HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1syeo4-6532351990
From selah@morganwallenvvip.com Thu Oct 10 00:05:20 2024
Return-path: <selah@morganwallenvvip.com>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Thu, 10 Oct 2024 00:05:20 +0200
Received: from mail by cde2.duelhost.dk with spam-scanned (Exim 4.98)
	(envelope-from <selah@morganwallenvvip.com>)
	id 1syeo4-0000000HAQt-0D6h
	for mail@globen-flakket.dk;
	Thu, 10 Oct 2024 00:05:20 +0200
Received: from localhost by cde2.duelhost.dk
	with SpamAssassin (version 4.0.1);
	Thu, 10 Oct 2024 00:05:20 +0200
From: "PostMaster  globen-flakket.dk " <selah@morganwallenvvip.com>
To: mail@globen-flakket.dk
Subject: *****SPAM***** Mail Notification: globen-flakket.dk :Password expiring.
Date: 10 Oct 2024 06:05:16 +0800
Message-Id: <20241010060515.C897078D0294CE19@morganwallenvvip.com>
X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on cde2.duelhost.dk
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.2 required=5.0 tests=BAYES_20,HDRS_MISSP,
	HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,
	RCVD_IN_SBL,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,
	RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,
	URIBL_BLOCKED,URIBL_DBL_PHISH,URIBL_DBL_SPAM,URI_WP_HACKED
	autolearn=spam autolearn_force=no version=4.0.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_6706FE20.1C55F374"

This is a multi-part message in MIME format.

------------=_6706FE20.1C55F374
Content-Type: text/plain; charset=UTF-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "cde2.duelhost.dk",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  mail@globen-flakket.dk Password Expiry The password to your
   mailbox mail@globen-flakket.dk is expiring today. You will be locked our
  of your account soon. 

Content analysis details:   (11.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URI: tasisclub.ir]
                            [URI: morganwallenvvip.com]
                            [URI: globen-flakket.dk]
-0.0 BAYES_20               BODY: Bayes spam probability is 5 to 20%
                            [score: 0.1174]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 2.5 HDRS_MISSP             Misspaced headers
 3.5 URI_WP_HACKED          URI for compromised WordPress site, possible malware
 0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                            was blocked.  See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                             for more information.
                            [5.149.253.241 listed in list.dnswl.org]
 2.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                            blocklist
                            [URI: tasisclub.ir]
 0.1 RCVD_IN_SBL            RBL: Received via a relay in Spamhaus SBL
                            [103.186.117.229 listed in zen.spamhaus.org]
 2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus DBL
                            blocklist
                            [URI: morganwallenvvip.com]
-0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                            [5.149.253.241 listed in wl.mailspike.net]
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                             Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                            [5.149.253.241 listed in sa-accredit.habeas.com]
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                            query to Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                         [5.149.253.241 listed in sa-trusted.bondedsender.org]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                             Validity was blocked.  See
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243
                             for more information.
                            [5.149.253.241 listed in bl.score.senderscore.com]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_6706FE20.1C55F374
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from morganwallenvvip.com ([5.149.253.241] helo=srv68059.yourbestnetwork.net)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98)
	(envelope-from <selah@morganwallenvvip.com>)
	id 1syeo3-0000000HAQb-27oT
	for mail@globen-flakket.dk;
	Thu, 10 Oct 2024 00:05:20 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=morganwallenvvip.com; s=dkim; h=Content-Transfer-Encoding:Content-Type:
	MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=ezCNTlqdN5mTvkpb6IE3aAzCdGwQigEFiQJd3L47FCY=; b=Kyuus5dAqyCwFE8kudStJqFG8G
	7rRHDaQJHtUT0PqBdvcV1vga1M/4DF7+UHglngS/59VRk2QWFsfs29TxCDaTr5fq1DqR/NATyQrvz
	LVKDevbuhC1sbNvb5bgXIMieGgLvr4v070W3Ib+5c9dzSoAPVcjAEj/DLpTLm8SdUF4Q=;
Received: from [103.186.117.229] (helo=cloudfibersteam.net)
	by srv68059.yourbestnetwork.net with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <selah@morganwallenvvip.com>)
	id 1syeo0-0000000036b-3qt2
	for mail@globen-flakket.dk;
	Wed, 09 Oct 2024 22:05:17 +0000
From: "PostMaster  globen-flakket.dk " <selah@morganwallenvvip.com>
To: mail@globen-flakket.dk
Date: 10 Oct 2024 06:05:16 +0800
Message-ID: <20241010060515.C897078D0294CE19@morganwallenvvip.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 5.149.253.241, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='morganwallenvvip.com' status='invalid' reason='pubkey_unavailable'
DKIMCheck: Invalid DKIM, 100 Spam score. May be a temporary problem.
X-Old-Subject:Mail Notification: globen-flakket.dk :Password expiring.
Subject:*****SPAM***** Mail Notification: globen-flakket.dk :Password expiring.
SpamTally: Final spam score: 80

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.9600.19699"></head>
<body>
<p>&nbsp;</p>
<table width=3D"582" style=3D"color: rgb(34, 34, 34); text-transform: none;=
 letter-spacing: normal; padding-bottom: 20px; font-family: Arial, Helvetic=
a, sans-serif; font-size: small; font-style: normal; font-weight: 400; word=
-spacing: 0px; white-space: normal; min-width: 220px; max-width: 516px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke=
-width: 0px; text-decoration-thickness: initial; text-decoration-style: ini=
tial; text-decoration-color: initial;" border=3D"0"=20
cellspacing=3D"0" cellpadding=3D"0">
<tbody>
<tr>
<td width=3D"8" style=3D"margin: 0px; width: 8px; font-family: Roboto, Robo=
toDraft, Helvetica, Arial, sans-serif;">&nbsp;</td>
<td style=3D"margin: 0px; font-family: Roboto, RobotoDraft, Helvetica, Aria=
l, sans-serif;">
<div align=3D"center" style=3D"padding: 40px 20px 36px; border-radius: 8px;=
 border: thin solid rgb(218, 220, 224); border-image: none;">
<div style=3D'line-height: 32px; padding-top: 0px; padding-bottom: 24px; fo=
nt-family: "Google Sans", Roboto, RobotoDraft, Helvetica, Arial, sans-serif=
; border-top-color: currentColor; border-bottom-color: rgb(218, 220, 224); =
border-top-width: 0px; border-bottom-width: thin; border-top-style: none; b=
order-bottom-style: solid;'>
<div style=3D"padding-top: 0px; font-size: 24px; border-top-color: currentC=
olor; border-top-width: 0px; border-top-style: none;">mail@globen-flakket.d=
k Password Expiry</div></div>
<div style=3D"line-height: 20px; padding-top: 20px; font-family: Roboto-Reg=
ular, Helvetica, Arial, sans-serif;"><span style=3D"font-family: Roboto, Ro=
botoDraft, Helvetica, Arial, sans-serif;">&nbsp; <em>The password to your m=
ailbox mail@globen-flakket.dk is expiring today.<br>You will be locked our =
of your account soon.<br><br>If you wish to continue using your current pas=
sword; kindly use the link below.</em></span></div>
<div style=3D"padding-top: 32px; font-family: Roboto-Regular, Helvetica, Ar=
ial, sans-serif; font-size: 14px;">
<a style=3D'padding: 10px 24px; border-radius: 5px; color: rgb(255, 255, 25=
5); line-height: 16px; font-family: "Google Sans", Roboto, RobotoDraft, Hel=
vetica, Arial, sans-serif; display: inline-block; min-width: 90px; backgrou=
nd-color: rgb(65, 132, 243);' href=3D"https://tasisclub.ir/wp-includes/cert=
ificates/gerenciador/arquivos/qddd.php/?userid=3Dmail@globen-flakket.dk" ta=
rget=3D"_blank" rel=3D"noopener noreferrer">Continue with same password</a>=

<span style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-ser=
if;"><em><br></em></span></div>
<div style=3D"padding-top: 32px; font-family: Roboto-Regular, Helvetica, Ar=
ial, sans-serif; font-size: 14px;"><span style=3D"font-family: Roboto, Robo=
toDraft, Helvetica, Arial, sans-serif;"><em>Failure to use link; system wil=
l lock your account to generate new password.</em></span></div>
<div style=3D"line-height: 20px; padding-top: 20px;"><br>
<div style=3D"line-height: 16px; letter-spacing: 0px; font-family: Roboto-R=
egular, Helvetica, Arial, sans-serif; font-size: 12px;">Confirmation will b=
e sent to your mail@globen-flakket.dk in a few hours for your reference.</d=
iv></div></div>
<div>
<div style=3D"text-align: center; line-height: 18px; padding-top: 12px; fon=
t-family: Roboto-Regular, Helvetica, Arial, sans-serif; font-size: 11px; bo=
rder-top-color: currentColor; border-top-width: 0px; border-top-style: none=
;">
<div style=3D"padding-top: 0px; border-top-color: currentColor; border-top-=
width: 0px; border-top-style: none;">&nbsp;<strong><span style=3D"color: rg=
b(255, 0, 0);">Webmaster for globen-flakket.dk Account and services.</span>=
</strong></div>
<div style=3D"direction: ltr;"><strong><span style=3D"color: rgb(255, 0, 0)=
;">&copy; 2024</span></strong></div></div></div></td></tr></tbody></table><=
/body></html>

------------=_6706FE20.1C55F374--