Basically, the first thing to do once you get an expired domain with the spammy score is to remove all spammy links.
The next step, replace them with links from trustworthy sites.
In short, just send some high-quality backlinks over time, add new normal pages, new posts, secure your site with HTTPS, give some value, add new images, etc...
In the time it will get down.
Keep in mind that everything over 60% is considered as "high spam", anyway, it's not that hard to reduce it and it's not that "big of a deal", but it also depends on the history and what for was previous owner/s used for.
That is why we use Archive.org to check it, if the site was used to be spammed a lot and I mean on brutal spam, fishy crap, I would give up.
At the same time, for example, one of my sites that is basically just a landing page has an 11% of spam score which is BS
It's a new fresh domain, never used before, 4, 5 months old... No logic.
Go to expireddomains.net you can easily find solid expired/expiring domains.