<snip> Running those through my SA gets the biggest hit for the second example with the Indian link in the body. But that's a custom rule kindly given to me by of one of the good people on this list.
I'm more concerned with this: X-Originating-IP: [189.69.146.53] In Brazil yet my relay module does not seem to be biting on it.