HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1715066845.M520654P2236180.zacp120.ve.host,S=12528,W=12715
Return-Path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id iJ2yHd3XOWYUHyIAvcbEzQ
	(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
	for <govancoz+spam@zacp120.ve.host>; Tue, 07 May 2024 09:27:25 +0200
Return-path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Tue, 07 May 2024 09:27:25 +0200
Received: from mail-bmxind01hn2220.outbound.protection.outlook.com ([52.100.219.220]:3572 helo=IND01-BMX-obe.outbound.protection.outlook.com)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
	id 1s4FES-00000009O86-2iNL
	for danielle@govan.co.za;
	Tue, 07 May 2024 09:27:25 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=bIWDEiZSlQ496t9LihqyYvyFqmZaBf3d8ZvMA5xmEcx5sOXdbaE+HTFH65OL/OYyt5uU8xM4RLduntFDyanA8K34Lp+4x0tbBjhnZEs8ZR5OAGO9n1sT8VT/H9yPsOnyYQHTJa6c0TA9JFTtZL/ULPelBiwtT2o8USlyVPrOZNQ8uZqxQlslLVXYtBdvBe+SyY4Qt1ulNJxd6eSmDRL1b8FunfTZiFQWwin9vlBLT/Y5yxstGBTiPshKJ5bXk9bg9S17gE4fegU0SKExFK6leTcrUYuiEDx3Dm2K3Gpnyw5ULvcva6VhHY9TVD1E6bw1yqSV7p2uEoyf4KMgxnH4uQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=R6nOlhQ/xi+8EQXUWH0mEfZSlKfoJGWCtr3DrlaD0ko=;
 b=mn33I4zQVr6aky1K9MGh+zO7yXuTbLYGo4hrRze/2m2gmC7FI+YbHR8j1EEc/rpm9AOq2Q0k3REbPOUuSwc2Cht1I7y1gCHTsZuHhcwlVYnv6r7pEvqo9WKvFG02xS3KophbErW64alS5JAmAS+CL0k9H5glzH756c6hLChVUyVkd6GfTtfUGoJ3RhYC9KqqZFG+1qfGxZDaf9NR5RXPUV+0uCJVO3T9ZwytZXEbC+eoVf7UbrZ9vpjXe7PXl8JuaYurHAvmFXhGfhtMI3MI4tdrWCnDISP6K8GjQ7EclJeohBHZHSkNkjS1KfopFGkAe252dYaF01S7HndVy4m1Ew==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 182.79.15.226) smtp.rcpttodomain=scarce.com.au smtp.mailfrom=office.com;
 dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine
 header.from=office.com; dkim=none (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=toyotakirloskar.onmicrosoft.com;
 s=selector2-toyotakirloskar-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=R6nOlhQ/xi+8EQXUWH0mEfZSlKfoJGWCtr3DrlaD0ko=;
 b=gTzZzxT1LVjfeG7JsscUMQX+pIMX30s9r6UjbytpIOEpyoaLtlEbey4Nw9EhAtlNtVXiCHKeETuNkQdHHJkMrdA3dwfh3Ac2IB2sxB+pBrfea//LmqObN8l9ld6xoU4a+IVCmbkoqeVZp4nZPVVeblvJiH+DSv2u5mal66Ppp3I=
Received: from PN3PEPF00000187.INDPRD01.PROD.OUTLOOK.COM (2603:1096:c04::4d)
 by PN2P287MB1023.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:137::8) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.42; Tue, 7 May
 2024 07:26:30 +0000
Received: from PN1PEPF000062BB.INDPRD01.PROD.OUTLOOK.COM
 (2a01:111:f403:cc2d::) by PN3PEPF00000187.outlook.office365.com
 (2603:1046:a00:1d::3) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.42 via Frontend
 Transport; Tue, 7 May 2024 07:26:30 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 182.79.15.226)
 smtp.mailfrom=office.com; dkim=none (message not signed)
 header.d=none;dmarc=fail action=quarantine header.from=office.com;
Received-SPF: None (protection.outlook.com: office.com does not designate
 permitted sender hosts)
Received: from email.toyota-kirloskar.co.in (182.79.15.226) by
 PN1PEPF000062BB.mail.protection.outlook.com (10.167.242.7) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
 15.20.7544.18 via Frontend Transport; Tue, 7 May 2024 07:26:28 +0000
Received: from SBNEXN1.tkm.co.int (192.168.242.46) by SBBEXCASP2.tkm.co.int
 (192.168.242.21) with Microsoft SMTP Server (TLS) id 15.0.1497.42; Tue, 7 May
 2024 12:55:50 +0530
Received: from User (192.168.242.48) by SBNEXN1.tkm.co.int (192.168.242.46)
 with Microsoft SMTP Server id 15.2.1544.4 via Frontend Transport; Tue, 7 May
 2024 12:55:39 +0530
Reply-To: <mj6599m@gmail.com>
From: Airforce Sgt.Billy Heinstein <info@office.com>
Date: Tue, 7 May 2024 00:25:49 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <864ee027-e13f-4928-929e-d7f4a852fb87@SBNEXN1.tkm.co.int>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: PN1PEPF000062BB:EE_|PN2P287MB1023:EE_
X-MS-Office365-Filtering-Correlation-Id: e7b48595-6992-4a8b-18ac-08dc6e6702ac
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
	CIP:182.79.15.226;CTRY:IN;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:email.toyota-kirloskar.co.in;PTR:ErrorRetry;CAT:OSPM;SFS:(13230031)(32650700005)(35950700004)(82310400017)(61400799018)(376005)(48200799009)(7416005)(2700400011);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
	BCL:0;ARA:13230031|32650700005|35950700004|82310400017|61400799018|376005|48200799009|7416005|2700400011;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?Lpp8qiYnrzFePcbkjVKYNoP73tdbuBCTYkpGmteh/AKzdmaV53Goyl6t?=
 =?windows-1251?Q?iFnBJDghUqVf+zc585b1ilN/NS/j3E1PWXYLHyt17RHiwjNZXKiuq0zo?=
 =?windows-1251?Q?Tzt9HAjWz2Thlqi8LlEOWOIhEymrXQ0ndMLKdpdgtPPujHRrno/CU6Iv?=
 =?windows-1251?Q?UW0H3220bUr+YZUX0Sc/hw1IGXE5r25jUsGr2nl6RX86Xr6BU5s10dKc?=
 =?windows-1251?Q?DccM5kbHSBhWXv6wirAXffV4/xwCmsCXyGxemxlOm6pyq0oOhUTen0ly?=
 =?windows-1251?Q?LFoBbb4gLV9CjWs6CWqzu8yEahFdO31pyh0RQQn6ZHfvlWt+yv5uwYy4?=
 =?windows-1251?Q?ekKfiCGvbvnbqWkrYlDR1dtzlgzFkNYCpvHAIjkA2IziZS176JxxQtOU?=
 =?windows-1251?Q?476W6ET91tVmDh4JZN/WaHaWVxmvLfLM9qDicSJfmm3Awfljk/P00AaT?=
 =?windows-1251?Q?nNNJ6f99K1oHRZNmEwOmOvCzhvsdrICkwCPvaIbRGX3oTpf6I/s5F7yz?=
 =?windows-1251?Q?ri/UWpk721ov3JcO/TjQ7j9BiZDwGmItpE3ddGBZQb5jwP5/ABcb4scz?=
 =?windows-1251?Q?NBiPY5eRnLtb3zD+vbew8jIQFNU0FWZRuC5LOc1qSx2z72nMHe0tXrkF?=
 =?windows-1251?Q?LvpqPLcBkK2ndMSq6/mzA0Uv/lDQ/XC5X9p57CwuK6mk5L8RHQRyGV4T?=
 =?windows-1251?Q?OgirekXcxB+qLHgxCwBJIkl714Jti9bf7ZKzY1Ekzi6Z1REBdrNHBVqb?=
 =?windows-1251?Q?IAyuYH8Ewf/HizSE4QfxMNksIAlcDdGzUeKv8Jw0j0bqgtqKwYBDc6lO?=
 =?windows-1251?Q?/+wALXxdIi3cu4OP4RxwjwG8WLSzDVsUfOmex1xb1aRM8vtW8Da8LW8e?=
 =?windows-1251?Q?roq9VVBQT1HCxuXLg2e2YpAidDq/uoX6A0fN09lzozkvAZwSyzvtTVj3?=
 =?windows-1251?Q?1e35Vf5UKs368jGTOzh2FoJDglPb0/ACe+1HUwgxcfkeqq1KgsSxUCT5?=
 =?windows-1251?Q?spTeSBjqquV8s/k+RmZG8j5iq5cUdEiXUrhl7z/oR907H6HkEesi0ka5?=
 =?windows-1251?Q?TQoEBfJ/2IdcjX63OCJ5psRTnYk4fIHlAbWJZqLs+Chn0UwQGYP8LyqK?=
 =?windows-1251?Q?XyBVPNzUo1YTR3CC/5mSIye57F5k4hGYhKntlNN+BGBEZ0lLoUXRlpcM?=
 =?windows-1251?Q?4+Mn1jY8Ak8fktg31EXxNze1xSSZVv9i57lslt00fzL0Uz/ggrrkNUDk?=
 =?windows-1251?Q?FbBEFCCEbJiVS0IpKMWLXJ69dHTjF55fttE9H3XlFp3aV848q6l02cci?=
 =?windows-1251?Q?ZbkX7VBty0R/5Rh5MIfovLL7bwwsvz6sy3joQbeoHJvwnx0UnYsNoijx?=
 =?windows-1251?Q?sT+9pSC1rOtlo3J5uMvf9gPVAjkaWHcvLOX70UIB0hyYcxNIsGLFJE7P?=
 =?windows-1251?Q?glpGhigWaeCwioqTESKaUYGyrt33+uVZYWzaIUT0XdtFVJR3vTe8RRGr?=
 =?windows-1251?Q?2HmwslREGmLarCtkzILFYJ0t3rIcphlGr5BK+KYFqK1H5b5wWt1ByLzk?=
 =?windows-1251?Q?bUA8QDaTLf/xFuJRyXQv4cFdsd1Iu87EsBi9lRtokcDmI+g7kP0BMmMS?=
 =?windows-1251?Q?ke+2CscIbmJBhV2FYiX0jSlFypn8IJUXpcSbT8qbZVduS7xiJaR7EJFp?=
 =?windows-1251?Q?t/FyFqx3FmajQXb0C6u65nQCccXHz5jAYZVC7dJ2VvGD65SflrT08wEK?=
 =?windows-1251?Q?gcTSDCtTw1Hiohxf5A7nZwm9gE/ph4qkKWZKPwT5co1FathuoN/QVm4L?=
 =?windows-1251?Q?hFWFRl5vW+Cx4Yt2YHp7ZbCoPh6IJnBuwe15sNGN9H0Bv6um4B48dKMX?=
 =?windows-1251?Q?OwzYsAAW3vHPJNKEAZXnIWLfrwecTL+4FdmeE4aFLTLGtx2YO6Wa742A?=
 =?windows-1251?Q?79F2kpUrrYXx/fkZax6vb1E9WsPsl8XzHTwsD1xTLWF2evujy1S++RQp?=
 =?windows-1251?Q?FlHv9sCIA3fmQ/1/wmU77Y2/uQ5UYae5PG1lhy+Tnf9/pc7EwEhjGTud?=
 =?windows-1251?Q?OH1k727ujWMU8KKq?=
X-OriginatorOrg: toyotakirloskar.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 May 2024 07:26:28.4350
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e7b48595-6992-4a8b-18ac-08dc6e6702ac
X-MS-Exchange-CrossTenant-Id: 57b9390d-91d5-4fbd-8800-8fe81cc0529d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=57b9390d-91d5-4fbd-8800-8fe81cc0529d;Ip=[182.79.15.226];Helo=[email.toyota-kirloskar.co.in]
X-MS-Exchange-CrossTenant-AuthSource:
	PN1PEPF000062BB.INDPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN2P287MB1023
X-Spam-Status: Yes, score=14.9
X-Spam-Score: 149
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello Dear, I am a Military Airforce Sgt.Billy Heinstein.
   I'm a soldier working as United Nations peace keeping troop in SYRIA on war
    against terrorism since 10 Ten Years now. I have in my possession the sum
    of $ [...] 
 Content analysis details:   (14.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 MILLION_USD            BODY: Talks about millions of dollars
  2.7 AXB_X_FF_SEZ_S         Forefront sez this is spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: toyotakirloskar.onmicrosoft.com]
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.5 MONEY_NOHTML           Lots of money in plain text
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  3.2 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject:  ***SPAM***  Please am waiting your Reply  

Hello Dear,

I am a Military Airforce Sgt.Billy Heinstein. I'm a soldier working as United Nations peace keeping troop in SYRIA on war against terrorism since 10 Ten Years now. I have in my possession the sum of $3.5million USD Which i made here in SYRIA during Military AirForce Strike operation, I Hand over this money to a Red Cross Agent for safety due to there was No chance for me to move the Fund out side the SYRIA so I kept it with the Red Cross Agent whom I trusted.

And right now the Red Cross Agent is about to leave the Country to another Assignment, I need your help to receive the $3.5 Million USD and take 60% of the cash and keep 40% for me pending when am through from the Military operation here in SYRIA.

I will authorize the Red Cross Agent to Hand over the $3.5million USD to you as my TRUSTEE who can help me to keep the Money safe pending when an through with the Operations here, Once you accept to work it out with the Red Cross Agent I will inform him to communicate with you immediately so that you can negotiate on easy way to receive the $3.5million USD.

Kindly get back to me very Urgent.

Thank you,

Airforce Sgt.Billy Heinstein.
E-mail Contact : bbilverpoliecomanderr210@gmail.com