| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1774057903.M856124P28296.host100322.itwesthosting.com,S=15731,W=15982 |
Return-Path: <1951060941@e.tlu.edu.vn>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id OEblMq/5vWmIbgAAp0YrwQ
(envelope-from <1951060941@e.tlu.edu.vn>)
for <ithome@host100322.itwesthosting.com>; Sat, 21 Mar 2026 02:51:43 +0100
Return-path: <1951060941@e.tlu.edu.vn>
Envelope-to: bernard.kauric@h1telekom.hr
Delivery-date: Sat, 21 Mar 2026 02:51:43 +0100
Received: from mail-japanwestazon11022129.outbound.protection.outlook.com ([40.107.75.129]:6822 helo=OS8PR02CU002.outbound.protection.outlook.com)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <1951060941@e.tlu.edu.vn>)
id 1w3lVB-0007ME-01
for bernard.kauric@h1telekom.hr;
Sat, 21 Mar 2026 02:51:43 +0100
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=xQYjypb2GNwDwUHDo7CfoDSvc0JtajKE3n1PMPVokY4fwSzIZ0BtRBc3KCFrRBidgMVY4rwVamHxxW5mSbZRtAaK2tU77qRlq1hlWrn5iVLvlNguS6NXl7UdbFPK3tINPINjASh55CchEhDlZioGdMGHXGaGGNz7WMJJtS+dFVHVny4Qmlzdis/+4bJuz/ZMtDKBuDZ9glDRwMz7f4slte95vSx1p2TRp5QLVQNFpKvRzpAPqtg3/hT3O38K67lipHlJZrdV9ynUeO85JwdMxIXXsvDP2jrUDxwFHeozSju33u+k+UDdbggL0A6pKMMj702wN6p5pJvUFK1jclqNfw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=h4+JDKP2J8S5kW8V1yXxWNN1ym8KfoJYOE/gt6K0Fk4=;
b=n2AoDoeZIDWBGLJPvgDBp035Zq+dcIL1a4J63uU2PVqj2PtLXM0fIRDpTJpt0P+CQuSjMQFivzj2svsyyUOxth7OFS/SfdXrzxIyj+AfPfW7XMqPSs9UxXMhyt+VJdJgWiJ6eZog1U++oOhRGxjqQYdwWrshj8jGOb9kSVsVaiMisrbd0RGtoBibe2zpEYhwnlL6gh8J/nUmfVCEzXgDKetnBz+VG0Bml+GWufaP1f/fK8849di+kR8rgXbBuDEweEtdq9ct5C4xxO31DSVHJJQnh0kM43TSv31sdcDKjj7Q83EpjV4dwNNSoQhsfUiNTd3mt4CMNi65SYQCIrHbjw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=e.tlu.edu.vn; dmarc=pass action=none header.from=e.tlu.edu.vn;
dkim=pass header.d=e.tlu.edu.vn; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wru.onmicrosoft.com;
s=selector2-wru-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=h4+JDKP2J8S5kW8V1yXxWNN1ym8KfoJYOE/gt6K0Fk4=;
b=fMQUtvO8G62kK1p3T4DBoJ1yZ6sZG1lZEil0hDCyTbGN3sdc/SC458IAhw/4HF2cuhM5e/ykzJKps37zK8vc7D8mQ9ugNkCbZe/4VQtVr8j1L5Cmt4yU4RgEUFN2zQTtXHuT15mXvNt1+vEFY3Cbu3AfkPC+4LyIIxuajxV2MB8=
Received: from TYZPR01MB6532.apcprd01.prod.exchangelabs.com
(2603:1096:405:69::7) by SG2PR01MB4495.apcprd01.prod.exchangelabs.com
(2603:1096:4:1d3::10) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9723.23; Sat, 21 Mar
2026 01:51:29 +0000
Received: from TYZPR01MB6532.apcprd01.prod.exchangelabs.com
([fe80::d059:63f6:92ca:62ba]) by TYZPR01MB6532.apcprd01.prod.exchangelabs.com
([fe80::d059:63f6:92ca:62ba%4]) with mapi id 15.20.9723.022; Sat, 21 Mar 2026
01:51:25 +0000
From: Nguyen Cong Quan <1951060941@e.tlu.edu.vn>
Subject: Online Financial Fraud Recovery Initiative
Thread-Topic: Online Financial Fraud Recovery Initiative
Thread-Index: AQHcuNU5PTFROODZm0Ga5zUowKSE9w==
Date: Sat, 21 Mar 2026 01:51:25 +0000
Message-ID:
<TYZPR01MB65327524C5C94B9B93710699B64DA@TYZPR01MB6532.apcprd01.prod.exchangelabs.com>
Accept-Language: vi-VN, en-US
Content-Language: vi-VN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=e.tlu.edu.vn;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: TYZPR01MB6532:EE_|SG2PR01MB4495:EE_
x-ms-office365-filtering-correlation-id: 60bec085-f659-4d6e-060b-08de86ec5c53
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam:
BCL:0;ARA:13230040|1800799024|376014|7416014|786006|366016|41320700013|38070700021|8096899003|56012099003|18002099003;
x-microsoft-antispam-message-info:
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
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:TYZPR01MB6532.apcprd01.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(7416014)(786006)(366016)(41320700013)(38070700021)(8096899003)(56012099003)(18002099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?windows-1258?Q?I7iqcpDKhvnl94bqfQtlq609niV7sBwH4vF6BPNHjJ9HZiGlGXxDRUoK?=
=?windows-1258?Q?davb+RLEDjsPZHHmx7jAoJutUL01OkXeU2wnS7PY6V/8J3SWZ6seCx6e?=
=?windows-1258?Q?nSdgxBbf305hqp5TakPSpbYxpmOoaga1wp7Bv1jFZtBEQyBD4Xc05CHI?=
=?windows-1258?Q?3cjOFXFsIgNOunNqPKeH6tHFyxREerOtfR65BT2N+samrHtbqgtUT3hY?=
=?windows-1258?Q?52jpc6Tk0iFwclnzQQyFvfBgZsfKoVR6qfAMQfD+j+Y9JS9Fpe/Rplre?=
=?windows-1258?Q?QUEDfTv8s+Dh5ywAPmnwMZA2S+NjYB01LP1Jajdw7oRsSQORgNiYMJZc?=
=?windows-1258?Q?pY2XbKNtpKWsFviaDQZkq+SUJ2mpI43TY38HqBCTFwigrASrwjz/AePI?=
=?windows-1258?Q?PTL2+xIeQc+Nt4m5zPm5twHp3mqb2bJQLmqEoXb1LUqBA6AxO0kDoYjF?=
=?windows-1258?Q?13V0rZCPwY4xZCd4IR4y2q93LmjohW2EJwS9eoDI2Hq3dWxiUXPzEQvt?=
=?windows-1258?Q?k65GO4xKuVW05BfQl6vKWN2ryvlGB6AtCaN9kqxnmSpkPgvQnBNx/xoA?=
=?windows-1258?Q?xPmzWd/S5nmrs097wdvrftNjkmFFG5GvNutRu7it8zYi1Uk7vLE93rk+?=
=?windows-1258?Q?el5kJ0EtF3BCrwhTRJ7yrlG4fPXm1ncftLwxME2VcKyp0D6OSWu+yIcg?=
=?windows-1258?Q?qg8/WCjIdxWchY3wzY8h1kgfFy15FK2iFTGGJPSMY9jgdeMCAd8BAE5e?=
=?windows-1258?Q?b/a6LsUqr1kxV0wkkDXEP/7LmBQgsqN9xCVqtI0l4T1CS2bw1wodLbIy?=
=?windows-1258?Q?MstT3WczVPbiXPxAiiaHzaUXQ1Gch6LLwFpMzoRd9BLPczGGjqbogl5T?=
=?windows-1258?Q?Q+VRmJsx4fS8p7OAsr691LybqsPoGTlOd0BwuBsPXuwQaMgishE2mrAf?=
=?windows-1258?Q?ICVW5fv01qMNULytw8xesHvY0RqYIYNZpNN1hDkAQjcZKIgsRNSsVx+2?=
=?windows-1258?Q?gBZmI41eFCw8OrROVrl4XHpONXDAPQ7I1MYWVt4xkHZVXtnzjpaZqZjX?=
=?windows-1258?Q?Rzsh6B8+JQ/9/RANZlWEtet8cdXN8QOftD97RsQ1LtBpkmHqomCMqySA?=
=?windows-1258?Q?72bvQvVmlXEF/OVzvI4v9mptD3ebB+x7Ogim0iDWZu1+gchMJvbw+Crk?=
=?windows-1258?Q?5RdaqAjlOVKVHf7X56w9OQ4HwbhRDr1xFvCpMZA7fyH9aCwv1qp8mTN0?=
=?windows-1258?Q?QJHryXjU3IDhm8tap4ZSsJmxi9C6RQWST+QvZk3DL4s/9g5BH3fftrhI?=
=?windows-1258?Q?52TjNDzqHgSQWHaOXR0Bp15T6rxjzeniuqFKcOpjhpcEHsrDXuwxsFZI?=
=?windows-1258?Q?9lETzYhYyYN/zndvO09bSdbV/rRAc2X7ea/XBl1tTGih9fn+/pwzBpsa?=
=?windows-1258?Q?rKeMLei0G+wStnU2KkloqcN8f/82Q5griYbYeyoHvtOXYjqTPtt+DbtU?=
=?windows-1258?Q?qD7woXyAwYRG7FQacwEgL9vEdZ8RKxBeX55NQFffHJ9VnEd7p48FYEZn?=
=?windows-1258?Q?QodV8LL0Gygf/NpE8fItNf38qg1Y7b28oG1Y4/PBS8ZQY3exR9Ybir6F?=
=?windows-1258?Q?4PtcfWIcES3gY/qhf5eyZ76F1KnBHm19Zut1AT90EnE2tWKzy+P2H9MX?=
=?windows-1258?Q?vk9be6nGCF8xzEp3/OUqXbYq/Jzj/BUgXlkPi2TJC4160+vvHYnPGmJL?=
=?windows-1258?Q?qmt45Jp/z58j9cTuOK08Klk8qy38mWZxRQ7BVS2TOntacUKcv+NeiyYq?=
=?windows-1258?Q?s6+VXimJaD8QNFBpHDanexTMgYYNsS4TRtgY/Vzv5r+5T3jn?=
Content-Type: multipart/alternative;
boundary="_000_TYZPR01MB65327524C5C94B9B93710699B64DATYZPR01MB6532apcp_"
MIME-Version: 1.0
X-OriginatorOrg: e.tlu.edu.vn
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB6532.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 60bec085-f659-4d6e-060b-08de86ec5c53
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Mar 2026 01:51:25.2324
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bbf9aad6-5f58-4387-927e-02f0b07a72fa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: YMCHFXZ7rEQ6dtlbwuexDt0zbZKbfY2fjeQxJ0VShS2ACnhR7e3tm0YTegJDCZEFZpGTx4TIgdDlZowsCpj+7Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR01MB4495
X-Spam-Status: No, score=1.2
X-Spam-Score: 12
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Given the extensive range of activities conducted via the
internet, it is regrettably inevitable that individuals may encounter impersonators
who seek to defraud unsuspecting victims of their hard-ear [...]
Content analysis details: (1.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: wru.onmicrosoft.com]
1.2 MISSING_HEADERS Missing To: header
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[40.107.75.129 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[40.107.75.129 listed in sa-accredit.habeas.com]
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--_000_TYZPR01MB65327524C5C94B9B93710699B64DATYZPR01MB6532apcp_
Content-Type: text/plain; charset="windows-1258"
Content-Transfer-Encoding: quoted-printable
Given the extensive range of activities conducted via the internet, it is r=
egrettably inevitable that individuals may encounter impersonators who seek=
to defraud unsuspecting victims of their hard-earned funds through Ponzi s=
chemes and other fraudulent practices.
In response to this growing threat, we have established a dedicated, intell=
igence-led task force with a specific mandate to investigate, disrupt, and =
combat online financial fraud. This specialized team is actively engaged in=
tracing and recovering funds lost to fraudulent actors and is committed to=
ensuring the secure restitution of recovered assets to your designated ban=
k account.
Have you been a victim of Ponzi schemes or other online financial fraud?
For confidential inquiries and further assistance, please contact us
Contact Email: {Technocratrecovery@contractor.net}
Don=92t let scammers win=97recovery is possible.
Yours sincerely,
TECHNOCRATE RECOVERY
--_000_TYZPR01MB65327524C5C94B9B93710699B64DATYZPR01MB6532apcp_
Content-Type: text/html; charset="windows-1258"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1=
258">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; font-fami=
ly: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<b>Given the extensive range of activities conducted via the internet, it i=
s regrettably inevitable that individuals may encounter impersonators who s=
eek to defraud unsuspecting victims of their hard-earned funds through Ponz=
i schemes and other fraudulent practices. </b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; font-fami=
ly: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<b><br>
</b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; font-fami=
ly: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<b>In response to this growing threat, we have established a dedicated, int=
elligence-led task force with a specific mandate to investigate, disrupt, a=
nd combat online financial fraud. This specialized team is actively engaged=
in tracing and recovering funds
lost to fraudulent actors and is committed to ensuring the secure restitut=
ion of recovered assets to your designated bank account.</b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; font-fami=
ly: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<b><br>
</b></div>
<div class=3D"elementToProof">
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; font-fami=
ly: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, san=
s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<b>Have you been a victim of Ponzi schemes or other online financial fraud?=
</b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin-to=
p: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont, Aptos_M=
SFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0=
, 0, 0);" class=3D"elementToProof">
<b>For confidential inquiries and further assistance, please contact us&nbs=
p;</b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin-to=
p: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont, Aptos_M=
SFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0=
, 0, 0);" class=3D"elementToProof">
<b>Contact Email: {Technocratrecovery@<wbr>contractor.net} </b><=
/div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin-to=
p: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont, Aptos_M=
SFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0=
, 0, 0);" class=3D"elementToProof">
<b>Don=92t let scammers win=97recovery is possible.</b></div>
<div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin-to=
p: 1em; margin-bottom: 1em; font-family: Aptos, Aptos_EmbeddedFont, Aptos_M=
SFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0=
, 0, 0);" class=3D"elementToProof">
<b>Yours sincerely,<br>
TECHNOCRATE RECOVERY</b></div>
</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
<br>
</div>
</body>
</html>
--_000_TYZPR01MB65327524C5C94B9B93710699B64DATYZPR01MB6532apcp_--