JezK
Edit File: 1786988733.M793814P1319236.ng-shost103.tenten.vn,S=13061,W=13262
Return-Path: <bounces+SRS=QGBAI=GK@zenithbank.com> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id A//bLr1Ig2pEIRQA0NYCOQ (envelope-from <bounces+SRS=QGBAI=GK@zenithbank.com>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Tue, 18 Aug 2026 00:45:33 +0700 Return-path: <bounces+SRS=QGBAI=GK@zenithbank.com> Envelope-to: info@bangdientu.com Delivery-date: Tue, 18 Aug 2026 00:45:33 +0700 Received: from mail-westeuropeazhn15013015.outbound.protection.outlook.com ([52.102.161.15]:52553 helo=AM0PR02CU008.outbound.protection.outlook.com) by ng-shost103.tenten.vn with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.5) (envelope-from <bounces+SRS=QGBAI=GK@zenithbank.com>) id 1ww1Or-00000005Vpq-0EYs for info@bangdientu.com; Tue, 18 Aug 2026 00:45:33 +0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=R96VThNXC4vX3r/TyMedYD2It8kvVfdb2YSaunvnyrugE5cjA3HtU9MRM2MQ8Najrh3PJnbkAS06m30VJdyYdwqYgHtqtnoI6/xB+QvbupHN/K5mugSVBjV4BsI3aUVu7Babz0iUMU/NOoLKvVPCAPJfvSixfhxO+D5UpUqiHTmE1n6ZbUXCq5RAxiFcz691xvbSq7NS+TAdratmMg3FA4gky14xxpMLS7pIhP9Hx4mV5ShWhs/HUpLorU7uRR1ob9oDSjIJV2E6rWYO662CEVy4cN6mZXwVAdVh+O+HFxBlJWkL2kZz3T+VTRLT6xWiR0onzPdgkeTS30PtIETSbA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zXk2OswKt1AlGQAwjNfqSGIq/njVGZx8d7GIj4s6UOM=; b=QYQAuRyJI5e08VMAbiHY61zgh0TTMMRXkTie/8uxxJ/G+DRBGQKmycNcrlwTXyLAcGFTjpxU+dAKvmgyIg5V4RuGyImUuLyXXG1JI0Ev3GR4K7EI5wsCEsiFc0vYvNQ0TFTXkVrlyo17a2XJvSuZ485aJczjnyCS8cMJ4JWAdDn7rVu5sYrlMQqWR1fMYGlxQVUhCQ9lkoSTvSZtjtLKJDokGLvDI1XKpFer213uDldH53SPJTgWqyVu9ySA1yjH+Yxl4KByGS++Nmngqwx5OuiTfdTSsnc/lJtPLZpxtl2KgCsmJ+Cetov8jwumXlyhzD/aQAvzkbtAQF76nw5bhg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is 41.203.114.95) smtp.rcpttodomain=bangbull.com smtp.mailfrom=test.com; dmarc=permerror action=none header.from=test.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zenithbankplc.onmicrosoft.com; s=selector2-zenithbankplc-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zXk2OswKt1AlGQAwjNfqSGIq/njVGZx8d7GIj4s6UOM=; b=QugE+nb5z7XBE9n6dziL3D41MB8ycfFVJYdtSX6s7JnDdYkvk3OKqK6grqRszGQplBq+qQh8ok3MshIXFF26iBzlvdIcGhGe6rFzQVb1oDc/HbWjV4ffsIBqoR5mGMWjpBXqfVCU7UdV3BnwV8LzvKTU98lyk8GdiHHqOKLUibc= Received: from AM8P189CA0023.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:218::28) by GVXPR04MB10755.eurprd04.prod.outlook.com (2603:10a6:150:220::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Mon, 17 Aug 2026 17:44:40 +0000 Received: from AMS0EPF000001B3.eurprd05.prod.outlook.com (2603:10a6:20b:218:cafe::a5) by AM8P189CA0023.outlook.office365.com (2603:10a6:20b:218::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.17 via Frontend Transport; Mon, 17 Aug 2026 17:44:40 +0000 X-MS-Exchange-Authentication-Results: spf=none (sender IP is 41.203.114.95) smtp.mailfrom=test.com; dkim=none (message not signed) header.d=none;dmarc=permerror action=none header.from=test.com; Received-SPF: None (protection.outlook.com: test.com does not designate permitted sender hosts) Received: from mail.zenithbank.com (41.203.114.95) by AMS0EPF000001B3.mail.protection.outlook.com (10.167.16.167) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Mon, 17 Aug 2026 17:44:40 +0000 Received: from User (64.89.161.51) by SV001EDGE021.africa.int.zenithbank.com (172.29.90.95) with Microsoft SMTP Server id 15.2.2562.17; Mon, 17 Aug 2026 18:44:17 +0100 Reply-To: <fredgrenville@aliyun.com> From: Fred Grenville <test@test.com> Date: Mon, 17 Aug 2026 18:44:25 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1251" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: <b2bdddb7-506b-4a73-85bd-8fda10d651cf@SV001EDGE021.africa.int.zenithbank.com> To: Undisclosed recipients:; X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS0EPF000001B3:EE_|GVXPR04MB10755:EE_ X-MS-Office365-Filtering-Correlation-Id: 2d3d3b17-992f-4222-5c89-08defc8736ec X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 2 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|35950700016|82310400026|376014|7416014|48200799018|61400799027|7093399015|27013499003|56012099006|10067099003|11063799006|16102099003|18002099003|55112099003|23876020; X-Microsoft-Antispam-Message-Info: =?windows-1251?Q?eoPMm9c11FNui6K2uZyoo78FPJ0MSKpsMCHYypwRTnIPVXAAzjpew44M?= =?windows-1251?Q?iHLG8JiMHj1Wpg2fJjUyBS5p3RdPCxm0O3QL3GgtkRfz1hWSaRQsuqoA?= =?windows-1251?Q?+LfZzINOv1Dqu2tv5AiK4cuAsO6zX+Oc7yddPe3AvQQCZhZXpbZnt2mj?= =?windows-1251?Q?CX2ZQoBi5Wme8h/QAYwBXKKGa7Au+xT9TB+RVVJPNsuiA8dopyteets2?= =?windows-1251?Q?ZY1nSB/CRg1PsYOjOesOLXE7Hvyj1iLHXc/XoAcCjGMzQcICAAKWo4DW?= =?windows-1251?Q?/GRazvEY8wNbl92+qujg64BzQh/d1w3DPCWBlWEdRjY7cLv+/GxShe4r?= =?windows-1251?Q?UJGi88WT3iwzRR/hsm8ShpBz/nZYszFVDp21qOmfvAdvzzNWgnnQ5+HU?= =?windows-1251?Q?bh2qV+/q7CFfzZu7l+fTXiXCC+FVoE+EmO6kqbX8sZ8t95BzegCqdwvM?= =?windows-1251?Q?sGwNS8AA6nk3qa/NdUeqmwVyjw9KFJRTyi//E9HSrBefI2Z3oHe52Ru1?= =?windows-1251?Q?zPYSswtGHloXcG9vtQSSpUNFgIkFea+1+xHYzRoi3/JmihCXmn6+rfLT?= =?windows-1251?Q?DLxxblqXH10vw8Y+O64FWafHQ1enfLhmeLIMxk//tHZAEpYvDeB1061C?= =?windows-1251?Q?eAX0mZnv3jNupHTpvriGGIl3VzAOo7JIFFKK/S2QxxT8gA3oCMHk57Wk?= =?windows-1251?Q?3wznavUgLIlXJbOkdYlnv5BQVpRcZ8z7YiU9jRFhgtUh5xcLD9Aqw93A?= =?windows-1251?Q?95LC1KZ3orkOSLOHHzZZ4XAhjjTIBcnDa1CfQ5A+JaePGFVUO4sB6BoA?= =?windows-1251?Q?ELdYwrdmcxguclovj8Hp9KxxG03hI8taWbqd4wuTUkMSw55D5sMQ2F+o?= =?windows-1251?Q?+NVqXanVYmMaGmLG/to0BD6+4d6cvh8LvxWzsMkxMQzbot6lUXwE+k41?= =?windows-1251?Q?0pPCp6S/3kAAhVCoKaN+A6G6LhFDGigIklrG9+PcHf8fbXlD0lqZIebV?= =?windows-1251?Q?9h7HVex8h7hilT5s6stacB4bJIs/8rhHwoItanx84jGBqKjMaP7YfsfD?= =?windows-1251?Q?23X/pq9s1oWyYR1AUisnzxJgbJ7wvyTqLqDtTh29W76TpHdyzGy9FzJi?= =?windows-1251?Q?hYE3WZuUJxB04gXiBXtDqQiNDY3bIR6kgMYUrsyFbX9PcV3bYUbZEJqP?= =?windows-1251?Q?j9WhY6A9p2uhCOLV9yrXMn5YUD90TzlecddgK0DGulVlUFFyxNnDVT/O?= =?windows-1251?Q?g5pQCyv1sQfG/RUtdvjwMKvc3aAS5d7aCIQgrl7Ay5mhOuIEoQ07ct8y?= =?windows-1251?Q?0SP3UwSh2c6i5v6QBwYQ3gdJyPlU8bvtrIlWWNsXglVqEa2hICZ3LLcn?= =?windows-1251?Q?6ajUmroN52I+m0rh7vyR2t6HLlqo2eEru1U6NPKDds0yN9RBBNbE5nK4?= =?windows-1251?Q?B76MlFVdj2c4gXj44eSkgHVNCyvoTadaAonS/FjYjTHBhRXFiXgkKd7r?= =?windows-1251?Q?C9fXTh8KvlislT5Py1DIvxu4XJXD8r/eYjy2lJdYFZrom3XBB6xSSFmZ?= =?windows-1251?Q?PaObI8llmiyqjkUynknkF2358uoG4mr/wQQwrF9pATKaX9THsn1WOQYJ?= =?windows-1251?Q?EnkiYezRDwf4YWtdB0l6rR5qpnVsIs4a8pc0KMb8dTGxiwlfO68/C8L+?= =?windows-1251?Q?dsO2DDHiTMrokvONwtEO0GmkeDtozdQWy46yCV9ZLOq+rnNJINlhOnpj?= =?windows-1251?Q?8byFkGauh9jXruw/17Y0UQbNbSD4Rrj0hnrFB9ci?= X-Forefront-Antispam-Report: CIP:41.203.114.95;CTRY:NG;LANG:en;SCL:8;SRV:;IPV:NLI;SFV:SPM;H:mail.zenithbank.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(35950700016)(82310400026)(376014)(7416014)(48200799018)(61400799027)(7093399015)(27013499003)(56012099006)(10067099003)(11063799006)(16102099003)(18002099003)(55112099003)(23876020);DIR:OUT;SFP:1501; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: zenithbank.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Aug 2026 17:44:40.1785 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2d3d3b17-992f-4222-5c89-08defc8736ec X-MS-Exchange-CrossTenant-Id: 2ee92ccc-178a-40e7-adfd-01fbe0c65f02 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2ee92ccc-178a-40e7-adfd-01fbe0c65f02;Ip=[41.203.114.95];Helo=[mail.zenithbank.com] X-MS-Exchange-CrossTenant-AuthSource: AMS0EPF000001B3.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR04MB10755 X-Spam-Status: Yes, score=45.8 X-Spam-Score: 458 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, I hope this message finds you well. I have a mandate to seek an individual or corporate entity that can help channel funds into profitable investments. Content analysis details: (45.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [52.102.161.15 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [52.102.161.15 listed in wl.mailspike.net] 7.5 SNB_HASHBL_FREEMAIL Message contains email address found on SNB Freemail HashBL [fredgrenville[at]aliyun.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 NSL_RCVD_FROM_USER Received from User 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 2.5 PCCC_HASHBL_EMAIL Message contains email address found on PCCC HashBL (https://raptor.pccc.com/RBL) [fredgrenville[at]aliyun.com] 3.5 PCCC_HASHBL_HDR_EMAIL Message contains email address found on PCCC HashBL (https://raptor.pccc.com/RBL) [fredgrenville[at]aliyun.com] 10 KAM_MESSAGE_HASHBL_FREEMAIL Message contains freemail address listed in PCCC WILD RBL (https://raptor.pccc.com/RBL) [fredgrenville[at]aliyun.com] 10 GB_M365_SPAM Email arrived marked as Spam by M365 3.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.7 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** Investment Partnership. X-From-Rewrite: unmodified, forwarded message Hello, I hope this message finds you well. I have a mandate to seek an individual or corporate entity that can help ch= annel funds into profitable investments. Reach out to me asap. Email: fredgrenville@aliyun.com Looking forward to your response. Best Regards, Grenville ________________________________ DISCLAIMER: Any views of this e-mail are those of the sender except where the sender sp= ecifically states them to be that of Zenith Bank Plc or its subsidiaries. The message and its attachments are for designated recipient(s) only and ma= y contain privileged, proprietary and private information. If you have rece= ived it in error, kindly delete it and notify the sender immediately. Zenith Bank Plc accepts no liability for any loss or damage resulting direc= tly and indirectly from the transmission of this e-mail message.