From flore@flore-system.com Fri May 03 04:44:05 2024
Return-path: <flore@flore-system.com>
Envelope-to: kontakt@morsunivers.dk
Delivery-date: Fri, 03 May 2024 04:44:05 +0200
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.97.1)
	(envelope-from <flore@flore-system.com>)
	id 1s2iu5-00000000EPl-2o4R
	for kontakt@morsunivers.dk;
	Fri, 03 May 2024 04:44:05 +0200
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.0);
	Fri, 03 May 2024 04:44:05 +0200
From: "BARRISTER ANDREW YOUNG"  <flore@flore-system.com>
To: Recipients <flore@flore-system.com>
Subject: *****SPAM***** Business Transaction
Date: Fri, 03 May 2024 01:29:21 +0200
Message-Id: <GENERATED-WASMISSING-1s2iu5-00000000EKB-1W2Y@cde2.duelhost.dk>
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.4 required=5.0 tests=ADVANCE_FEE_3_NEW,
	FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,HDRS_MISSP,
	RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_SBL,
	RCVD_IN_VALIDITY_RPBL,TEQF_USR_POLITE autolearn=no autolearn_force=no
	version=4.0.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_66344F75.A95D78FC"

This is a multi-part message in MIME format.

------------=_66344F75.A95D78FC
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Dear {Email User}, Compliment of the season, I'm Barrister
   Andrew Young, I have a business transaction which I need your assistant,
  your share will be 50% If interested do contact me for more details on my
  personal emai [...] 

Content analysis details:   (14.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            [barristerandrewyoung123(at)gmail.com]
 1.6 TEQF_USR_POLITE        To and from user nearly same + polite greeting
 2.2 HDRS_MISSP             Misspaced headers
 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
 1.3 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [128.199.19.159 listed in bl.mailspike.net]
 2.6 RCVD_IN_SBL            RBL: Received via a relay in Spamhaus SBL
                            [141.98.10.113 listed in zen.spamhaus.org]
 1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                            https://senderscore.org/blocklistlookup/
                           [128.199.19.159 listed in bl.score.senderscore.com]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [128.199.19.159 listed in psbl.surriel.com]
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted



------------=_66344F75.A95D78FC
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from quansring.com ([128.199.19.159] helo=host.quansring.com)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <flore@flore-system.com>)
	id 1s2iu5-00000000EKB-1W2Y
	for kontakt@morsunivers.dk;
	Fri, 03 May 2024 04:44:05 +0200
Received: from [141.98.10.113] (unknown [141.98.10.113])
	by host.quansring.com (Postfix) with ESMTPSA id 01303151050D;
	Thu,  2 May 2024 23:29:25 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 host.quansring.com 01303151050D
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <flore@flore-system.com>
From: "BARRISTER ANDREW YOUNG"  <flore@flore-system.com>
Date: Fri, 03 May 2024 01:29:21 +0200
Reply-To: barristerandrewyoung123@gmail.com
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 128.199.19.159, -10 Spam score
BlacklistCheck: Blacklisted address, +50 Spam score
SPFCheck: Soft Fail, 30 Spam score
Message-ID: <GENERATED-WASMISSING-1s2iu5-00000000EKB-1W2Y@cde2.duelhost.dk>
X-ACL-Warn: Adding Message-ID header because it is missing!
X-Old-Subject:Business Transaction
Subject:*****SPAM***** Business Transaction
SpamTally: Final spam score: 90

Dear {Email User},

Compliment of the season, I'm Barrister Andrew Young, I have a
business transaction which I need your assistant, your share will
be 50% If interested do contact me for more details on my
personal email: barristerandrewyoung123@gmail.com.

Your feedback is welcome!
Thank you.

------------=_66344F75.A95D78FC--