[Rspamd-Users] Rspamd header phishing

Emanuel Gonzalez emanuel_gonzalez at live.com.ar
Tue Feb 19 10:21:31 UTC 2019

Hi, we could help with this email.

This is a normal email, but rspamd assigned it 4.0 points with the phishing header.
How can I detect why?

Return-path: <gestion at technohealth.com.ar>
Envelope-to: administracion at technohealth.com.ar
Delivery-date: Thu, 14 Feb 2019 13:05:35 -0300
Received: from [] (helo=[])
by server.domain.com with esmtpa (Exim 4.87_1)
(envelope-from <gestion at technohealth.com.ar>)
id 1guJW2-0000qI-Bs
for administracion at technohealth.com.ar; Thu, 14 Feb 2019 13:05:35 -0300
User-Agent: Microsoft-MacOutlook/
Date: Thu, 14 Feb 2019 13:05:33 -0300
From: Luciana Frias <gestion at technohealth.com.ar>
To: Gisele Lemoine <administracion at technohealth.com.ar>
Message-ID: <773735D3-6376-433E-8899-7A2CA23DEAC1 at technohealth.com.ar>
Thread-Topic: Lista de precios INTEGRA
References: <DM6PR12MB29858F0D808C90344C4D94ECF5660 at DM6PR12MB2985.namprd12.prod.outlook.com>
In-Reply-To: <DM6PR12MB29858F0D808C90344C4D94ECF5660 at DM6PR12MB2985.namprd12.prod.outlook.com>
Mime-version: 1.0
Content-type: multipart/mixed;
X-Spam-Score: 6.3
X-Spam-Score-Int: 63
X-Spam-Bar: ++++++
X-Spam-Report: Action: no action
 Symbol: ARC_NA(0.00)
 Symbol: RCVD_VIA_SMTP_AUTH(0.00)
 Symbol: BAYES_SPAM(2.32)
 Symbol: FROM_HAS_DN(0.00)
 Symbol: MIME_GOOD(-0.10)
 Symbol: RCPT_COUNT_ONE(0.00)
 Symbol: TO_DN_ALL(0.00)
 Symbol: RCVD_COUNT_ONE(0.00)
 Symbol: RCVD_NO_TLS_LAST(0.10)
 Symbol: FROM_EQ_ENVFROM(0.00)
 Symbol: MIME_TRACE(0.00)
 Symbol: ASN(0.00)
 Symbol: PHISHING(4.00)
 Symbol: MID_RHS_MATCH_FROM(0.00)
 Symbol: TO_DOM_EQ_FROM_DOM(0.00)
 Message-ID: 773735D3-6376-433E-8899-7A2CA23DEAC1 at technohealth.com.ar

More information about the Users mailing list