HEX
Server: Apache
System: Linux zacp120.webway.host 4.18.0-553.50.1.lve.el8.x86_64 #1 SMP Thu Apr 17 19:10:24 UTC 2025 x86_64
User: govancoz (1003)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/govancoz/mail/.spam/new/1715068964.M423499P2250908.zacp120.ve.host,S=11969,W=12165
Return-Path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
	by zacp120.ve.host with LMTP
	id kFtCGCTgOWacWCIAvcbEzQ
	(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
	for <govancoz+spam@zacp120.ve.host>; Tue, 07 May 2024 10:02:44 +0200
Return-path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Tue, 07 May 2024 10:02:44 +0200
Received: from mail-bmxind01hn2238.outbound.protection.outlook.com ([52.100.219.238]:22692 helo=IND01-BMX-obe.outbound.protection.outlook.com)
	by zacp120.ve.host with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
	id 1s4Fmb-00000009SFJ-3yie
	for danielle@govan.co.za;
	Tue, 07 May 2024 10:02:44 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=nynSCbgRRvvnt+VOZ1gTt+S2wSS3SLVeM6ECkOWqa3lZqRu7MKV5b3b+Uin5KbdVJYfjNovL9tglRPJcHBNxvBjOu36JPEYKI9CTY4tEFE3pMiq1pLjDBCJd1PWFzWxSrctCem354Heb3MFKWrKzj/lbFiFLo1ZRkHMxW/v1m8TE/uCkuZAugNIX4J6Vq63JkJGQ8YooBYNanlHA1X7uac3oIPtjgLtjwGKJD5j4o81xmBuCFhU0STBfNqb/ctH2iv9QqbFXb9j2AnTe9jcoF3wyhXL/sosBzYMiJTM6/J3F3xanU3IjZsGJYy/HQwQX8WHerxpPwYAB6WL/oxWqaw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=AoBLW7U0pPOP5nDj+VNH8RQ1s7LZndECpgEE6GpDsXM=;
 b=IZF2Zo5vB5WUCIUiySDynCjNnOBO4+Wk3Ybo0KvBLySSMsuGkZvVJj5nAUENc4ShhiSMnqWAC9CS8yam9Tqf/AkMGMpi2acY52ov0gnGvCMhkQFqaz+/Jm1oLIT1flEGZOcwBRr4M+uXv3G4sW1+pVmOE/u4HloiMSY/ejgO5+99j2poUtHGCvfQjjfR+SFHOFsF84ukJGpK80ViGXNp7oX1p8sUzTXmtgweTbLop4JuOz4GmVeKu5Hqwg77PK5qOSZ2bW1A0p+1isxtCh1+KRhqiln1yE8UA7Esn4tujbkIveylLp1Oc/IWZWtBIuMz0jJmBr4xKN1sDEHOyEbJHA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 182.79.15.226) smtp.rcpttodomain=nhs.net smtp.mailfrom=office.com; dmarc=fail
 (p=quarantine sp=quarantine pct=100) action=quarantine
 header.from=office.com; dkim=none (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=toyotakirloskar.onmicrosoft.com;
 s=selector2-toyotakirloskar-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=AoBLW7U0pPOP5nDj+VNH8RQ1s7LZndECpgEE6GpDsXM=;
 b=O9DPo7tq5aNRp+7ldi0F327MTgN5eV0j+7cIIFt1np8jxHbbZNMRvG0EyQy5qb9E9N91VyNdhyZS4VYrOUAkxGVCMln/kYoBHGk8xJBU88GHQJ31eH3OZUWSNCnKEr3o6O+5yjfSeOCBoDSKbN3Jw5pXne/YRYgIBJaEgRWKptw=
Received: from MA0PR01CA0027.INDPRD01.PROD.OUTLOOK.COM (2603:1096:a01:b8::20)
 by PN3P287MB1414.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:1a3::14) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.42; Tue, 7 May
 2024 08:01:48 +0000
Received: from MA1PEPF00007263.INDPRD01.PROD.OUTLOOK.COM
 (2603:1096:a01:b8:cafe::d) by MA0PR01CA0027.outlook.office365.com
 (2603:1096:a01:b8::20) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.41 via Frontend
 Transport; Tue, 7 May 2024 08:01:48 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 182.79.15.226)
 smtp.mailfrom=office.com; dkim=none (message not signed)
 header.d=none;dmarc=fail action=quarantine header.from=office.com;
Received-SPF: None (protection.outlook.com: office.com does not designate
 permitted sender hosts)
Received: from email.toyota-kirloskar.co.in (182.79.15.226) by
 MA1PEPF00007263.mail.protection.outlook.com (10.167.242.5) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7544.18 via Frontend Transport; Tue, 7 May 2024 08:01:47 +0000
Received: from SBNEXN1.tkm.co.int (192.168.242.46) by SBBEXCASP1.tkm.co.int
 (192.168.242.20) with Microsoft SMTP Server (TLS) id 15.0.1497.42; Tue, 7 May
 2024 13:30:20 +0530
Received: from [109.206.237.232] (192.168.242.48) by SBNEXN1.tkm.co.int
 (192.168.242.46) with Microsoft SMTP Server id 15.2.1544.4 via Frontend
 Transport; Tue, 7 May 2024 13:30:17 +0530
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <info@office.com>
From: Tom Williams <info@office.com>
Date: Tue, 7 May 2024 01:00:13 -0700
Message-ID: <54fde5a6-9eda-4207-9c27-cd34708f2605@SBNEXN1.tkm.co.int>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: MA1PEPF00007263:EE_|PN3P287MB1414:EE_
X-MS-Office365-Filtering-Correlation-Id: b69ee58b-7e1a-4494-a907-08dc6e6bf19b
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
	CIP:182.79.15.226;CTRY:IN;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:email.toyota-kirloskar.co.in;PTR:ErrorRetry;CAT:OSPM;SFS:(13230031)(82310400017)(7416005)(61400799018)(48200799009)(35950700004)(376005)(62346018);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
	BCL:0;ARA:13230031|82310400017|7416005|61400799018|48200799009|35950700004|376005|62346018;
X-Microsoft-Antispam-Message-Info:
	=?iso-8859-1?Q?fURqOsWCyrUhnnHMWrdOSCMhmBd8Xq2Tr+63DpPtopLcJBWRp0vguImveq?=
 =?iso-8859-1?Q?agRmkVbl/IJlmy1uxFziDIYV/Bf/junj+ufs3+5Qi0ctmIr93axwZXyorh?=
 =?iso-8859-1?Q?VDeqD/mi5RtPlWNvSusAA5avbeaxW0N+JjHJGbUDguVFmQLnY3NkMK57xW?=
 =?iso-8859-1?Q?pmGOg2fItPl3yG0r69Rk36ekYbJvGVVFPbLbIZuG77+avfPEgKyUbYHXet?=
 =?iso-8859-1?Q?eKaDB8Nnwk/iPw3OLcIQ5K97M9sDvafTSpv7FpUlQadZ1OPjOX3qlBIa8e?=
 =?iso-8859-1?Q?1w8ngIL4f8zdfiDjVC5lNYQv2yaGLA1wwv5n+lWz8GI31UsZSxO3RXb7PJ?=
 =?iso-8859-1?Q?wEFt1+/oh73SONP/Ze/03IAmQNiw2sLGZMF9ZTh9T47MDthNdece/xf0WW?=
 =?iso-8859-1?Q?jA36Jvz1tvFC1sfK7mQ0pxTUABHG2l7zj4vwRQUyaOX6XXreFWAy4x5ABs?=
 =?iso-8859-1?Q?oeyJxONeXfLY3Rqm/pFqCkAS3ImuqYsMo//wfZW1akWBVKEY38qes2tmdT?=
 =?iso-8859-1?Q?YGgyalLunR1Zbrlt98amoJU5B+QCk9rqAPWwvZxVHiRSikfdILBMxeQd1L?=
 =?iso-8859-1?Q?Mbs+szV9dd5tQ6BSsqXu5KSgaA+Zb2xPTCiUrEHwMdrpUIm3UESFbnVbCA?=
 =?iso-8859-1?Q?DBoolBQGLDsPKJ1rYJ3mZ7ry4mHERLMH4P3zN4OTYh067/fEpTJQDWztyf?=
 =?iso-8859-1?Q?Lnb3rAKW95G9ByDcX5YSHubYMVQwmqs/zSIW7YKS+Z6ISJ9rCQVw4yKfzQ?=
 =?iso-8859-1?Q?ttxZOrpBx2VfDHjGoh+3vug7JqIbcAcjd6QeRENIuTLlsv6C2QQBd3FTt3?=
 =?iso-8859-1?Q?egUt/O3oM2Rqa8X65pJpWb1sdRYN0jqVDfhHtDl2ylr5DeWFgCLjpGgPGW?=
 =?iso-8859-1?Q?cdtSDHB2R/zaeFXHT49dfGDrTvUXVunx9EZNs+5ZxASWxGR2Hn9GeXN0VC?=
 =?iso-8859-1?Q?MbcTqR+LftknZKXpQsZMcFVvCV/2rb6NgHIByv90rdnzOtn924aWw9R/OO?=
 =?iso-8859-1?Q?yoxwyA20KsQljhthlRH7aWDWO0GsX/SzZc2REDCqPnE78d66e/DqSVQiLM?=
 =?iso-8859-1?Q?ZDj0tQ5GXh379pm3yewogepkSrRwQQbD1DEQvGDxJmczigdnk2UMyhqV2R?=
 =?iso-8859-1?Q?BGZC4ecutqrJTRM8C9RupNKPr7p8c+dL7Q38R4sQqmUV3rpVeMXrE229vL?=
 =?iso-8859-1?Q?yY+R6hI4EjVeOSRTCyQWS30w5eHoAiNeyTtYpNc9LwohzTbs0UViwOAl2n?=
 =?iso-8859-1?Q?ikK5CVC8aL5eIlRFfL5lJtcZemfDYnW2/9TuC2VCyPlPF8nlcC1UNBXaDT?=
 =?iso-8859-1?Q?brof8V+0e9yuMOXTRk6Vemy3fTmhOmsFSJvrLphLfKNMXzodT1I3Y30/Ih?=
 =?iso-8859-1?Q?IIbybQ+XtxuncUzf7q5eawyVnj/vT7RpGKdaSLSamorR6GqZtlT3XwDjuO?=
 =?iso-8859-1?Q?OB3p3fuhLv1v0duN7Prw4RDpwkpCLN29nXRtBKizsMxG+LZ4iC/7dNCJXn?=
 =?iso-8859-1?Q?y1jFdFt56lx5KhGg0qDAcneJVuakYmTqcfh4cmHah5aTUzB4lU6Guw1csA?=
 =?iso-8859-1?Q?BdoD8WgIHHhzGiUER/uELPtuNuLP2aNw7FL8M+2So8sxR3FEuuFDTZkQxb?=
 =?iso-8859-1?Q?gBua7pcdfzpnirsn+T5T7AvK6EMPnIjYxFxR0umkl8j+aDwIR6SvrbaiKY?=
 =?iso-8859-1?Q?vhW5MnYN5tmiQKvCnz1OkKrQTLQA+Pk5gA1qFL0NjLfSau3OQgDvdLMrxu?=
 =?iso-8859-1?Q?ddsrj/cBfO3/TEiu+6zkEUHRYGJ8KAN2rwTikccf+NeWsJUfz9ghYK+4Lo?=
 =?iso-8859-1?Q?RiksSaPbMRuFKocdy8hmP1lh3a8Tme/egViaQbeyt3bLcPMmJ0ilfXCdX0?=
 =?iso-8859-1?Q?zd3jBtPG32oBY/9f0oxEHcJGKLzgW669D801mOmiJ1J0hF5Kq96QjrVQaV?=
 =?iso-8859-1?Q?ROp/00xeHyYMfdwASBlj8w=3D=3D?=
X-OriginatorOrg: toyotakirloskar.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 May 2024 08:01:47.3365
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b69ee58b-7e1a-4494-a907-08dc6e6bf19b
X-MS-Exchange-CrossTenant-Id: 57b9390d-91d5-4fbd-8800-8fe81cc0529d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=57b9390d-91d5-4fbd-8800-8fe81cc0529d;Ip=[182.79.15.226];Helo=[email.toyota-kirloskar.co.in]
X-MS-Exchange-CrossTenant-AuthSource:
	MA1PEPF00007263.INDPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN3P287MB1414
X-Spam-Status: Yes, score=5.5
X-Spam-Score: 55
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn: My Dear, Good day and How are you doing? I am Tom Williams,I
    was the Financial Consultant to Late Jose Frank Donald who died in a Car
   Accident Last Year June 2023 along Dock Road London,before his death Late
   Jose Frank Donald deposited USD$1 [...] 
 Content analysis details:   (5.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 AXB_X_FF_SEZ_S         Forefront sez this is spam
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: toyotakirloskar.onmicrosoft.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 HK_SCAM                No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.5 MONEY_NOHTML           Lots of money in plain text
  0.0 T_MONEY_PERCENT        X% of a lot of money for you
  0.0 FILL_THIS_FORM         Fill in a form with personal information
  0.0 MONEY_FORM             Lots of money if you fill out a form
  0.0 MONEY_FRAUD_5          Lots of money and many fraud phrases
  0.0 FORM_FRAUD_5           Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  Reply very Urgent 

Attn: My Dear,

   Good day and How are you doing?

I am Tom Williams,I was the Financial Consultant to Late Jose Frank Donald =
who died in a Car Accident Last Year June 2023 along Dock Road London,befor=
e his death Late Jose Frank Donald deposited USD$12.800.000.00 Million with=
 our Bank here in London Since then several efforts to locate his relatives=
/family had been unsuccessful. I'm contacting you to Help receive USD$12.80=
0.000.00 Million from the Bank here in London into your Bank Account as the=
 Relation/Next of Kin to Late Jose Frank Donald before the Bank divert the =
Funds as unclaimed Cash.

I Promised that this Transaction will be conducted through Legal procedures=
 that will protect you from any Breach of LAW and All I need is your honest=
 cooperation to enable us to succeed in this Transaction,I assure you NO Ri=
sk and will be successful without any problem.

If you are interested furnish me with the following details:

Full Name:
Address:
Telephone numbers:
Occupation:
Age:
You will take 60% of the total Funds received into your Account and 40% for=
 me.

Best regards,

Mr.Tom Williams.
Financial Consultant.
E-mail: linkme2wilt44@inbox.lv