HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1tCfvB-6533814833
From ef-ibm_06064@edunetmail.com Sun Nov 17 15:06:37 2024
Return-path: <ef-ibm_06064@edunetmail.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Sun, 17 Nov 2024 15:06:37 +0100
Received: from mail.edunetmail.com ([49.50.86.94])
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <ef-ibm_06064@edunetmail.com>)
	id 1tCfvA-0000000BTO6-3Tma
	for mail@globen-flakket.dk;
	Sun, 17 Nov 2024 15:06:37 +0100
Received: from localhost (localhost [127.0.0.1])
	by mail.edunetmail.com (Postfix) with ESMTP id 3D825D672F7;
	Sun, 17 Nov 2024 18:27:02 +0530 (IST)
Received: from mail.edunetmail.com ([127.0.0.1])
	by localhost (mail.edunetmail.com [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id ptomZpXiG5Vw; Sun, 17 Nov 2024 18:27:02 +0530 (IST)
Received: from localhost (localhost [127.0.0.1])
	by mail.edunetmail.com (Postfix) with ESMTP id 14334D67D67;
	Sun, 17 Nov 2024 17:55:14 +0530 (IST)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.edunetmail.com 14334D67D67
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=edunetmail.com;
	s=default; t=1731846314;
	bh=qrktPVShNBUtY2hezEnU4dAsqJuxQuhArQItKOutGeI=;
	h=MIME-Version:To:From:Date:Message-Id;
	b=V99l+9HLXb2bZjQg+8LeNul4/GdDeXMgFZdj7Kx3uvchrp52REshMTmAAFGT09+yW
	 jbO5Y5Ce2PmNJI2sRbyt7304YAf7f+uQ4UFcDvfTY8JK86KxV7pNhHzD/N8txp5FEJ
	 4ZI11MwHuKjKe5AL4LesWq3W2v8REaYpnP+cE8jfQRJZY9JX4SOCYfhhDwHQUUVq2H
	 b3/A7yFgRXJHnG3OEJ6a2Mc3N/16zigA7b+bwzaoADDHPqglYI0N3rQgRF5+R8zOOo
	 JBT72s7L9vf2eqw7Ygsm2mNDeyKrHwkFdCWAIXXcdaeE4Y5m/zWIh3K5JZwlYV2LYe
	 pB8UDI3JPg9Jw==
X-Virus-Scanned: amavisd-new at mail.edunetmail.com
Received: from mail.edunetmail.com ([127.0.0.1])
	by localhost (mail.edunetmail.com [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id wKa3AhDMlBK3; Sun, 17 Nov 2024 17:55:14 +0530 (IST)
Received: from [10.11.18.188] (unknown [138.199.39.12])
	by mail.edunetmail.com (Postfix) with ESMTPSA id 74B6FD41737;
	Sun, 17 Nov 2024 16:32:53 +0530 (IST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <ef-ibm_06064@edunetmail.com>
From: ef-ibm_06064@edunetmail.com
Date: Sun, 17 Nov 2024 08:02:44 -0300
Reply-To: donation_001@outlook.com
Message-Id: <20241117110253.74B6FD41737@mail.edunetmail.com>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 49.50.86.94, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='edunetmail.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 8.2 (++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Hej Mit navn er CHENG "CHARLIE" SAEPHAN fra Oregon USA. Jeg
    vil gerne dele denne gode nyhed med dig, jeg vandt en Powerball-jackpot på
    $1,3 milliarder i april 2024. Min kone og jeg har besluttet at doner [...]
    
 
 Content analysis details:   (8.2 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [49.50.86.94 listed in list.dnswl.org]
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4958]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [donation_001(at)outlook.com]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: edunetmail.com]
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.3 MONEY_NOHTML           Lots of money in plain text
  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [49.50.86.94 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [49.50.86.94 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [49.50.86.94 listed in sa-accredit.habeas.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [49.50.86.94 listed in psbl.surriel.com]
X-Old-Subject:Dette er din donationskode: [ENC430302024]
Subject:*****SPAM***** Dette er din donationskode: [ENC430302024]
X-Spam-Status: Yes, score=8.2, +20 total spam score
SpamTally: Final spam score: 42

Hej

Mit navn er CHENG "CHARLIE" SAEPHAN fra Oregon USA. Jeg vil gerne dele denn=
e gode nyhed med dig, jeg vandt en Powerball-jackpot p=E5 $1,3 milliarder i=
 april 2024. Min kone og jeg har besluttet at donere til 5 tilf=E6ldige per=
soner p=E5 grund af mit handicap og kr=E6ft. N=E5r du modtager denne e-mail=
, blev din e-mail valgt fra en spin-bold. Jeg har distribueret de fleste af=
 mine aktiver til en r=E6kke velg=F8rende organisationer og organisationer.=
 Jeg har frivilligt besluttet at donere bel=F8bet p=E5 $5.000.000,00 til di=
g som en af ??mine heldige 5 personer, der er udvalgt.

Dette er din donationskode: [ENC430302024]

Besvar denne e-mail med din donationskode:
dona.tion1199@gmail.com

Jeg h=E5ber at f=E5 dig og din familie til at smile

Hilsen

CHENG "CHARLIE" SAEPHAN