Basura, lixo, trash:
I received my first phishing attempt in Spanish today.
And yes, it had the typical signs of a phish: grammatical errors, non-native phrasing, sent to a list address, etc. etc.
It was for customers of a large Spanish firm, Banco Santander, and the links all showed the .es top domain (Spain), but the actual href pointed to .im which is the Isle of Man.
Which is, credibly, a banking haven, but also one of those sought after domains like .tv (Tuvalu), and commercially available to anyone wishing to pay for the privilege of being Manx.