HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1snmHX-6557516412
From bounces+SRS=9VcsL=QH@salud.pr.gov Mon Sep 09 23:50:47 2024
Return-path: <bounces+SRS=9VcsL=QH@salud.pr.gov>
Envelope-to: dorte@globen-flakket.dk
Delivery-date: Mon, 09 Sep 2024 23:50:47 +0200
Received: from mail-eastus2azhn15012042.outbound.protection.outlook.com ([52.102.138.42] helo=BN8PR09CU001.outbound.protection.outlook.com)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98)
	(envelope-from <bounces+SRS=9VcsL=QH@salud.pr.gov>)
	id 1snmHW-000000039ij-2mVL
	for dorte@globen-flakket.dk;
	Mon, 09 Sep 2024 23:50:47 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=AV/tWY30dDJZGljBj9oWPjA+LznxrdVQ7fM0ouqRVtS7D8yK0udKNrArBVvZoIzl71hLGStgh6eR31i0L41LOKI9XBOjjyJQChsgh29pAWXwUlsawVX6MLkEFPXHaE0lDF87uldNHlsooGa2VheeNW/ImaP3Lw6w4iK/+D1We2iN3djA7OC6avbZctVYxLHmub5CNJxhgQTC/h5Zv1ijNp6ytc98MIdjSQ0ji8VtORzbt2PP3KNAMrF5kiQ//pnaWyKJnyv3A/WCH/SjmRqi7ON2QHt6FcyAExPwIbPncJ3lYdQj7eMKjQ9Une5SVptsuhG5PjrxFHOS3cT6pvFJQA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=FdtV/TuuXTt5a41zL3h42sfoEGV0eJfilvXzc2gBN6g=;
 b=DlryDTeDalHRs34v/3Km2gSD7Pj4A+kVFODKr1eJ9ndC6Hv98EeOCmMcRxtjremyklOZ2NE3VuYN3St/BSzx/nQmiy8SlSt66LFn6Oh0TJQ7aNYd6z0tbB1trEdIXBc6SEQY+/BdsoF5hrbAGh8f906dxd64yGN84HtmIZiD8oLU8hRXhGse03ybVyHLlpaCHoVSPupwZk7gj1J3wLu5BjtzrnvIv6nKGuTkAJ3gGqESohUiExmy5C1DDG2yWdzCpIp6qU4ipfBpfd4eAUtJfjvtV+oD8TIYGJT8wzLJYSjjvkuO3QszvgAlw2EMG9f+800kfKX9DeACWIZ30wfCsw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 200.5.3.153) smtp.rcpttodomain=dejemco.dk
 smtp.mailfrom=globaloutreachorg.com; dmarc=none action=none
 header.from=globaloutreachorg.com; dkim=none (message not signed); arc=none
 (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=dsdepr.onmicrosoft.com; s=selector2-dsdepr-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=FdtV/TuuXTt5a41zL3h42sfoEGV0eJfilvXzc2gBN6g=;
 b=FH5B/ehHBYPfti9t0aKMNZi6adR9oGGPa5aNJqmCM2apWslyCi92WDIi2AEeu3WjsUL1Hv0vsy4LxOrLhXJxRJcBVEEjQBAcTlKq4uZBS0oBSxySNO+ANhU/FBMeKSeaz3JiYquOR3sl1FhpA/+sUUur5WaIbKjkeJOxcvj4zUg=
Received: from BL0PR0901CA0005.namprd09.prod.outlook.com
 (2603:10b6:208:1c0::15) by SJ0PR09MB11320.namprd09.prod.outlook.com
 (2603:10b6:a03:50b::16) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.20; Mon, 9 Sep
 2024 21:50:37 +0000
Received: from BL02EPF0001B417.namprd09.prod.outlook.com
 (2603:10b6:208:1c0:cafe::23) by BL0PR0901CA0005.outlook.office365.com
 (2603:10b6:208:1c0::15) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.24 via Frontend
 Transport; Mon, 9 Sep 2024 21:50:37 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 200.5.3.153)
 smtp.mailfrom=globaloutreachorg.com; dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=globaloutreachorg.com;
Received-SPF: None (protection.outlook.com: globaloutreachorg.com does not
 designate permitted sender hosts)
Received: from mail.asem.pr.gov (200.5.3.153) by
 BL02EPF0001B417.mail.protection.outlook.com (10.167.242.197) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7918.13 via Frontend Transport; Mon, 9 Sep 2024 21:50:36 +0000
Received: from AEX01V170.asem.org (10.12.31.170) by AEX01V170.asem.org
 (10.12.31.170) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.28; Mon, 9 Sep
 2024 17:50:15 -0400
Received: from User (10.12.31.254) by aex01v170.asem.org (10.12.31.170) with
 Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Mon, 9 Sep 2024
 17:50:12 -0400
Reply-To: <gcoutreach1@gmail.com>
From: Global Outreach Org <donations@globaloutreachorg.com>
Date: Mon, 9 Sep 2024 14:50:16 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <9121d542-9a1f-4851-a345-84f14dab6b9c@AEX01V170.asem.org>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL02EPF0001B417:EE_|SJ0PR09MB11320:EE_
X-MS-Office365-Filtering-Correlation-Id: cfe89ae6-86b0-442c-7f1c-08dcd1197076
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
	CIP:200.5.3.153;CTRY:PR;LANG:da;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.asem.pr.gov;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(61400799027)(82310400026)(7416014)(32650700017)(35950700016)(20122699018);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
	BCL:0;ARA:13230040|61400799027|82310400026|7416014|32650700017|35950700016|20122699018;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?XO8ny3KIkgbjvDg8mSSql/bsgIomJo3eoPUxffU/nzrJql/i1qgo1voT?=
 =?windows-1251?Q?D+JpC4GkXEewrA6XXqqnUf6tfgMqZHWRnTN2uEw9Ttw5FYLeansmOWKh?=
 =?windows-1251?Q?cHGpPbY1v4xQeK6eeZEpGAc1jVNU7ApN22uXgtBK/TH6zY34GW5HjZ6U?=
 =?windows-1251?Q?1ghjZ+FCykI49dP7Jr263EUKavNP0N7muR71V+emP8w8G3CuAJOjxkHl?=
 =?windows-1251?Q?MYung7+58DM3vZHfGVC0uvHgZCPINRZdKaqMLSCut+niaJO/srVcYLak?=
 =?windows-1251?Q?IUPYKoNJUnJOf2jr7WozLKBQHdlrO02Nr/uWdlAy9rHRvhI/T1yGw6Ko?=
 =?windows-1251?Q?/u1xKBSE5SATbXPMpMuEfkNyZHqn/mUPWSIm7aRaTf41Q3bjd5IQ0WFM?=
 =?windows-1251?Q?2XWusAa7iBSTWi13Y9KN0G7yaQ8zkPQkB4Xd7sD/L9TEYuGbalE46ly4?=
 =?windows-1251?Q?25U1ygdONWG61nFdUx5u0q4f8KD3n1WDzUopDzhfQhS5n8vN3cshwPqt?=
 =?windows-1251?Q?c5o8kvYZMWhkdmxs/EgaH7E1HCFGH9Oxs0LrP44Rk8UPoAi54XnlYsEi?=
 =?windows-1251?Q?o2Kn6meg9X5jJaFd9r1M9rim8ds3vK+kKMncDsTX586HeCCum1I+l3R6?=
 =?windows-1251?Q?eMnsF856+IZP/wMe3xQqjapDhpOIY3JIB9d3LKCMJjSJmvETiUv6/SsT?=
 =?windows-1251?Q?/qCdJFfu2m38ijZ3xBZvHbu4sQyI6LtmlxwOI/YosaI0EayEyy/zXdDc?=
 =?windows-1251?Q?usVdQ4BT3xKlDiUP+SCYejBi/OOxOUWCVB8hjxW35eNxDd+zS70IpZlY?=
 =?windows-1251?Q?+jUQpJF6K9gq/1n/fsILh6HPnn4FtcYi6unig/bCz+85qwUkLFajPJU/?=
 =?windows-1251?Q?mzKY/pFt+5NyDoxPgsHr06BBN4OJgxEvnwllcv2HyrP5BPV38Q2+9c+2?=
 =?windows-1251?Q?sn10JYdGwdrIDFj1Jm660pC2poASJ9YUxLJvjmvzlNTH/BWQsErIvNKR?=
 =?windows-1251?Q?eGHyQuWBrNgyEeGSie5CWki+R1Goj4XZHuzwS44PkBegk8F7h8FHSWj5?=
 =?windows-1251?Q?gyd8PK9uwlHMiMGg94tY1ZtAmOOm1MvD7b/v6RDOgIWCZg9vru9bU7lY?=
 =?windows-1251?Q?Hrw0+EH1Cyu0FDM8NtMtsqIw0hPBm/ieFP3et3oQgPEH+7qUxn0FVy3I?=
 =?windows-1251?Q?p5Zmf/CZf1BuJNKNEZWOomGAIS4wTLsInZ5Yz4cwHrNctzt8Kub19Rlh?=
 =?windows-1251?Q?iFC1YzK7GuciDVlR+fi9cJCTLz0/+12I8uk4/Kzth81rZIDb7JA7amwV?=
 =?windows-1251?Q?Tw79QW+6XmPUltbdQQiqki80o18XxeKU4hQMetlv0bIbBPIJDCyIb5VZ?=
 =?windows-1251?Q?aCLawoKoprOfHIns5t8xvV4e/Xd8LsaC42iivo1ifOZ2Xgra7W2L2Ifi?=
 =?windows-1251?Q?0XyROB4r5wKdulhYHoRVqWydcEyhNPey3rRiTuNFa5zksV/cZrvsaOoC?=
 =?windows-1251?Q?QHLLS9/dMKG2onOQGlf4TOroKSpHN5kFRT2CcEFmi9PZdq8gHQoBV9rh?=
 =?windows-1251?Q?4YPWVPHR45VQcOUVuP10so3MAQd+y9bJl30ugA0VQrFN1KsW9CJLL0ZY?=
 =?windows-1251?Q?z4PSfsQomj1aHlot4nk11/8d/MAPhwWG16u90XHEtrFqKuIQw3QwXmi9?=
 =?windows-1251?Q?yRTC/ktAIbqG2mRwE0wMQuyX+WD7rsKrLOUps0HSbU5Zmdi1mZODCMz4?=
 =?windows-1251?Q?XdKWusm9VlBrQAWUFQDmSzMQBfqReLLn0A1oJwW7pEqP1oW6+scbRtQT?=
 =?windows-1251?Q?wZRbjHNoUhZHLPSjJi5RqkGH5YeyIBMDx70ft6j69U/BuT9WTAeCeijS?=
 =?windows-1251?Q?w/G73Kfy1HP3nDQdELbFbE1P/3eYXhyjY8yrD37pBrvrv1sl94wfmVdo?=
 =?windows-1251?Q?Vpvmk+yg1galGgZCC5dM9FVRKZZ9FUJdqbWe2/uYt1iO3Uuf5uGx6+0/?=
 =?windows-1251?Q?YNf256qfb03/kxMl1W0+ZCBKtmJROAch7manpY9z0iZ5BEUb/pPmedNf?=
 =?windows-1251?Q?nhQycOod+7u7hwtf?=
X-OriginatorOrg: salud.pr.gov
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Sep 2024 21:50:36.9875
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: cfe89ae6-86b0-442c-7f1c-08dcd1197076
X-MS-Exchange-CrossTenant-Id: e906065a-f03e-47ad-a4c4-6b139a08445c
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e906065a-f03e-47ad-a4c4-6b139a08445c;Ip=[200.5.3.153];Helo=[mail.asem.pr.gov]
X-MS-Exchange-CrossTenant-AuthSource:
	BL02EPF0001B417.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR09MB11320
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 52.102.138.42, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='dsdepr.onmicrosoft.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 11.0 (+++++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  god dag, Din e-mail er blevet udvalgt til at modtage en donation
    fra Tammy og Cliff, parrene, der vandt $316,3 Million Dollars Powerball Jackpot
    den 5. januar 2022. De har frivilligt besluttet at dele [...] 
 
 Content analysis details:   (11.0 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5000]
  0.0 AXB_X_FF_SEZ_S         Forefront sez this is spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [gcoutreach1(at)gmail.com]
 -0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [52.102.138.42 listed in wl.mailspike.net]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.138.42 listed in bl.score.senderscore.com]
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.7 MONEY_NOHTML           Lots of money in plain text
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.9 FROM_GOV_SPOOF         From Government domain but matches SPOOFED
  0.4 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
  2.4 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
  1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.3 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
                             FREEMAIL
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.138.42 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [52.102.138.42 listed in sa-trusted.bondedsender.org]
X-Old-Subject:[EXTERNAL]Du har en donation
Subject:*****SPAM***** [EXTERNAL]Du har en donation
X-Spam-Status: Yes, score=11.0, +20 total spam score
SpamTally: Final spam score: 70

god dag,
Din e-mail er blevet udvalgt til at modtage en donation fra Tammy og Cliff,=
 parrene, der vandt $316,3 Million Dollars Powerball Jackpot den 5. januar =
2022. De har frivilligt besluttet at dele en donation p=D0=B5 summen af ??1=
0 Million Dollars af de samlede vundne penge fra lotteriet. Folk blev udval=
gt tilf=D0=B6ldigt fra forskellige kilder, derfor f=D0=B5r du denne e-mail.

Besvar denne e-mail for at f=D0=B5 flere oplysninger, og hvordan du modtage=
r donationen

Tak
Global Outreach Organisation
NOTA DE CONFIDENCIALIDAD: La informaci=C3=B3n contenida en esta transmisi=
=C3=B3n est=C3=A1 destinada =C3=BAnicamente a las personas o entidades a la=
 que se dirige. Puede contener informaci=C3=B3n privilegiada y confidencial=
, incluida Informaci=C3=B3n de Salud Protegida (PHI). Si usted no es el des=
tinatario, se le notifica que cualquier revisi=C3=B3n, difusi=C3=B3n, distr=
ibuci=C3=B3n o duplicaci=C3=B3n de esta comunicaci=C3=B3n est=C3=A1 estrict=
amente prohibida. Si recibe esta comunicaci=C3=B3n por error, notifique al =
remitente inmediatamente y destruya este mensaje. CONFIDENTIALITY NOTE: The=
 information contained in this transmission is intended only for the person=
s or entities to which it is addressed. It may contain privileged and confi=
dential information, including Protected Health Information (PHI). If you a=
re not the recipient, you are hereby notified that any revision, disseminat=
ion, distribution or duplication of this communication is strictly prohibit=
ed. If you receive this communication by error, notify the sender immediate=
ly and destroy this message.