Ransomware
Abuser: unknown
Received: (qmail 3799084 invoked from network); 27 Oct 2022 03:15:31
Received: by simscan 1.4.0 ppid: 3799072, pid: 3799079, t: 1.2968s
scanners: clamav: 0.103.7/m:62/d:26700 spam: 3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on ...
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.8 required=5.0 tests=BITCOIN_SPAM_07,HTML_MESSAGE,
MIME_HTML_ONLY,PDS_BTC_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL_CSS,
RCVD_IN_SSBL_SPAM,RCVD_IN_VALIDITY_RPBL,SPF_HELO_PASS,
TO_EQ_FM_DOM_HTML_ONLY,TRACKER_ID autolearn=disabled version=3.4.6
X-Spam-Report:
* 2.5 RCVD_IN_SSBL_SPAM RBL: Listed: Spamhaus SBL
* [51.81.203.113 listed in bl.spamcop.net]
* 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
* bl.spamcop.net
* [Blocked - see <https://www.spamcop.net/bl.shtml?51.81.203.113>]
* 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
* [51.81.203.113 listed in zen.spamhaus.org]
* -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
* 0.1 TRACKER_ID BODY: Incorporates a tracking ID number
* 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
* https://senderscore.org/blocklistlookup/
* [51.81.203.113 listed in bl.score.senderscore.com]
* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.5 PDS_BTC_ID FP reduced Bitcoin ID
* 3.5 BITCOIN_SPAM_07 BitCoin spam pattern 07
* 1.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
Received: from qbaccounts.lol (51.81.203.113)
by ... with ESMTPS (ECDHE-RSA-AES256-GCM-SHA384 encrypted); 27 Oct 2022 03:15:30 -0000
Received: by qbaccounts.lol for ...; Wed, 26 Oct 2022 22:04:56 -0500 (envelope-from ...
Subject: Su sitio, sus bases y sus buzones han sido pirateados.
Date: 26 Oct 2022 22:04:56 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
United States, 2022-11-02 18:12:56