Kategori: Falske Mails

  • Falske Appel ID Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    11 May 2022 16:02:49 +0200
    X-ASSP-DKIMidentity: @moringaschool.com
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass; dmarc=pass
    X-Assp-Detected-URI: cjzbak.top(2), moringaschool.com(5), 1e100.net(1)
    X-Assp-ID: asgard.bregnedalsystems.dk id-77768-39079
    X-Assp-Session: 7EFE4B4CC3F8
    X-Assp-Envelope-From: 6610017938123kennedy.babu@moringaschool.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    Received: from mail-wm1-x366.google.com ([2a00:1450:4864:20::366]
    helo=mail-wm1-x366.google.com) by asgard.bregnedalsystems.dk with
    SMTPS(TLSv1_2 ECDHE-ECDSA-AES256-GCM-SHA384) (2.6.8); 11 May 2022 16:02:48
    +0200
    Received: by mail-wm1-x366.google.com with SMTP id bg25so1277104wmb.4
    for <spam-eater@bregnedalsystems.dk>; Wed, 11 May 2022 07:02:48 -0700 (PDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=moringaschool.com; s=google;
    h=date:from:to:message-id:subject:mime-version
    :content-transfer-encoding;
    bh=41ex3CxNLJSYXpHtOPX8N2jxbtZlr7iaopYA3QMgj8k=;
    b=S1VCg6V7P7pb+Aw1bDVwIZWm3trG0VoLP6NyuE80chZ6wcesvohbrhwxk7QNqduzWb
    +K4DKTtALGoE/xqRVlgtZsCOVR22QeARiP7/uvXy9fb/sVc+fCjVvsbYIZXD47pzMr09
    jy4xfOAiEkQf7FMDiRA7OujRBLjGLCEvMbY+Q=
    X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=1e100.net; s=20210112;
    h=x-gm-message-state:date:from:to:message-id:subject:mime-version
    :content-transfer-encoding;
    bh=41ex3CxNLJSYXpHtOPX8N2jxbtZlr7iaopYA3QMgj8k=;
    b=nbvLC0AtNaGihZF9vWzqxjbbDN0n4yes9o/5ytRX2zU2piy/6CPZ8lBmFMarjD4p6F
    AbFFY6pWI26HzPYVYLxQtP6vfLjZFj1oMDtg5io7r9SO4qTRtLSo31QmVpnn1o+UwxJw
    XxOts0glS9mvj2x+LpbIVWZF2KvzP2JOfzMlL0UUoHgVlgNKiVS5JQl/w0mxq9WkrCS7
    npq/O89pdHDroZpmA+2DE9VM7L4hAEq3Tpw0kOPclmnE/+tHqpF6UG6S2aRlhg2oJIIv
    701KgGTZCgCeq/rWVPrVXUZZyhSdMPkPrrImhhEXla6ggi4IPvsWCk8vrQMScSY6i/k4
    lbpg==
    X-Gm-Message-State: AOAM532HRC8g0irNsyewn2bMuBWl+NLiDuOk7pMERpD2+6YSTo9BgL0i
    rSG6TaWHtfTrroNSBoC+4sVPq0fQ/lVXtXR4f9ZG1/zoWr/GaA==
    X-Google-Smtp-Source: ABdhPJyl0zfH89xO2tJi4ZRAf64i7MTVhZlVq3VxYPMSyJMNC7EYxdqev+qVPXYGRMjjzs7IRWFfeNk6C493
    X-Received: by 2002:a7b:ce08:0:b0:394:32df:2ae6 with SMTP id m8-20020a7bce08000000b0039432df2ae6mr4941367wmc.184.1652277768027;
    Wed, 11 May 2022 07:02:48 -0700 (PDT)
    Return-Path: <6610017938123kennedy.babu@moringaschool.com>
    Received: from m2.iyfn1ueavrjula1iyvv4d0bmec.zrhx.internal.cloudapp.net ([20.203.145.216])
    by smtp-relay.gmail.com with ESMTPS id bi6-20020a05600c3d8600b003941c537793sm201200wmb.4.2022.05.11.07.02.47
    for <spam-eater@bregnedalsystems.dk> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
    Wed, 11 May 2022 07:02:48 -0700 (PDT)
    X-Relaying-Domain: moringaschool.com
    Date: Wed, 11 May 2022 22:02:47 +0800 (CST)
    From: =?UTF-8?Q?A=D1=80ple-Pay_=28DK=29?= <6610017938123kennedy.babu@moringaschool.com>
    To: spam-eater@bregnedalsystems.dk
    Message-ID: <348089640.315817.1652277767921@smtp-relay.gmail.com>
    Subject: =?UTF-8?Q?O=D1=80dater=D1=96ng_N_:_739371497587221?=
    MIME-Version: 1.0
    Content-Type: text/html; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable
    X-Mailer: ColdFusion 2016 Application Server

  • Falske PostNord Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-18099-16334
    X-Assp-Session: 7EFE4835E188 (mail 1)
    X-Assp-Envelope-From: feedback-mk20@emk04.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: [PostNord] Vigtig Meddelelse: forsendelse
    transaktionsrapport: Betalregning.
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    10 May 2022 23:28:19 +0200
    X-ASSP-DKIMidentity: info.kundeservice=packiu.com@emk04.com
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Assp-Detected-URI: packiu.com(3), mailkitchen.com(1), emk04.com(3),
    mktlf.com(10)
    X-Assp-Message-Score: 42 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 42 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 149.202.112.197 is 50, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 149.202.112.197 is 50, last bad penalty
    was ‘Bayesian’
    X-Assp-Message-Totalscore: 47
    Received: from r106.emk04.com ([149.202.112.197] helo=r106.emk04.com) by
    asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES256-GCM-SHA384)
    (2.6.8); 10 May 2022 23:28:19 +0200
    DKIM-Signature: v=1; a=rsa-sha256;
    bh=Ki32ajFh0DJwArQr+qn4UR6ADGRGvPDCTQ3Mfg7h6r0=; d=emk04.com; h=Message-ID:
    Precedence: List-Unsubscribe-Post: List-Unsubscribe;
    i=info.kundeservice=3Dpackiu.com@emk04.com; s=emk04; c=relaxed; t=1652218096;
    b=DrpZecflnGPoQRTHgm3uCWUJ2YNxr9fYCLYSqXnuvBxeX6eMScC+Zuls0PcEsjYCr+5PEl88u
    iWYWau0NgFx+dJjPv+t9zR2c4SdXWNBkBpckxEqgxMoqSclSYeHqItufwf2inJgKPybW1irqa
    vw6ONkFANUgZ0QuiSVjuvCzy8=
    Message-ID: <b76fc670d2566bd87bce0cde038bfd57@emk04.com>
    Date: Tue, 10 May 2022 21:28:05 +0000
    Subject: [PostNord] Vigtig Meddelelse: forsendelse transaktionsrapport: Betal
    regning.
    From: Kundeservice <info.kundeservice@packiu.com>
    To: spam-eater@bregnedalsystems.dk
    MIME-Version: 1.0
    X-Report-Abuse: Please report abuse here: abuse-report@mailkitchen.com with a
    copy of the message
    X-MK-ID: ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYkEZJs7Rhwe67zRSwx44wIkBFthg_knsQ15BQQi6NUzeMtoCF0TFjns6pW8ZmpPi97cBNXYpS_nrt8Ox6Wg-G7_iQyaXIpn_fsBYWbolNp7QLncAXN7P9HpAg
    Precedence: bulk
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    List-Unsubscribe: <mailto:unsub+ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYlV@emk04.com>,
    <http://unsub.mktlf.com/ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYkEZJs7Rhwe67zRSwx44wIkBFthg_knsQ15BQQi6NUzeMtoCF0TFjns6pW8ZmpPi97cBNXYpS_nrt8Ox6Wg-G7_iQyaXIpn_fsBYWbolNp7QLncAXN7P9HpAg>

  • Falske YouSee Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-74549-43604
    X-Assp-Session: 7EFE49BA1418 (mail 1)
    X-Assp-Envelope-From: support@gadgetredirect.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: youSee : faktorID=516659116654450DK
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    12 May 2022 18:55:49 +0200
    X-Assp-Received-SPF: softfail ip=162.214.159.5 mailfrom=support@gadgetredirect.com
    helo=4885602.bmmservernow.com
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=softfail
    X-Assp-Message-Score: 15 (SPF softfail)
    X-Assp-IP-Score: 15 (SPF softfail)
    X-Assp-Detected-URI: village-realty.com(1), coreunder.com(1),
    gadgetredirect.com(6), gstatic.com(1), bmmservernow.com(3), googleapis.com(1)
    X-Assp-Message-Score: 42 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 42 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 162.214.159.5 is 65, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 162.214.159.5 is 65, last bad penalty was
    ‘Bayesian’
    X-Assp-Message-Totalscore: 63
    Received: from 4885602.bmmservernow.com ([162.214.159.5] helo=4885602.bmmservernow.com)
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES256-GCM-SHA384)
    (2.6.8); 12 May 2022 18:55:48 +0200
    Received: from coreunder by 4885602.bmmservernow.com with local (Exim 4.94.2)
    (envelope-from <support@gadgetredirect.com>)
    id 1npC6I-0000qI-Rf
    for spam-eater@bregnedalsystems.dk; Thu, 12 May 2022 11:55:42 -0500
    To: spam-eater@bregnedalsystems.dk
    Subject: youSee : faktorID=516659116654450DK
    X-PHP-Script: www.gadgetredirect.com/wp-iarslan.php for 196.235.77.255
    X-PHP-Originating-Script: 1027:wp-iarslan.php(9) : eval()’d code
    Date: Thu, 12 May 2022 11:55:42 -0500
    From: kundenservice dk <support@gadgetredirect.com>
    Message-ID: <c2d844e441ddaa6bf5ad70e69d6f8f56@www.gadgetredirect.com>
    MIME-Version: 1.0
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname – 4885602.bmmservernow.com
    X-AntiAbuse: Original Domain – bregnedal.dk
    X-AntiAbuse: Originator/Caller UID/GID – [1027 991] / [47 12]
    X-AntiAbuse: Sender Address Domain – gadgetredirect.com
    X-Get-Message-Sender-Via: 4885602.bmmservernow.com: authenticated_id: coreunder/from_h
    X-Authenticated-Sender: 4885602.bmmservernow.com: support@gadgetredirect.com
    X-Source:
    X-Source-Args: php-fpm: pool gadgetredirect_com
    X-Source-Dir: coreunder.com:/public_html/gadgetredirect.com

  • Falske PostNord Mails

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20310) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-27640-41705
    X-Assp-Session: 7FC03C8DB9D8 (mail 1)
    X-Assp-Envelope-From: cxu-4ny-467@teletu.it
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Din pakke venter på levering.
    X-Assp-Server-TLS: yes
    X-Assp-Delay: not delayed (
    spam-eater@bregnedalsystems.dk in noDelayAddresses);
    10 Nov 2020 18:00:40 +0100
    X-Assp-Received-SPF: none ip=62.149.179.203 mailfrom=cxu-4ny-467@teletu.it
    helo=smtpout03-vf.aruba.it
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=none
    X-Assp-Message-Score: 15 (SPF none)
    X-Assp-IP-Score: 15 (SPF none)
    X-Assp-Message-Score: 25 (Blocked IP-Country IT (ARUBA S.P.A.))
    X-Assp-IP-Score: 25 (Blocked IP-Country IT (ARUBA S.P.A.))
    X-Assp-Detected-URI: html.am(4), amazonaws.com(1), baklanov-korpus.ru(2),
    postnord.dk(6), mgvet.com.br(2), teletu.it(2), postord.dk(4),
    post.ch(2)
    X-Assp-Message-Score: 44 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 44 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 12 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 12 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 62.149.179.203 is 96, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 62.149.179.203 is 96, last bad penalty
    was ‘Bayesian’
    X-Assp-Message-Totalscore: 96
    Received: from smtpout03-vf.aruba.it ([62.149.179.203] helo=smtpout03-vf.aruba.it)
    by asgard.bregnedalsystems.dk with SMTP (2.6.4); 10 Nov 2020 18:00:39
    +0100
    Received: from WIN-6P7OJASOPE2 ([5.62.60.43])
    by smtpcmd01.vf.aruba.it with bizsmtp
    id qh002300N0vyBC501h0fFG; Tue, 10 Nov 2020 18:00:39 +0100
    From: “PostNord Danemark” <cxu-4ny-467@teletu.it>
    Subject: Din pakke venter på levering.
    To: <
    spam-eater@bregnedalsystems.dk>
    MIME-Version: 1.0
    Date: Tue, 10 Nov 2020 18:00:39 +0100
    Message-Id: <20201110180039075413344B$68D55A88CE@WINPOJASOPE>

  • Falske Nordea Mails

    Her er den rå mail:

    X-Assp-ID: asgard.bregnedalsystems.dk id-73995-05601
    X-Assp-Session: CEE28C8 (mail 1)
    X-Assp-Detected-RIP: 213.78.70.193, 2a01:111:e400:7e08:0:0:0:130,
    2a01:111:e400:7e08:0:0:0:40, 2a01:111:e400:7e08:0:0:0:489, 2a01:111:e400:7e08:0:0:0:4b,
    2a01:111:f400:fe09:0:0:0:829
    X-Assp-Source-IP: 213.78.70.193
    X-Assp-Envelope-From: sylviamclachlan@hotmail.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: RE: NemID deaktiveret
    X-Assp-Version: 2.6.4(20224) on asgard.bregnedalsystems.dk
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    22 Sep 2020 13:26:35 +0200
    X-Assp-Message-Score: -40 (KnownGoodHelo)
    X-Assp-IP-Score: -40 (KnownGoodHelo)
    X-ASSP-DKIMidentity: @hotmail.com
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass; dmarc=pass
    X-Assp-Re-bombSenderRe: PB 15: for hotmail.com
    X-Assp-Re-bombSenderRe: PB 15: for outlook.com
    X-Assp-Message-Score: 30 (BombSenderHelo ‘outlook.com’)
    X-Assp-IP-Score: 30 (BombSenderHelo ‘outlook.com’)
    X-Assp-Re-bombSuspiciousRe: PB 20: for hotmail.com
    X-Assp-Message-Score: 20 (BombSuspicious: ‘hotmail.com’)
    X-Assp-IP-Score: 20 (BombSuspicious: ‘hotmail.com’)
    X-Assp-Detected-URI: fiubit.tk(1), calm.com(1), hotmail.com(5),
    microsoft.com(3), outlook.com(3), w3.org(3)
    X-Assp-Message-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
    X-Assp-IP-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
    X-Assp-URIBL: fail, fiubit.tk listed in dbl.spamhaus.org
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000)
    X-Assp-DKIM: verified-OK
    Received: from mail-ve1eur03olkn0829.outbound.protection.outlook.com
    ([2a01:111:f400:fe09::829] helo=EUR03-VE1-obe.outbound.protection.outlook.com)
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256)
    (2.6.4); 22 Sep 2020 13:26:34 +0200
    ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
    b=Xy6RG9D5D5tckg/xqAGuMBuQRuwNLNMrpexlQq3q20AHMLnksBFEhSUY4WJWz13tuksODbr6N8j0k3QBhbAIG66XxQQOoobAJIB2hUDb6AOfM/pNIuTmPbfujggR5r7ioYpTgjsyd+cokU8/4qJudOj4spkpT/33eNN/pNTJr4e7kMl93GGQREPpi+4ZBHwUnzz1O4wqaL+ium/QkNGHFIJMWhBkogQ8mXTG5S53cSPN6MpSU9UbXMrvrA8rh0lz40TniOUlh2lV+OsZvryMw5IkNn3iHotQ1E79oWv76AYk4ti3NA4bx9hxedWMMabU0FCq+Pr4rGyZvKmMD/nLbg==
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
    s=arcselector9901;
    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
    bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
    b=aY4knr5Bs0eSUe06GlHkQT0AOWWltiY9lKRfQJ21lX3GpZqOFbGmRix03muwcCKBmrfh4MpqLdfI+9HYnjvhVl+F9bG5jxwHFFsLca7liGuykWzuw2FgHP5WiCnNjyLbJQNU94GK+RVaT+5z3QbiCg8GD4HVLKfGIsHvKZVZhEh4eFFysWsxXXectIOvdGd8xkFN31FHKVyGolenQ1eomZdRk9t8pKq7DDEw4YtnG9eWYotdCPuCnC3EE+S+qP6yJJcFppJzYvuh2A4QLVsonx0qEcwU+O/UHMETvjdyQVQjxlDEACKRT+KYsPV8wz9DUstYNpYexyBIBY7OhcJaCg==
    ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
    dkim=none; arc=none
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
    s=selector1;
    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
    bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
    b=BrEzM2Fnx3WJGwxXzFG8CqyPmHSaSwu/u4Y2wshux4AR4XnEL7qUD3W2ZB7ZYV2AxBemJjP1u3cEXnVuDE+m0bQFyt7eUDMpsuIkKE4XG7rZFuZlJOhc9b4wZz1SmzvzXjpFntVBtx/d+PEM/JZ+FYCL0SpnkFRtw5GuNCeYLY8a0wdGNiuu3KsTd0wyg8QfhnMBDM5YmY0F6w0Rm7hFdQLJm2/DVv4pVxrHtBBAOFRJXjSzVFkBtj0Z7Sm1lB1SfNdwB7NcwKYY8SRSM6bwQwYfUb27FdpRd6w528LJXT83bqmKt0GM5joWSm3LkP2R60SKFSNELy0C2vxi+Rks2A==
    Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
    (2a01:111:e400:7e08::4b) by
    AM5EUR03HT023.eop-EUR03.prod.protection.outlook.com (2a01:111:e400:7e08::489)
    with Microsoft SMTP Server (version=TLS1_2,
    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15; Tue, 22 Sep
    2020 11:26:33 +0000
    Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
    (2a01:111:e400:7e08::40) by AM5EUR03FT014.mail.protection.outlook.com
    (2a01:111:e400:7e08::130) with Microsoft SMTP Server (version=TLS1_2,
    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15 via Frontend
    Transport; Tue, 22 Sep 2020 11:26:33 +0000
    X-IncomingTopHeaderMarker:
    OriginalChecksum:B9269CA5F28936484440467439B96E4C6708D26E2E28519AB7A6B680D4E56768;UpperCasedChecksum:BA83B1F84B414B022899047FEDF57EE4E78D440DEA6EBB042461A9E831B2E819;SizeAsReceived:8583;Count:45
    Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
    ([fe80::5c6a:1bb3:6e4c:3ecb]) by AM0PR09MB4257.eurprd09.prod.outlook.com
    ([fe80::5c6a:1bb3:6e4c:3ecb%9]) with mapi id 15.20.3391.027; Tue, 22 Sep 2020
    11:26:33 +0000
    From: “NORDEA” <sylviamclachlan@hotmail.com>
    To: spam-eater@bregnedalsystems.dk
    Subject: RE: NemID deaktiveret
    Message-ID:
    <AM0PR09MB42577885EA5787DD135A9383BC3B0@AM0PR09MB4257.eurprd09.prod.outlook.com>
    Date: Tue, 22 Sep 2020 14:26:30 +0300
    X-ClientProxiedBy: GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM
    (2603:10a6:710:28::14) To AM0PR09MB4257.eurprd09.prod.outlook.com
    (2603:10a6:20b:16c::16)
    Return-Path: sylviamclachlan@hotmail.com
    X-Microsoft-Original-Message-ID: Message-ID:
    <0A735633.ECC3D71A6D48E9AE@hotmail.com>
    MIME-Version: 1.0
    X-MS-Exchange-MessageSentRepresentingType: 1
    Received: from mrcthfamjj (213.78.70.193) by GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:28::14) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA) id 15.20.3391.26 via Frontend Transport; Tue, 22 Sep 2020 11:26:30 +0000
    X-Microsoft-Original-Message-ID: Message-ID:
    <0A735633.ECC3D71A6D48E9AE@hotmail.com>
    X-TMN: [UG9VHAgt82B3GbGaW75zLmDJweqBhuX4]
    X-MS-PublicTrafficType: Email
    X-IncomingHeaderCount: 45
    X-EOPAttributedMessage: 0
    X-MS-Office365-Filtering-Correlation-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
    X-MS-TrafficTypeDiagnostic: AM5EUR03HT023:
    X-Microsoft-Antispam: BCL:0;
    X-Microsoft-Antispam-Message-Info:
    v3uugW8VVuEZzAUGL3d0koVV1gUAQ5dfgEIugePYRF9Bbl0RVnNr/Zptcs6wf4E9X9zQmzkgpyuOtWfh0XHGxscH+HuLHxqNsCg6dvG2v67ynO2FqSP18BtAV8lXQGlf5HhqU46kMdLdg3JXrLFFJRgw1hZy1tCr0hz51nApFqw43vG7Da99qmK89dKJYq1tRP7TX1IgXQ8VM2QFhoHh8VXAyRPgLsmmGSGrJPr267Mt2R3nu+mU4roL3ATtQZj+
    X-MS-Exchange-AntiSpam-MessageData:
    Gz9gkI1wVJ/MYoIx4OOjZOP4rQ7///eJ4f1xmMhnLvPy4M5LctAEFb2BgGxaKelv+JXy8Yr9PghQBRb0M2waNoaqX5bgQcTVCxZyMbUeu5x2UWoC6I/ol0kfzIlTGkBvF5u+WITpSKfByQM3lzSIWg==
    X-OriginatorOrg: hotmail.com
    X-MS-Exchange-CrossTenant-Network-Message-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2020 11:26:31.8053
    (UTC)
    X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-AuthSource:
    AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
    X-MS-Exchange-CrossTenant-AuthAs: Anonymous
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
    00000000-0000-0000-0000-000000000000
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT023 ; 

  • Falske Nets Mails

    Her er den rå mail:

    X-Assp-ID: asgard.bregnedalsystems.dk id-95450-18074 
    X-Assp-Session: 7EFDD3A4F638 (mail 1) 
    X-Assp-Envelope-From: support@yardsharkz.zendesk.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Faktura ! 05/24/2020 04:44:07 am 
    X-Assp-Version: 2.6.4(20085) on asgard.bregnedalsystems.dk 
    X-Assp-Client-TLS: yes 
    X-Assp-Server-TLS: yes 
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-Delay: not delayed (gripvalue low: 0.02); 24 May 2020 06:44:11 
    +0200 
    X-Assp-Re-redRe: Auto-Submitted: 
    X-Assp-Message-Score: -55 (192.161.151.0 in griplist (0.02)) 
    X-ASSP-DKIMidentity: @zendesk.com 
    X-Assp-Message-Score: -1 (SPF pass) 
    X-Assp-IP-Score: -1 (SPF pass) 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass; 
    spf=pass; dmarc=pass 
    X-Assp-Message-Score: 6 (Foreign IP-Country US (AMAZON.COM)) 
    X-Assp-Detected-URI: w3.org(2), bit.ly(1), nets.eu(2), www.zendesk.com(2), 
    zendesk.com(2), yardsharkz.zendesk.com(3) 
    X-Assp-Message-Score: -1 (HMM Probability: 0.00000) 
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000) 
    X-Assp-Redlisted: Yes (Auto-Submitted:) 
    X-Assp-DKIM: verified-OK 
    Received: from outbyoip2.pod13.usw2.zdsys.com ([192.161.151.2] 
    helo=outbyoip2.pod13.usw2.zdsys.com) by asgard.bregnedalsystems.dk with 
    SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) (2.6.4); 24 May 2020 06:44:09 
    +0200 
    Received: from zendesk.com (unknown [10.210.110.101]) 
    by outbyoip2.pod13.usw2.zdsys.com (Postfix) with ESMTP id 49V70n0ZLvz3hhT6 
    for <spam-eater@bregnedalsystems.dk>; Sun, 24 May 2020 04:44:08 +0000 (UTC) 
    Date: Sun, 24 May 2020 04:44:08 +0000 
    From: Nets Denmark A/S <support@yardsharkz.zendesk.com> 
    Reply-To: Nets Denmark A/S <support+id736@yardsharkz.zendesk.com> 
    To: spam-eater <spam-eater@bregnedalsystems.dk> 
    Message-ID: <PM4GYYMY0V_5ec9fb989d77f_5f68cf2c83385_sprut@zendesk.com> 
    In-Reply-To: <PM4GYYMY0V@zendesk.com> 
    Subject: Faktura ! 05/24/2020 04:44:07 am 
    Mime-Version: 1.0 
    X-Delivery-Context: event-id-1060204242931 
    Auto-Submitted: auto-generated 
    X-Auto-Response-Suppress: All 
    X-Mailer: Zendesk Mailer 
    X-Zendesk-From-Account-Id: d281c59 
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com; 
    q=dns/txt; s=zendesk1; t=1590295448; 
    bh=x+avlxFY+1JUKXQ+XM4PkV8idvfg9o1UYl7w2o6vrfo=; 

  • Falske Skat Mails

    skat

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-Client-TLS: yes 
    X-Assp-Server-TLS: yes 
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    9 Mar 2020 14:31:07 +0100 
    X-ASSP-DKIMidentity: @damssakhfifaberta.com 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass; 
    spf=pass 
    X-Assp-Message-Score: -1 (SPF pass) 
    X-Assp-IP-Score: -1 (SPF pass) 
    X-Assp-Message-Score: 6 (Foreign IP-Country US (STEADFAST)) 
    X-Assp-Message-Score: 14 (MX missing: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-IP-Score: 14 (MX missing: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-Message-Score: 15 (A record missing for MX: damssakhfifaberta.com 
    (From , Reply-To)) 
    X-Assp-IP-Score: 15 (A record missing for MX: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-Detected-URI: fddkim.damssakhfifaberta.com(1), skat.ga(1), 
    freshdesk.com(1), inc.com(1), licdn.com(1), damssakhfifaberta.com(4) 
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000) 
    X-Assp-ID: asgard.bregnedalsystems.dk id-60667-35285 
    X-Assp-Session: 7F5661969D98 
    X-Assp-Envelope-From: bounces+4491982-1dc3-spam-eater=bregnealsystems.dk@fddkim.damssakhfifaberta.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    Received: from o12.email.freshdesk.com ([167.89.11.190] helo=o12.email.freshdesk.com) 
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) 
    (2.6.4); 9 Mar 2020 14:31:06 +0100 
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
    d=damssakhfifaberta.com; 
    h=mime-version:from:reply-to:to:in-reply-to:references:subject:content-type:content-transfer-encoding; 
    s=fdm; bh=DYjaiJXgrhpXivX7WMRBMcgLzxIies0iN5jRI9qd6D8=; b=McXrOs 
    bnOlE6/i5sYUrseaHxtM01BEKLjljMU9NLm6SxUA2WuHqN0bRuWVdmaSBsFGDzgG 
    +sgQ2x+eQ4uLYHQ3ArO3N45AE4mfvXgwb0nFuJFoOOTS/tR3ykqG3BVzWuwLt9YW 
    ptHb+3HZzlZ3CZKl/PVM1oQ2ho96ShrMgcCjg= 
    Received: by filter0875p1las1.sendgrid.net with SMTP id filter0875p1las1-9976-5E664515-55 
    2020-03-09 13:31:02.011196043 +0000 UTC m=+398427.216606300 
    Received: from freshdesk.com (mail-us1.freshemail.io [34.198.193.174]) 
    by ismtpd0122p1mdw1.sendgrid.net (SG) with ESMTP id kAezypCrScC79oDsz7_41g 
    Mon, 09 Mar 2020 13:31:01.866 +0000 (UTC) 
    MIME-Version: 1.0 
    X-Received: from ec2-54-152-41-238.compute-1.amazonaws.com (EHLO freshdesk.com) ([54.152.41.238]) 
    by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID -1700553626.4; 
    Mon, 09 Mar 2020 13:31:00 +0000 (UTC) 
    Date: Mon, 09 Mar 2020 13:31:02 +0000 (UTC) 
    From: skat <news1@damssakhfifaberta.com> 
    Reply-To: skat <news1@damssakhfifaberta.com> 
    To: no-reply_573@skat.dk 
    Message-ID: <5e664513e6b2f_28f2ae40911f8742603551.sidekiq-free-fd-poduseast1-free-blue-799b98bf97-85m7b@forward.freshdesk.com> 
    In-Reply-To: <AM0PR04MB64993D9ACC4930B725DF8CF590FE0@AM0PR04MB6499.eurprd04.prod.outlook.com> 
    References: <AM0PR04MB64993D9ACC4930B725DF8CF590FE0@AM0PR04MB6499.eurprd04.prod.outlook.com> 
    Subject: =?UTF-8?Q?Fwd:_Meddelelse:_Vi_har_brug_for_din_hj=C3=A6lp_||?= 
    =?UTF-8?Q?_47956106?= 
    sent-on: 2020-03-09 13:30:59 +0000 
    X-SG-EID: /itzJcwO7K+M9aLGGY95Zv829t8kQd7kp3n0NbJaX5qbDOmN02fYnK01iRaIThElL9RWX82TJqusIR 
    qnwWpZmCxTJRYBiBQF1ocTg2EcQ/0Tim5Vvi4KdU07BKGOQiWJ7wOtO8bjZD47jD6HsogJg3hXls7k 
    z5WOKSv5OQCl+KnYXcUVudHgv5w01DFHhuV1F+6UtLFiku4dwuQpaed8+g== 
    X-SG-ID: dXNuuxiaeVPHPf1dZH02eHs4E5fIapZl8YOk/8FEe83FsjatXVUH83taTy+rnPhVJs9e0do6S2bcC9 
    nqu/WK/wXpZslT+txs6RsLI5ylciSJL4tj+OPI+FLRUVoGdamRQnH0CPIJL7+qimWdYEpIyn/vRR0N 
    31sC9EoHSV59wnRhDRot3Sa+yDJgHxMVoBo/p8TFjZWfKFadSs3GYyz+2b881i4K7wf0m83Dfc0T+T 
    3IK4lafmgfY1a9kLXKb8TXWEZWGg3/+IOtobDMTAS1vllajFNLh2CqCbzBEjAWjagmlkxx5dcv1re/ 
    MByv5EHQH3i1TxiIqP/0icEzYl4eMMty8DTkn/ZxdBiNBmvZapVI3mIQmUVdqr4ToB0q0bQGPInYPb 
    XCuMB24ZO+p84n4hqBucdu0wQJaQHod0yaNt8GamoNelWGPRBE+ioUjcdhN+9CDIqUIVBfGw1GedDS 
    SQ== 

  • Falske Zalando Mails

    Zalando

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-ID: asgard.bregnedalsystems.dk id-25941-20062 
    X-Assp-Session: 7F927DA9EFF8 (mail 1) 
    X-Assp-Envelope-From: bounce@msnd3.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    X-Assp-Original-Subject: Vi udlodder en Zalando kupon p 5.000 kr. til vores 
    deltagere! 
    X-Assp-Server-TLS: yes 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    26 Feb 2020 15:05:42 +0100 
    X-Assp-Message-Score: 15 (From-missing) 
    X-Assp-IP-Score: 15 (From-missing) 
    X-Assp-Message-Score: 25 (185.91.55.0 in griplist (0.85)) 
    X-Assp-Received-SPF: softfail (cache) ip=185.91.55.21 mailfrom=bounce@msnd3.com 
    helo=msnd3.com 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; 
    spf=softfail 
    X-Assp-Message-Score: 15 (SPF softfail) 
    X-Assp-IP-Score: 15 (SPF softfail) 
    X-Assp-Message-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-IP-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-Message-Score: 15 (missing or invalid address (1) in ‘From:’ header 
    tag(s) ( DoNoFrom )) 
    X-Assp-IP-Score: 15 (missing or invalid address (1) in ‘From:’ header tag(s) 
    ( DoNoFrom )) 
    X-Assp-Message-Score: 20 (blacklisted HELO ‘msnd3.com’ – weight 
    1) 
    X-Assp-IP-Score: 20 (blacklisted HELO ‘msnd3.com’ – weight 1) 
    X-Assp-Message-Score: 30 (MX missing: kundeservice (From)) 
    X-Assp-IP-Score: 30 (MX missing: kundeservice (From)) 
    X-Assp-Message-Score: 35 (A record missing for MX: kundeservice 
    (From)) 
    X-Assp-IP-Score: 35 (A record missing for MX: kundeservice (From)) 
    X-Assp-Message-Score: 60 (PTR missing) 
    X-Assp-IP-Score: 60 (PTR missing) 
    X-Assp-Tag: MessageLimit 
    X-Assp-allLoveDLSpam: 1 
    X-BS-Spam-Status:yes 
    X-Assp-Spam-Reason: MessageScore 240, limit 56 
    X-Assp-Message-Totalscore: 240 
    Received: from unknown ([185.91.55.21] helo=msnd3.com) by asgard.bregnedalsystems.dk 
    with SMTP (2.6.4); 26 Feb 2020 15:05:41 +0100 
    MIME-Version: 1.0 
    From: Kundeservice 
    Subject: Vi udlodder en Zalando kupon på 5.000 kr. til vores deltagere! 
    Reply-To: reply@msnd3.com 
    Received: from msnd3.com (185.91.55.21) by msnd3.com id dEiIO0FdMfdJ for <spam-eater@bregnedalsystems.dk>; Wed, 26 Feb 2020 11:33:43 +0100 (envelope-from <return@msnd3.com> 
    To: spam-eater@bregnedalsystems.dk 
    Date: Wed, 26 Feb 2020 11:33:43 +0100 

  • Falske Lidl Mails

    Lidl

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-ID: asgard.bregnedalsystems.dk id-44606-26022 
    X-Assp-Session: 7F927C4A08C0 (mail 1) 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    X-Assp-Original-Subject: Besvar et par korte sprgsml for at have en chance 
    for at vinde fantastiske prmier! 
    X-Assp-Server-TLS: yes 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    25 Feb 2020 16:30:06 +0100 
    X-Assp-Message-Score: 15 (From-missing) 
    X-Assp-IP-Score: 15 (From-missing) 
    X-Assp-Message-Score: 46 (92.53.103.0 in griplist (0.98)) 
    X-Assp-Received-SPF: softfail ip=92.53.103.181 mailfrom=postmaster@msnd3.com 
    helo=msnd3.com 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; 
    spf=softfail 
    X-Assp-Message-Score: 15 (SPF softfail) 
    X-Assp-IP-Score: 15 (SPF softfail) 
    X-Assp-Message-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-IP-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-Message-Score: 5 (DNSBL: neutral, 92.53.103.181 listed in 
    dnsbl-2.uceprotect.net) 
    X-Assp-IP-Score: 5 (DNSBL: neutral, 92.53.103.181 listed in dnsbl-2.uceprotect.net) 
    X-Assp-DNSBL: neutral, 92.53.103.181 listed in (dnsbl-2.uceprotect.net<-127.0.0.2) 
    X-Assp-Message-Score: 60 (PTR missing) 
    X-Assp-IP-Score: 60 (PTR missing) 
    X-Assp-Tag: MessageLimit 
    X-Assp-allLoveDLSpam: 1 
    X-BS-Spam-Status:yes 
    X-Assp-Spam-Reason: MessageScore 166, limit 56 
    X-Assp-Message-Totalscore: 166 
    Received: from unknown ([92.53.103.181] helo=msnd3.com) by asgard.bregnedalsystems.dk 
    with SMTP (2.6.4); 25 Feb 2020 16:30:06 +0100 
    MIME-Version: 1.0 
    From: Kundeservice 
    Subject: Besvar et par korte spørgsmål for at have en chance for at vinde fantastiske præmier! 
    Reply-To: 
    Received: 
    To: 
    Date: Tue, 25 Feb 2020 14:11:54 +0100 

  • Falske PayPal Mails

    PayPal

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-ID: asgard.bregnedalsystems.dk id-27941-17264 
    X-Assp-Session: 7F927CE74A30 (mail 1) 
    X-Assp-Envelope-From: service@intl.paypal.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    X-Assp-Original-Subject: Handling kraevet pa din PayPal-konto. 
    (Ref.ID-PP-DK-0106168527DK) 
    X-Assp-Server-TLS: yes 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    25 Feb 2020 11:52:21 +0100 
    X-Assp-Message-Score: 10 (64.225.69.0 in griplist (0.76)) 
    X-Assp-Received-SPF: softfail ip=64.225.69.157 mailfrom=service@intl.paypal.com 
    helo=nogrwayianairplans7.nl 
    X-Assp-Message-Score: 15 (SPF softfail) 
    X-Assp-IP-Score: 15 (SPF softfail) 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; spf=softfail; 
    dmarc=fail 
    X-Assp-DMARC-failed: SPF:fail DKIM:neutral 
    X-Assp-Message-Score: 10 (DMARC failed) 
    X-Assp-IP-Score: 10 (DMARC failed) 
    X-Assp-Message-Score: 25 (Blocked IP-Country NL (COGECO PEER 
    1)) 
    X-Assp-IP-Score: 25 (Blocked IP-Country NL (COGECO PEER 1)) 
    X-Assp-Tag: MessageLimit 
    X-Assp-allLoveDLSpam: 1 
    X-BS-Spam-Status:yes 
    X-Assp-Spam-Reason: MessageScore 60, limit 56 
    X-Assp-Message-Totalscore: 60 
    Received: from nogrwayianairplans7.nl ([64.225.69.157] helo=nogrwayianairplans7.nl) 
    by asgard.bregnedalsystems.dk with SMTP (2.6.4); 25 Feb 2020 11:52:21 
    +0100 
    Received: from TROGIeHeVI (nogrwayianairplans7.nl [IPv6:::1]) 
    by nogrwayianairplans7.nl (Postfix) with ESMTP id EB98AD5A8 
    for <spam-eater@bregnedalsystems.dk>; Tue, 25 Feb 2020 10:52:20 +0000 (UTC) 
    Message-ID: <044bedcd-43886-072d5363518403@trogiehevi> 
    From: “PayPal” <service@intl.paypal.com> 
    To: spam-eater@bregnedalsystems.dk 
    Subject: Handling kraevet pa din PayPal-konto. (Ref.ID-PP-DK-0106168527DK) 
    Date: Tue, 25 Feb 2020 12:51:20 +0200 
    MIME-Version: 1.0 
    X-Priority: 3