus.fr]
  0.1 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [export_vivi001[at]yeah.net]
  0.1 SUKA_0                 BODY: No description available.
  0.0 HTML_FONT_SIZE_HUGE    BODY: HTML font size is huge
  0.1 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_IMAGE_RATIO_02    BODY: HTML has a low ratio of text to image
                             area
  0.1 MISSING_MID            Missing Message-Id: header
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***Potentiel-SPAM***  =?utf-8?B?Y29mZmVlIHBhcGVyIGZpbHRlcg==?=


----boundary_185161_a8c7d272-fe2e-4c02-bb9e-0776de904220
Content-Type: multipart/alternative; boundary=--boundary_185160_dab031b8-a13e-4505-b0c6-4173294ff446


----boundary_185160_dab031b8-a13e-4505-b0c6-4173294ff446
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64

DQombmJzcDsNCkhpLA0KJm5ic3A7DQpOaWNlIGRheSB0byB5b3UhDQombmJzcDsNCldlIGFy
ZSBmYWN0b3J5IGFuZCBzdXBwbGllciBmb3IgdGhlIGNvZmZlZSBraXRjaGVuIHRvb2wgaW4g
Q2hpbmEuDQombmJzcDsNCldlIHByb2R1Y2UgZGlmZmVyZW50IHJhbmdlIG9mIGNvZmZlZSBp
dGVtcyBsaWtlIGNvZmZlZSBkcmlwcGVyLCBjb2ZmZWUgc2NhbGUsIGNvZmZlZSBtdWcsIG1v
a2EgcG90LCBjb2ZmZWUgdGFtcGVyLCBhbmQgc28gb24uDQpXZSBsZWFybnQgZnJvbSB5b3Vy
IHdlYnNpdGUgYW5kIGtub3cgdGhhdCB5b3UgYXJlIGluIGNvZmZlZSBidXNpbmVzcywgZG8g
eW91IG5lZWQgdG8gY3VzdG9taXplIHRoZSBjb2ZmZWUgcHJvZHVjdHM/DQpLaW5kbHkgZW1h
aWwgdG8gZXhwb3J0X3ZpdmkwMDFAeWVhaC5uZXQNCldlIGFyZSBoYXBweSB0byBwcm92aWRl
IHlvdSBkZXRhaWxzJm5ic3A7YW5kIGNhdGFsb2d1ZSBpZiBuZWVkLg0KJm5ic3A7DQpJZiB5
b3UgZG8gbm90IHdhbnQgdG8gcmVjZWl2ZSB0aGlzIGtpbmQgb2YgZW1haWwgYWdhaW4sIHBs
ZWFzZSByZXBseSDigJxSRU1PVkXigJ0gdG8gdXMuJm5ic3A7DQpMb29raW5nIGZvcndhcmQg
dG8gaGVhcmluZyBmcm9tIHlvdSBzb29uLiBUaGFuayB5b3UhDQoNCg==
----boundary_185160_dab031b8-a13e-4505-b0c6-4173294ff446
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

[encoded data, 19126 characters]
PC9GT05UPjwhLS1FbmRGcmFnbWVudC0tPg==
----boundary_185160_dab031b8-a13e-4505-b0c6-4173294ff446--

----boundary_185161_a8c7d272-fe2e-4c02-bb9e-0776de904220
Content-Type: multipart/mixed; boundary=--boundary_185162_6d2470a2-ff3a-4d9a-83d7-2effd0e554f7


----boundary_185162_6d2470a2-ff3a-4d9a-83d7-2effd0e554f7
Content-Type: image/png; name="=?utf-8?B?UVHlm77niYcyMDI0MTEyNzE4MDI1NS5wbmc=?="
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <0@localhost>

[encoded data, 557067 characters]
+jdoAAAAAElFTkSuQmCC
----boundary_185162_6d2470a2-ff3a-4d9a-83d7-2effd0e554f7
Content-Type: image/png; name="=?utf-8?B?UVHlm77niYcyMDI0MDkxOTEwMTkyOS5wbmc=?="
Content-Transfer-Encoding: base64
Content-Disposition: inline
Content-ID: <1@localhost>

[encoded data, 366533 characters]
He5D3ncjSklBVpdqtHop2cKk+T+wzhDlFPAeiAAAAABJRU5ErkJggg==
----boundary_185162_6d2470a2-ff3a-4d9a-83d7-2effd0e554f7--

----boundary_185161_a8c7d272-fe2e-4c02-bb9e-0776de904220--


