From rabindra.kushwaha@dishhome.com.np Wed Feb 14 14:21:41 2024
Return-path: <rabindra.kushwaha@dishhome.com.np>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Wed, 14 Feb 2024 14:21:41 +0100
Received: from mail.dishhome.com.np ([103.74.15.107] helo=jupiter.dishhome.com.np)
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <rabindra.kushwaha@dishhome.com.np>)
	id 1raFCn-0000000FTl4-0Nav
	for mail@globen-flakket.dk;
	Wed, 14 Feb 2024 14:21:41 +0100
Received: from localhost (localhost [127.0.0.1])
	by jupiter.dishhome.com.np (Postfix) with ESMTP id 8D4271406D4DC6;
	Wed, 14 Feb 2024 19:05:54 +0545 (+0545)
Received: from jupiter.dishhome.com.np ([127.0.0.1])
	by localhost (jupiter.dishhome.com.np [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id ZyHzXhOeJqyk; Wed, 14 Feb 2024 19:05:51 +0545 (+0545)
Received: from localhost (localhost [127.0.0.1])
	by jupiter.dishhome.com.np (Postfix) with ESMTP id 93E59E69276F6;
	Wed, 14 Feb 2024 19:01:41 +0545 (+0545)
DKIM-Filter: OpenDKIM Filter v2.10.3 jupiter.dishhome.com.np 93E59E69276F6
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dishhome.com.np;
	s=9839D8FA-CB28-11EC-92FE-770D18B3D287; t=1707916601;
	bh=Vb48WLsInhbv6d1SoxSlmByPqWmkf9zre14Et9TgwNs=;
	h=To:From:Date:Message-Id;
	b=UZDOw6M/xzotjt4ZEVkUHORtLnbmHuAX8+DWp2s/pngj/Xm6j7YFs0o5sJUAdUius
	 Be3O0+hyw4Y1U8JKkHXX3s4xdmQJ2LRUO4+znzSoADLpwb3DG1h75o4duMBcH/o5QR
	 k9hCNv6tS5C0pXPEwFcyRmgyto0+vY8buWc+zeravSDTKugGfkCXbqt3oSLIp0ONLr
	 CXeubWij/ifN0K9ZrHZNRDNXDDC2RZzzV9WMGP0m27lnGCNGfUX5FwbWDzE6kAA2Tj
	 gFRHt0rotQc3OiT/SVgTFHW9dU9YK+FeZNnjDRfrlXbFQkFoFTlV8ewzinwERnRZut
	 rQ36u/Q+/aocg==
Received: from jupiter.dishhome.com.np ([127.0.0.1])
	by localhost (jupiter.dishhome.com.np [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id pcLWtsvqXXZW; Wed, 14 Feb 2024 19:01:41 +0545 (+0545)
Received: from [10.11.18.102] (unknown [84.247.97.13])
	(Authenticated sender: dambar.airi@dishhome.com.np)
	by jupiter.dishhome.com.np (Postfix) with ESMTPSA id 730D1EBA98243;
	Wed, 14 Feb 2024 18:57:09 +0545 (+0545)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <rabindra.kushwaha@dishhome.com.np>
From: rabindra.kushwaha@dishhome.com.np
Date: Wed, 14 Feb 2024 10:11:59 -0300
Reply-To: donation_001@outlook.com
Message-Id: <20240214131210.730D1EBA98243@jupiter.dishhome.com.np>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 103.74.15.107, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='dishhome.com.np' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 11.9 (+++++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Hej Vores navne er Frances og Patrick Connolly fra Nordirland.
    Mig og min kone vil gerne dele denne gode nyhed med dig, vi vandt en lotterijackpot
    på £115 millioner på nytårsdag. Vi har besluttet at d [...] 
 
 Content analysis details:   (11.9 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [donation_001(at)outlook.com]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  0.3 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  2.5 MONEY_NOHTML           Lots of money in plain text
  3.6 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [84.247.97.13 listed in zen.spamhaus.org]
 -0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [103.74.15.107 listed in wl.mailspike.net]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: dishhome.com.np]
X-Old-Subject:Tillykke, du har vundet en donation
Subject:*****SPAM***** Tillykke, du har vundet en donation
X-Spam-Status: Yes, score=11.9, +20 total spam score
SpamTally: Final spam score: 79

Hej

Vores navne er Frances og Patrick Connolly fra Nordirland. Mig og min kone =
vil gerne dele denne gode nyhed med dig, vi vandt en lotterijackpot p=C3=A5=
 =C2=A3115 millioner p=C3=A5 nyt=C3=A5rsdag. Vi har besluttet at donere til=
 5 tilf=C3=A6ldige personer p=C3=A5 grund af denne vanskelige tid med coron=
avirus, n=C3=A5r du modtager denne e-mail, blev din e-mail valgt fra en spi=
n-bold. Jeg har distribueret de fleste af mine aktiver til en r=C3=A6kke ve=
lg=C3=B8rende organisationer og organisationer. Jeg har frivilligt beslutte=
t at donere bel=C3=B8bet p=C3=A5 =E2=82=AC2.000.000,00 til dig som en af mi=
ne heldige 5 personer, der er udvalgt.

Dette er din donationskode: [FPC430342022]

Besvar denne e-mail med donationskoden: dona.tion1199@gmail.com

Jeg h=C3=A5ber at g=C3=B8re dig og din familie glade.

V=C3=A6r hilset

Frances og Patrick Connolly