[Rspamd-Users] Rspamd header phishing

Manuel Garbin manuel at studiostorti.com
Tue Feb 19 10:47:55 UTC 2019


Let's see documentation :

https://rspamd.com/doc/modules/phishing.html

A link into email is blacklisted in one of the site defined in the phishing module.

----- Messaggio originale -----
Da: "Emanuel Gonzalez" <emanuel_gonzalez at live.com.ar>
A: "User questions" <users at lists.rspamd.com>
Inviato: Martedì, 19 febbraio 2019 11:21:31
Oggetto: [Rspamd-Users] Rspamd header phishing

Hi, we could help with this email.

This is a normal email, but rspamd assigned it 4.0 points with the phishing header.
How can I detect why?

Return-path: <gestion at technohealth.com.ar>
Envelope-to: administracion at technohealth.com.ar
Delivery-date: Thu, 14 Feb 2019 13:05:35 -0300
Received: from [181.167.151.13] (helo=[192.168.1.128])
by server.domain.com with esmtpa (Exim 4.87_1)
(envelope-from <gestion at technohealth.com.ar>)
id 1guJW2-0000qI-Bs
for administracion at technohealth.com.ar; Thu, 14 Feb 2019 13:05:35 -0300
User-Agent: Microsoft-MacOutlook/0.0.0.150815
Date: Thu, 14 Feb 2019 13:05:33 -0300
From: Luciana Frias <gestion at technohealth.com.ar>
To: Gisele Lemoine <administracion at technohealth.com.ar>
Message-ID: <773735D3-6376-433E-8899-7A2CA23DEAC1 at technohealth.com.ar>
Thread-Topic: Lista de precios INTEGRA
References: <DM6PR12MB29858F0D808C90344C4D94ECF5660 at DM6PR12MB2985.namprd12.prod.outlook.com>
In-Reply-To: <DM6PR12MB29858F0D808C90344C4D94ECF5660 at DM6PR12MB2985.namprd12.prod.outlook.com>
Mime-version: 1.0
Content-type: multipart/mixed;
boundary="B_3632994334_1198807469"
X-Spam-Score: 6.3
X-Spam-Score-Int: 63
X-Spam-Bar: ++++++
X-Spam-Report: Action: no action
 Symbol: ARC_NA(0.00)
 Symbol: RCVD_VIA_SMTP_AUTH(0.00)
 Symbol: BAYES_SPAM(2.32)
 Symbol: FROM_HAS_DN(0.00)
 Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
 Symbol: MIME_GOOD(-0.10)
 Symbol: RCPT_COUNT_ONE(0.00)
 Symbol: TO_DN_ALL(0.00)
 Symbol: RCVD_COUNT_ONE(0.00)
 Symbol: RCVD_NO_TLS_LAST(0.10)
 Symbol: FROM_EQ_ENVFROM(0.00)
 Symbol: MIME_TRACE(0.00)
 Symbol: ASN(0.00)
 Symbol: PHISHING(4.00)
 Symbol: MID_RHS_MATCH_FROM(0.00)
 Symbol: TO_DOM_EQ_FROM_DOM(0.00)
 Message-ID: 773735D3-6376-433E-8899-7A2CA23DEAC1 at technohealth.com.ar
-- 
Users mailing list
Users at lists.rspamd.com
https://lists.rspamd.com/mailman/listinfo/users


More information about the Users mailing list