Return-Path: <>
Delivered-To: admin@oriscom.com
Received: from host1.itclever.com
	by host1.itclever.com with LMTP
	id tDT/ARnpSVz7RQAA6xc8AQ
	(envelope-from <>)
	for <admin@oriscom.com>; Thu, 24 Jan 2019 23:34:33 +0700
Return-path: <>
Envelope-to: admin@oriscom.com
Delivery-date: Thu, 24 Jan 2019 23:34:33 +0700
Received: from mail by host1.itclever.com with spam-scanned (Exim 4.91)
	id 1gmhxY-0004tL-Jr
	for admin@oriscom.com; Thu, 24 Jan 2019 23:34:32 +0700
Received: from localhost by host1.itclever.com
	with SpamAssassin (version 3.4.1);
	Thu, 24 Jan 2019 23:34:32 +0700
From: "Winnie" <>
To: "admin" <admin@oriscom.com>
Subject: =?GB2312?B?UmU6IHByZWNpc2lvbiBtYWNoaW5pbmcgc2VydmljZXM=?=
Date: Fri, 25 Jan 2019 00:34:09 +0800
Message-Id: <20190124163409.DA28B4E014E@vps6070.com>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on host1.itclever.com
X-Spam-Flag: YES
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.2 required=5.0 tests=FREEMAIL_FORGED_REPLYTO,
	FROM_NO_USER,HTML_MESSAGE,MPART_ALT_DIFF,RCVD_ILLEGAL_IP,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_PBL,RCVD_IN_RP_RNBL,
	RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE autolearn=no autolearn_force=no
	version=3.4.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C49E918.9115AA0F"

This is a multi-part message in MIME format.

------------=_5C49E918.9115AA0F
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "host1.itclever.com",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  0ef7fcae7b10b6ec70c4b9e4f410cdb3 Dear Friends, Nice day to
   you, Hope I have chance to cooperate with you. I have engaged in the high
   precise mechanical parts for about 17 years, covering machining parts,stamping
   parts and so on. Our advantage is we can understand the drawing with tolerance,material
   and process way correctly.and we have experienced and professional team control
   the quality. I can pricing to you in one day after you send me the detailed
   drawings with techinical requirements. Looking forward to your early reply.
   Thanks & Best regards, Winnie Tao HENRY PARTS INC. [...] 

Content analysis details:   (15.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.3 RCVD_ILLEGAL_IP        Received: contains illegal IP address
 2.6 FROM_NO_USER           From: has no local-part before @ sign
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [114.237.154.69 listed in zen.spamhaus.org]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                            was blocked.  See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [114.237.154.69 listed in list.dnswl.org]
 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?114.237.154.69>]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                           [114.237.154.69 listed in bl.score.senderscore.com]
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [114.237.154.69 listed in dnsbl.sorbs.net]
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS
 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5C49E918.9115AA0F
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from [114.237.154.69] (helo=vps6070.com)
	by host1.itclever.com with esmtp (Exim 4.91)
	id 1gmhxX-0004t7-Om
	for admin@oriscom.com; Thu, 24 Jan 2019 23:34:32 +0700
Received: from cgvsicidkg (unknown [248.18.45.14])
	by vps6070.com (Postfix) with ESMTP id DA28B4E014E
	for <admin@oriscom.com>; Thu, 24 Jan 2019 16:34:09 -0000
Date: Fri, 25 Jan 2019 00:34:09 +0800
From: "Winnie" <>
To: "admin" <admin@oriscom.com>
Reply-To: <haohuannicholas@aliyun.com>
Subject: =?GB2312?B?UmU6IHByZWNpc2lvbiBtYWNoaW5pbmcgc2VydmljZXM=?=
X-Mailer: Foxmail 5.0 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
	boundary="====NextPart_Main_20190115_110450===="
Message-Id: <20190124163409.DA28B4E014E@vps6070.com>
SpamTally: Final spam score: unset because ESF not run (SpamAssassin unset, whitelist, or skippped)
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This is a multi-part message in MIME format.

--====NextPart_Main_20190115_110450====
Content-Type: text/plain;
	charset="GB2312"
Content-Transfer-Encoding: base64
Content-Disposition: inline

MGVmN2ZjYWU3YjEwYjZlYzcwYzRiOWU0ZjQxMGNkYjM=

--====NextPart_Main_20190115_110450====
Content-Type: text/html;
	charset="GB2312"
Content-Transfer-Encoding: base64
Content-Disposition: inline

RGVhciBGcmllbmRzLA0KIA0KTmljZSBkYXkgdG8geW91LCBIb3BlIEkgaGF2ZSBjaGFuY2UgdG8g
Y29vcGVyYXRlIHdpdGggeW91Lg0KIA0KSSBoYXZlIGVuZ2FnZWQgaW4gdGhlIGhpZ2ggcHJlY2lz
ZSBtZWNoYW5pY2FsIHBhcnRzIGZvciBhYm91dCAxNyB5ZWFycywgY292ZXJpbmcgbWFjaGluaW5n
IHBhcnRzLHN0YW1waW5nIHBhcnRzIGFuZCBzbyBvbi4NCg0KT3VyIGFkdmFudGFnZSBpcyB3ZSBj
YW4gdW5kZXJzdGFuZCB0aGUgZHJhd2luZyB3aXRoIHRvbGVyYW5jZSxtYXRlcmlhbCBhbmQgcHJv
Y2VzcyB3YXkgY29ycmVjdGx5LmFuZCB3ZSBoYXZlIGV4cGVyaWVuY2VkIGFuZCBwcm9mZXNzaW9u
YWwgdGVhbSBjb250cm9sIHRoZSBxdWFsaXR5LiANCiANCkkgY2FuIHByaWNpbmcgdG8geW91IGlu
IG9uZSBkYXkgYWZ0ZXIgeW91IHNlbmQgbWUgdGhlIGRldGFpbGVkIGRyYXdpbmdzIHdpdGggdGVj
aGluaWNhbCByZXF1aXJlbWVudHMuDQogDQpMb29raW5nIGZvcndhcmQgdG8geW91ciBlYXJseSBy
ZXBseS4NCiANClRoYW5rcyAmIEJlc3QgcmVnYXJkcywNCg0KV2lubmllIFRhbw0KDQpIRU5SWSBQ
QVJUUyBJTkMuDQo=

--====NextPart_Main_20190115_110450====--


------------=_5C49E918.9115AA0F--