Spam detection software, running on the system "mars.taur.is", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see ＠＠CONTACT_ADDRESS＠＠ for details. Content preview: Dear Customer, Your package is waiting for delivery. Confirm the payment (1,99 EUR) in the following link. The online for verification must be done in the next 14 days before it expires: Content analysis details: (5.3 points, 4.7 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: freeiconspng.com] 1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: lepidopteraresearchfoundation.org] 0.8 FROM_NO_USER From: has no local-part before ＠ sign 1.5 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 T_TVD_MIME_NO_HEADERS BODY: No description available. 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5001] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.