PK qhYξΆJίF ίF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/caa20236/mail/.spam/new/ |
| Server: Linux int2.cpanelhost.cl 3.10.0-962.3.2.lve1.5.88.el7.x86_64 #1 SMP Fri Sep 26 14:06:42 UTC 2025 x86_64 IP: 138.117.148.152 |
| Dir : //home/caa20236/mail/.spam/new/1703878485.M317248P4099834.int2.cpanelhost.cl,S=9472,W=9622 |
Return-Path: <bounce@insignias.customtracking.online>
Delivered-To: caa20236+spam@int2.cpanelhost.cl
Received: from int2.cpanelhost.cl
by int2.cpanelhost.cl with LMTP
id sAaWElUfj2X6jj4AfWsSrQ
(envelope-from <bounce@insignias.customtracking.online>)
for <caa20236+spam@int2.cpanelhost.cl>; Fri, 29 Dec 2023 16:34:45 -0300
Return-path: <bounce@insignias.customtracking.online>
Envelope-to: info@aan.cl
Delivery-date: Fri, 29 Dec 2023 16:34:45 -0300
Received: from insignias.customtracking.online ([216.250.247.226]:60895)
by int2.cpanelhost.cl with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from <bounce@insignias.customtracking.online>)
id 1rJIcu-00HDSM-EP
for info@aan.cl; Fri, 29 Dec 2023 16:34:45 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=chiropodist; d=customtracking.online;
h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:
X-Report-Abuse:Content-Type:Content-Transfer-Encoding;
i=advertisement@customtracking.online;
bh=LFnKuWVVRWBVSOR2DAe7PHkW1bKPcHx48uHPW8T1jSw=;
b=Jn5aYcOaqQIAozIpx9cQw4OmFhtVoVV0NPGB5HM4zLE2zANjiv9MygePUSqdWXTRYcYtKq6FRSax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=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=chiropodist;
d=insignias.customtracking.online;
h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:
X-Report-Abuse:Content-Type:Content-Transfer-Encoding;
bh=Doo2LAaLzcQJETwG8uxu8uVx1kY=;
b=gmUqd38hsCQX86oGTCpURlptplUNtihj+3fY8lUFJujnqT7R2DDrpGuM0Ij6K3D1VHNzIVgwVXYS
dcvT5V1zhndYQy8V60wMI503Efzn/dOPUEM+4Mm8SerHqxZZ7TL+tqXBXd6eUMk/cji2OUzIA6/5
ZySD80HagAmXS29aPQskTq9uJ+mEN7HfbUCOZxfquuQ7yThX5ktXium7niJjtj50yi6oQU+Hnp4t
iaefX9Pevag/QcKVVaDv2HoROKa7FJOPLGtqTGnztg5oqd9KZ1ukrTjUVTXij+a7ywHKzmLRsLBa
7h/UUTW2bNhe8O9YTMqr+K/IfoZlFZk4N79Y7TSzmf9/GL1EaOQs3P6d1wCNg0O15sXSi5i2Wyph
IhkXN/osmFWPAyCurMIPySZ/WCbt1uBADCmM1jZW9DulX4NSFTnv+rS46BLCBSWYgpG9vmdugRJs
OC5DF1p76Wv/roy33A9RqOVQ92StlUHO7TAjuA5THud/j/EcIxvjKQmu52JQuKPlYCWJY3HjrTJe
VpauaRqJpJf3XD6CgCwTgUoN2RDMJEuDK7Oc32ObUvxSZJG3U1rT9nejXmzgaRAvfhQbyx+IVZsW
eAy+O3dNQ4Rv3AYlPQvh6sDnYcJ+cRamYC7RyE+3PnR1heFMSGk0yvm7B6pRaxei/Ug9Za/PJGM=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=chiropodist; d=customtracking.online;
b=d6xg6pP9GzMhvk0e9L2mlq4/PkDndK3AbYgG0oi+WoyPqOQrhWpbvyfsT75Fg1S7450h2079QL0i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=;
To: info@aan.cl
Message-ID: <2209853a5bd36570ab5be1c85fb262d25488df152209853@insignias.customtracking.online>
Date: Fri, 29 Dec 2023 19:33:51 +0000
From: "Alarmas Verisure" <advertisement@customtracking.online>
Reply-To: advertisement@customtracking.online
MIME-Version: 1.0
List-Unsubscribe: <https://mydplr.com/1K4RU2209853.dVTO1789414659759acd4aa8bf3fdf9158b2-PbFB303.6gPz18536.html>,<mailto:abuse@customtracking.online?subject=MjIwOTg1Mw==>
X-Report-Abuse: Forward this message to <mailto:abuse@customtracking.online?subject=MjIwOTg1Mw==>
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=12.5
X-Spam-Score: 125
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "int2.cpanelhost.cl",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Te regalamos un descuento de $200.000 en la instalaciΓ³n β
β β β β β β β β β β β β β β β β β β β
β β β β β β β β β β β β β β β β [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bit.ly]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: customtracking.online]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: insignias.customtracking.online]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[216.250.247.226 listed in psbl.surriel.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: insignias.customtracking.online]
[(online)]
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 KAM_SHORT Use of a URL Shortener for very short URL
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
0.0 SCC_BODY_URI_ONLY No description available.
3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site
X-Spam-Flag: YES
Subject: ***SPAM*** Protege tu casa o negocio con Verisure y pasa las fiestas tranquilo.
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div style="display: none; font-size: 1px; color: #ffffff; line-height:
1px; font-family: Montserrat,sans-serif; max-height: 0px; max-width: 0px;
opacity: 0; overflow: hidden; mso-hide: all;">Te regalamos un descuento de
$200.000 en la instalación
‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ </div>
<div style="max-width: 600px; margin: 0 auto;">
<table border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr><th><a href="https://bit.ly/3uZY6ro" title="Click Aquí Click
Aquí Click Aquí Click Aquí Click Aquí"> <img
src="https://i.imgur.com/SNxRbTk.png" width="100%" alt="Click Aquí
Click Aquí Click Aquí Click Aquí Click Aquí"
title="Click Aquí Click Aquí Click Aquí Click
Aquí Click Aquí" /> </a></th></tr>
<tr><th><a href="https://bit.ly/3uZY6ro" title="Click Aquí Click
Aquí Click Aquí Click Aquí Click Aquí"> <img
src="https://i.imgur.com/uBvJOGB.png" width="100%" alt="Click Aquí
Click Aquí Click Aquí Click Aquí Click Aquí"
title="Click Aquí Click Aquí Click Aquí Click
Aquí Click Aquí" /> </a></th></tr>
</tbody>
</table>
</div>
</body></html>