Jeff Koch wrote:
That part (i.e. the top part of the header) was generated by qmail. Please look at the bottom part of the header after the spam scoring which shows the header from the user's email which was mistakenly scored as a forged_mua_outlook.
The message-id is the same, but anyway, I actually checked the headers inside the report.
