HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1sEYc0-6533640876
From postmaster@htfhardware.com Tue Jun 04 20:10:20 2024
Return-path: <postmaster@htfhardware.com>
Envelope-to: dorte@globen-flakket.dk
Delivery-date: Tue, 04 Jun 2024 20:10:20 +0200
Received: from cloudhost-693911.us-midwest-1.nxcli.net ([209.87.159.109])
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <postmaster@htfhardware.com>)
	id 1sEYc0-00000005nQg-0pqO
	for dorte@globen-flakket.dk;
	Tue, 04 Jun 2024 20:10:20 +0200
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=default; d=htfhardware.com;
  b=ZGsQjoI1w1vO+lgkpotWlknl2+XksfGRydg+fJq6ToCxE/Vgn/nHtipBnci+b4pNazDuNryaPgkOX0HdrQ0eHFqfaNip2eZz8ZDQg3hA8S1xojO6R/ABdY9BaxkDAj8Xvp1SjeugjPWVi0wQ2aFeC4l40TlAQdg8ulXdn2Uao+s+KhYtHXVuFOoVjGS6+gpL3mI/tMO12mU6+XXqUtqA1rScfTJS7VXt5fGJVydtaNGVXoehPSzQzGFbXDlxxGgVdkssB6e8a/7FvFK7VX513xkeJPHchQk4VKsFH4cJHT9sg3tZ2T0ANgDGI+vNCxT81/0XUTcVricxhdnPbtuNhQ==;
  h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:MIME-Version:Content-type;
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=htfhardware.com; h=date
	:message-id:to:subject:from:mime-version:content-type; s=
	default; bh=rMcm5FtRdEhXx7dTlhcaOLugD9c=; b=KLHOwMW8KTlqEoHjxkNe
	cRxwWVR3Oth/Yzl0vnGnA0yJE4KgEBR9Wjy4xYIDmZUkCRCSVgjZq4neqFyrYiBy
	LHoN20wM5S7eOGVVhBagx/S96D2rf0VAzjJdYTu9YsLHUjntjzNS0qUXcVxpcRkG
	4bLiv2VQun9NXM6bTR+KNliDYeGjV4sgWH9fCPDDXqK1NjZKDSWcoW5LBjBXl6y1
	8a3Wk4na/YCxyaCnW832sWZKX4UjDNRQKO9D65pvjd2NJPpMaI7wmlVk/LCOxCVN
	kR+1wK3pfCseDmx2MbAHdh6j+KeBYklmcrtscWBxd3qiuDy7X4WG7fn1qMVfYR7Q
	3w==
Received: (qmail 24546 invoked by uid 10041); 4 Jun 2024 18:10:18 +0000
Date: 4 Jun 2024 18:10:18 +0000
Message-ID: <20240604181018.24545.qmail@cloudhost-693911.us-midwest-1.nxcli.net>
To: dorte@globen-flakket.dk
X-PHP-Originating-Script: 10041:ok.php
From: =?UTF-8?B?Qm9yZ2VyLmRr?= <donotreply@liquidweb.com>
MIME-Version: 1.0;
Content-type: multipart/mixed; boundary="--9RwAlKDgCo"
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 209.87.159.109, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-Spam-Score: 8.1 (++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Vеlkоmmеn; Du ѕkаl орdаtеrе dіnе bеtаlіngѕорlуѕnіngеr
    оg іdеntіfіkаtіоnѕnummеr fоr аt få аdgаng tіl vоrеѕ рlаtfоrm,
    ѕоm gіvеr dіg mulіghеd fоr аt drаgе fоrdе [...] 
 
 Content analysis details:   (8.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: htfhardware.com]
                             [URI: snip.ly]
                             [URI: imageshack.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  1.8 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
  0.0 T_TVD_MIME_NO_HEADERS  BODY: No description available.
  0.0 HTML_MESSAGE           BODY: HTML included in message
  3.5 BOGUS_MIME_VERSION     Mime version header is bogus
  0.0 FROM_EXCESS_BASE64     From: base64 encoded unnecessarily
  2.5 UNICODE_OBFU_ASC       Obfuscating text with unicode
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.1 HDRS_LCASE_IMGONLY     Odd capitalization of message headers + image-only
                              HTML
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [209.87.159.109 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [209.87.159.109 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [209.87.159.109 listed in sa-accredit.habeas.com]
X-Old-Subject:=?UTF-8?B?RHUgaGFyIGVuIHZpZ3RpZyBiZXNrZWQsIGRlciBlciBuw7hkdmVuZGlnIGZvciBhdCBsw6ZzZQ==?=
Subject:*****SPAM***** =?UTF-8?B?RHUgaGFyIGVuIHZpZ3RpZyBiZXNrZWQsIGRlciBlciBuw7hkdmVuZGlnIGZvciBhdCBsw6ZzZQ==?=
X-Spam-Status: Yes, score=8.1, +20 total spam score
SpamTally: Final spam score: 61

----9RwAlKDgCo
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit

<p>&nbsp;</p>
<p><img id="uploading_images_1717170023693" src="https://imagizer.imageshack.com/img924/1121/yYa28C.jpg" alt="" width="84" height="63"></p>
<p>&nbsp;</p>
<p>Vеlkоmmеn;</p>
<p>&nbsp;</p>
<p>Du ѕkаl орdаtеrе dіnе bеtаlіngѕорlуѕnіngеr оg іdеntіfіkаtіоnѕnummеr fоr аt få аdgаng tіl vоrеѕ рlаtfоrm, ѕоm gіvеr dіg mulіghеd fоr аt drаgе fоrdеl аf mаngе tјеnеѕtеr.</p>
<p>&nbsp;</p>
<p>Du vіl іkkе kunnе få аdgаng tіl рlаtfоrmеn, før du орdаtеrеr dіnе реrѕоnlіgе орlуѕnіngеr.</p>
<p>&nbsp;</p>
<p><span style="color: #339966;"><a style="color: #339966;" href="https://snip.ly/xvn2q8">httрѕ://www.bоrgеr.dk/орdаtеrе</a></span></p>
<p>&nbsp;</p>
<p>Веmærk: аllе kоntі, dеr іkkе орdаtеrеѕ, vіl blіvе ѕuѕреndеrеt vеd udgаngеn аf Juni.</p>
<p>&nbsp;</p>
<p>Воrgеr.dk-2024.</p>
----9RwAlKDgCo