HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1rfnz9-6578987803
From frankjosephxx2@gmail.com Thu Feb 29 22:30:35 2024
Return-path: <frankjosephxx2@gmail.com>
Envelope-to: kontakt@globen-flakket.dk
Delivery-date: Thu, 29 Feb 2024 22:30:35 +0100
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.97.1)
	(envelope-from <frankjosephxx2@gmail.com>)
	id 1rfnz9-0000000CsD6-08YI
	for kontakt@globen-flakket.dk;
	Thu, 29 Feb 2024 22:30:35 +0100
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.0);
	Thu, 29 Feb 2024 22:30:35 +0100
From: "Frank Joseph"<frankjosephxx2@gmail.com>
Subject: *****SPAM***** ***SPAM*** From Frank Joseph
Date: Tue, 27 Feb 2024 11:28:55 -0800
Message-Id: <20240227192843.0CF32B9623@u18812765.onlinehome-server.com>
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: ***************************************
X-Spam-Status: Yes, score=39.5 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
	FORGED_GMAIL_RCVD,FORGED_MUA_OUTLOOK,FREEMAIL_ENVFROM_END_DIGIT,
	FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,
	FROM_MISSP_EH_MATCH,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,
	FROM_MISSP_REPLYTO,FROM_MISSP_USER,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,
	FSL_NEW_HELO_USER,HDRS_MISSP,MALFORMED_FREEMAIL,MISSING_HEADERS,
	MSOE_MID_WRONG_CASE,NSL_RCVD_FROM_USER,RCVD_IN_BL_SPAMCOP_NET,
	RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,
	RCVD_IN_VALIDITY_RPBL,REPLYTO_WITHOUT_TO_CC,SPOOFED_FREEMAIL,
	SPOOF_GMAIL_MID,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,
	T_SCC_BODY_TEXT_LINE,XPRIO autolearn=no autolearn_force=no
	version=4.0.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_65E0F77B.EA5713F8"

This is a multi-part message in MIME format.

------------=_65E0F77B.EA5713F8
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Hello How are you doing today? I have a business proposal
  for you and I will like us to discuss more so that I can give you more details.
   It is 100% legal. I patiently wait for your response. 

Content analysis details:   (39.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?74.208.223.237>]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [74.208.223.237 listed in psbl.surriel.com]
 0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 0.0 NSL_RCVD_FROM_USER     Received from User
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            [frankjosephxx2(at)gmail.com]
 1.2 MISSING_HEADERS        Missing To: header
 1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received' headers
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            [frankjosephxx2(at)gmail.com]
 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                            digit
                            [frankjosephxx2(at)gmail.com]
 1.2 MALFORMED_FREEMAIL     Bad headers on message from free email service
 1.9 REPLYTO_WITHOUT_TO_CC  No description available.
 0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
 0.0 FROM_MISSP_USER        From misspaced, from "User"
-0.0 T_SCC_BODY_TEXT_LINE   No description available.
 3.4 MSOE_MID_WRONG_CASE    No description available.
 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
 1.1 FROM_MISSPACED         From: missing whitespace
 0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
 2.5 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
 0.5 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
 2.5 HDRS_MISSP             Misspaced headers
 2.4 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
 2.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
 2.1 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
 1.8 SPOOFED_FREEMAIL       No description available.
 2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
 1.0 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
 2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 2.2 XPRIO                  Has X-Priority header
 1.5 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [74.208.223.237 listed in dnsbl.sorbs.net]
 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [74.208.223.237 listed in bl.mailspike.net]
 1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                            https://senderscore.org/blocklistlookup/
                           [74.208.223.237 listed in bl.score.senderscore.com]
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted



------------=_65E0F77B.EA5713F8
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from u18812765.onlinehome-server.com ([74.208.223.237])
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <frankjosephxx2@gmail.com>)
	id 1rfnz8-0000000Cs8m-33Cf
	for kontakt@globen-flakket.dk;
	Thu, 29 Feb 2024 22:30:35 +0100
Received: from u18812765.onlinehome-server.com (u18812765.onlinehome-server.com [127.0.0.1])
	by u18812765.onlinehome-server.com (Postfix) with ESMTP id 859A294F0E;
	Thu, 29 Feb 2024 01:16:04 +0200 (EET)
Authentication-Results: u18812765.onlinehome-server.com;
	spf=pass (sender IP is 127.0.0.1) smtp.mailfrom=frankjosephxx2@gmail.com smtp.helo=u18812765.onlinehome-server.com
Received-SPF: pass (u18812765.onlinehome-server.com: localhost is always allowed.) client-ip=127.0.0.1; envelope-from=frankjosephxx2@gmail.com; helo=u18812765.onlinehome-server.com;
X-Spam-Score: 21.804
Received: from u18812765.onlinehome-server.com ([127.0.0.1])
	by u18812765.onlinehome-server.com (u18812765.onlinehome-server.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id EII-2rq20ebT; Thu, 29 Feb 2024 01:15:56 +0200 (EET)
Received: from User (u18812765.onlinehome-server.com [127.0.0.1])
	by u18812765.onlinehome-server.com (Postfix) with SMTP id 0CF32B9623;
	Tue, 27 Feb 2024 21:28:42 +0200 (EET)
Received-SPF: pass (u18812765.onlinehome-server.com: localhost is always allowed.) client-ip=127.0.0.1; envelope-from=frankjosephxx2@gmail.com; helo=User;
Reply-To: <frankjosephxx2@gmail.com>
From: "Frank Joseph"<frankjosephxx2@gmail.com>
Date: Tue, 27 Feb 2024 11:28:55 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20240227192843.0CF32B9623@u18812765.onlinehome-server.com>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 74.208.223.237, -10 Spam score
BlacklistCheck: Blacklisted address, +50 Spam score
SPFCheck: Soft Fail, 30 Spam score
X-Old-Subject:***SPAM*** From Frank Joseph
Subject:*****SPAM***** ***SPAM*** From Frank Joseph
SpamTally: Final spam score: 90

Hello

How are you doing today? I have a business proposal for you and I will like us to discuss more so that I can give you more details. It is 100% legal.

I patiently wait for your response.

Regards.

Frank Joseph

------------=_65E0F77B.EA5713F8--