File: /home/govancoz/mail/.spam/new/1710230604.M944248P3424387.zacp120.ve.host,S=14011,W=14246
Return-Path: <hilbnmioivbnmnbcdeiqwd@outlook.com>
Delivered-To: govancoz+spam@zacp120.ve.host
Received: from zacp120.ve.host
by zacp120.ve.host with LMTP
id 0LD8NkwM8GWDQDQAvcbEzQ
(envelope-from <hilbnmioivbnmnbcdeiqwd@outlook.com>)
for <govancoz+spam@zacp120.ve.host>; Tue, 12 Mar 2024 10:03:24 +0200
Return-path: <hilbnmioivbnmnbcdeiqwd@outlook.com>
Envelope-to: candice@govan.co.za
Delivery-date: Tue, 12 Mar 2024 10:03:24 +0200
Received: from mail-mw2nam10olkn2046.outbound.protection.outlook.com ([40.92.42.46]:41130 helo=NAM10-MW2-obe.outbound.protection.outlook.com)
by zacp120.ve.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <hilbnmioivbnmnbcdeiqwd@outlook.com>)
id 1rjx6Y-00ENTx-2y
for candice@govan.co.za;
Tue, 12 Mar 2024 10:03:24 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=S2DVrfFUXeYaeWvxcT9O9FNHyOZEzjBbyYJ6dKfdkibRW9QxyPLCeJ9p/GjYpULl2gKtfek9cJ3kTt8TnkynqXCgsozcHc3PEAPgIzca6gPxmTW41oVfztu4VamTJGrViMFWhR//uU+zKUHP/UicwpX+CwyxyZ7JoAM3zcaFoxvOjChzDtZsMny1YimVRsh0rx1/Ym+r6MiZFHsWdMxJcz5+mvnNijC45bgpCYhoN8ixO7fPrDAIqK9oEIAD4dUJlwKV7IIwKaU4J6vd6NDPwDkoPqJIct1x0SsfD8ZgX9egqtrItwauZllHJcBFdvAk1dKiGEPJKie82Q1g4HXdtg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=7+xsEjOWJ+OaOL4ddfcQ8xzma1mc7dTu+UJTwGRRWRg=;
b=H0NSYM0Uq7ccm+FKPpM/d/RflvsOqSU8qW97VBHtf2gvh1kK11OCHuWybYs7k6pXdMzRJcD9BawrmofANisIkPktKj18Y5Kr81/0k2e9VDXAbTTzrzE6p/G8rbGI4DcJZRiy5cARQarNTVCnnhV0JFZJVch5BDz9LxeFmo1tE3RLfOviwIND0UHQo2U15ZNbRzAknM5r0twllvzL4/OcZZiavCf/sdMSE7BStYt8Lw0ohum6IcJyEpDkRAXdr/VB7a6nrKI24GUmTelJ1a9fNqyPebK9Q/ys9k1c1+B+6bGD+K80kMnf+veO2UfSqL8oRQWl8Mqms+9BfhV7osWmsQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=7+xsEjOWJ+OaOL4ddfcQ8xzma1mc7dTu+UJTwGRRWRg=;
b=KMgWvsgbKKue9Dd0REG7cUgrhAz58B3AHW3scLOGyHDYYNTXe67zvjBkyReJQlUNRWvpseXDZfZchxwVIHrj74DOztmCLrFWyHr6ZlsFEhd52FgUjZFaNfnf4raaxype3cMoCUR3CE21F8h5iJLyaFeSouyQQvPzuE4bkrp9WtKXkCUbp5bAX14EffvrIWa4Z+LbgiJfuOBh6ls2KyVFyXxBu0v+kG5abjftI7AnaOcl/wHr0juHw+rbJAdqFr4S6C/SKF5ALsakr7XsMYXoQ9VDAbWBUbYESiK6O4ALCQHl3mSTBD5NElN6bUGvNrt10KXPNJUExN2n6SONQOxiGg==
Received: from DM4PR12MB6471.namprd12.prod.outlook.com (2603:10b6:8:ba::10) by
PH7PR12MB6718.namprd12.prod.outlook.com (2603:10b6:510:1b1::11) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7362.34; Tue, 12 Mar
2024 08:02:22 +0000
Received: from DM4PR12MB6471.namprd12.prod.outlook.com
([fe80::152b:99a2:cb0b:fd27]) by DM4PR12MB6471.namprd12.prod.outlook.com
([fe80::152b:99a2:cb0b:fd27%5]) with mapi id 15.20.7362.035; Tue, 12 Mar 2024
08:02:22 +0000
From: In fo <hilbnmioivbnmnbcdeiqwd@outlook.com>
Thread-Topic: YOU
Thread-Index: AQHadFOPRGAY8zWuWU6hSYF/3NTvdQ==
Date: Tue, 12 Mar 2024 08:02:21 +0000
Message-ID:
<DM4PR12MB6471C5A9F7527874FD6D2989CD2B2@DM4PR12MB6471.namprd12.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [iKMJUyNnpuE2ME9U9fgyP+uMyB7Y1aKo]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DM4PR12MB6471:EE_|PH7PR12MB6718:EE_
x-ms-office365-filtering-correlation-id: c2759ed1-59a7-442c-a64a-08dc426abf07
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?FxuBplLgf7Cp1C7jQwik8abNofGFQXv5H6Erk+zftZixp/CIGwZQdlrTCh?=
=?iso-8859-1?Q?nhTUpalOpg6rRSQ8+/FeXqOysZBNbycU5gYU4H9Ir0zaZbkjL546eEo1su?=
=?iso-8859-1?Q?qrjvpEOvGRG0uzxK9/fPTe2d4VCk8yK5qUtfUrtZdwJlAnG9RQWDyow1jZ?=
=?iso-8859-1?Q?KSxmFREzdvx+tC5it4p949lUTus2lHPk0OfMEyw2HF55B8uZGNyJftWsL1?=
=?iso-8859-1?Q?u3g0hNGej9iaO3xlgVDhmiAemOXot8Z45QO2KziWzAyRVjeSdKzfqL/0Pe?=
=?iso-8859-1?Q?Ix9NIpVpgW5NvZa4qDFtPQUB7Dpg43lS4hbHIRpidGuqdAgNw7Aet3rTt3?=
=?iso-8859-1?Q?wPgRyWmoMruVsl3O0IxZ+83ip7yT374ib1v39+lNTkHdOzP8Jz3dNl5Xcb?=
=?iso-8859-1?Q?8o4S9P6V/EAsAoG+BGJMBBhC3AUVyFPwn7IsvIEhLi2xhOW2djNl0ACl5n?=
=?iso-8859-1?Q?llf5CWXPbrLJ9Q9YIHm0c6g55kKU29/tdO79uwihkWZ4Bvr85fBu0sGqIR?=
=?iso-8859-1?Q?ji3NbrmlmFrcsjU+Z/wh0zM8ZCpcxFd9DjBwjL2bnFhfg433HK4lvzsXl9?=
=?iso-8859-1?Q?23ySs8NBiH+Gtl6mPEzmm9uka4DZbSmWn8HUyb8beLP9l06G3cVMWwZ0F8?=
=?iso-8859-1?Q?DAviE/L9FkJdzUpMVO+0l7zhp6+1dsomgz5IN1ZL+HErzu/D6p+gRECKma?=
=?iso-8859-1?Q?iiz1wW+aC6ToIVFKp40GdDwbsBzsPGQmIAa+21X8fBnJUiLJH7j0Vcr5j9?=
=?iso-8859-1?Q?WB9R1M7UAtcR3+6qyfWF9JMw0cK0Dq5k3vAMLDPk+YYwJ5+4ZlznCcfFDl?=
=?iso-8859-1?Q?B+hezKkdfM5toMI9nb0pybtowCjI8rDhqHDkJuAq4L8Bq7SOKKuMuxwaLg?=
=?iso-8859-1?Q?lre/MS9wY/RtdUn+XKBcTI626hH3E31vdOlgKtrP4SapfIWB4kHmXgQn6B?=
=?iso-8859-1?Q?jRU8dca9/ZsO6UmgxnTqu39+xgsRfc0w9MDJBDaDbwtbi0WO0YB81a3I1D?=
=?iso-8859-1?Q?BnyxikDKLC8uOmlyGAVnuaOr1g1YeuF0w5p6Z3rhlJmjGVQcju7CElfGr+?=
=?iso-8859-1?Q?4xcNfg5tgEe+Ql1U1YCeUpgex35y+6aTlP2LnhCS4bjW5sm+qqHYOVtE1/?=
=?iso-8859-1?Q?KnF96TQoCNJQ29RNX9n+DLwZQCCv7EpMUgnCLZrelkPeY4y0AP2iIzFNM2?=
=?iso-8859-1?Q?NbuN3kHxHIVU8+Wj6W+oCTelk33KN1KRexXydBRtOQ9rNw0iSZJNmEDV3/?=
=?iso-8859-1?Q?Wb5N63GVEmbXTyLkclgkaojErh6o7z/P1sfiENZVibdgxatFxZymsjrGVM?=
=?iso-8859-1?Q?ddVG?=
Content-Type: multipart/alternative;
boundary="_000_DM4PR12MB6471C5A9F7527874FD6D2989CD2B2DM4PR12MB6471namp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM4PR12MB6471.namprd12.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: c2759ed1-59a7-442c-a64a-08dc426abf07
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2024 08:02:21.8564
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR12MB6718
X-Spam-Status: Yes, score=6.0
X-Spam-Score: 60
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "zacp120.ve.host",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, I don't need to introduce myself, as you can see, I'm
an elusive Hacker and I've full access to your devices. I've been successfully
watching you for a very long time by infecting a malware through the adult
site you visit regularly. My Spyware has also recorded a video of you masturbating
and satisfying your [...]
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[hilbnmioivbnmnbcdeiqwd[at]outlook.com]
1.2 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.9 URG_BIZ Contains urgent matter
1.6 MALFORMED_FREEMAIL Bad headers on message from free email
service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** YOU
--_000_DM4PR12MB6471C5A9F7527874FD6D2989CD2B2DM4PR12MB6471namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello,
I don't need to introduce myself, as you can see, I'm an elusive Hacker and=
I've full access to your devices.
I've been successfully watching you for a very long time by infecting a mal=
ware through the adult site you visit regularly. My Spyware has also record=
ed a video of you masturbating and satisfying yourself. I have full access =
to your address book and I'll be very happy to share this interesting infor=
mation to your contact list and social media too.
To prevent this from happening, you're hereby instructed to send me R25, 00=
0.00 through Spar / Checkers / Shoprite Money Market Counter or Capitec/Sta=
ndard Bank Instant Money or Ned bank, send me the Vouchers number and the 4=
-Digit PIN number to this email address: webw1778@gmail.com.
Once the compensation is received (Yes consider it as a compensation) I wil=
l delete the information immediately, and you will never hear from me again=
. I will receive a notification once this message is opened and the countdo=
wn will begin. I urge you not to Ignore this instruction and send it to avo=
id complications.
Waiting for your urgent response!
--_000_DM4PR12MB6471C5A9F7527874FD6D2989CD2B2DM4PR12MB6471namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);">Hello,</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
"><br>
</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
">I don't need to introduce myself, as you can see, I'm an elusive Hacker a=
nd I've full access to your devices.</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
"><br>
</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
">I've been successfully watching you for a very long time by infecting a m=
alware through the adult site you
visit regularly. My Spyware has also recorded a video of you masturbating =
and satisfying yourself. I have full access to your address book and I'll b=
e very happy to share this interesting information to your contact list and=
social media too.</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
"><br>
</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
">To prevent this from happening, you're hereby instructed to send me R25, =
000.00 through Spar / Checkers / Shoprite
Money Market Counter or Capitec/Standard Bank Instant Money or Ned bank, s=
end me the Vouchers number and the 4-Digit PIN number to this email address=
: webw1778@gmail.com.</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
"><br>
</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
">Once the compensation is received (Yes consider it as a compensation) I w=
ill delete the information immediately,
and you will never hear from me again. I will receive a notification once =
this message is opened and the countdown will begin. I urge you not to Igno=
re this instruction and send it to avoid complications.</span></div>
<div><span style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=
vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=
"><br>
</span></div>
<div class=3D"elementToProof"><span style=3D"font-family: Aptos, Aptos_Embe=
ddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0);">Waiting for your urgent response!</span></div>
</body>
</html>
--_000_DM4PR12MB6471C5A9F7527874FD6D2989CD2B2DM4PR12MB6471namp_--