HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1spN4D-6557886941
From bounces+SRS=3Jo5w=QM@salud.pr.gov Sat Sep 14 09:19:37 2024
Return-path: <bounces+SRS=3Jo5w=QM@salud.pr.gov>
Envelope-to: mail@morsunivers.dk
Delivery-date: Sat, 14 Sep 2024 09:19:37 +0200
Received: from mail-westusazhn15011021.outbound.protection.outlook.com ([52.102.128.21] helo=BY5PR09CU001.outbound.protection.outlook.com)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98)
	(envelope-from <bounces+SRS=3Jo5w=QM@salud.pr.gov>)
	id 1spN4C-0000000ClEv-2W9g
	for mail@morsunivers.dk;
	Sat, 14 Sep 2024 09:19:37 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=PXmCYWwscCrTulT34B1VQqKRiZErCb3PhHxX+qxVyUwdcLpcTtZ5xsXXfdqIoaVcjMaLbN8d49Sr6AIXsk6vNVY5V4ZMz1VnehV8f3QVZO4IUzYd21fBmw4QbpCaiv8E4NlVqVnQNieWeEixUrhzAalvr4vZYndtCs5DcXDOGSqnoieFkxj1ptywSKzgAaybbPuRSPJJlMGLpb0qMLPMArf9uFeSA9dOTKJIr3XAnZNKYY7eBk+DitNbPDFf7rDFbKWHsojpUZ03V9cZzAQk46NnKilp+KjYTJ5jLZFjK8hDM4s6thIhBwVxo3Ga6iqeDTPGluG8dHIcC/7i91TYTQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=ib+NGGLTw+415p+QyvWn5yuo7EDfpTIXwRXBSGeZuu0=;
 b=MhDXCpfNYyf4tMM1i27F/q2WYFZN0t4DJJg30VNLYiZDqlkor2ERRT/eguYJ+XVmep/O/1Kzbid/O8egZOpUH2ELqGFE69ldQ+4+7LC3O/XSrgNbMTd8JzFg1NZPkmdIb+MIn6zHwuvmgcfOwwwyI3PmYUSnTUgxmfgvDQasGtXFa4z/mIWadyZWryTsKynPmQWoeGR7uxG7qW4Y4V/u7JU0kOJKBn/VjE0VxT/sFpy5u+ozdHcyKVYqeWO8pYPfoT6oOCr+ZC9bYeNa3f5nwDL1MvbnKl/7jpruSdh5owWqR5Ae0WTzT9s2mDD2HqusngIAwC1Kmwarf2ZamDEXmw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
 200.5.3.153) smtp.rcpttodomain=mopn.dk
 smtp.mailfrom=superenalotto.winners.com; dmarc=fail (p=reject sp=reject
 pct=100) action=oreject header.from=superenalotto.winners.com; dkim=none
 (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=dsdepr.onmicrosoft.com; s=selector2-dsdepr-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=ib+NGGLTw+415p+QyvWn5yuo7EDfpTIXwRXBSGeZuu0=;
 b=WujgQvFsHwFmtIeAYm/uNgVo7QqkP1DjrRloD7a/4eTvfabW4eUsv4qsVP0t6nTSlwCUsLkq5Hsy8AGkXZ8g3dv6wd8vgjXDwqStoob0gpROULV+l52acivNCIbpV96ERk9H1MBrU5C4mobmPwPd/kE5BYNRU1UIsA7Zf0o/Nlo=
Received: from BL0PR0901CA0003.namprd09.prod.outlook.com
 (2603:10b6:208:1c0::13) by SA1PR09MB9812.namprd09.prod.outlook.com
 (2603:10b6:806:289::22) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.22; Sat, 14 Sep
 2024 07:19:24 +0000
Received: from SA2PEPF00002251.namprd09.prod.outlook.com
 (2603:10b6:208:1c0:cafe::71) by BL0PR0901CA0003.outlook.office365.com
 (2603:10b6:208:1c0::13) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.29 via Frontend
 Transport; Sat, 14 Sep 2024 07:19:24 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 200.5.3.153)
 smtp.mailfrom=SuperEnalotto.winners.com; dkim=none (message not signed)
 header.d=none;dmarc=fail action=oreject
 header.from=SuperEnalotto.winners.com;
Received-SPF: Fail (protection.outlook.com: domain of
 SuperEnalotto.winners.com does not designate 200.5.3.153 as permitted sender)
 receiver=protection.outlook.com; client-ip=200.5.3.153;
 helo=mail.asem.pr.gov;
Received: from mail.asem.pr.gov (200.5.3.153) by
 SA2PEPF00002251.mail.protection.outlook.com (10.167.242.133) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7918.13 via Frontend Transport; Sat, 14 Sep 2024 07:19:22 +0000
Received: from AEX01V170.asem.org (10.12.31.170) by AEX01V170.asem.org
 (10.12.31.170) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.28; Sat, 14 Sep
 2024 03:18:53 -0400
Received: from User (10.12.31.254) by aex01v170.asem.org (10.12.31.170) with
 Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sat, 14 Sep
 2024 03:18:50 -0400
Reply-To: <eu.enalotto@gmail.com>
From: SuperEnalotto <info@SuperEnalotto.winners.com>
Date: Sat, 14 Sep 2024 00:18:56 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <a28daa9c-c105-4797-a823-c7cdd038b433@AEX01V170.asem.org>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SA2PEPF00002251:EE_|SA1PR09MB9812:EE_
X-MS-Office365-Filtering-Correlation-Id: 8bc9e6ff-7967-45a8-bc3c-08dcd48d8ec6
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
	CIP:200.5.3.153;CTRY:PR;LANG:da;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.asem.pr.gov;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(61400799027)(7416014)(35950700016)(82310400026)(23876020);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
	BCL:0;ARA:13230040|61400799027|7416014|35950700016|82310400026|23876020;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?zhV3V9g4gEqHozDm2/Asu/v/K5zyrZFmxvsHdF5XhqHihdidnUYix3nJ?=
 =?windows-1251?Q?Dbfs8VHStIu3eE6WqnYWdYegZ+u0erlNsq3ei1q8Mb8EQhSP7xk6ydnS?=
 =?windows-1251?Q?r7astCkU/WcDhbzEznyqD5esS5lIk1dlW0I9znG30BLG448HqCdphl3j?=
 =?windows-1251?Q?Cdjpv48EmP+QCvlmPJs4PPUzPZNeHFwPTr4tCOvapeSPYrX5Bx61RwKe?=
 =?windows-1251?Q?SJJNyVpJuA/v+MwOlBAq7MwfBeDHpmrghJWDyWS3gQRumr3o/ek4uW3h?=
 =?windows-1251?Q?3ODZcCRmVMt2SP6geVOvqWxOzQlTmd8NShFuXBumaJdgPSMR0iXKEvny?=
 =?windows-1251?Q?A47VOBP26GzbmDDb0NiBjvNj7QizO5+tuc4gQ3jzmWqpvoXpJutJEAdA?=
 =?windows-1251?Q?pyy532v/KwfHbd9AL/2MKgBVWljOg9zqRPYlG4zaNaHWOKNRxD73wOYl?=
 =?windows-1251?Q?W8pbneff2cwcdN/5hcM/O1wWISDKp8mOemg/TRqWELffmCGGmn+6uHCb?=
 =?windows-1251?Q?JqCNrtGGvlEb7zmy/eFDrCBIN85gERlfsLMbgKnubcrtcRcYkQC4WrMa?=
 =?windows-1251?Q?oclFphVQm55uH4MH3eMLnqHb3al61WUCWlmIewfUrUMx5xnpEOj3a1gL?=
 =?windows-1251?Q?LermHxTkN90DcB3R4OS2PcJ8Xjhz3gxguWnxdcjbVQDZaZ04ARJwNp2f?=
 =?windows-1251?Q?wDuVBhp8fBxDPr3M6XS/V7A3yRnfXpp+QWPRiFJCKNOeLqnxM8bxUrYJ?=
 =?windows-1251?Q?7z4tOUTbl8q4jTY6oQwh66VO8ElQ6ZdlmGFxUnaV1qdqjnSXQRrLjNQc?=
 =?windows-1251?Q?pgwd2F2pdMR1ZllNXN/s8yQCUWJP0+V3+fGLE6fnEZ02dSiivxQRW4WC?=
 =?windows-1251?Q?AcDe58V5BwDvqcBFauBmQNWu6Yw4BMcfdAGVOXBVX3q9mPuZ8uOL0XJp?=
 =?windows-1251?Q?3p+tpLExkbKracGUgc8pNuXOsM1Ix2nTVv53YcsI0+VSrk3sty4o+jye?=
 =?windows-1251?Q?jHSA+2ingR5aX1nJhNUD1K5FnY7FaMTfP1MWPiWujUPprqi54js39A3E?=
 =?windows-1251?Q?KweBjX5BjH/YSVJlRo6l9S/NatQnR75EXWLhl5V+h/8S4q81QViEy3Zd?=
 =?windows-1251?Q?yVeGafUz7VTwVcl928XxedQU46wnVbm4xPrLWAlCZaCHQwLVq0TeWCF4?=
 =?windows-1251?Q?vkDdLrRsg+FKrxRGUUAnAEIZqzR4mcYb/4Ii61EU+3fNChw0ewCVXXX7?=
 =?windows-1251?Q?BPyhwtCPYuKVgCSxYVuwrSG8MSzFd+cyEJ1MwOD0pnU5unnMEqmIah7Y?=
 =?windows-1251?Q?qcA+QC/FF3olr7C8KRzNEZV7AvCtuW64YY0cFAG80pl1Hzc280kPySF/?=
 =?windows-1251?Q?a6PJYA3Mciq6v7AFEf+TIW//OTJJIADiAgRrDc4lZN6pJPIeDe57PcLm?=
 =?windows-1251?Q?St+WzBySjyg5M1HUr6Jz2Zc/d6WctEcvuM0aJxGq6zV4DvH73DeaA++q?=
 =?windows-1251?Q?nOIB2Qz/+AUwRIdRRXMmlyqiqvt1GuqLyfsE3LEbZXwUGfgDEd/conqI?=
 =?windows-1251?Q?mBOCxoc6Bj2WakaTbunswnNdIFUzCgZGUZYdlGJp+7oc0obsqvo3E0lE?=
 =?windows-1251?Q?ogxh46Ix7eN+OM0feJIsDcmsz3axwhkF/Kg1W5to6fN1ERzqv92IP3Jm?=
 =?windows-1251?Q?Kti8FSTSAETyTmnO9PehdVdsJxof8M2dotsx3327fqxTn1U0+YVDtUuC?=
 =?windows-1251?Q?bsK8vjTKCRVsRTiRjtfmLFAZ72fjQUf0FOlbYl9y3+Ld1DuDv6A4O+7U?=
 =?windows-1251?Q?nKDaAbJic+yokHGUfq22sDM/K8AabahtQqZdQhe8n3oRVtHDGHuizpKU?=
 =?windows-1251?Q?NiztRdnqUsUnFbz5LoKvDn6u/xAKAkEApxXbahgCtSEbTz58ut0Znyhq?=
 =?windows-1251?Q?dTfzZQOXESRA7v7qyzPo3wmSWsNd6x0dsz/XaLqxML4XtWljvFjvKUul?=
 =?windows-1251?Q?jYs415teqNa7fJrm4v8dip5dhBS+KGubmTiYIvyjHWEW7R8U7g5jDmV0?=
 =?windows-1251?Q?kHSDZk+yrqG+DegL?=
X-OriginatorOrg: salud.pr.gov
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Sep 2024 07:19:22.9540
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 8bc9e6ff-7967-45a8-bc3c-08dcd48d8ec6
X-MS-Exchange-CrossTenant-Id: e906065a-f03e-47ad-a4c4-6b139a08445c
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e906065a-f03e-47ad-a4c4-6b139a08445c;Ip=[200.5.3.153];Helo=[mail.asem.pr.gov]
X-MS-Exchange-CrossTenant-AuthSource:
	SA2PEPF00002251.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR09MB9812
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 52.102.128.21, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='dsdepr.onmicrosoft.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 12.2 (++++++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Kжre vinder, Vi er glade for at kunne meddele, at vores sidste
    SuperEnalotto-lodtrжkning i forbindelse med EuroMillions og Powerball Lotto
    fandt sted den 30. august 2024. Din e-mailadresse med serie [...] 
 
 Content analysis details:   (12.2 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [52.102.128.21 listed in psbl.surriel.com]
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4999]
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
 -0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [52.102.128.21 listed in wl.mailspike.net]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.128.21 listed in bl.score.senderscore.com]
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.5 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
  0.6 MONEY_NOHTML           Lots of money in plain text
  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  0.4 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
  0.0 FROM_GOV_SPOOF         From Government domain but matches SPOOFED
  0.9 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
                             FREEMAIL
  1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [52.102.128.21 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.128.21 listed in sa-accredit.habeas.com]
X-Old-Subject:[EXTERNAL]Kжre vinder
Subject:*****SPAM***** [EXTERNAL]Kжre vinder
X-Spam-Status: Yes, score=12.2, +20 total spam score
SpamTally: Final spam score: 82

K=D0=B6re vinder,
 Vi er glade for at kunne meddele, at vores sidste SuperEnalotto-lodtr=D0=
=B6kning i forbindelse med EuroMillions og Powerball Lotto fandt sted den 3=
0. august 2024.
Din e-mailadresse med serienummeret 536-192-330 har trukket lykketallene 15=
-21-46-63-82-44 og du har vundet i 1. kategori.
De har derfor modtaget en engangsbetaling p=D0=B5 3.850.000,00 EUR {tre mil=
lioner otte hundrede og halvtreds tusinde euro}. For at frems=D0=B6tte dit =
krav beder vi dig sende os f=D1=88lgende oplysninger via e-mail for at beha=
ndle udbetalingen:

Fulde navn: Land: Boligadresse: Alder: Besk=D0=B6ftigelse: Mobilnummer: Og =
WhatsApp-nummer:

Tillykke fra mig og de ansvarlige for online lotteri afdelingerne SuperEnal=
otto, Euromillions og Powerball

Venlig hilsen,

Fru Katherine Federico
Leder af Online Betalinger / Valideringschef

NOTA DE CONFIDENCIALIDAD: La informaci=C3=B3n contenida en esta transmisi=
=C3=B3n est=C3=A1 destinada =C3=BAnicamente a las personas o entidades a la=
 que se dirige. Puede contener informaci=C3=B3n privilegiada y confidencial=
, incluida Informaci=C3=B3n de Salud Protegida (PHI). Si usted no es el des=
tinatario, se le notifica que cualquier revisi=C3=B3n, difusi=C3=B3n, distr=
ibuci=C3=B3n o duplicaci=C3=B3n de esta comunicaci=C3=B3n est=C3=A1 estrict=
amente prohibida. Si recibe esta comunicaci=C3=B3n por error, notifique al =
remitente inmediatamente y destruya este mensaje. CONFIDENTIALITY NOTE: The=
 information contained in this transmission is intended only for the person=
s or entities to which it is addressed. It may contain privileged and confi=
dential information, including Protected Health Information (PHI). If you a=
re not the recipient, you are hereby notified that any revision, disseminat=
ion, distribution or duplication of this communication is strictly prohibit=
ed. If you receive this communication by error, notify the sender immediate=
ly and destroy this message.