| Current File : /home/mak/mail/.spam/new/1695502413.M503287P14626.cloud.berardocollection.com,S=8237,W=8366 |
Return-Path: <>
Delivered-To: mak+spam@cloud.berardocollection.com
Received: from cloud.berardocollection.com
by cloud.berardocollection.com with LMTP
id 48E/HU1QD2UiOQAAuY/3dA
(envelope-from <>)
for <mak+spam@cloud.berardocollection.com>; Sat, 23 Sep 2023 21:53:33 +0100
Return-path: <>
Envelope-to: info@mak.pt
Delivery-date: Sat, 23 Sep 2023 21:53:33 +0100
Received: from [103.241.65.80] (port=42094 helo=webmail.inland.com.my)
by cloud.berardocollection.com with esmtp (Exim 4.96)
id 1qk9d3-0003kz-0a
for info@mak.pt;
Sat, 23 Sep 2023 21:53:33 +0100
X-Drop-Meta : 28782|3337
Delivered-To: habibamed2020@gmail.com
Received: by 2002:a2e:9185:0:b0:2bf:b1d7:9575 with SMTP id f5csp280445ljg;
Wed, 20 Sep 2023 07:37:37 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IH9uw2HS0FGZSGCf9l/IN0BXbiCKVLZx2xWh4JkIQNJ91Do8ml9SWvFN8E4+YtBfDN0KYeY
X-Received: by 2002:a05:6402:619:b0:52c:164:efe5 with SMTP id n25-20020a056402061900b0052c0164efe5mr2276589edv.39.1695220656941;
Wed, 20 Sep 2023 07:37:36 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1695220656; cv=none;
d=google.com; s=arc-20160816;
b=WmKgtl5/36s0CyJZVd678lenfrwhx+VC00n1CDKBCGsoxp0IWtZqBiknuBlJyPpx5g
J06lv2ZGp5tgi6UJS4kqEM/+b2I2W8oPWOeL/W7oTmyAj12Jq82UUMUfR0AGQcCndyWF
LLUYOpqW+Zf4uUK1nhCJdnJdBbtAm9i9exuudC8llwGZBjKCqs2LX2N2ULENb/tD28mF
tj8IUDiEkxLiuZt+L1NDaSOfoVEi2CV1HWXKTqUi20F2ZwWQ/ICZAK2CbZu26SKoq2ms
FGDz56ig3LseXXB7qdFJWvEJMC3VQzyZmzO1BPJD024tB02Nz6PqRPU3kt4OSiMVgu7o
GjqQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:date:subject:to:from:message-id:dkim-signature;
bh=gZaL5lENe3oHqgfaD4X0wt3QKZ+lrijKeFEVIlT0ReU=;
fh=f2g5SgQr4Vxb9o9s0KJK/Y2dsA6XWIuGHkxDy5QnpC8=;
b=YCg5Ut3Al1j1bP2puXYJ3zprT7Z1j4dFbGslKeF8rpPC93m1dO6lgsOOQ4nNorCr+g
nKiB7wYzjMLnQM08ojC3KI+xDSPVhlEGjFI+2Na1Zd11cdVr4vFqX/6IpkEDOR6YFKGM
mrnQjPkA2SKt+u2H8Q1hDPf0EMAUDM2qwmoJ5a05nnTUPAyCucGkJIYE17kxPbiMOBWn
i5P/it3/3VTH0BcVE4vXV+8Jp/1semlR2IDdMzivbNFdW0UM7LCFrr3m6n1ng30pNC5H
rbpxqtukEEkdhCQscIQ+3K2na4nBTXQkybn7CLo9y2KULLkB+ZB30DwywKiRqegZPRh0
mhdg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@foksan.co.rs header.s=default header.b=Ohu2zC5L;
spf=pass (google.com: domain of n.jordovic@foksan.co.rs designates 81.171.24.71 as permitted sender) smtp.mailfrom=n.jordovic@foksan.co.rs
Received: from jedro110.adriadns.com (jedro110.adriadns.com. [81.171.24.71])
by mx.google.com with ESMTPS id e5-20020a50ec85000000b00532c9a5ffe8si2823200edr.484.2023.09.20.07.37.36
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 20 Sep 2023 07:37:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of n.jordovic@foksan.co.rs designates 81.171.24.71 as permitted sender) client-ip=81.171.24.71;
Authentication-Results: mx.google.com;
dkim=pass header.i=@foksan.co.rs header.s=default header.b=Ohu2zC5L;
spf=pass (google.com: domain of n.jordovic@foksan.co.rs designates 81.171.24.71 as permitted sender) smtp.mailfrom=n.jordovic@foksan.co.rs
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=foksan.co.rs; s=default; h=Content-Type:MIME-Version:Date:Subject:To:From: Message-ID:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=gZaL5lENe3oHqgfaD4X0wt3QKZ+lrijKeFEVIlT0ReU=; b=Ohu2zC5L8YCsIMNWq/m4Nirs5R osZd4ddBk0SVvpxMkXD8blaEmRikrPMSwQ7h36+4vIuQRw90/Y9/19gaxlrwyclOY+FJ/mA0zHceY R07xHt/HYugiMuzvvFDgAtkCuJtP65lvyyRN4cNVrDZDiwynOpbHVf5U7xPDodkt/t34QUio0VQug k44HFnZfT3A4qUVR/1SK3vRpgFyfvkzbuYpYxIm7LkpBvCbgA/3lBkapq1g17RxItNgJO4lZjEWss Zbf0LmHPRCZbbM6QWImndKF7T0FS45KH6qCJxanokYELgdDJMSU4cVsSQznjgHs1g3tFVjvjaauLk rIgGroqQ==;
Received: from [183.88.60.210] (port=60154 helo=localhost) by jedro110.adriadns.com with esmtpsa
(TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <n.jordovic@foksan.co.rs>) id 1qiyKX-00078e-2b; Wed, 20 Sep 2023 14:37:36 +0000
From: "=?UTF-8?B?UGVyZnVtYXJpYSBQcmltb3I=?=" <n.jordovic@foksan.co.rs>
To: info@mak.pt
Date: Wed, 20 Sep 2023 16:36:34 +0200
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jedro110.adriadns.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - foksan.co.rs
X-Get-Message-Sender-Via: jedro110.adriadns.com: authenticated_id: n.jordovic@foksan.co.rs
X-Authenticated-Sender: jedro110.adriadns.com: n.jordovic@foksan.co.rs
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=6.8
X-Spam-Score: 68
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "cloud.berardocollection.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Parabéns info Aproveita os melhores preços em produtos
para mulheres e homens. Registe-se no nosso sorteio e poderá ganhar um cartão
no valor de 50 euros para as suas compras na Primor. PARTICIPA [...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: rink.cc]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: rink.cc]
0.0 URIBL_DBL_BLOCKED ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked. See
https://www.spamhaus.org/returnc/vol/
[URIs: rink.cc]
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1249]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** info =?UTF-8?B?RGVzY3VicmEgYXMgTWVsaG9yZXMgT2ZlcnRhcyBlbSBQZXJmdW1hcmlhIGUgQ29zbcOpdGljYSBuYSBQcmltb3Ih?=
<center>
<body>
<h1>
<strong> <font color="blue" size="5"> Parabéns info Aproveita os melhores preços em produtos para mulheres e homens.
<strong> Registe-se no nosso sorteio e poderá ganhar um cartão no valor de 50 euros para as suas compras na Primor. <br>
</h1>
<a href="https://rink.cc/6zaxt" > <h2> <strong><font color="ff006e" size="6">
PARTICIPA <br>
</a>
</body>