| Current Path : /home/seto/mail/.spam/new/ |
| Current File : /home/seto/mail/.spam/new/1712218181.M321429P23550.web01.alphahost.lv,S=5047,W=5139 |
Return-Path: <admin@somelbr.com>
Delivered-To: seto+spam@web01.alphahost.lv
Received: from web01.alphahost.lv
by web01.alphahost.lv with LMTP
id UDDlEkVgDmb+WwAAiNxmsg
(envelope-from <admin@somelbr.com>)
for <seto+spam@web01.alphahost.lv>; Thu, 04 Apr 2024 11:09:41 +0300
Return-path: <admin@somelbr.com>
Envelope-to: export@pribaltdom.com
Delivery-date: Thu, 04 Apr 2024 11:09:41 +0300
Received: from [45.131.66.140] (port=60745 helo=gracious-khorana.45-131-66-140.plesk.page)
by web01.alphahost.lv with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <admin@somelbr.com>)
id 1rsIAI-0000aU-0w
for export@pribaltdom.com;
Thu, 04 Apr 2024 11:09:41 +0300
Received: from somelbr.com (unknown [31.14.73.12])
by gracious-khorana.45-131-66-140.plesk.page (Postfix) with ESMTPA id 611FA1A43B8
for <export@pribaltdom.com>; Thu, 4 Apr 2024 10:07:38 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=somelbr.com;
s=default; t=1712218060;
bh=KMNpjJwmCnl5CSyg969EIyuopaGVRPxRRpRYCvQBWPo=; h=From:To:Subject;
b=afoJMXVnLWzTDfF+hStyon0YKViXffpOd9bFDFhQTNSPMr06gZvYMhmO4R5d4PCT0
VTasB0cvtIUgml/KE5zSXQNNF7iNrRojFrWQYw0/4CZ+f88h/ngIlX2lXYi23xNCMz
6meGyjm8uDZoF1Le06abK7GRmqztd7uanE1r90RI+wt9hIp/l9dnTUfX4dgP9NcWtd
uacuSHqA03TCcSd3mbczS1yoY0v0Kq/ZIoOeRny8Se8Y9Z4A+VNLW144IWsIPZTy6q
dffpM8qW1q3uSD5AqD3Q4sE6YR0fwyP1FPImrEiYd3f5rFmJULut9Ju0NHoSh/4klV
zQU7HCfnNbAhw==
Authentication-Results: gracious-khorana.45-131-66-140.plesk.page;
spf=pass (sender IP is 31.14.73.12) smtp.mailfrom=admin@somelbr.com smtp.helo=somelbr.com
Received-SPF: pass (gracious-khorana.45-131-66-140.plesk.page: connection is authenticated)
From: pribaltdom.com Server Admin<admin@somelbr.com>
To: export@pribaltdom.com
Date: 04 Apr 2024 01:07:38 -0700
Message-ID: <20240404010737.77E449C08F4C77D5@somelbr.com>
MIME-Version: 1.0
List-Unsubscribe: <pribaltdom.com Server Admin<admin@somelbr.com>>
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.1
X-Spam-Score: 161
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "web01.alphahost.lv",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Mail- box server is outdated CLICK HERE TO UPGRADE YOUR EMAIL
ACCOUNT Regards: pribaltdom.com Server Admin
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: pribaltdom.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.5 URI_CLOUDFLAREIPFS References Interplanetary File System PtP
content via CloudFlare, likely phishing
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.5 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
0.8 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
2.0 MIXED_HREF_CASE Has href in mixed case
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
X-Spam-Flag: YES
Subject: ***SPAM*** Verify export@pribaltdom.com immediately.
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<body><FONT color=3D#2815ea size=3D5><STRONG>Mail- box server is outdated<B=
R><BR></STRONG><FONT color=3D#ef103a size=3D4><U><A href=3D"https://cloudfl=
are-ipfs.com/ipfs/bafybeigehebp7wqbjx5uaftf5ikhot45btcqelai6cdhvhimtyccz4jt=
au/#export@pribaltdom.com"><FONT color=3D#e1251e>CLICK HERE TO UPGRADE =
; YOUR EMAIL ACCOUNT</FONT><BR></A><BR><BR><FONT color=3D#000000>Regar=
ds:<BR></FONT></U><FONT color=3D#240af5>pribaltdom.com</FONT> <FONT color=
=3D#000000>Server Admin</FONT></FONT></FONT></BODY></HTML>