File: /home2/hansardh/mail/.spam/new/1745430620.M241969P1799459.hp4.hostpido.com,S=4592,W=4682
Return-Path: <nhl@ipfooj.com>
Delivered-To: hansardh+spam@hp4.hostpido.com
Received: from hp4.hostpido.com
by hp4.hostpido.com with LMTP
id EPExDlwoCWgjdRsA6hbwcw
(envelope-from <nhl@ipfooj.com>)
for <hansardh+spam@hp4.hostpido.com>; Wed, 23 Apr 2025 20:50:20 +0300
Return-path: <nhl@ipfooj.com>
Envelope-to: info@hansardhomes.co.ke
Delivery-date: Wed, 23 Apr 2025 20:50:20 +0300
Received: from [113.231.192.81] (port=8379 helo=ipfooj.com)
by hp4.hostpido.com with esmtp (Exim 4.97.1)
(envelope-from <nhl@ipfooj.com>)
id 1u7eEh-00000007YzD-1Dgm
for info@hansardhomes.co.ke;
Wed, 23 Apr 2025 20:50:20 +0300
Message-ID: <057BA35575054B7AFB66D5DB9AB4A7E6@ipfooj.com>
From: "tgcihltf" <nhl@ipfooj.com>
To: <info@hansardhomes.co.ke>
Date: Thu, 24 Apr 2025 01:50:01 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "hp4.hostpido.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Nice to meet you. Can I be your friend? http://www.wen-hy.com/
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked due to usage
of an open resolver. See
https://www.spamhaus.org/returnc/pub/
[URIs: wen-hy.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: wen-hy.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[113.231.192.81 listed in sa-accredit.habeas.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
1.6 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.9 MIXED_HREF_CASE Has href in mixed case
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) + direct-to-MX
1.1 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers
1.0 XPRIO_VISTA X-Priority + old MSFT msgid format
X-Spam-Flag: YES
Subject: ***SPAM*** Nice to meet you. Can I be your friend?
PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0
Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl
bnQ9Ik1TSFRNTCAxMS4wMC4xMDU3MC4xMDAxIj48L0hFQUQ+DQo8Qk9EWT4NCjxQPk5pY2UgdG8g
bWVldCB5b3UuIENhbiBJIGJlIHlvdXIgZnJpZW5kPzwvUD4NCjxQPiZuYnNwOzwvUD4NCjxQPjxB
IGhyZWY9Imh0dHA6Ly93d3cud2VuLWh5LmNvbS8iPmh0dHA6Ly93d3cud2VuLWh5LmNvbS88L0E+
PC9QPg0KPFA+Jm5ic3A7PC9QPjwvQk9EWT48L0hUTUw+DQo=