File: /home/govancoz/mail/.spam/new/1715068964.M423499P2250908.zacp120.ve.host,S=11969,W=12165
Return-Path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id kFtCGCTgOWacWCIAvcbEzQ
(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
for <govancoz+spam@zacp120.ve.host>; Tue, 07 May 2024 10:02:44 +0200
Return-path: <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>
Envelope-to: danielle@govan.co.za
Delivery-date: Tue, 07 May 2024 10:02:44 +0200
Received: from mail-bmxind01hn2238.outbound.protection.outlook.com ([52.100.219.238]:22692 helo=IND01-BMX-obe.outbound.protection.outlook.com)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1)
(envelope-from <bounces+SRS=ds6gq=MK@toyotakirloskar.onmicrosoft.com>)
id 1s4Fmb-00000009SFJ-3yie
for danielle@govan.co.za;
Tue, 07 May 2024 10:02:44 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=nynSCbgRRvvnt+VOZ1gTt+S2wSS3SLVeM6ECkOWqa3lZqRu7MKV5b3b+Uin5KbdVJYfjNovL9tglRPJcHBNxvBjOu36JPEYKI9CTY4tEFE3pMiq1pLjDBCJd1PWFzWxSrctCem354Heb3MFKWrKzj/lbFiFLo1ZRkHMxW/v1m8TE/uCkuZAugNIX4J6Vq63JkJGQ8YooBYNanlHA1X7uac3oIPtjgLtjwGKJD5j4o81xmBuCFhU0STBfNqb/ctH2iv9QqbFXb9j2AnTe9jcoF3wyhXL/sosBzYMiJTM6/J3F3xanU3IjZsGJYy/HQwQX8WHerxpPwYAB6WL/oxWqaw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=AoBLW7U0pPOP5nDj+VNH8RQ1s7LZndECpgEE6GpDsXM=;
b=IZF2Zo5vB5WUCIUiySDynCjNnOBO4+Wk3Ybo0KvBLySSMsuGkZvVJj5nAUENc4ShhiSMnqWAC9CS8yam9Tqf/AkMGMpi2acY52ov0gnGvCMhkQFqaz+/Jm1oLIT1flEGZOcwBRr4M+uXv3G4sW1+pVmOE/u4HloiMSY/ejgO5+99j2poUtHGCvfQjjfR+SFHOFsF84ukJGpK80ViGXNp7oX1p8sUzTXmtgweTbLop4JuOz4GmVeKu5Hqwg77PK5qOSZ2bW1A0p+1isxtCh1+KRhqiln1yE8UA7Esn4tujbkIveylLp1Oc/IWZWtBIuMz0jJmBr4xKN1sDEHOyEbJHA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
182.79.15.226) smtp.rcpttodomain=nhs.net smtp.mailfrom=office.com; dmarc=fail
(p=quarantine sp=quarantine pct=100) action=quarantine
header.from=office.com; dkim=none (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=toyotakirloskar.onmicrosoft.com;
s=selector2-toyotakirloskar-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=AoBLW7U0pPOP5nDj+VNH8RQ1s7LZndECpgEE6GpDsXM=;
b=O9DPo7tq5aNRp+7ldi0F327MTgN5eV0j+7cIIFt1np8jxHbbZNMRvG0EyQy5qb9E9N91VyNdhyZS4VYrOUAkxGVCMln/kYoBHGk8xJBU88GHQJ31eH3OZUWSNCnKEr3o6O+5yjfSeOCBoDSKbN3Jw5pXne/YRYgIBJaEgRWKptw=
Received: from MA0PR01CA0027.INDPRD01.PROD.OUTLOOK.COM (2603:1096:a01:b8::20)
by PN3P287MB1414.INDP287.PROD.OUTLOOK.COM (2603:1096:c01:1a3::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.42; Tue, 7 May
2024 08:01:48 +0000
Received: from MA1PEPF00007263.INDPRD01.PROD.OUTLOOK.COM
(2603:1096:a01:b8:cafe::d) by MA0PR01CA0027.outlook.office365.com
(2603:1096:a01:b8::20) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7544.41 via Frontend
Transport; Tue, 7 May 2024 08:01:48 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 182.79.15.226)
smtp.mailfrom=office.com; dkim=none (message not signed)
header.d=none;dmarc=fail action=quarantine header.from=office.com;
Received-SPF: None (protection.outlook.com: office.com does not designate
permitted sender hosts)
Received: from email.toyota-kirloskar.co.in (182.79.15.226) by
MA1PEPF00007263.mail.protection.outlook.com (10.167.242.5) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7544.18 via Frontend Transport; Tue, 7 May 2024 08:01:47 +0000
Received: from SBNEXN1.tkm.co.int (192.168.242.46) by SBBEXCASP1.tkm.co.int
(192.168.242.20) with Microsoft SMTP Server (TLS) id 15.0.1497.42; Tue, 7 May
2024 13:30:20 +0530
Received: from [109.206.237.232] (192.168.242.48) by SBNEXN1.tkm.co.int
(192.168.242.46) with Microsoft SMTP Server id 15.2.1544.4 via Frontend
Transport; Tue, 7 May 2024 13:30:17 +0530
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <info@office.com>
From: Tom Williams <info@office.com>
Date: Tue, 7 May 2024 01:00:13 -0700
Message-ID: <54fde5a6-9eda-4207-9c27-cd34708f2605@SBNEXN1.tkm.co.int>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: MA1PEPF00007263:EE_|PN3P287MB1414:EE_
X-MS-Office365-Filtering-Correlation-Id: b69ee58b-7e1a-4494-a907-08dc6e6bf19b
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
CIP:182.79.15.226;CTRY:IN;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:email.toyota-kirloskar.co.in;PTR:ErrorRetry;CAT:OSPM;SFS:(13230031)(82310400017)(7416005)(61400799018)(48200799009)(35950700004)(376005)(62346018);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
BCL:0;ARA:13230031|82310400017|7416005|61400799018|48200799009|35950700004|376005|62346018;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?fURqOsWCyrUhnnHMWrdOSCMhmBd8Xq2Tr+63DpPtopLcJBWRp0vguImveq?=
=?iso-8859-1?Q?agRmkVbl/IJlmy1uxFziDIYV/Bf/junj+ufs3+5Qi0ctmIr93axwZXyorh?=
=?iso-8859-1?Q?VDeqD/mi5RtPlWNvSusAA5avbeaxW0N+JjHJGbUDguVFmQLnY3NkMK57xW?=
=?iso-8859-1?Q?pmGOg2fItPl3yG0r69Rk36ekYbJvGVVFPbLbIZuG77+avfPEgKyUbYHXet?=
=?iso-8859-1?Q?eKaDB8Nnwk/iPw3OLcIQ5K97M9sDvafTSpv7FpUlQadZ1OPjOX3qlBIa8e?=
=?iso-8859-1?Q?1w8ngIL4f8zdfiDjVC5lNYQv2yaGLA1wwv5n+lWz8GI31UsZSxO3RXb7PJ?=
=?iso-8859-1?Q?wEFt1+/oh73SONP/Ze/03IAmQNiw2sLGZMF9ZTh9T47MDthNdece/xf0WW?=
=?iso-8859-1?Q?jA36Jvz1tvFC1sfK7mQ0pxTUABHG2l7zj4vwRQUyaOX6XXreFWAy4x5ABs?=
=?iso-8859-1?Q?oeyJxONeXfLY3Rqm/pFqCkAS3ImuqYsMo//wfZW1akWBVKEY38qes2tmdT?=
=?iso-8859-1?Q?YGgyalLunR1Zbrlt98amoJU5B+QCk9rqAPWwvZxVHiRSikfdILBMxeQd1L?=
=?iso-8859-1?Q?Mbs+szV9dd5tQ6BSsqXu5KSgaA+Zb2xPTCiUrEHwMdrpUIm3UESFbnVbCA?=
=?iso-8859-1?Q?DBoolBQGLDsPKJ1rYJ3mZ7ry4mHERLMH4P3zN4OTYh067/fEpTJQDWztyf?=
=?iso-8859-1?Q?Lnb3rAKW95G9ByDcX5YSHubYMVQwmqs/zSIW7YKS+Z6ISJ9rCQVw4yKfzQ?=
=?iso-8859-1?Q?ttxZOrpBx2VfDHjGoh+3vug7JqIbcAcjd6QeRENIuTLlsv6C2QQBd3FTt3?=
=?iso-8859-1?Q?egUt/O3oM2Rqa8X65pJpWb1sdRYN0jqVDfhHtDl2ylr5DeWFgCLjpGgPGW?=
=?iso-8859-1?Q?cdtSDHB2R/zaeFXHT49dfGDrTvUXVunx9EZNs+5ZxASWxGR2Hn9GeXN0VC?=
=?iso-8859-1?Q?MbcTqR+LftknZKXpQsZMcFVvCV/2rb6NgHIByv90rdnzOtn924aWw9R/OO?=
=?iso-8859-1?Q?yoxwyA20KsQljhthlRH7aWDWO0GsX/SzZc2REDCqPnE78d66e/DqSVQiLM?=
=?iso-8859-1?Q?ZDj0tQ5GXh379pm3yewogepkSrRwQQbD1DEQvGDxJmczigdnk2UMyhqV2R?=
=?iso-8859-1?Q?BGZC4ecutqrJTRM8C9RupNKPr7p8c+dL7Q38R4sQqmUV3rpVeMXrE229vL?=
=?iso-8859-1?Q?yY+R6hI4EjVeOSRTCyQWS30w5eHoAiNeyTtYpNc9LwohzTbs0UViwOAl2n?=
=?iso-8859-1?Q?ikK5CVC8aL5eIlRFfL5lJtcZemfDYnW2/9TuC2VCyPlPF8nlcC1UNBXaDT?=
=?iso-8859-1?Q?brof8V+0e9yuMOXTRk6Vemy3fTmhOmsFSJvrLphLfKNMXzodT1I3Y30/Ih?=
=?iso-8859-1?Q?IIbybQ+XtxuncUzf7q5eawyVnj/vT7RpGKdaSLSamorR6GqZtlT3XwDjuO?=
=?iso-8859-1?Q?OB3p3fuhLv1v0duN7Prw4RDpwkpCLN29nXRtBKizsMxG+LZ4iC/7dNCJXn?=
=?iso-8859-1?Q?y1jFdFt56lx5KhGg0qDAcneJVuakYmTqcfh4cmHah5aTUzB4lU6Guw1csA?=
=?iso-8859-1?Q?BdoD8WgIHHhzGiUER/uELPtuNuLP2aNw7FL8M+2So8sxR3FEuuFDTZkQxb?=
=?iso-8859-1?Q?gBua7pcdfzpnirsn+T5T7AvK6EMPnIjYxFxR0umkl8j+aDwIR6SvrbaiKY?=
=?iso-8859-1?Q?vhW5MnYN5tmiQKvCnz1OkKrQTLQA+Pk5gA1qFL0NjLfSau3OQgDvdLMrxu?=
=?iso-8859-1?Q?ddsrj/cBfO3/TEiu+6zkEUHRYGJ8KAN2rwTikccf+NeWsJUfz9ghYK+4Lo?=
=?iso-8859-1?Q?RiksSaPbMRuFKocdy8hmP1lh3a8Tme/egViaQbeyt3bLcPMmJ0ilfXCdX0?=
=?iso-8859-1?Q?zd3jBtPG32oBY/9f0oxEHcJGKLzgW669D801mOmiJ1J0hF5Kq96QjrVQaV?=
=?iso-8859-1?Q?ROp/00xeHyYMfdwASBlj8w=3D=3D?=
X-OriginatorOrg: toyotakirloskar.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 May 2024 08:01:47.3365
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b69ee58b-7e1a-4494-a907-08dc6e6bf19b
X-MS-Exchange-CrossTenant-Id: 57b9390d-91d5-4fbd-8800-8fe81cc0529d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=57b9390d-91d5-4fbd-8800-8fe81cc0529d;Ip=[182.79.15.226];Helo=[email.toyota-kirloskar.co.in]
X-MS-Exchange-CrossTenant-AuthSource:
MA1PEPF00007263.INDPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN3P287MB1414
X-Spam-Status: Yes, score=5.5
X-Spam-Score: 55
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Dear, Good day and How are you doing? I am Tom Williams,I
was the Financial Consultant to Late Jose Frank Donald who died in a Car
Accident Last Year June 2023 along Dock Road London,before his death Late
Jose Frank Donald deposited USD$1 [...]
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: toyotakirloskar.onmicrosoft.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 MONEY_NOHTML Lots of money in plain text
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Reply very Urgent
Attn: My Dear,
Good day and How are you doing?
I am Tom Williams,I was the Financial Consultant to Late Jose Frank Donald =
who died in a Car Accident Last Year June 2023 along Dock Road London,befor=
e his death Late Jose Frank Donald deposited USD$12.800.000.00 Million with=
our Bank here in London Since then several efforts to locate his relatives=
/family had been unsuccessful. I'm contacting you to Help receive USD$12.80=
0.000.00 Million from the Bank here in London into your Bank Account as the=
Relation/Next of Kin to Late Jose Frank Donald before the Bank divert the =
Funds as unclaimed Cash.
I Promised that this Transaction will be conducted through Legal procedures=
that will protect you from any Breach of LAW and All I need is your honest=
cooperation to enable us to succeed in this Transaction,I assure you NO Ri=
sk and will be successful without any problem.
If you are interested furnish me with the following details:
Full Name:
Address:
Telephone numbers:
Occupation:
Age:
You will take 60% of the total Funds received into your Account and 40% for=
me.
Best regards,
Mr.Tom Williams.
Financial Consultant.
E-mail: linkme2wilt44@inbox.lv