Spanish language spam from ovh.net
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 May 2024 16:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s5CLm-00000000Pc1-3NQY
for dave@doctor.nl2k.ab.ca;
Thu, 09 May 2024 16:34:54 -0600
Resent-From: The Doctor
Resent-Date: Thu, 9 May 2024 16:34:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-7067bc54.vps.ovh.net ([51.195.222.159]:51278)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s5AQv-000000006k6-46rE
for doctor@nl2k.ab.ca;
Thu, 09 May 2024 14:32:14 -0600
Received: by vps-7067bc54.vps.ovh.net (Postfix, from userid 33)
id DCD0A8109A; Thu, 9 May 2024 20:30:09 +0000 (UTC)
To: doctor@nl2k.ab.ca
Subject: =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_72151162485231956555?=
Date: Thu, 9 May 2024 20:30:09 +0000
From: PERSONAL
Message-ID:
X-Priority: 1
X-Mailer: ✖️1߷1.3.3.7߷߷
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ¡Hola! Hola doctor No necesitás clave Datos de factura
Total a pagar: 7.479,23 Vencimiento: 09/05/2024 Número de línea: 4331958192956
Número de cliente: 4331958192956 Los documentos se descargan [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
[51.195.222.159 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.195.222.159 listed in dnsbl.ahbl.org]
[51.195.222.159 listed in dnsbl.ahbl.org]
[51.195.222.159 listed in dnsbl.ahbl.org]
[51.195.222.159 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.195.222.159 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.195.222.159 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.195.222.159 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.195.222.159 listed in dnsbl.ahbl.org]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_REMOTE_IMAGE Message contains an external image
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: 181.238.205.92.host.secureserver.net]
Subject: {SPAM?} =?UTF-8?Q?ARG_=F0=9F=9A=A8_Aviso_de_factura_pendiente_de_pag?= =?UTF-8?Q?o_72151162485231956555?=
| |||||||||||||||||||||
| |||||||||||||||||||||
| |||||||||||||||||||||
| |||||||||||||||||||||
| |||||||||||||||||||||
I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a