Tag: Falske Mails

  • Falske Sygeforsikringen “Danmark” Mails

    X-Assp-Version: 2.6.8(22209) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-38013-10919
    X-Assp-Session: 7FF3D0EECBD0 (mail 1)
    X-Assp-Envelope-From: support@mentoredactionplan.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Tilskud fra Sygeforsikringen “Danmark”
    #T96JK562N
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    26 Aug 2022 20:20:13 +0200
    X-Assp-Message-Score: 1 (199.58.179.0 in griplist (0.75))
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=pass
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Assp-Detected-URI: sygeforsikring.dk(2), fishbonesecurity.com(3),
    mentoredactionplan.com(6)
    X-Assp-Message-Score: 42 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 42 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 15 (Bayesian Probability: 0.87070)
    X-Assp-IP-Score: 15 (Bayesian Probability: 0.87070)
    X-Assp-Penalty: totalscore for 199.58.179.136 is 57, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 0.87070
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 199.58.179.136 is 57, last bad penalty
    was ‘Bayesian’
    X-Assp-Message-Totalscore: 55
    Received: from server.fishbonesecurity.com ([199.58.179.136]
    helo=server.fishbonesecurity.com) by asgard.bregnedalsystems.dk with
    SMTPS(TLSv1_2 ECDHE-RSA-AES256-GCM-SHA384) (2.6.8); 26 Aug 2022 20:20:12
    +0200
    Received: from map by server.fishbonesecurity.com with local (Exim 4.95)
    (envelope-from <support@mentoredactionplan.com>)
    id 1oRdwB-0005eV-BN
    for spam-eater@bregnedalsystems.dk;
    Fri, 26 Aug 2022 14:20:11 -0400
    To: spam-eater@bregnedalsystems.dk
    Subject: Tilskud fra Sygeforsikringen “Danmark” #T96JK562N
    X-PHP-Script: mentoredactionplan.com/wp-content/kydMTKSaW2j.php for 5.62.20.58
    X-PHP-Originating-Script: 1012:kydMTKSaW2j.php
    Date: Fri, 26 Aug 2022 14:20:11 -0400
    From: “udbetaling@sygeforsikring.dk Fra Sygeforsikringen” <support@mentoredactionplan.com>
    Message-ID: <6859ecd7e1c467c2072d14e457822d9d@mentoredactionplan.com>
    MIME-Version: 1.0
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname – server.fishbonesecurity.com
    X-AntiAbuse: Original Domain – bregnedalsystems.dk
    X-AntiAbuse: Originator/Caller UID/GID – [1012 993] / [47 12]
    X-AntiAbuse: Sender Address Domain – mentoredactionplan.com
    X-Get-Message-Sender-Via: server.fishbonesecurity.com: authenticated_id: map/from_h
    X-Authenticated-Sender: server.fishbonesecurity.com: support@mentoredactionplan.com
    X-Source:
    X-Source-Args: /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/map/public_html/wp-content/kydMTKSaW2j.php
    X-Source-Dir: mentoredactionplan.com:/public_html/wp-content

     

  • Falske NemID/MitID Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-44395-24360
    X-Assp-Session: 7FDF69C3CFF8 (mail 1)
    X-Assp-Envelope-From: geen@grap.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Digitaliseringsstyrelsen
    X-Assp-Server-TLS: yes
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    28 May 2022 15:26:35 +0200
    X-Assp-Message-Score: -8 (203.146.170.0 in griplist (0.00))
    X-Assp-Received-SPF: none ip=203.146.170.168 mailfrom=geen@grap.com
    helo=WIN-DQLK066T9UK.ns51.4gbhost.com
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=none
    X-Assp-Message-Score: 15 (SPF none)
    X-Assp-IP-Score: 15 (SPF none)
    X-Assp-Message-Score: 25 (Blocked IP-Country TH (CS LOXINFO))
    X-Assp-IP-Score: 25 (Blocked IP-Country TH (CS LOXINFO))
    X-Assp-Message-Score: 14 (MX missing: grap.com (Mail From: ,
    From))
    X-Assp-IP-Score: 14 (MX missing: grap.com (Mail From: , From))
    X-Assp-Detected-URI: digst.dk(1), grap.com(2), par.com(1), amd.com(14),
    medsilo.co(1)
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000)
    X-Assp-Penalty: totalscore for 203.146.170.168 is 54, last bad penalty was
    ‘MissingMX’
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 203.146.170.168 is 54, last bad penalty
    was ‘MissingMX’
    X-Assp-Message-Totalscore: 45
    Received: from ns51.4gbhost.com ([203.146.170.168] helo=WIN-DQLK066T9UK.ns51.4gbhost.com)
    by asgard.bregnedalsystems.dk with SMTP (2.6.8); 28 May 2022 15:26:33
    +0200
    Received: from WIN-DQLK066T9UK ([127.0.0.1]) by ns51.4gbhost.com with
    MailEnable ESMTP; Sat, 28 May 2022 20:04:14 +0700
    Subject: Digitaliseringsstyrelsen
    To: spam-eater@bregnedalsystems.dk
    X-PHP-Originating-Script: 0:tt.php
    Date: Sat, 28 May 2022 20:04:14 +0700
    From: Opdater dine ID-oplysninger <geen@grap.com>
    Message-ID: <baee0c1f49540dbcac812b1cc199b7c8@fti.co.th>
    MIME-Version: 1.0

    Kære NemID-bruger

    I løbet af 2021 og 2022 skal alle med NemID have MitID: hele Danmarks nye digitale ID. Du

    kan bruge MitID til det, som du plejer at bruge NemID til.

    Digitale løsninger bliver erstattet af nye over tid – fordi de skal være sikre og følge med udvik-

    lingen. MitID lever op til de nyeste standarder for sikkerhed. Det betyder, at vi også i fremti-

    den kan færdes trygt på nettet.

    Derfor skal du opdatere dine ID-oplysninger

    NemID er i tidens løb blevet udstedt på forskellige måder. Det er ikke alle registreringer i

    NemID, der lever op til de krav, der gælder for MitID. Vi kan se, at det er tilfældet for dig.

    Før du kan få MitID, skal du derfor opdatere dine ID-oplysninger

    din identitet. Både NemID og MitID er ligesom dit nøglekort et bevis på, at du er den,

    du er. Derfor er der strenge regler for, hvordan vi bedst beskytter dig, dit NemID og dit per-sonlige

    MitID.

    Sådan gør du

    Opdatér dine ID-oplysninger nemt og hurtigt

    Sådan opdaterer du dine ID-oplysninger:

    opdater her

    Du får besked, når du skal have MitID

    Når du har opdateret dine ID-oplysninger, er du klar til at få MitID. Du får automatisk

    be-sked, når du logger ind i din net- eller mobilbank – men først, når det er din tur.

    Vær opmærk-som på, at der godt kan gå lidt tid.

    Digitaliseringsstyrelsen

  • Falske Appel ID Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    11 May 2022 16:02:49 +0200
    X-ASSP-DKIMidentity: @moringaschool.com
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass; dmarc=pass
    X-Assp-Detected-URI: cjzbak.top(2), moringaschool.com(5), 1e100.net(1)
    X-Assp-ID: asgard.bregnedalsystems.dk id-77768-39079
    X-Assp-Session: 7EFE4B4CC3F8
    X-Assp-Envelope-From: 6610017938123kennedy.babu@moringaschool.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    Received: from mail-wm1-x366.google.com ([2a00:1450:4864:20::366]
    helo=mail-wm1-x366.google.com) by asgard.bregnedalsystems.dk with
    SMTPS(TLSv1_2 ECDHE-ECDSA-AES256-GCM-SHA384) (2.6.8); 11 May 2022 16:02:48
    +0200
    Received: by mail-wm1-x366.google.com with SMTP id bg25so1277104wmb.4
    for <spam-eater@bregnedalsystems.dk>; Wed, 11 May 2022 07:02:48 -0700 (PDT)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=moringaschool.com; s=google;
    h=date:from:to:message-id:subject:mime-version
    :content-transfer-encoding;
    bh=41ex3CxNLJSYXpHtOPX8N2jxbtZlr7iaopYA3QMgj8k=;
    b=S1VCg6V7P7pb+Aw1bDVwIZWm3trG0VoLP6NyuE80chZ6wcesvohbrhwxk7QNqduzWb
    +K4DKTtALGoE/xqRVlgtZsCOVR22QeARiP7/uvXy9fb/sVc+fCjVvsbYIZXD47pzMr09
    jy4xfOAiEkQf7FMDiRA7OujRBLjGLCEvMbY+Q=
    X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=1e100.net; s=20210112;
    h=x-gm-message-state:date:from:to:message-id:subject:mime-version
    :content-transfer-encoding;
    bh=41ex3CxNLJSYXpHtOPX8N2jxbtZlr7iaopYA3QMgj8k=;
    b=nbvLC0AtNaGihZF9vWzqxjbbDN0n4yes9o/5ytRX2zU2piy/6CPZ8lBmFMarjD4p6F
    AbFFY6pWI26HzPYVYLxQtP6vfLjZFj1oMDtg5io7r9SO4qTRtLSo31QmVpnn1o+UwxJw
    XxOts0glS9mvj2x+LpbIVWZF2KvzP2JOfzMlL0UUoHgVlgNKiVS5JQl/w0mxq9WkrCS7
    npq/O89pdHDroZpmA+2DE9VM7L4hAEq3Tpw0kOPclmnE/+tHqpF6UG6S2aRlhg2oJIIv
    701KgGTZCgCeq/rWVPrVXUZZyhSdMPkPrrImhhEXla6ggi4IPvsWCk8vrQMScSY6i/k4
    lbpg==
    X-Gm-Message-State: AOAM532HRC8g0irNsyewn2bMuBWl+NLiDuOk7pMERpD2+6YSTo9BgL0i
    rSG6TaWHtfTrroNSBoC+4sVPq0fQ/lVXtXR4f9ZG1/zoWr/GaA==
    X-Google-Smtp-Source: ABdhPJyl0zfH89xO2tJi4ZRAf64i7MTVhZlVq3VxYPMSyJMNC7EYxdqev+qVPXYGRMjjzs7IRWFfeNk6C493
    X-Received: by 2002:a7b:ce08:0:b0:394:32df:2ae6 with SMTP id m8-20020a7bce08000000b0039432df2ae6mr4941367wmc.184.1652277768027;
    Wed, 11 May 2022 07:02:48 -0700 (PDT)
    Return-Path: <6610017938123kennedy.babu@moringaschool.com>
    Received: from m2.iyfn1ueavrjula1iyvv4d0bmec.zrhx.internal.cloudapp.net ([20.203.145.216])
    by smtp-relay.gmail.com with ESMTPS id bi6-20020a05600c3d8600b003941c537793sm201200wmb.4.2022.05.11.07.02.47
    for <spam-eater@bregnedalsystems.dk> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
    Wed, 11 May 2022 07:02:48 -0700 (PDT)
    X-Relaying-Domain: moringaschool.com
    Date: Wed, 11 May 2022 22:02:47 +0800 (CST)
    From: =?UTF-8?Q?A=D1=80ple-Pay_=28DK=29?= <6610017938123kennedy.babu@moringaschool.com>
    To: spam-eater@bregnedalsystems.dk
    Message-ID: <348089640.315817.1652277767921@smtp-relay.gmail.com>
    Subject: =?UTF-8?Q?O=D1=80dater=D1=96ng_N_:_739371497587221?=
    MIME-Version: 1.0
    Content-Type: text/html; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable
    X-Mailer: ColdFusion 2016 Application Server

  • Falske PostNord Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-18099-16334
    X-Assp-Session: 7EFE4835E188 (mail 1)
    X-Assp-Envelope-From: feedback-mk20@emk04.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: [PostNord] Vigtig Meddelelse: forsendelse
    transaktionsrapport: Betalregning.
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    10 May 2022 23:28:19 +0200
    X-ASSP-DKIMidentity: info.kundeservice=packiu.com@emk04.com
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Assp-Detected-URI: packiu.com(3), mailkitchen.com(1), emk04.com(3),
    mktlf.com(10)
    X-Assp-Message-Score: 42 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 42 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 149.202.112.197 is 50, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 149.202.112.197 is 50, last bad penalty
    was ‘Bayesian’
    X-Assp-Message-Totalscore: 47
    Received: from r106.emk04.com ([149.202.112.197] helo=r106.emk04.com) by
    asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES256-GCM-SHA384)
    (2.6.8); 10 May 2022 23:28:19 +0200
    DKIM-Signature: v=1; a=rsa-sha256;
    bh=Ki32ajFh0DJwArQr+qn4UR6ADGRGvPDCTQ3Mfg7h6r0=; d=emk04.com; h=Message-ID:
    Precedence: List-Unsubscribe-Post: List-Unsubscribe;
    i=info.kundeservice=3Dpackiu.com@emk04.com; s=emk04; c=relaxed; t=1652218096;
    b=DrpZecflnGPoQRTHgm3uCWUJ2YNxr9fYCLYSqXnuvBxeX6eMScC+Zuls0PcEsjYCr+5PEl88u
    iWYWau0NgFx+dJjPv+t9zR2c4SdXWNBkBpckxEqgxMoqSclSYeHqItufwf2inJgKPybW1irqa
    vw6ONkFANUgZ0QuiSVjuvCzy8=
    Message-ID: <b76fc670d2566bd87bce0cde038bfd57@emk04.com>
    Date: Tue, 10 May 2022 21:28:05 +0000
    Subject: [PostNord] Vigtig Meddelelse: forsendelse transaktionsrapport: Betal
    regning.
    From: Kundeservice <info.kundeservice@packiu.com>
    To: spam-eater@bregnedalsystems.dk
    MIME-Version: 1.0
    X-Report-Abuse: Please report abuse here: abuse-report@mailkitchen.com with a
    copy of the message
    X-MK-ID: ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYkEZJs7Rhwe67zRSwx44wIkBFthg_knsQ15BQQi6NUzeMtoCF0TFjns6pW8ZmpPi97cBNXYpS_nrt8Ox6Wg-G7_iQyaXIpn_fsBYWbolNp7QLncAXN7P9HpAg
    Precedence: bulk
    List-Unsubscribe-Post: List-Unsubscribe=One-Click
    List-Unsubscribe: <mailto:unsub+ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYlV@emk04.com>,
    <http://unsub.mktlf.com/ZqbN3j6bcGs2fYTVngN_YOz-6bQllaksMbo-KPHcMYkEZJs7Rhwe67zRSwx44wIkBFthg_knsQ15BQQi6NUzeMtoCF0TFjns6pW8ZmpPi97cBNXYpS_nrt8Ox6Wg-G7_iQyaXIpn_fsBYWbolNp7QLncAXN7P9HpAg>

  • Falske YouSee Mails

    X-Assp-Version: 2.6.8(22080) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-74549-43604
    X-Assp-Session: 7EFE49BA1418 (mail 1)
    X-Assp-Envelope-From: support@gadgetredirect.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: youSee : faktorID=516659116654450DK
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    12 May 2022 18:55:49 +0200
    X-Assp-Received-SPF: softfail ip=162.214.159.5 mailfrom=support@gadgetredirect.com
    helo=4885602.bmmservernow.com
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=softfail
    X-Assp-Message-Score: 15 (SPF softfail)
    X-Assp-IP-Score: 15 (SPF softfail)
    X-Assp-Detected-URI: village-realty.com(1), coreunder.com(1),
    gadgetredirect.com(6), gstatic.com(1), bmmservernow.com(3), googleapis.com(1)
    X-Assp-Message-Score: 42 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 42 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 8 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 162.214.159.5 is 65, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 162.214.159.5 is 65, last bad penalty was
    ‘Bayesian’
    X-Assp-Message-Totalscore: 63
    Received: from 4885602.bmmservernow.com ([162.214.159.5] helo=4885602.bmmservernow.com)
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES256-GCM-SHA384)
    (2.6.8); 12 May 2022 18:55:48 +0200
    Received: from coreunder by 4885602.bmmservernow.com with local (Exim 4.94.2)
    (envelope-from <support@gadgetredirect.com>)
    id 1npC6I-0000qI-Rf
    for spam-eater@bregnedalsystems.dk; Thu, 12 May 2022 11:55:42 -0500
    To: spam-eater@bregnedalsystems.dk
    Subject: youSee : faktorID=516659116654450DK
    X-PHP-Script: www.gadgetredirect.com/wp-iarslan.php for 196.235.77.255
    X-PHP-Originating-Script: 1027:wp-iarslan.php(9) : eval()’d code
    Date: Thu, 12 May 2022 11:55:42 -0500
    From: kundenservice dk <support@gadgetredirect.com>
    Message-ID: <c2d844e441ddaa6bf5ad70e69d6f8f56@www.gadgetredirect.com>
    MIME-Version: 1.0
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname – 4885602.bmmservernow.com
    X-AntiAbuse: Original Domain – bregnedal.dk
    X-AntiAbuse: Originator/Caller UID/GID – [1027 991] / [47 12]
    X-AntiAbuse: Sender Address Domain – gadgetredirect.com
    X-Get-Message-Sender-Via: 4885602.bmmservernow.com: authenticated_id: coreunder/from_h
    X-Authenticated-Sender: 4885602.bmmservernow.com: support@gadgetredirect.com
    X-Source:
    X-Source-Args: php-fpm: pool gadgetredirect_com
    X-Source-Dir: coreunder.com:/public_html/gadgetredirect.com

  • Falske PostNord Mails

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20310) on asgard.bregnedalsystems.dk
    X-Assp-ID: asgard.bregnedalsystems.dk id-27640-41705
    X-Assp-Session: 7FC03C8DB9D8 (mail 1)
    X-Assp-Envelope-From: cxu-4ny-467@teletu.it
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Din pakke venter på levering.
    X-Assp-Server-TLS: yes
    X-Assp-Delay: not delayed (
    spam-eater@bregnedalsystems.dk in noDelayAddresses);
    10 Nov 2020 18:00:40 +0100
    X-Assp-Received-SPF: none ip=62.149.179.203 mailfrom=cxu-4ny-467@teletu.it
    helo=smtpout03-vf.aruba.it
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk;
    spf=none
    X-Assp-Message-Score: 15 (SPF none)
    X-Assp-IP-Score: 15 (SPF none)
    X-Assp-Message-Score: 25 (Blocked IP-Country IT (ARUBA S.P.A.))
    X-Assp-IP-Score: 25 (Blocked IP-Country IT (ARUBA S.P.A.))
    X-Assp-Detected-URI: html.am(4), amazonaws.com(1), baklanov-korpus.ru(2),
    postnord.dk(6), mgvet.com.br(2), teletu.it(2), postord.dk(4),
    post.ch(2)
    X-Assp-Message-Score: 44 (HMM Probability: 1.00000)
    X-Assp-IP-Score: 44 (HMM Probability: 1.00000)
    X-Assp-Message-Score: 12 (Bayesian Probability: 1.00000)
    X-Assp-IP-Score: 12 (Bayesian Probability: 1.00000)
    X-Assp-Penalty: totalscore for 62.149.179.203 is 96, last bad penalty was
    ‘Bayesian’
    X-Assp-Spam-Prob: 1.00000
    X-Assp-HMM-Spam-Prob: 1.00000
    X-Assp-Tag: Penalty
    X-Assp-allLoveDLSpam: 1
    X-BS-Spam-Status:yes
    X-Assp-Spam-Reason: totalscore for 62.149.179.203 is 96, last bad penalty
    was ‘Bayesian’
    X-Assp-Message-Totalscore: 96
    Received: from smtpout03-vf.aruba.it ([62.149.179.203] helo=smtpout03-vf.aruba.it)
    by asgard.bregnedalsystems.dk with SMTP (2.6.4); 10 Nov 2020 18:00:39
    +0100
    Received: from WIN-6P7OJASOPE2 ([5.62.60.43])
    by smtpcmd01.vf.aruba.it with bizsmtp
    id qh002300N0vyBC501h0fFG; Tue, 10 Nov 2020 18:00:39 +0100
    From: “PostNord Danemark” <cxu-4ny-467@teletu.it>
    Subject: Din pakke venter på levering.
    To: <
    spam-eater@bregnedalsystems.dk>
    MIME-Version: 1.0
    Date: Tue, 10 Nov 2020 18:00:39 +0100
    Message-Id: <20201110180039075413344B$68D55A88CE@WINPOJASOPE>

  • Falske Nordea Mails

    Her er den rå mail:

    X-Assp-ID: asgard.bregnedalsystems.dk id-73995-05601
    X-Assp-Session: CEE28C8 (mail 1)
    X-Assp-Detected-RIP: 213.78.70.193, 2a01:111:e400:7e08:0:0:0:130,
    2a01:111:e400:7e08:0:0:0:40, 2a01:111:e400:7e08:0:0:0:489, 2a01:111:e400:7e08:0:0:0:4b,
    2a01:111:f400:fe09:0:0:0:829
    X-Assp-Source-IP: 213.78.70.193
    X-Assp-Envelope-From: sylviamclachlan@hotmail.com
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: RE: NemID deaktiveret
    X-Assp-Version: 2.6.4(20224) on asgard.bregnedalsystems.dk
    X-Assp-Client-TLS: yes
    X-Assp-Server-TLS: yes
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK)
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses);
    22 Sep 2020 13:26:35 +0200
    X-Assp-Message-Score: -40 (KnownGoodHelo)
    X-Assp-IP-Score: -40 (KnownGoodHelo)
    X-ASSP-DKIMidentity: @hotmail.com
    X-Assp-Message-Score: -1 (SPF pass)
    X-Assp-IP-Score: -1 (SPF pass)
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass;
    spf=pass; dmarc=pass
    X-Assp-Re-bombSenderRe: PB 15: for hotmail.com
    X-Assp-Re-bombSenderRe: PB 15: for outlook.com
    X-Assp-Message-Score: 30 (BombSenderHelo ‘outlook.com’)
    X-Assp-IP-Score: 30 (BombSenderHelo ‘outlook.com’)
    X-Assp-Re-bombSuspiciousRe: PB 20: for hotmail.com
    X-Assp-Message-Score: 20 (BombSuspicious: ‘hotmail.com’)
    X-Assp-IP-Score: 20 (BombSuspicious: ‘hotmail.com’)
    X-Assp-Detected-URI: fiubit.tk(1), calm.com(1), hotmail.com(5),
    microsoft.com(3), outlook.com(3), w3.org(3)
    X-Assp-Message-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
    X-Assp-IP-Score: 25 (URIBL: fail, fiubit.tk listed in dbl.spamhaus.org)
    X-Assp-URIBL: fail, fiubit.tk listed in dbl.spamhaus.org
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000)
    X-Assp-DKIM: verified-OK
    Received: from mail-ve1eur03olkn0829.outbound.protection.outlook.com
    ([2a01:111:f400:fe09::829] helo=EUR03-VE1-obe.outbound.protection.outlook.com)
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256)
    (2.6.4); 22 Sep 2020 13:26:34 +0200
    ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
    b=Xy6RG9D5D5tckg/xqAGuMBuQRuwNLNMrpexlQq3q20AHMLnksBFEhSUY4WJWz13tuksODbr6N8j0k3QBhbAIG66XxQQOoobAJIB2hUDb6AOfM/pNIuTmPbfujggR5r7ioYpTgjsyd+cokU8/4qJudOj4spkpT/33eNN/pNTJr4e7kMl93GGQREPpi+4ZBHwUnzz1O4wqaL+ium/QkNGHFIJMWhBkogQ8mXTG5S53cSPN6MpSU9UbXMrvrA8rh0lz40TniOUlh2lV+OsZvryMw5IkNn3iHotQ1E79oWv76AYk4ti3NA4bx9hxedWMMabU0FCq+Pr4rGyZvKmMD/nLbg==
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
    s=arcselector9901;
    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
    bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
    b=aY4knr5Bs0eSUe06GlHkQT0AOWWltiY9lKRfQJ21lX3GpZqOFbGmRix03muwcCKBmrfh4MpqLdfI+9HYnjvhVl+F9bG5jxwHFFsLca7liGuykWzuw2FgHP5WiCnNjyLbJQNU94GK+RVaT+5z3QbiCg8GD4HVLKfGIsHvKZVZhEh4eFFysWsxXXectIOvdGd8xkFN31FHKVyGolenQ1eomZdRk9t8pKq7DDEw4YtnG9eWYotdCPuCnC3EE+S+qP6yJJcFppJzYvuh2A4QLVsonx0qEcwU+O/UHMETvjdyQVQjxlDEACKRT+KYsPV8wz9DUstYNpYexyBIBY7OhcJaCg==
    ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
    dkim=none; arc=none
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
    s=selector1;
    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
    bh=cYabaUPLviAjAFthYlIx0J3n887L4DLM4O6klW3VpAc=;
    b=BrEzM2Fnx3WJGwxXzFG8CqyPmHSaSwu/u4Y2wshux4AR4XnEL7qUD3W2ZB7ZYV2AxBemJjP1u3cEXnVuDE+m0bQFyt7eUDMpsuIkKE4XG7rZFuZlJOhc9b4wZz1SmzvzXjpFntVBtx/d+PEM/JZ+FYCL0SpnkFRtw5GuNCeYLY8a0wdGNiuu3KsTd0wyg8QfhnMBDM5YmY0F6w0Rm7hFdQLJm2/DVv4pVxrHtBBAOFRJXjSzVFkBtj0Z7Sm1lB1SfNdwB7NcwKYY8SRSM6bwQwYfUb27FdpRd6w528LJXT83bqmKt0GM5joWSm3LkP2R60SKFSNELy0C2vxi+Rks2A==
    Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
    (2a01:111:e400:7e08::4b) by
    AM5EUR03HT023.eop-EUR03.prod.protection.outlook.com (2a01:111:e400:7e08::489)
    with Microsoft SMTP Server (version=TLS1_2,
    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15; Tue, 22 Sep
    2020 11:26:33 +0000
    Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
    (2a01:111:e400:7e08::40) by AM5EUR03FT014.mail.protection.outlook.com
    (2a01:111:e400:7e08::130) with Microsoft SMTP Server (version=TLS1_2,
    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.15 via Frontend
    Transport; Tue, 22 Sep 2020 11:26:33 +0000
    X-IncomingTopHeaderMarker:
    OriginalChecksum:B9269CA5F28936484440467439B96E4C6708D26E2E28519AB7A6B680D4E56768;UpperCasedChecksum:BA83B1F84B414B022899047FEDF57EE4E78D440DEA6EBB042461A9E831B2E819;SizeAsReceived:8583;Count:45
    Received: from AM0PR09MB4257.eurprd09.prod.outlook.com
    ([fe80::5c6a:1bb3:6e4c:3ecb]) by AM0PR09MB4257.eurprd09.prod.outlook.com
    ([fe80::5c6a:1bb3:6e4c:3ecb%9]) with mapi id 15.20.3391.027; Tue, 22 Sep 2020
    11:26:33 +0000
    From: “NORDEA” <sylviamclachlan@hotmail.com>
    To: spam-eater@bregnedalsystems.dk
    Subject: RE: NemID deaktiveret
    Message-ID:
    <AM0PR09MB42577885EA5787DD135A9383BC3B0@AM0PR09MB4257.eurprd09.prod.outlook.com>
    Date: Tue, 22 Sep 2020 14:26:30 +0300
    X-ClientProxiedBy: GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM
    (2603:10a6:710:28::14) To AM0PR09MB4257.eurprd09.prod.outlook.com
    (2603:10a6:20b:16c::16)
    Return-Path: sylviamclachlan@hotmail.com
    X-Microsoft-Original-Message-ID: Message-ID:
    <0A735633.ECC3D71A6D48E9AE@hotmail.com>
    MIME-Version: 1.0
    X-MS-Exchange-MessageSentRepresentingType: 1
    Received: from mrcthfamjj (213.78.70.193) by GV0P278CA0027.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:28::14) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA) id 15.20.3391.26 via Frontend Transport; Tue, 22 Sep 2020 11:26:30 +0000
    X-Microsoft-Original-Message-ID: Message-ID:
    <0A735633.ECC3D71A6D48E9AE@hotmail.com>
    X-TMN: [UG9VHAgt82B3GbGaW75zLmDJweqBhuX4]
    X-MS-PublicTrafficType: Email
    X-IncomingHeaderCount: 45
    X-EOPAttributedMessage: 0
    X-MS-Office365-Filtering-Correlation-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
    X-MS-TrafficTypeDiagnostic: AM5EUR03HT023:
    X-Microsoft-Antispam: BCL:0;
    X-Microsoft-Antispam-Message-Info:
    v3uugW8VVuEZzAUGL3d0koVV1gUAQ5dfgEIugePYRF9Bbl0RVnNr/Zptcs6wf4E9X9zQmzkgpyuOtWfh0XHGxscH+HuLHxqNsCg6dvG2v67ynO2FqSP18BtAV8lXQGlf5HhqU46kMdLdg3JXrLFFJRgw1hZy1tCr0hz51nApFqw43vG7Da99qmK89dKJYq1tRP7TX1IgXQ8VM2QFhoHh8VXAyRPgLsmmGSGrJPr267Mt2R3nu+mU4roL3ATtQZj+
    X-MS-Exchange-AntiSpam-MessageData:
    Gz9gkI1wVJ/MYoIx4OOjZOP4rQ7///eJ4f1xmMhnLvPy4M5LctAEFb2BgGxaKelv+JXy8Yr9PghQBRb0M2waNoaqX5bgQcTVCxZyMbUeu5x2UWoC6I/ol0kfzIlTGkBvF5u+WITpSKfByQM3lzSIWg==
    X-OriginatorOrg: hotmail.com
    X-MS-Exchange-CrossTenant-Network-Message-Id: c1e7e878-76fc-4b8b-91c2-08d85eea5aed
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2020 11:26:31.8053
    (UTC)
    X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-AuthSource:
    AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com
    X-MS-Exchange-CrossTenant-AuthAs: Anonymous
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
    00000000-0000-0000-0000-000000000000
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT023 ; 

  • Falske Nets Mails

    Her er den rå mail:

    X-Assp-ID: asgard.bregnedalsystems.dk id-95450-18074 
    X-Assp-Session: 7EFDD3A4F638 (mail 1) 
    X-Assp-Envelope-From: support@yardsharkz.zendesk.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk
    X-Assp-Original-Subject: Faktura ! 05/24/2020 04:44:07 am 
    X-Assp-Version: 2.6.4(20085) on asgard.bregnedalsystems.dk 
    X-Assp-Client-TLS: yes 
    X-Assp-Server-TLS: yes 
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-Delay: not delayed (gripvalue low: 0.02); 24 May 2020 06:44:11 
    +0200 
    X-Assp-Re-redRe: Auto-Submitted: 
    X-Assp-Message-Score: -55 (192.161.151.0 in griplist (0.02)) 
    X-ASSP-DKIMidentity: @zendesk.com 
    X-Assp-Message-Score: -1 (SPF pass) 
    X-Assp-IP-Score: -1 (SPF pass) 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass; 
    spf=pass; dmarc=pass 
    X-Assp-Message-Score: 6 (Foreign IP-Country US (AMAZON.COM)) 
    X-Assp-Detected-URI: w3.org(2), bit.ly(1), nets.eu(2), www.zendesk.com(2), 
    zendesk.com(2), yardsharkz.zendesk.com(3) 
    X-Assp-Message-Score: -1 (HMM Probability: 0.00000) 
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000) 
    X-Assp-Redlisted: Yes (Auto-Submitted:) 
    X-Assp-DKIM: verified-OK 
    Received: from outbyoip2.pod13.usw2.zdsys.com ([192.161.151.2] 
    helo=outbyoip2.pod13.usw2.zdsys.com) by asgard.bregnedalsystems.dk with 
    SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) (2.6.4); 24 May 2020 06:44:09 
    +0200 
    Received: from zendesk.com (unknown [10.210.110.101]) 
    by outbyoip2.pod13.usw2.zdsys.com (Postfix) with ESMTP id 49V70n0ZLvz3hhT6 
    for <spam-eater@bregnedalsystems.dk>; Sun, 24 May 2020 04:44:08 +0000 (UTC) 
    Date: Sun, 24 May 2020 04:44:08 +0000 
    From: Nets Denmark A/S <support@yardsharkz.zendesk.com> 
    Reply-To: Nets Denmark A/S <support+id736@yardsharkz.zendesk.com> 
    To: spam-eater <spam-eater@bregnedalsystems.dk> 
    Message-ID: <PM4GYYMY0V_5ec9fb989d77f_5f68cf2c83385_sprut@zendesk.com> 
    In-Reply-To: <PM4GYYMY0V@zendesk.com> 
    Subject: Faktura ! 05/24/2020 04:44:07 am 
    Mime-Version: 1.0 
    X-Delivery-Context: event-id-1060204242931 
    Auto-Submitted: auto-generated 
    X-Auto-Response-Suppress: All 
    X-Mailer: Zendesk Mailer 
    X-Zendesk-From-Account-Id: d281c59 
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com; 
    q=dns/txt; s=zendesk1; t=1590295448; 
    bh=x+avlxFY+1JUKXQ+XM4PkV8idvfg9o1UYl7w2o6vrfo=; 

  • Falske Skat Mails

    skat

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-Client-TLS: yes 
    X-Assp-Server-TLS: yes 
    X-Assp-Message-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-IP-Score: -2 (SSL-TLS-connection-OK) 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    9 Mar 2020 14:31:07 +0100 
    X-ASSP-DKIMidentity: @damssakhfifaberta.com 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; dkim=pass; 
    spf=pass 
    X-Assp-Message-Score: -1 (SPF pass) 
    X-Assp-IP-Score: -1 (SPF pass) 
    X-Assp-Message-Score: 6 (Foreign IP-Country US (STEADFAST)) 
    X-Assp-Message-Score: 14 (MX missing: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-IP-Score: 14 (MX missing: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-Message-Score: 15 (A record missing for MX: damssakhfifaberta.com 
    (From , Reply-To)) 
    X-Assp-IP-Score: 15 (A record missing for MX: damssakhfifaberta.com (From , 
    Reply-To)) 
    X-Assp-Detected-URI: fddkim.damssakhfifaberta.com(1), skat.ga(1), 
    freshdesk.com(1), inc.com(1), licdn.com(1), damssakhfifaberta.com(4) 
    X-Assp-Message-Score: -1 (Bayesian Probability: 0.00000) 
    X-Assp-ID: asgard.bregnedalsystems.dk id-60667-35285 
    X-Assp-Session: 7F5661969D98 
    X-Assp-Envelope-From: bounces+4491982-1dc3-spam-eater=bregnealsystems.dk@fddkim.damssakhfifaberta.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    Received: from o12.email.freshdesk.com ([167.89.11.190] helo=o12.email.freshdesk.com) 
    by asgard.bregnedalsystems.dk with SMTPS(TLSv1_2 ECDHE-RSA-AES128-GCM-SHA256) 
    (2.6.4); 9 Mar 2020 14:31:06 +0100 
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
    d=damssakhfifaberta.com; 
    h=mime-version:from:reply-to:to:in-reply-to:references:subject:content-type:content-transfer-encoding; 
    s=fdm; bh=DYjaiJXgrhpXivX7WMRBMcgLzxIies0iN5jRI9qd6D8=; b=McXrOs 
    bnOlE6/i5sYUrseaHxtM01BEKLjljMU9NLm6SxUA2WuHqN0bRuWVdmaSBsFGDzgG 
    +sgQ2x+eQ4uLYHQ3ArO3N45AE4mfvXgwb0nFuJFoOOTS/tR3ykqG3BVzWuwLt9YW 
    ptHb+3HZzlZ3CZKl/PVM1oQ2ho96ShrMgcCjg= 
    Received: by filter0875p1las1.sendgrid.net with SMTP id filter0875p1las1-9976-5E664515-55 
    2020-03-09 13:31:02.011196043 +0000 UTC m=+398427.216606300 
    Received: from freshdesk.com (mail-us1.freshemail.io [34.198.193.174]) 
    by ismtpd0122p1mdw1.sendgrid.net (SG) with ESMTP id kAezypCrScC79oDsz7_41g 
    Mon, 09 Mar 2020 13:31:01.866 +0000 (UTC) 
    MIME-Version: 1.0 
    X-Received: from ec2-54-152-41-238.compute-1.amazonaws.com (EHLO freshdesk.com) ([54.152.41.238]) 
    by smtpout.freshdesk.com (Freshworks SMTP Server) with ESMTPA ID -1700553626.4; 
    Mon, 09 Mar 2020 13:31:00 +0000 (UTC) 
    Date: Mon, 09 Mar 2020 13:31:02 +0000 (UTC) 
    From: skat <news1@damssakhfifaberta.com> 
    Reply-To: skat <news1@damssakhfifaberta.com> 
    To: no-reply_573@skat.dk 
    Message-ID: <5e664513e6b2f_28f2ae40911f8742603551.sidekiq-free-fd-poduseast1-free-blue-799b98bf97-85m7b@forward.freshdesk.com> 
    In-Reply-To: <AM0PR04MB64993D9ACC4930B725DF8CF590FE0@AM0PR04MB6499.eurprd04.prod.outlook.com> 
    References: <AM0PR04MB64993D9ACC4930B725DF8CF590FE0@AM0PR04MB6499.eurprd04.prod.outlook.com> 
    Subject: =?UTF-8?Q?Fwd:_Meddelelse:_Vi_har_brug_for_din_hj=C3=A6lp_||?= 
    =?UTF-8?Q?_47956106?= 
    sent-on: 2020-03-09 13:30:59 +0000 
    X-SG-EID: /itzJcwO7K+M9aLGGY95Zv829t8kQd7kp3n0NbJaX5qbDOmN02fYnK01iRaIThElL9RWX82TJqusIR 
    qnwWpZmCxTJRYBiBQF1ocTg2EcQ/0Tim5Vvi4KdU07BKGOQiWJ7wOtO8bjZD47jD6HsogJg3hXls7k 
    z5WOKSv5OQCl+KnYXcUVudHgv5w01DFHhuV1F+6UtLFiku4dwuQpaed8+g== 
    X-SG-ID: dXNuuxiaeVPHPf1dZH02eHs4E5fIapZl8YOk/8FEe83FsjatXVUH83taTy+rnPhVJs9e0do6S2bcC9 
    nqu/WK/wXpZslT+txs6RsLI5ylciSJL4tj+OPI+FLRUVoGdamRQnH0CPIJL7+qimWdYEpIyn/vRR0N 
    31sC9EoHSV59wnRhDRot3Sa+yDJgHxMVoBo/p8TFjZWfKFadSs3GYyz+2b881i4K7wf0m83Dfc0T+T 
    3IK4lafmgfY1a9kLXKb8TXWEZWGg3/+IOtobDMTAS1vllajFNLh2CqCbzBEjAWjagmlkxx5dcv1re/ 
    MByv5EHQH3i1TxiIqP/0icEzYl4eMMty8DTkn/ZxdBiNBmvZapVI3mIQmUVdqr4ToB0q0bQGPInYPb 
    XCuMB24ZO+p84n4hqBucdu0wQJaQHod0yaNt8GamoNelWGPRBE+ioUjcdhN+9CDIqUIVBfGw1GedDS 
    SQ== 

  • Falske Zalando Mails

    Zalando

    Her er den rå mail:

    X-Assp-Version: 2.6.4(20030) on asgard.bregnedalsystems.dk 
    X-Assp-ID: asgard.bregnedalsystems.dk id-25941-20062 
    X-Assp-Session: 7F927DA9EFF8 (mail 1) 
    X-Assp-Envelope-From: bounce@msnd3.com 
    X-Assp-Intended-For: spam-eater@bregnedalsystems.dk 
    X-Assp-Original-Subject: Vi udlodder en Zalando kupon p 5.000 kr. til vores 
    deltagere! 
    X-Assp-Server-TLS: yes 
    X-Assp-Delay: not delayed (spam-eater@bregnedalsystems.dk in noDelayAddresses); 
    26 Feb 2020 15:05:42 +0100 
    X-Assp-Message-Score: 15 (From-missing) 
    X-Assp-IP-Score: 15 (From-missing) 
    X-Assp-Message-Score: 25 (185.91.55.0 in griplist (0.85)) 
    X-Assp-Received-SPF: softfail (cache) ip=185.91.55.21 mailfrom=bounce@msnd3.com 
    helo=msnd3.com 
    X-Original-Authentication-Results: asgard.bregnedalsystems.dk; 
    spf=softfail 
    X-Assp-Message-Score: 15 (SPF softfail) 
    X-Assp-IP-Score: 15 (SPF softfail) 
    X-Assp-Message-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-IP-Score: 25 (Blocked IP-Country RU (OOO NETWORK OF DATA-CENTERS 
    SELECTEL)) 
    X-Assp-Message-Score: 15 (missing or invalid address (1) in ‘From:’ header 
    tag(s) ( DoNoFrom )) 
    X-Assp-IP-Score: 15 (missing or invalid address (1) in ‘From:’ header tag(s) 
    ( DoNoFrom )) 
    X-Assp-Message-Score: 20 (blacklisted HELO ‘msnd3.com’ – weight 
    1) 
    X-Assp-IP-Score: 20 (blacklisted HELO ‘msnd3.com’ – weight 1) 
    X-Assp-Message-Score: 30 (MX missing: kundeservice (From)) 
    X-Assp-IP-Score: 30 (MX missing: kundeservice (From)) 
    X-Assp-Message-Score: 35 (A record missing for MX: kundeservice 
    (From)) 
    X-Assp-IP-Score: 35 (A record missing for MX: kundeservice (From)) 
    X-Assp-Message-Score: 60 (PTR missing) 
    X-Assp-IP-Score: 60 (PTR missing) 
    X-Assp-Tag: MessageLimit 
    X-Assp-allLoveDLSpam: 1 
    X-BS-Spam-Status:yes 
    X-Assp-Spam-Reason: MessageScore 240, limit 56 
    X-Assp-Message-Totalscore: 240 
    Received: from unknown ([185.91.55.21] helo=msnd3.com) by asgard.bregnedalsystems.dk 
    with SMTP (2.6.4); 26 Feb 2020 15:05:41 +0100 
    MIME-Version: 1.0 
    From: Kundeservice 
    Subject: Vi udlodder en Zalando kupon på 5.000 kr. til vores deltagere! 
    Reply-To: reply@msnd3.com 
    Received: from msnd3.com (185.91.55.21) by msnd3.com id dEiIO0FdMfdJ for <spam-eater@bregnedalsystems.dk>; Wed, 26 Feb 2020 11:33:43 +0100 (envelope-from <return@msnd3.com> 
    To: spam-eater@bregnedalsystems.dk 
    Date: Wed, 26 Feb 2020 11:33:43 +0100