HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1spYZw-6547192104
From bounces+SRS=3Jo5w=QM@salud.pr.gov Sat Sep 14 21:37:08 2024
Return-path: <bounces+SRS=3Jo5w=QM@salud.pr.gov>
Envelope-to: dorte@globen-flakket.dk
Delivery-date: Sat, 14 Sep 2024 21:37:08 +0200
Received: from mail-northcentralusazhn15011021.outbound.protection.outlook.com ([52.102.146.21] helo=CH1PR09CU001.outbound.protection.outlook.com)
	by cde2.duelhost.dk with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98)
	(envelope-from <bounces+SRS=3Jo5w=QM@salud.pr.gov>)
	id 1spYZv-0000000C8X9-3r7n
	for dorte@globen-flakket.dk;
	Sat, 14 Sep 2024 21:37:08 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=MhAbVf50Jz4vlQ0mVRXhJHSEnhiVhmQmYWJsxiJtHZMSeceyHR7ycRKkc76sjHoWmNtjIxpgOQPxnWOd5ntEf9tb2J08ANKuIRKW3TqGCQXgILKuQJe3yPWHIZDY7m4Y5op1vtYni/avKWnAxNHsZZpZOSfaUYU89Hx0Er0FVQ2NCvSlhFu7BrvaDnsDCKGoPXTno8SvuuG8sYzhZU9t6beEdsKbb/iWj8lyYSJMBB6DkiuIjb5C9KHiFTHBUT517Us3teh0PsFwSI1+8rgeDeErLk9LFGuYmg9a7ClNzj7BMwk3IyRvpg94gDSOsesAqNigUbKxm7hIrhahLvFdYQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=FdtV/TuuXTt5a41zL3h42sfoEGV0eJfilvXzc2gBN6g=;
 b=L3bvlMEbbF2qF3F9tKJtl7f0USf7uKp9gKik2a8RWe7I6O7z1yor3uYkZkc03EcmJ+B0svxbB0xwJBI4ogxjlTmkGCKpWzrG45I/brl8NyWxXLXrmGRCvfoRHju4wqYDIuX/ymWTC65a2wDkac0neVQThKBDbeE9pd6JQgaQjRqXH1MXtZG6FnaiX89vKDKoACIPMclimZF0pdfaaoHNqce88tDAitdXBzITndLfC1jryYom2+Y3ZJ7uxwkzbQZ3iM3wQfaO7D8AuU+YgOdFD5juJyUtlXZ4hcwzsbDOEOMHJShQte3oLhHE1zneh8RAAjhW4YMqewLUtGIDyOpWbw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 200.5.3.153) smtp.rcpttodomain=globen-flakket.dk
 smtp.mailfrom=globaloutreachorg.com; dmarc=none action=none
 header.from=globaloutreachorg.com; dkim=none (message not signed); arc=none
 (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=dsdepr.onmicrosoft.com; s=selector2-dsdepr-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=FdtV/TuuXTt5a41zL3h42sfoEGV0eJfilvXzc2gBN6g=;
 b=Cz94p435czyUQqx3EHHoHi+4UyFu37vlKtX4GG4Ycbb8gYtYHKU8s0W+Wtvrj8ShG99YDtPMEd51byu2//Zw1cLN2KUZ8WLI33GOdZF1+k9cHJ9jonKx/etoPRZ2gLEIzJYKmfWuUiuaqlUnf7Q5NU8hBzE1bV7JaqCqnBb4aho=
Received: from CY5PR09CA0005.namprd09.prod.outlook.com (2603:10b6:930:1::26)
 by DS0PR09MB10993.namprd09.prod.outlook.com (2603:10b6:8:178::17) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.22; Sat, 14 Sep
 2024 19:36:56 +0000
Received: from DS4PEPF00000170.namprd09.prod.outlook.com
 (2603:10b6:930:1:cafe::b) by CY5PR09CA0005.outlook.office365.com
 (2603:10b6:930:1::26) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
 Transport; Sat, 14 Sep 2024 19:36:56 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 200.5.3.153)
 smtp.mailfrom=globaloutreachorg.com; dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=globaloutreachorg.com;
Received-SPF: None (protection.outlook.com: globaloutreachorg.com does not
 designate permitted sender hosts)
Received: from mail.asem.pr.gov (200.5.3.153) by
 DS4PEPF00000170.mail.protection.outlook.com (10.167.18.196) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7918.13 via Frontend Transport; Sat, 14 Sep 2024 19:36:56 +0000
Received: from AEX01V170.asem.org (10.12.31.170) by AEX01V170.asem.org
 (10.12.31.170) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.28; Sat, 14 Sep
 2024 15:36:30 -0400
Received: from User (10.12.31.254) by aex01v170.asem.org (10.12.31.170) with
 Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sat, 14 Sep
 2024 15:36:26 -0400
Reply-To: <gcoutreach1@gmail.com>
From: Global Outreach Org <donations@globaloutreachorg.com>
Date: Sat, 14 Sep 2024 12:36:40 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <3baa4654-0283-4b7c-b2ee-e56f0bd4a50f@AEX01V170.asem.org>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DS4PEPF00000170:EE_|DS0PR09MB10993:EE_
X-MS-Office365-Filtering-Correlation-Id: 8e6a89bb-c9e0-478b-f9c7-08dcd4f497bb
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report:
	CIP:200.5.3.153;CTRY:PR;LANG:da;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.asem.pr.gov;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(32650700017)(61400799027)(35950700016)(82310400026)(7416014)(20122699018);DIR:OUT;SFP:1501;
X-Microsoft-Antispam:
	BCL:0;ARA:13230040|32650700017|61400799027|35950700016|82310400026|7416014|20122699018;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?bIuG2q9pitkIxNSDYUKFlCQkejsD7ZeFiNoOu8beVjFfud8zWnnKYF4D?=
 =?windows-1251?Q?TsHINZzcCga+ZO9bon8hDGFg6zHEymu4x5bSSQwOVi5Q+b/i1EyQ3kKS?=
 =?windows-1251?Q?lWU9mIM+oZ+Rk170xBcgdZWX4lvw00i9q7LYauxpFt6lXjJOCmEkwcGA?=
 =?windows-1251?Q?1ezRWbBDh3ToBh6hzguPcZGcMqG2ag+9OpvtsvSeuAiABOWPar4qW4Fj?=
 =?windows-1251?Q?oZUl1NXfEC6LwCIuL026RQtc5B3ZAIbFA+LcjlF1N3SFC3w7bv94LrOH?=
 =?windows-1251?Q?piepn1p17cLT4D3bgMY0tl3ddQ2KV0L+jl1Qxl/hYd3br7XqiFxEVBpV?=
 =?windows-1251?Q?Qmzcg+1GKlw2wMdOvNBGzMOtnecA+7SwJL4enhr47ve38cwbe4wrBEI+?=
 =?windows-1251?Q?PkE0qp47sXnfWw9BJJmsFyIk+ftCVPbrBa6UQCtEWahLNF+xhBZyCNRM?=
 =?windows-1251?Q?fpgF3Bth10emwMjKyg0T/W/h0KdeJ7Hg3z1cSEvhYqdssEzoz0h925h7?=
 =?windows-1251?Q?U6gImcT+McPckhWCfysMWrVLeaK8ollv8L3XEQmrHdPi3Du6UcStXzUF?=
 =?windows-1251?Q?oYhlp2IuJIGc9+2BLcLWmftJvs4+BP/2eNA89WP6fZSasBqVZhX2YX/A?=
 =?windows-1251?Q?VAZlVHkqGI5VIMguct31MmvAasVXgWqJAgHglC5iWddAgMAzsaK8n/+d?=
 =?windows-1251?Q?Fwr78YO7D3sWZL9XMCNL/rvR11jnjirJrXw11ByGnS9EvR/jTYfJOAhJ?=
 =?windows-1251?Q?mBs41d/QyKJZ+u0xPV7LwDRJLvXvPwnWwu7pHLAJa3liaLnqipyKmOz3?=
 =?windows-1251?Q?v7CZQGNLKGEz5gUpLmZp6tIUQoaickQPWvaIHHgEYLGA1WEVDhaV+zGg?=
 =?windows-1251?Q?7sdnzsiCXyU1lZH/q/Rfg3SXXn4uSpSjpZLcOd816K3ky07k6N2PaNQ9?=
 =?windows-1251?Q?L+KNnixcfeko/9LdpSQaCPu8Mxe8Aj5VpeoJ1W0UXmWZlw9QVgUi/AoV?=
 =?windows-1251?Q?IY5/EQZEaqTzPntNRoYnz9yWKB2K4Ybr310hKgP4GMAeYsOseigIhmy+?=
 =?windows-1251?Q?dHsPLqcFtl5avEKifqwaug9+xL+WHDv5lANtkeGczo7M52yM7SdCw1kZ?=
 =?windows-1251?Q?4RREzYbnlAaUEJdFE+j4VdG3DlSFbLGVBqed8GOA3jxwsEf0bO70BuAw?=
 =?windows-1251?Q?LqgHE/X/FNVNBjTlYqOLnfyM61QAzhw3HQADU2BxM5CWaolYaWgkTFyE?=
 =?windows-1251?Q?BX2SpnkyJBjAQGpX35lJyKJdFGxZTCja9CLOvwniPU9nGVc1uYCM5uRM?=
 =?windows-1251?Q?0I7yWREl+pckY7Q72wpkasaNm+UrJyzRZiXsJIQmJre3PGbES/xsXEDG?=
 =?windows-1251?Q?FBr/F6hVnt1DjIOhW1f0ZoPsMt9oW3N9OatPaALefy6Czgzhf2omgPPx?=
 =?windows-1251?Q?Dmj1MNecwB4et+vj+O4qMGb5FOyoXt2Bjpl4JoIhmK5mnqGwd1BGg/JH?=
 =?windows-1251?Q?dbDzBEW1al55THb/bh5OwQBlJfVIBdPwFA8ArBG69Kq/MFztGj13s5KF?=
 =?windows-1251?Q?Vzppcz22cvTxCilkB2b9U4TLfY+dR+AzRArIWOzsMcAfYo+ENv3asOOP?=
 =?windows-1251?Q?RHzk8cwhjnpCQj589nJMNfHoNYPQ8GWTUId4753ByX4IRzCFz6QA+wnB?=
 =?windows-1251?Q?jgV8BL9qYnEpJrJ4c/BZGi5n99vIf1qzbqfaAMn5ZfPOaQGF+TgV6mMe?=
 =?windows-1251?Q?7sCR3gD4jheHH/MfixKktVC1UVDjPxDQQs8wV+OXsvbPXPdD4i88Hsq1?=
 =?windows-1251?Q?ALjivf7/ADwnsLZlZKj+w+znHGo5pPecCHhVV8+aPIyvk9TDkbmD/0CT?=
 =?windows-1251?Q?EYvn4QkOyaPfJzKDoFYaRXWa5BhHD9x3PaYQnnUloXjo+HDTodBP5aFJ?=
 =?windows-1251?Q?nhK7OkxiseWJJWdvedO2s+kYUnHiI5s8Kd6LghMJXm3Po2x7z9iVfFk8?=
 =?windows-1251?Q?lZFIJbfAiM0GgEJgcOoNXlAcNfQlYpMh1w6JP77UdEeTypHLxcVtINvK?=
 =?windows-1251?Q?K2wXoMKuKyqmTpiy?=
X-OriginatorOrg: salud.pr.gov
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Sep 2024 19:36:56.1149
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 8e6a89bb-c9e0-478b-f9c7-08dcd4f497bb
X-MS-Exchange-CrossTenant-Id: e906065a-f03e-47ad-a4c4-6b139a08445c
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e906065a-f03e-47ad-a4c4-6b139a08445c;Ip=[200.5.3.153];Helo=[mail.asem.pr.gov]
X-MS-Exchange-CrossTenant-AuthSource:
	DS4PEPF00000170.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR09MB10993
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 52.102.146.21, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='dsdepr.onmicrosoft.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 9.7 (+++++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  god dag, Din e-mail er blevet udvalgt til at modtage en donation
    fra Tammy og Cliff, parrene, der vandt $316,3 Million Dollars Powerball Jackpot
    den 5. januar 2022. De har frivilligt besluttet at dele [...] 
 
 Content analysis details:   (9.7 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5000]
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [gcoutreach1(at)gmail.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
 -0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [52.102.146.21 listed in wl.mailspike.net]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.146.21 listed in bl.score.senderscore.com]
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FROM_GOV_SPOOF         From Government domain but matches SPOOFED
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.6 MONEY_NOHTML           Lots of money in plain text
  0.4 KHOP_HELO_FCRDNS       Relay HELO differs from its IP's reverse DNS
  0.9 FROM_GOV_REPLYTO_FREEMAIL From Government domain but ReplyTo is
                             FREEMAIL
  1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  2.5 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [52.102.146.21 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [52.102.146.21 listed in sa-trusted.bondedsender.org]
X-Old-Subject:[EXTERNAL]Du har en donation
Subject:*****SPAM***** [EXTERNAL]Du har en donation
X-Spam-Status: Yes, score=9.7, +20 total spam score
SpamTally: Final spam score: 57

god dag,
Din e-mail er blevet udvalgt til at modtage en donation fra Tammy og Cliff,=
 parrene, der vandt $316,3 Million Dollars Powerball Jackpot den 5. januar =
2022. De har frivilligt besluttet at dele en donation p=D0=B5 summen af ??1=
0 Million Dollars af de samlede vundne penge fra lotteriet. Folk blev udval=
gt tilf=D0=B6ldigt fra forskellige kilder, derfor f=D0=B5r du denne e-mail.

Besvar denne e-mail for at f=D0=B5 flere oplysninger, og hvordan du modtage=
r donationen

Tak
Global Outreach Organisation
NOTA DE CONFIDENCIALIDAD: La informaci=C3=B3n contenida en esta transmisi=
=C3=B3n est=C3=A1 destinada =C3=BAnicamente a las personas o entidades a la=
 que se dirige. Puede contener informaci=C3=B3n privilegiada y confidencial=
, incluida Informaci=C3=B3n de Salud Protegida (PHI). Si usted no es el des=
tinatario, se le notifica que cualquier revisi=C3=B3n, difusi=C3=B3n, distr=
ibuci=C3=B3n o duplicaci=C3=B3n de esta comunicaci=C3=B3n est=C3=A1 estrict=
amente prohibida. Si recibe esta comunicaci=C3=B3n por error, notifique al =
remitente inmediatamente y destruya este mensaje. CONFIDENTIALITY NOTE: The=
 information contained in this transmission is intended only for the person=
s or entities to which it is addressed. It may contain privileged and confi=
dential information, including Protected Health Information (PHI). If you a=
re not the recipient, you are hereby notified that any revision, disseminat=
ion, distribution or duplication of this communication is strictly prohibit=
ed. If you receive this communication by error, notify the sender immediate=
ly and destroy this message.