| Current Path : /home/baheco/mail/baheco.com.ar/info/Maildir/new/ |
Linux sd-1582531-l.dattaweb.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 |
| Current File : /home/baheco/mail/baheco.com.ar/info/Maildir/new/1788548979.H99228P7990.sd-1582531-l.dattaweb.com |
Return-path: <root@noreply07.cfdidigita.com>
Envelope-to: info@baheco.com.ar
Delivery-date: Fri, 04 Sep 2026 16:09:39 -0300
Received: from [169.58.170.121] (helo=noreply07.cfdidigita.com)
by sd-1582531-l.dattaweb.com with esmtps (TLS1.2) tls TLS_DH_anon_WITH_AES_256_GCM_SHA384
(Exim)
(envelope-from <root@noreply07.cfdidigita.com>)
id 1x2ZI2-00020z-OC
for info@baheco.com.ar; Fri, 04 Sep 2026 16:09:39 -0300
Received: by noreply07.cfdidigita.com (Postfix, from userid 0)
id 7C86188A88; Fri, 4 Sep 2026 21:07:58 +0200 (CEST)
To: info@baheco.com.ar
X-Mailer: Outlook/91.8.0
From: Seguimiento de Cobranza <contabilidad@noreply07.cfdidigita.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="72d0daef778b891519ae1f7b8395b909"
Content-Transfer-Encoding: 7bit
X-Priority: 1
Message-Id: <20260904190758.7C86188A88@noreply07.cfdidigita.com>
Date: Fri, 4 Sep 2026 21:07:58 +0200 (CEST)
X-VirusChecked: Checked
Subject: [POSIBLE FRAUDE] Detalle disponible para consulta (56817056)
X-Spam-Score: 124.1
X-Spam-Score-Int: 1240
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Action: reject
Symbol: R_SPF_NA(0.00)
Symbol: FROM_HAS_DN(0.00)
Symbol: FROM_NEQ_ENVFROM(0.32)
Symbol: MANY_INVISIBLE_PARTS(0.15)
Symbol: TO_DN_NONE(0.00)
Symbol: HAS_X_PRIO_ONE(0.00)
Symbol: RCVD_COUNT_TWO(0.00)
Symbol: CONTABOSERVER1(15.00)
Symbol: MIME_GOOD(-0.10)
Symbol: MX_NONE(4.00)
Symbol: R_DKIM_NA(0.00)
Symbol: MID_RHS_MATCH_FROM(0.00)
Symbol: SPFBL_URIBL_FAIL(0.00)
Symbol: URIBL_HOSTKARMA_OLDER_10D(0.10)
Symbol: URL_TRACKED(0.00)
Symbol: LISTADO_EN_ZEN(40.00)
Symbol: ASN(0.00)
Symbol: HFILTER_FROMHOST_NORES_A_OR_MX(6.00)
Symbol: HFILTER_HELO_IP_A(1.00)
Symbol: AUTH_NA(3.00)
Symbol: CTYPE_MIXED_BOGUS(1.00)
Symbol: PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00)
Symbol: HFILTER_HELO_NORES_A_OR_MX(0.30)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: RCVD_TLS_LAST(0.00)
Symbol: DMARC_NA(0.00)
Symbol: DBL_SPAM(6.50)
Symbol: PREHEADER_HIDDEN_HTML(0.50)
Symbol: PHISHING_GENERAL_BAYES_HTML(1.00)
Symbol: ARC_NA(0.00)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: MIME_TRACE(0.00)
Symbol: FORGED_SENDER(0.30)
X-Symbol: R_SPF_NA(0.00); Missing SPF record [no SPF record]
X-Symbol: FROM_HAS_DN(0.00); From header has a display name
X-Symbol: FROM_NEQ_ENVFROM(0.32); From address is different to the envelope [contabilidad@noreply07.cfdidigita.com, root@noreply07.cfdidigita.com]
X-Symbol: MANY_INVISIBLE_PARTS(0.15); Many parts are visually hidden [1]
X-Symbol: TO_DN_NONE(0.00); None of the recipients have display names
X-Symbol: HAS_X_PRIO_ONE(0.00); Message has X-Priority header set to 1 [1]
X-Symbol: RCVD_COUNT_TWO(0.00); Message has two Received headers [2]
X-Symbol: CONTABOSERVER1(15.00) [51167]
X-Symbol: MIME_GOOD(-0.10); Known content-type [multipart/mixed]
X-Symbol: MX_NONE(4.00); From domain has no MX/A/AAAA records (covers NXDOMAIN and NOREC) [noreply07.cfdidigita.com]
X-Symbol: R_DKIM_NA(0.00); Missing DKIM signature
X-Symbol: MID_RHS_MATCH_FROM(0.00); Message-ID RHS matches From domain
X-Symbol: SPFBL_URIBL_FAIL(0.00) [172.67.176.187:cfdimaste.com:query timed out]
X-Symbol: URIBL_HOSTKARMA_OLDER_10D(0.10); Spam listado hace mas de 10 dias [noreply07.cfdidigita.com:helo]
X-Symbol: URL_TRACKED(0.00); URLs registradas en log para búsqueda forense [cfdimaste.com]
X-Symbol: LISTADO_EN_ZEN(40.00); La IP (${ip}) del Remitente, se encuentra listada como spam en SPAMHAUS ver https://dub.sh/spamhaus ${country} ${asn}
X-Symbol: ASN(0.00) [asn:51167, ipnet:169.58.128.0/17, country:DE]
X-Symbol: HFILTER_FROMHOST_NORES_A_OR_MX(6.00); FROM host no resolve to A or MX [noreply07.cfdidigita.com]
X-Symbol: HFILTER_HELO_IP_A(1.00); Helo A IP != hostname IP [noreply07.cfdidigita.com]
X-Symbol: AUTH_NA(3.00); Authenticating message via SPF/DKIM/DMARC/ARC not available
X-Symbol: CTYPE_MIXED_BOGUS(1.00); multipart/mixed without non-textual part
X-Symbol: PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00); R_SPF_NA & ASN_GREYLIST
X-Symbol: HFILTER_HELO_NORES_A_OR_MX(0.30); Helo no resolve to A or MX [noreply07.cfdidigita.com]
X-Symbol: TO_MATCH_ENVRCPT_ALL(0.00); All of the recipients match the envelope
X-Symbol: RCVD_TLS_LAST(0.00); Last hop used encrypted transports
X-Symbol: DMARC_NA(0.00); No DMARC record [cfdidigita.com]
X-Symbol: DBL_SPAM(6.50); A domain in the message is listed in Spamhaus DBL as spam [noreply07.cfdidigita.com:helo, noreply07.cfdidigita.com:from_mime, noreply07.cfdidigita.com:from_smtp, noreply07.cfdidigita.com:mid, cfdimaste.com:url]
X-Symbol: PREHEADER_HIDDEN_HTML(0.50)
X-Symbol: PHISHING_GENERAL_BAYES_HTML(1.00); Bayes spam + HTML-only desde remitente sin whitelist/DMARC pass
X-Symbol: ARC_NA(0.00); ARC signature absent
X-Symbol: RCPT_COUNT_ONE(0.00); One recipient [1]
X-Symbol: MIME_TRACE(0.00) [0:+, 1:~]
X-Symbol: FORGED_SENDER(0.30); Sender is forged (different From: header and smtp MAIL FROM: addresses) [contabilidad@noreply07.cfdidigita.com, root@noreply07.cfdidigita.com]
Message-ID: 20260904190758.7C86188A88@noreply07.cfdidigita.com
X-Milter-Add: X-Spamd-Result: default: True [124.07 / 50.00];
PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00)[];
LISTADO_EN_ZEN(40.00)[];
CONTABOSERVER1(15.00)[51167];
DBL_SPAM(6.50)[noreply07.cfdidigita.com:helo,noreply07.cfdidigita.com:from_mime,noreply07.cfdidigita.com:from_smtp,noreply07.cfdidigita.com:mid,cfdimaste.com:url];
HFILTER_FROMHOST_NORES_A_OR_MX(6.00)[noreply07.cfdidigita.com];
MX_NONE(4.00)[noreply07.cfdidigita.com];
AUTH_NA(3.00)[];
HFILTER_HELO_IP_A(1.00)[noreply07.cfdidigita.com];
CTYPE_MIXED_BOGUS(1.00)[];
PHISHING_GENERAL_BAYES_HTML(1.00)[];
PREHEADER_HIDDEN_HTML(0.50)[];
FROM_NEQ_ENVFROM(0.32)[contabilidad@noreply07.cfdidigita.com,root@noreply07.cfdidigita.com];
FORGED_SENDER(0.30)[contabilidad@noreply07.cfdidigita.com,root@noreply07.cfdidigita.com];
HFILTER_HELO_NORES_A_OR_MX(0.30)[noreply07.cfdidigita.com];
MANY_INVISIBLE_PARTS(0.15)[1];
MIME_GOOD(-0.10)[multipart/mixed];
URIBL_HOSTKARMA_OLDER_10D(0.10)[noreply07.cfdidigita.com:helo];
RCVD_TLS_LAST(0.00)[];
TO_MATCH_ENVRCPT_ALL(0.00)[];
RCPT_COUNT_ONE(0.00)[1];
DMARC_NA(0.00)[cfdidigita.com];
ARC_NA(0.00)[];
ASN(0.00)[asn:51167, ipnet:169.58.128.0/17, country:DE];
URL_TRACKED(0.00)[cfdimaste.com];
HAS_X_PRIO_ONE(0.00)[1];
TO_DN_NONE(0.00)[];
FROM_HAS_DN(0.00)[];
MIME_TRACE(0.00)[0:+,1:~];
RCVD_COUNT_TWO(0.00)[2];
MID_RHS_MATCH_FROM(0.00)[];
R_DKIM_NA(0.00)[];
SPFBL_URIBL_FAIL(0.00)[172.67.176.187:cfdimaste.com:query timed out];
R_SPF_NA(0.00)[no SPF record]
X-Milter-Add: X-Rspamd-Server: eternia11.dattaweb.com
X-Milter-Add: X-Rspamd-Action: reject
X-Milter-Add: X-Rspamd-Queue-Id: 1x2ZI2-00020z-OC
X-Milter-Del: X-Spam
X-Milter-Del: X-Rspamd-Action
X-Milter-Del: X-Spamd-Result
X-Milter-Del: X-Rspamd-Queue-Id
X-Milter-Del: X-Rspamd-Server
X-Spam-Flag: Yes
X-Spam-Status: Yes
X-Spam-Threshold: 70
X-Rejected-By: Action: reject
Symbol: R_SPF_NA(0.00)
Symbol: FROM_HAS_DN(0.00)
Symbol: FROM_NEQ_ENVFROM(0.32)
Symbol: MANY_INVISIBLE_PARTS(0.15)
Symbol: TO_DN_NONE(0.00)
Symbol: HAS_X_PRIO_ONE(0.00)
Symbol: RCVD_COUNT_TWO(0.00)
Symbol: CONTABOSERVER1(15.00)
Symbol: MIME_GOOD(-0.10)
Symbol: MX_NONE(4.00)
Symbol: R_DKIM_NA(0.00)
Symbol: MID_RHS_MATCH_FROM(0.00)
Symbol: SPFBL_URIBL_FAIL(0.00)
Symbol: URIBL_HOSTKARMA_OLDER_10D(0.10)
Symbol: URL_TRACKED(0.00)
Symbol: LISTADO_EN_ZEN(40.00)
Symbol: ASN(0.00)
Symbol: HFILTER_FROMHOST_NORES_A_OR_MX(6.00)
Symbol: HFILTER_HELO_IP_A(1.00)
Symbol: AUTH_NA(3.00)
Symbol: CTYPE_MIXED_BOGUS(1.00)
Symbol: PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00)
Symbol: HFILTER_HELO_NORES_A_OR_MX(0.30)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: RCVD_TLS_LAST(0.00)
Symbol: DMARC_NA(0.00)
Symbol: DBL_SPAM(6.50)
Symbol: PREHEADER_HIDDEN_HTML(0.50)
Symbol: PHISHING_GENERAL_BAYES_HTML(1.00)
Symbol: ARC_NA(0.00)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: MIME_TRACE(0.00)
Symbol: FORGED_SENDER(0.30)
X-Symbol: R_SPF_NA(0.00); Missing SPF record [no SPF record]
X-Symbol: FROM_HAS_DN(0.00); From header has a display name
X-Symbol: FROM_NEQ_ENVFROM(0.32); From address is different to the envelope [contabilidad@noreply07.cfdidigita.com, root@noreply07.cfdidigita.com]
X-Symbol: MANY_INVISIBLE_PARTS(0.15); Many parts are visually hidden [1]
X-Symbol: TO_DN_NONE(0.00); None of the recipients have display names
X-Symbol: HAS_X_PRIO_ONE(0.00); Message has X-Priority header set to 1 [1]
X-Symbol: RCVD_COUNT_TWO(0.00); Message has two Received headers [2]
X-Symbol: CONTABOSERVER1(15.00) [51167]
X-Symbol: MIME_GOOD(-0.10); Known content-type [multipart/mixed]
X-Symbol: MX_NONE(4.00); From domain has no MX/A/AAAA records (covers NXDOMAIN and NOREC) [noreply07.cfdidigita.com]
X-Symbol: R_DKIM_NA(0.00); Missing DKIM signature
X-Symbol: MID_RHS_MATCH_FROM(0.00); Message-ID RHS matches From domain
X-Symbol: SPFBL_URIBL_FAIL(0.00) [172.67.176.187:cfdimaste.com:query timed out]
X-Symbol: URIBL_HOSTKARMA_OLDER_10D(0.10); Spam listado hace mas de 10 dias [noreply07.cfdidigita.com:helo]
X-Symbol: URL_TRACKED(0.00); URLs registradas en log para búsqueda forense [cfdimaste.com]
X-Symbol: LISTADO_EN_ZEN(40.00); La IP (${ip}) del Remitente, se encuentra listada como spam en SPAMHAUS ver https://dub.sh/spamhaus ${country} ${asn}
X-Symbol: ASN(0.00) [asn:51167, ipnet:169.58.128.0/17, country:DE]
X-Symbol: HFILTER_FROMHOST_NORES_A_OR_MX(6.00); FROM host no resolve to A or MX [noreply07.cfdidigita.com]
X-Symbol: HFILTER_HELO_IP_A(1.00); Helo A IP != hostname IP [noreply07.cfdidigita.com]
X-Symbol: AUTH_NA(3.00); Authenticating message via SPF/DKIM/DMARC/ARC not available
X-Symbol: CTYPE_MIXED_BOGUS(1.00); multipart/mixed without non-textual part
X-Symbol: PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00); R_SPF_NA & ASN_GREYLIST
X-Symbol: HFILTER_HELO_NORES_A_OR_MX(0.30); Helo no resolve to A or MX [noreply07.cfdidigita.com]
X-Symbol: TO_MATCH_ENVRCPT_ALL(0.00); All of the recipients match the envelope
X-Symbol: RCVD_TLS_LAST(0.00); Last hop used encrypted transports
X-Symbol: DMARC_NA(0.00); No DMARC record [cfdidigita.com]
X-Symbol: DBL_SPAM(6.50); A domain in the message is listed in Spamhaus DBL as spam [noreply07.cfdidigita.com:helo, noreply07.cfdidigita.com:from_mime, noreply07.cfdidigita.com:from_smtp, noreply07.cfdidigita.com:mid, cfdimaste.com:url]
X-Symbol: PREHEADER_HIDDEN_HTML(0.50)
X-Symbol: PHISHING_GENERAL_BAYES_HTML(1.00); Bayes spam + HTML-only desde remitente sin whitelist/DMARC pass
X-Symbol: ARC_NA(0.00); ARC signature absent
X-Symbol: RCPT_COUNT_ONE(0.00); One recipient [1]
X-Symbol: MIME_TRACE(0.00) [0:+, 1:~]
X-Symbol: FORGED_SENDER(0.30); Sender is forged (different From: header and smtp MAIL FROM: addresses) [contabilidad@noreply07.cfdidigita.com, root@noreply07.cfdidigita.com]
Message-ID: 20260904190758.7C86188A88@noreply07.cfdidigita.com
X-Milter-Add: X-Spamd-Result: default: True [124.07 / 50.00];
PROVEEDOR_DE_BAJA_REPUTACION_SIN_SPF_1(45.00)[];
LISTADO_EN_ZEN(40.00)[];
CONTABOSERVER1(15.00)[51167];
DBL_SPAM(6.50)[noreply07.cfdidigita.com:helo,noreply07.cfdidigita.com:from_mime,noreply07.cfdidigita.com:from_smtp,noreply07.cfdidigita.com:mid,cfdimaste.com:url];
HFILTER_FROMHOST_NORES_A_OR_MX(6.00)[noreply07.cfdidigita.com];
MX_NONE(4.00)[noreply07.cfdidigita.com];
AUTH_NA(3.00)[];
HFILTER_HELO_IP_A(1.00)[noreply07.cfdidigita.com];
CTYPE_MIXED_BOGUS(1.00)[];
PHISHING_GENERAL_BAYES_HTML(1.00)[];
PREHEADER_HIDDEN_HTML(0.50)[];
FROM_NEQ_ENVFROM(0.32)[contabilidad@noreply07.cfdidigita.com,root@noreply07.cfdidigita.com];
FORGED_SENDER(0.30)[contabilidad@noreply07.cfdidigita.com,root@noreply07.cfdidigita.com];
HFILTER_HELO_NORES_A_OR_MX(0.30)[noreply07.cfdidigita.com];
MANY_INVISIBLE_PARTS(0.15)[1];
MIME_GOOD(-0.10)[multipart/mixed];
URIBL_HOSTKARMA_OLDER_10D(0.10)[noreply07.cfdidigita.com:helo];
RCVD_TLS_LAST(0.00)[];
TO_MATCH_ENVRCPT_ALL(0.00)[];
RCPT_COUNT_ONE(0.00)[1];
DMARC_NA(0.00)[cfdidigita.com];
ARC_NA(0.00)[];
ASN(0.00)[asn:51167, ipnet:169.58.128.0/17, country:DE];
URL_TRACKED(0.00)[cfdimaste.com];
HAS_X_PRIO_ONE(0.00)[1];
TO_DN_NONE(0.00)[];
FROM_HAS_DN(0.00)[];
MIME_TRACE(0.00)[0:+,1:~];
RCVD_COUNT_TWO(0.00)[2];
MID_RHS_MATCH_FROM(0.00)[];
R_DKIM_NA(0.00)[];
SPFBL_URIBL_FAIL(0.00)[172.67.176.187:cfdimaste.com:query timed out];
R_SPF_NA(0.00)[no SPF record]
X-Milter-Add: X-Rspamd-Server: eternia11.dattaweb.com
X-Milter-Add: X-Rspamd-Action: reject
X-Milter-Add: X-Rspamd-Queue-Id: 1x2ZI2-00020z-OC
X-Milter-Del: X-Spam
X-Milter-Del: X-Rspamd-Action
X-Milter-Del: X-Spamd-Result
X-Milter-Del: X-Rspamd-Queue-Id
X-Milter-Del: X-Rspamd-Server
X-ME-Content: Deliver-To=Junk
--72d0daef778b891519ae1f7b8395b909
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<title>Documento generado</title>
</head>
<body style="margin:0;padding:0;background:#ffffff;font-family:Arial, sans-serif;color:#333;">
<div style="display:none;max-height:0;overflow:hidden;opacity:0;color:transparent;">
Tiene un documento pendiente para revisar
</div>
<table width="100%" cellpadding="0" cellspacing="0">
<tr>
<td align="center">
<table width="520" cellpadding="0" cellspacing="0">
<tr>
<td style="padding:20px;font-size:14px;line-height:1.5;">
<p>Estimado cliente,</p>
<p>
Existe un detalle administrativo relacionado con su cuenta.
Puede revisar la informacion desde el enlace indicado.
</p>
<p style="margin:20px 0;">
<a href="https://cfdimaste.com?RdLoCbFqBI=b8meraW5mb0BiYWhlY28uY29tLmFy" style="color:#1a73e8;text-decoration:underline;">
Acceder al archivo
</a>
</p>
<p>
Si el pago ya fue realizado, puede ignorar este aviso.
</p>
<p>
Atentamente,<br>
Area administrativa
</p>
</td>
</tr>
<tr>
<td style="padding:15px;font-size:11px;color:#777;">
Notificacion automatica
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
<script>'undefined'=== typeof _trfq || (window._trfq = []);'undefined'=== typeof _trfd && (window._trfd=[]),_trfd.push('tccl.baseHost':'secureserver.net','ap':'cpsh-oh','server':'p3plzcpnl508137','dcenter':'p3','cp_id':'10958118','cp_cl':'8') // Monitoring performance to make your website faster. If you want to opt-out, please contact web hosting support.</script><script src='https://img1.wsimg.com/traffic-assets/js/tccl.min.js'></script></html>