File: /home/govancoz/mail/.spam/new/1707128799.M430539P3296508.zacp120.ve.host,S=10201,W=10367
Return-Path: <financem29@outlook.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id uDihGN+3wGX8TDIAvcbEzQ
(envelope-from <financem29@outlook.com>)
for <govancoz+spam@zacp120.ve.host>; Mon, 05 Feb 2024 12:26:39 +0200
Return-path: <financem29@outlook.com>
Envelope-to: candice@govan.co.za
Delivery-date: Mon, 05 Feb 2024 12:26:39 +0200
Received: from mail-ve1eur01olkn2093.outbound.protection.outlook.com ([40.92.66.93]:65469 helo=EUR01-VE1-obe.outbound.protection.outlook.com)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <financem29@outlook.com>)
id 1rWwBO-00DwrQ-3C
for candice@govan.co.za;
Mon, 05 Feb 2024 12:26:39 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=bhEmN13TMNTDg9scReG3DpGgtV70M5fvg3fPFoHEreSQTYKjI8mWUyN1jb4uStfWtHGosXGuJktsFYe9ayOOzqYwwD0jDBATAeC04Hg0Z3OrOIVgMKA2mIhfsYLHxyE2kKaG5WhbIRecQHEaE9hVEiwF9Fq+0mrzIcqwHxXkclP1Yeuo/rvlKPKZI5n1oNvGegl+sRw2G8olsrAT07E0Bad2Db/YDCHeInJy/vfB/07tU0zP7kjsNsbh9I8nk+CaCljWvOsJFUIwVNdldXrJgOEadK+EVfoqNzVODQjlw4YdBV0u3MCUprQPKb0BQV2S0moydSCWPcwylbOWBaniUA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=dE9Bf27TF2I8n/gsVDvCgw7XbgIWm+sTEG4SGfOKWEg=;
b=JbM4QhXkYGxLnLjcJcF1aP30L2oXEwQwvJvo22HSP69gHJAbgjACfG2feoOqOdsqaw6hfxpejfGghalcJEI/r6Xi9ZYUPXJ0j5KWOIWanlkJL/5Dc2dWvIJVHxSLiY49Kv2KOk96hz6XR/FxPGo+ZWawsLrd6Q3a9u0o0uhdEfPZ1Wc+wkyXHLTwfUCPDYu8NvyXC1YwTXvEkFX2Iu8lclN/YNWULulEHp+fZ4c/F+pcB1vCLO7wsuxk61DoPpjHmyXRPCiw8Rfw8Jj9vR/fzOcmyVa0gYssI2RH6uwAvfRcNZSWWIa7CiVLciScW4nLYik6ouE0DXhSF16TW/tfQQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=dE9Bf27TF2I8n/gsVDvCgw7XbgIWm+sTEG4SGfOKWEg=;
b=HLPMN0n3U4vegIvBrp5FjxUVjMfnownh0M5jxUA0ZssfTJ1JP7BdZhUXjWguKjBvgKN3L7QLHTSd0MMXg/QT/52CdpFSHq4AU+UU1KLLJVVW8jU3KFmupRgu7Rx9sFp8IrsT89imxHfPTV3qFifrANoRGmz32uP/Yuw2ifLLVV5L+gCYMWaAlIBv7fXPx1CI5lsxvNmHR3y2esRZ9EPs7NuY4n5wpai12gcaUfSomIqzQarBCrY1+2/4109LTAS9g4iPEUrQTug58plw/NN3l1HjK+bAKiUS3NkEsgEWtNoQiyIUPANIcM+JcMidwUrTcSWQFpjrLQc+z08F2O4n0w==
Received: from AS2PR02MB9117.eurprd02.prod.outlook.com (2603:10a6:20b:5f6::10)
by GVXPR02MB10692.eurprd02.prod.outlook.com (2603:10a6:150:14a::8) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7249.34; Mon, 5 Feb
2024 10:25:38 +0000
Received: from AS2PR02MB9117.eurprd02.prod.outlook.com
([fe80::1d52:927:d6a9:f4ca]) by AS2PR02MB9117.eurprd02.prod.outlook.com
([fe80::1d52:927:d6a9:f4ca%7]) with mapi id 15.20.7249.025; Mon, 5 Feb 2024
10:25:38 +0000
From: GLOBAL FUNDS <financem29@outlook.com>
Thread-Topic: 2024UNESC-0993-V22P
Thread-Index: AQHaWB2bzhV5h0CKbkO8ZxWYiQnQLA==
Date: Mon, 5 Feb 2024 10:25:38 +0000
Message-ID:
<AS2PR02MB9117D1517B3B39AF7297FD16D2472@AS2PR02MB9117.eurprd02.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [EnYI2g/ailnf0YjwQHxKMjN9akEgcvW/]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS2PR02MB9117:EE_|GVXPR02MB10692:EE_
x-ms-office365-filtering-correlation-id: f9fab2c6-8dab-4fba-7575-08dc2634cc3b
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?kACpRmwS4sFuIepPw+niz3Stpcn66RFuMSyqP1wI//+skdBVkuwt+xSdon?=
=?iso-8859-1?Q?ncxAfDOtno+9SrZcsjP6GIrZKElzmGmXugw/HPBo/ccF67B+Dtp2ZcGQbr?=
=?iso-8859-1?Q?CzySWJpedtqeR7VDhpbAK+fvJrucZuNx2MEeZ0pvsFS298PM5GBiDc+plC?=
=?iso-8859-1?Q?NGXwQv12TDXuSyP4wgrM+SBTT7y5K18id1Fu+tRKkld8xkvCEjGEA+TJCJ?=
=?iso-8859-1?Q?2vuCcxJ5s0dec7pV2cpylywb6D9IgfzGNqJ8Vr+bGyN2GfKhKn3W4w/19x?=
=?iso-8859-1?Q?iNJG5bO92PQtzjQoVnRk8DTGwu83m+voZEqytTruj4VjOEzv1lbVsFqOKV?=
=?iso-8859-1?Q?wbbyyoDZt6XoXwTTMobIk0NOwH0EcU+xumSmmw4N96kJRLQ2sAop8h2C8c?=
=?iso-8859-1?Q?rT3FHZ0rdvSZNM4ZdJgUxRVgIPi7tHXg3gcrcuHLp20amrkDDyG90xWnv6?=
=?iso-8859-1?Q?EWQCbi3uhg2zoJ5SwCR4tGHY6c5mMslKyXIYidXgYrJUSnrgK6cZ9VAKjy?=
=?iso-8859-1?Q?9lFL5vxaG7b48E84JpDYR1i0RabqQWiKl4bTPAa5E3BII4JdOwltB1uU3Y?=
=?iso-8859-1?Q?CmpCvxG1Be3vup1vziGgTzHM65sByO3+S3XeLDTLrhUGnwBRASzwKIWtYC?=
=?iso-8859-1?Q?xz4UoFLqDDQFrkGzf+XFXVroeTlX2q/g44AUAbaGFI9Rh0iq4Wdj2GTMaK?=
=?iso-8859-1?Q?3PcpweDfIJUkkJIRc5MOiJ86C7ZRIZfq+SFDeQGE2v9D5csEZcDB3/KjOu?=
=?iso-8859-1?Q?oU5EHVLJEF+N3/pm9E7fTZ8s+UZWj/aTpAy9sii24j+pDvv7dC/XWvhH+a?=
=?iso-8859-1?Q?jdoEuC82Tf/ecveiVCMveVrALwoeSfWEtxz6B9qycbDazvbpO1kwJtEVJp?=
=?iso-8859-1?Q?7kJGUeXTnS280zXLy1o6QrvxsjVD0A3P0bwHyzW+1HFWx7TnPD0PUxSBQm?=
=?iso-8859-1?Q?xkdpIMgY7LkQcWoQE/+3Gxqq1ungpNtdKgb/9UdFi8dJzJWe4BYja8YHDY?=
=?iso-8859-1?Q?mrPJVjGjULptspuCnX1amVSciHxn59XBKA8tODMrujiFZIpLxeYS72H22x?=
=?iso-8859-1?Q?UOXpnyjSP3GN51RYmzP1pb7BZ8MRLKm0pm4F2PFzo1lpWNnpYNHxjg4jJQ?=
=?iso-8859-1?Q?lgGB5QARbv206KHttC1OZCCI9pull8pG1EOJpmZCHa7qfgc1257VoBsjVE?=
=?iso-8859-1?Q?CJFN2uqrASp3Tys2zz/u5aVkPVrpoDrnWqYy0hNuLnOs+YHl/GQpk/qWpC?=
=?iso-8859-1?Q?iQCTsCHbH3EEq0n3A1qQ=3D=3D?=
Content-Type: multipart/alternative;
boundary="_000_AS2PR02MB9117D1517B3B39AF7297FD16D2472AS2PR02MB9117eurp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS2PR02MB9117.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: f9fab2c6-8dab-4fba-7575-08dc2634cc3b
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Feb 2024 10:25:38.6145
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR02MB10692
X-Spam-Status: Yes, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: You have been compensated by UNESC with iV no. 2024UNESC-0993-V22P.
You are therefore advised to urgently email: paymentoffice715@gmail.com for
more information and clarification on how to receive you [...]
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[financem29[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[financem29[at]outlook.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** 2024UNESC-0993-V22P
--_000_AS2PR02MB9117D1517B3B39AF7297FD16D2472AS2PR02MB9117eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
You have been compensated by UNESC with iV no. 2024UNESC-0993-V22P. You are=
therefore advised to urgently email: paymentoffice715@gmail.com for more=
information and clarification on how to receive your compensation fund.
--_000_AS2PR02MB9117D1517B3B39AF7297FD16D2472AS2PR02MB9117eurp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);">You have been compensated by UNESC with iV no. 2=
024UNESC-0993-V22P. You are therefore
advised to urgently email: paymentoffice715@gmail.com for more info=
rmation and clarification on how to receive your compensation fund.</span><=
/div>
</body>
</html>
--_000_AS2PR02MB9117D1517B3B39AF7297FD16D2472AS2PR02MB9117eurp_--