File: /home/dtptviut/Maildir/.Junk/new/q1tFZn3-6533948689
From nykredit@antarsteel.com Mon Nov 25 15:10:13 2024
Return-path: <nykredit@antarsteel.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Mon, 25 Nov 2024 15:10:13 +0100
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.98)
(envelope-from <nykredit@antarsteel.com>)
id 1tFZn3-0000000DPY7-0rO5
for mail@globen-flakket.dk;
Mon, 25 Nov 2024 15:10:13 +0100
Received: from localhost by cde2.duelhost.dk
with SpamAssassin (version 4.0.1);
Mon, 25 Nov 2024 15:10:13 +0100
From: "Nykredit Bank" <nykredit@antarsteel.com>
To: mail@globen-flakket.dk
Subject: *****SPAM***** Betaling annulleret
Date: Mon, 25 Nov 2024 22:10:10 +0800
Message-Id: <E1tFZmz-00000000a68-41PB@antarsteel.com>
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.9 required=5.0 tests=BAYES_50,HDRS_MISSP,
HTML_MESSAGE,MIXED_HREF_CASE,RCVD_IN_DNSWL_BLOCKED,
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
RCVD_IN_VALIDITY_SAFE_BLOCKED,RDNS_NONE,URIBL_ABUSE_SURBL,
URIBL_BLOCKED,URIBL_PH_SURBL autolearn=no autolearn_force=no
version=4.0.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_67448545.7CC53A3E"
This is a multi-part message in MIME format.
------------=_67448545.7CC53A3E
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hej, Vi skriver for at informere dig om, at din seneste betaling
ikke kunne behandles. For at sikre, at du modtager din refusion, bedes du
følge instruktionerne via linket nedenfor. Klik på linket [...]
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
for more information.
[182.16.101.42 listed in list.dnswl.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[182.16.101.42 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[182.16.101.42 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[182.16.101.42 listed in sa-accredit.habeas.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: formstack.com]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: ymitid.formstack.com]
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: ymitid.formstack.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4995]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 MIXED_HREF_CASE Has href in mixed case
2.5 HDRS_MISSP Misspaced headers
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_67448545.7CC53A3E
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from [182.16.101.42] (helo=antarsteel.com)
by cde2.duelhost.dk with esmtps (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
(Exim 4.98)
(envelope-from <nykredit@antarsteel.com>)
id 1tFZn2-0000000DPSn-3IoD
for mail@globen-flakket.dk;
Mon, 25 Nov 2024 15:10:13 +0100
Received: from [182.16.101.43]
by antarsteel.com with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA
(Exim 4.97.1)
(envelope-from <nykredit@antarsteel.com>)
id 1tFZmz-00000000a68-41PB
for mail@globen-flakket.dk;
Mon, 25 Nov 2024 22:10:09 +0800
Content-Type: multipart/alternative; boundary="===============0460165602=="
MIME-Version: 1.0
To: mail@globen-flakket.dk
From: "Nykredit Bank" <nykredit@antarsteel.com>
Date: Mon, 25 Nov 2024 22:10:10 +0800
Message-Id: <E1tFZmz-00000000a68-41PB@antarsteel.com>
ReverseDNS: No reverse DNS for mailserver at 182.16.101.42, +100 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-Old-Subject:Betaling annulleret
Subject:*****SPAM***** Betaling annulleret
SpamTally: Final spam score: 90
You will not see this in a MIME-aware mail reader.
--===============0460165602==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Hej, =
Vi skriver for at informere dig om, at din seneste betaling ikke kunne beh=
andles. For at sikre, at du modtager din refusion, bedes du f=F8lge instruk=
tionerne via linket nedenfor. =
Klik p=E5 linket for at starte refusionsprocessen: =
Start refusionsprocessen =
Med venlig hilsen
Anders Pedersen
Kundeservice
Nykredit Bank
--===============0460165602==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
<HTML><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3Diso-8859-1"/>
<meta charset=3D"UTF-8"> <!-- Ensures proper encoding -->
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<style>
body {
font-family: Arial, sans-serif;
font-size: 14px;
line-height: 1.6;
margin: 0;
padding: 0;
color: #000;
background-color: #fff;
}
.container {
margin: 20px;
}
a {
color: #000;
text-decoration: underline;
}
.footer {
margin-top: 20px;
font-size: 14px;
}
</style>
</head>
<body><DIV class=3Dcontainer>
<P>Hej, </P>
<P>Vi skriver for at informere dig om, at din seneste betaling ikke kunne b=
ehandles. For at sikre, at du modtager din refusion, bedes du f=F8lge instr=
uktionerne via linket nedenfor. </P>
<P>Klik p=E5 linket for at starte refusionsprocessen: </P>
<P><A href=3D"https://ymitid.formstack.com/forms/nykreditmitid" target=3D_b=
lank>Start refusionsprocessen</A> </P>
<P class=3Dfooter>Med venlig hilsen<BR>Anders Pedersen<BR>Kundeservice<BR>N=
ykredit Bank</P></DIV></BODY></HTML>
--===============0460165602==--
------------=_67448545.7CC53A3E--