X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Received: from AS2PR02MB10374.eurprd02.prod.outlook.com (::1) by
DB7PR02MB4523.eurprd02.prod.outlook.com with HTTPS; Sun, 6 Apr 2025
10:40:10 +0000
Received: from AS4P250CA0009.EURP250.PROD.OUTLOOK.COM
(2603:10a6:20b:5df::10) by AS2PR02MB10374.eurprd02.prod.outlook.com
(2603:10a6:20b:545::21) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.44; Sun, 6 Apr
2025 10:40:09 +0000
Received: from AM3PEPF0000A795.eurprd04.prod.outlook.com
(2603:10a6:20b:5df:cafe::3c) by AS4P250CA0009.outlook.office365.com
(2603:10a6:20b:5df::10) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.8606.33 via Frontend Transport;
Sun, 6 Apr 2025 10:40:09 +0000
Authentication-Results: spf=permerror (sender IP is 182.176.176.163)
smtp.mailfrom=sdns.com.pk; dkim=none (message not signed)
Quelltext.d=none;dmarc=none action=none Quelltext.from=sdns.com.pk;compauth=pass
reason=105
Received-SPF: PermError (protection.outlook.com: domain of sdns.com.pk used
an invalid SPF mechanism)
Received: from mail.sdns.com.pk (182.176.176.163) by
AM3PEPF0000A795.mail.protection.outlook.com (10.167.16.100) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
id 15.20.8606.22 via Frontend Transport; Sun, 6 Apr 2025 10:40:09 +0000
X-IncomingTopHeaderMarker:
013D3;SizeAsReceived:3350;Count:17
Received: by mail.sdns.com.pk (Postfix, from userid 99)
     id 2B95B1041D5DD; Sun,  6 Apr 2025 07:57:26 +0500 (PKT)
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mail.sdns.com.pk
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.8 required=5.0 tests=ADVANCE_FEE_5_NEW_MONEY,
     FORM_FRAUD_5,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,FROM_ADDR_WS,
     FROM_WSP_TRAIL,HK_NAME_MR_MRS,HTML_MESSAGE,LOTS_OF_MONEY,MIME_HTML_ONLY,
     MONEY_FORM_SHORT,MONEY_FRAUD_8,MONEY_FREEMAIL_REPTO,RCVD_IN_DNSWL_BLOCKED,
     RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,RDNS_DYNAMIC,
     T_FILL_THIS_FORM_SHORT,T_MONEY_PERCENT autolearn=no autolearn_force=no
     version=3.4.0
X-Spam-Report: *  2.9 FROM_WSP_TRAIL Trailing whitespace before '>' in From
Quelltext field *  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR
NOTICE: The query *      to Validity was blocked.  See *      
https://knowledge.validity.com/hc/en-us/articles/20961730681243 for *      
more information. *      [219.75.131.231 listed in sa-trusted.bondedsender.org] *  0.0 RCVD_IN_DNSWL_BLOCKED RBL:
ADMINISTRATOR NOTICE: The query to DNSWL *      was blocked.  See *      
https://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
*       for more information. *      [219.75.131.231 listed in list.dnswl.org] *  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR
NOTICE: The query *      to Validity was blocked.  See *      
https://knowledge.validity.com/hc/en-us/articles/20961730681243 for *      
more information. *      [219.75.131.231 listed in bl.score.senderscore.com] *  0.0 HTML_MESSAGE BODY: HTML included in
message *  0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts *
  0.4 RDNS_DYNAMIC Delivered to internal network by host with *      
dynamic-looking rDNS *  0.6 HK_NAME_MR_MRS No description available. *  0.0
LOTS_OF_MONEY Huge... sums of money *  0.6 MONEY_FREEMAIL_REPTO Lots of
money from someone using free email? *  2.5 FREEMAIL_FORGED_REPLYTO
Freemail in Reply-To, but not From *  1.0 FREEMAIL_REPLYTO Reply-To/From or
Reply-To/body contain different *      freemails *  0.0 T_MONEY_PERCENT X%
of a lot of money for you *  0.0 T_FILL_THIS_FORM_SHORT Fill in a short
form with personal *      information *  1.3 FROM_ADDR_WS Malformed From
address *  0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases * 
1.5 MONEY_FORM_SHORT Lots of money if you fill out a short form *  3.0
ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money *  0.0
FORM_FRAUD_5 Fill a form and many fraud phrases
Received: from sdns.com.pk (219-75-131-231f2.kns1.eonet.ne.jp
[219.75.131.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
(256/256 bits)) (Client did not present a certificate) by mail.sdns.com.pk
(Postfix) with ESMTPS id 855371019DE7A for <xxx>; Sat,  5
Apr 2025 22:53:14 +0500 (PKT)
Reply-To: machelmandelag@gmail.com
From: Mrs Graca Machel Mandela < billing@sdns.com.pk >
To: <xxx>
Subject: [SPAM] Dear Beloved Family
Date: Sun, 6 Apr 2025 01:50:03 +0800
Message-ID: <20250406015003.4B1CBC110233E323@sdns.com.pk>
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Prev-Subject: Dear Beloved Family
X-IncomingHeaderCount: 17
Return-Path: billing@sdns.com.pk
X-MS-Exchange-Organization-ExpirationStartTime: 06 Apr 2025 10:40:09.4340
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
a890185a-7048-4a9a-0450-08dd74f7673e
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
AM3PEPF0000A795:EE_|AS2PR02MB10374:EE_|DB7PR02MB4523:EE_
X-MS-Exchange-Organization-AuthSource:
AM3PEPF0000A795.eurprd04.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-UserLastLogonTime: 4/6/2025 10:32:43 AM
X-MS-Office365-Filtering-Correlation-Id:
a890185a-7048-4a9a-0450-08dd74f7673e
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 182.176.176.163
X-SID-PRA: BILLING@SDNS.COM.PK
X-SID-Result: NONE
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Antispam:
560;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Apr 2025 10:40:09.0746
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id:
a890185a-7048-4a9a-0450-08dd74f7673e
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
AM3PEPF0000A795.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR02MB10374
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1681699
X-MS-Exchange-Processed-By-BccFoldering: 15.20.8583.043
X-Microsoft-Antispam-Mailbox-Delivery:
(10160021)(9320005)(9245025)(120001);RF:JunkEmail;
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0xO1NDTD02
X-Microsoft-Antispam-Message-Info:
     =?Windows-1252?Q?hTVFn2G5/E63wowxCWFunZnTve7NTai4b0UdQNo8OnQi+/zZQgrQdRvr?=
=?Windows-1252?Q?i/JVR+dJNFSACucgX2HaFqsIGOHp0zrPSpfXDJJ7qLoMd6gSElZcd8nl?=
=?Windows-1252?Q?MTOHQIG8arOYKpY23IiaGHAxminfIjXO5TJmYyCgAjviadLEjuMo3B4V?=
=?Windows-1252?Q?tcC+A5XBiCfcErp9ZMasJHEJ4Y+vtryLDcm3DZduboI7XtzdqIvGyMOy?=
=?Windows-1252?Q?FZeD60B4BnbKZkfw2xUU0/9W6NW/uiONUu/9f+837QVHwXvMMI/50efs?=
=?Windows-1252?Q?WxME8rEOsQ3KOoJVZRBULd6qnr4bdwbLEHPrLQ8XQ4uOKfgrVRyNJ26e?=
=?Windows-1252?Q?43znaxU9obzrjjtCAcrK+v/dk0qae0nRWoYSLq6ZCAZlieH9lBDs8V3F?=
=?Windows-1252?Q?01azHpLcYbXb0lnVAksaMB54dk5UecSgrqC3GWMhZVBZiS/IqB3IdEPj?=
=?Windows-1252?Q?sS8MLGzBS59MOVkAhia3zrYq6bF8e9Ip+CK/tq59ckzAt6XudtqSSO5O?=
=?Windows-1252?Q?HRoL8jusIkqj5305XuXgfSMzGTlGj7MqQbDT2ygdds5+2yxfgQ+1m9TW?=
=?Windows-1252?Q?wJ/EQxChN0Z+bDSaSbY18mLCJ7TPKnuruw7PHUqAxqebsOZY3igk3Acb?=
=?Windows-1252?Q?HeMMPo8VGIyVj1y9781c+k3KaXDUQ8cK72YHe01IZD/JvKKl8ex0ggc3?=
=?Windows-1252?Q?T7sjb8TCT81/cJnrVNOdO0P7aBDxMJEUJ4xs2ke7CXFhS1eq8jn0wBL+?=
=?Windows-1252?Q?JBvw2jt5udrH1sW33NQQvFNKgzFBgVsagFkf+7I55mKyaYzmqwsatQ/c?=
=?Windows-1252?Q?qF16bixsYkeNcSZvY5ByAg8Uc+eHMgx8jxer9XUOIrxFamIZWDXTtb/d?=
=?Windows-1252?Q?/iP5CSYhgM3LDtgdMUz58ZIRQzdAs8E3Z+d/AWGsCt77XYooHhxPaneX?=
=?Windows-1252?Q?sRuPaPMpgNcp9i1oYci3dAo7ZYIQYtwfcl8MlAVKbcp6iPWgqggfmcA9?=
=?Windows-1252?Q?Th1m9/XnJ545tQ88y8dCr0+egPnfA1LbSVB4mTWFrzmrfkDFRm7Wz3zj?=
=?Windows-1252?Q?kGnMe3jKoH9X2dolRRCH4iCLDJfYmbayyZbyFlU+kIVbByTnWXOsu3ot?=
=?Windows-1252?Q?nQ3td7rL5FluO+ORW5AxHwEkOssvk9TqIoow+k96kU8v9cAwLNPw9DFM?=
=?Windows-1252?Q?MhieE9y7daKrYLxkjuSPeE8XKaot7L38IP+XFpZ9FejoQBUx/0iHsOAZ?=
=?Windows-1252?Q?XqTUWv0RRvjFXR0jCEbjYMxLV1Ysm43rh0acew4LlZJfOTJHbK2bDG4k?=
=?Windows-1252?Q?3K6LBCBhKzsIJjkLsgnf+hAgKKcdKwBmWDTfNBqcrWSdAOm8v9o8tRXu?=
=?Windows-1252?Q?g72xbvc1fDCd9AnZJpToheUdSfhKe1rNYRVegfMvOkt+I1UIWs93mkgj?=
=?Windows-1252?Q?JdtQHuUxivkNF9SGn8ATPv5UKfZbWqt5vw+c23QUC/MyDVhS3faCofo2?=
=?Windows-1252?Q?/rHqGPbGUF+evMvbGRVAexl8YiSbxe+qFmsSEl2bha5AsgIj6QBgTH0w?=
=?Windows-1252?Q?0AGmtWFfl9aFjZ9L/l1qVjFyVrtBYxB9Vn4YUcvJlJYj07TD+rGEg3hM?=
=?Windows-1252?Q?+TQRktzbje/soRc9P4D2+nIqEO2hswpQN/8UTtB+YlGkynTfgB/Y8q0S?=
=?Windows-1252?Q?371x1dy4qGGdTZUX0fbI/+jNPdcY6kYsB7UlmhHiKI/3HiRQQ32jUX5p?=
=?Windows-1252?Q?Gu6huXrvix5KjV2wXaMUeHylMtGvNJmRxg2UFCHpBHyiIZ5ITd6++h+2?=
=?Windows-1252?Q?8O7SveaIlgw8T8Mlew3egHkSckVO1OwPyNS5XRwQObhzKvcgHGJWpL7D?=
=?Windows-1252?Q?l/jflwNrn1RDFBixrKUTE3UoqpuJ0TpnY66ZcdC8yWlfA7AUe+QoTwOf?=
=?Windows-1252?Q?J+/KxVAB6GaY5+If1/0zWu4Zv39eo0ET5CUMnBwm8Y5Wusz2yflmM5hS?=
=?Windows-1252?Q?dplgkQEk5TtwlOPOwkCOeFjyOI1SuABLrpI5WCTrJS7A7z/ifqglGkV0?=
=?Windows-1252?Q?j6KyXN0+lRlvDTCLYnvAa3xhnG5QCyxlZFMsF00hhmEqmPd6k3XbJOXe?=
=?Windows-1252?Q?shCbcV3EljoDe1oL3dBcCYHk+IQ4CLsaSRsMacByGs2OlKtvrMaRskAJ?=
=?Windows-1252?Q?iQo15vm9e9ZoYeoLjCuT9yrgiyfLEcR+ojcGMfYwGU7oeAYRcawt2gSC?=
=?Windows-1252?Q?mdfw1N3c4CthGdjwVwStYwn/Vk6crgT0OYID0M54xV3dS6Bdm8nvUTQ3?=
=?Windows-1252?Q?kll6y4LcOdm2/4fL/4ha/WAZIE1m7F1CFxvrtPD/J3sBBDirckq3O5Mg?=
=?Windows-1252?Q?zGJUUJETpqZ/9ufK5H/xa7pJs4kRFefuHMkZLgShmBJ4AVQbAFZzACPQ?=
=?Windows-1252?Q?LQN3pFZf1TTy3HSmfxUduCfkHEUYvqDFw5jcYdyspc/lFlg9maFHcger?=
=?Windows-1252?Q?VCYj2yz5WLDEWcrm1am0aT3zt5bD9a1PbVLZsB6aYeHXFlO7K8udcomm?=
=?Windows-1252?Q?vAEaiVvtUoegkvxEA4iOkOmBIjNb97X/P/gE1EQLps38U2CraVBXwQV9?=
=?Windows-1252?Q?cg0UXd0zcZqa/5pxIWC3Lk/XSxuqZWXjzrQUYY1TIszMy6AyWJV3LbwN?=
=?Windows-1252?Q?4pEfu1l3iJqjw3ZCwvOymzjTVfmEDtbPtc6x8f8tSR9lO6E9ETz49quy?=
=?Windows-1252?Q?3bJrpnJ9GxK9jPy7PvGCRc68DNsmWIEEXmoqV4/E?=
MIME-Version: 1.0
X-Evolution-Source: 8e9f59b5168264e17bcbc07f7e2818cb417c4015