Spanish Language phish
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 22 Feb 2024 05:10:18 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rd7tp-00000000AzG-2rko
for dave@doctor.nl2k.ab.ca;
Thu, 22 Feb 2024 05:10:01 -0700
Resent-From: The Doctor
Resent-Date: Thu, 22 Feb 2024 05:10:01 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [159.89.118.86] (port=51885 helo=cp.torontotechsupport.ca)
by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rd62Y-000000007Zy-48R9
for doctor@nl2k.ab.ca;
Thu, 22 Feb 2024 03:11:02 -0700
Received: by cp.torontotechsupport.ca (Postfix, from userid 33)
id 451A537D469; Thu, 22 Feb 2024 06:03:50 -0300 (-03)
To: doctor@nl2k.ab.ca
Subject: Estimado(a) Ciudadano(a): doctor@nl2k.ab.ca , le notificamos acerca del proceso laboral. ID 27435
X-PHP-Originating-Script: 33:wp-login.php
From: Justicia del Trabajo
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: PHP/5.5.9-1ubuntu4.29
Message-Id: <20240222093211.451A537D469@cp.torontotechsupport.ca>
Date: Thu, 22 Feb 2024 06:03:50 -0300 (-03)
X-Spam_score: 9.8
X-Spam_score_int: 98
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: doctor@nl2k.ab.ca - Por medio de la presente, y en cumplimiento
de las disposiciones legales correspondientes, le notificamos acerca del
proceso laboral identificado con los siguientes datos: Numero del proceso:
14962 Clase judicial: solicitud de pago Organo competente: Ministerio de
la Justicia del Trabajo Fecha de actuacion: 21 de Febrero de 2024 Tipo de
distribucion: email
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[159.89.118.86 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.1 HDRS_LCASE_IMGONLY Odd capitalization of message headers + image-only
HTML
0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only
2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Estimado(a) Ciudadano(a): doctor@nl2k.ab.ca , le notificamos acerca del proceso laboral. ID 27435
X-Antivirus: AVG (VPS 240222-0, 2/21/2024), Inbound message
X-Antivirus-Status: Clean
doctor@nl2k.ab.ca
- Por medio de la presente, y en cumplimiento de las disposiciones legales correspondientes,
le notificamos acerca del proceso laboral identificado con los siguientes datos:
- Numero del proceso: 14962
- Clase judicial: solicitud de pago
- Organo competente: Ministerio de la Justicia del Trabajo
- Fecha de actuacion: 21 de Febrero de 2024
- Tipo de distribucion: email
Para descargar el proceso en formato PDF, haga clic en el siguiente enlace: Descargar Proceso Laboral
Le solicitamos que tome conocimiento de la presente notificacion en el plazo establecido por la ley.
Quedamos a su disposicion para cualquier consulta o aclaracion adicional que puedan necesitar.
Para confirmar o recebimento deste e-mail, pedimos que responda a esta mensagem mencionando o seu nome.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments