HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1s2mR2-6533718446
From flore@flore-system.com Fri May 03 08:30:20 2024
Return-path: <flore@flore-system.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Fri, 03 May 2024 08:30:20 +0200
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.97.1)
	(envelope-from <flore@flore-system.com>)
	id 1s2mR2-00000005KoY-1d3C
	for mail@globen-flakket.dk;
	Fri, 03 May 2024 08:30:20 +0200
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.0);
	Fri, 03 May 2024 08:30:20 +0200
From: "BARRISTER ANDREW YOUNG"  <flore@flore-system.com>
To: Recipients <flore@flore-system.com>
Subject: *****SPAM***** Business Transaction
Date: Fri, 03 May 2024 02:41:08 +0200
Message-Id: <GENERATED-WASMISSING-1s2mR2-00000005Kku-0DQI@cde2.duelhost.dk>
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.7 required=5.0 tests=ADVANCE_FEE_3_NEW,
	FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,HDRS_MISSP,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,
	RCVD_IN_PSBL,RCVD_IN_SBL,RCVD_IN_VALIDITY_RPBL,TEQF_USR_POLITE
	autolearn=no autolearn_force=no version=4.0.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_6634847C.1EC86DE9"

This is a multi-part message in MIME format.

------------=_6634847C.1EC86DE9
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Dear {Email User}, Compliment of the season, I'm Barrister
   Andrew Young, I have a business transaction which I need your assistant,
  your share will be 50% If interested do contact me for more details on my
  personal emai [...] 

Content analysis details:   (15.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            [barristerandrewyoung123(at)gmail.com]
 2.2 HDRS_MISSP             Misspaced headers
 1.6 TEQF_USR_POLITE        To and from user nearly same + polite greeting
 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
 1.3 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
 0.0 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [128.199.19.159 listed in bl.mailspike.net]
 2.6 RCVD_IN_SBL            RBL: Received via a relay in Spamhaus SBL
                            [141.98.10.113 listed in zen.spamhaus.org]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [128.199.19.159 listed in psbl.surriel.com]
 1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                            https://senderscore.org/blocklistlookup/
                           [128.199.19.159 listed in bl.score.senderscore.com]
 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?128.199.19.159>]
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted



------------=_6634847C.1EC86DE9
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from quansring.com ([128.199.19.159] helo=host.quansring.com)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.97.1)
	(envelope-from <flore@flore-system.com>)
	id 1s2mR2-00000005Kku-0DQI
	for mail@globen-flakket.dk;
	Fri, 03 May 2024 08:30:20 +0200
Received: from [141.98.10.113] (unknown [141.98.10.113])
	by host.quansring.com (Postfix) with ESMTPSA id 4EB19220DEAB;
	Fri,  3 May 2024 00:41:13 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 host.quansring.com 4EB19220DEAB
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <flore@flore-system.com>
From: "BARRISTER ANDREW YOUNG"  <flore@flore-system.com>
Date: Fri, 03 May 2024 02:41:08 +0200
Reply-To: barristerandrewyoung123@gmail.com
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 128.199.19.159, -10 Spam score
BlacklistCheck: Blacklisted address, +50 Spam score
SPFCheck: Soft Fail, 30 Spam score
Message-ID: <GENERATED-WASMISSING-1s2mR2-00000005Kku-0DQI@cde2.duelhost.dk>
X-ACL-Warn: Adding Message-ID header because it is missing!
X-Old-Subject:Business Transaction
Subject:*****SPAM***** Business Transaction
SpamTally: Final spam score: 90

Dear {Email User},

Compliment of the season, I'm Barrister Andrew Young, I have a
business transaction which I need your assistant, your share will
be 50% If interested do contact me for more details on my
personal email: barristerandrewyoung123@gmail.com.

Your feedback is welcome!
Thank you.

------------=_6634847C.1EC86DE9--