from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <Brand.Response@cscglobal.com>)
	id 1kF4tY-0009UU-ER
	for dnsadmin@yoafrica.com; Mon, 07 Sep 2020 02:20:28 +0200

from gairezi.yoafrica.com ([196.44.176.14]:34277 helo=gairezi.utande.co.zw)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1kF5Tc-0007sS-Gt
	for dnsadmin@yoafrica.com; Mon, 07 Sep 2020 02:57:44 +0200

from localhost (localhost [127.0.0.1])
	by gairezi.utande.co.zw (Postfix) with ESMTP id 86CD3433F16
	for <dnsadmin@yoafrica.com>; Mon,  7 Sep 2020 02:48:36 +0200 (CAT)

No, score=1.571 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=0.001,
	RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001,
	SPF_PASS=-0.001, ST_P0F_Linux=-0.1, ST_RCVD_IN_HOSTKARMA_NO=0.09,
	URI_WP_DIRINDEX=3.499] autolearn=no autolearn_force=no

from gairezi.utande.co.zw (localhost [127.0.0.1])
	by gairezi.utande.co.zw (Postfix) with ESMTP id E4E4D433F14
	for <dnsadmin@yoafrica.com>; Mon,  7 Sep 2020 02:48:26 +0200 (CAT)

gairezi.utande.co.zw;
        spf=pass smtp.mailfrom=Brand.Response@cscglobal.com
          smtp.helo=mx0a-0015fd02.pphosted.com

pass
        (cscglobal.com: 148.163.149.210 is authorized to use 'Brand.Response@cscglobal.com' in 'mfrom' identity (mechanism 'mx' matched))
        receiver=gairezi.utande.co.zw;
        identity=mailfrom;
        envelope-from="Brand.Response@cscglobal.com";
        helo=mx0a-0015fd02.pphosted.com;
        client-ip=148.163.149.210

delayed 3002 seconds at gairezi.utande.co.zw, Mon, 07 Sep 2020 02:48:21 CAT

from mx0a-0015fd02.pphosted.com (mx0a-0015fd02.pphosted.com [148.163.149.210])
	by gairezi.utande.co.zw (Postfix) with ESMTPS id 25520433F13
	for <dnsadmin@yoafrica.com>; Mon,  7 Sep 2020 02:48:20 +0200 (CAT)

from pps.filterd (m0102220.ppops.net [127.0.0.1])
	by mx0a-0015fd02.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 08706I1V021026
	for <dnsadmin@yoafrica.com>; Sun, 6 Sep 2020 20:08:08 -0400

from casarray.cscinfo.com ([165.160.32.240])
	by mx0a-0015fd02.pphosted.com with ESMTP id 33c65q9gt0-2
	(version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT)
	for <dnsadmin@yoafrica.com>; Sun, 06 Sep 2020 20:08:08 -0400

from pwexch06.cscinfo.com (10.99.5.136) by pwexch02.cscinfo.com
 (10.99.5.132) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1466.3; Sun, 6 Sep
 2020 20:08:05 -0400

from pwexch06.cscinfo.com ([fe80::2c0a:572c:5727:7447]) by
 pwexch06.cscinfo.com ([fe80::2c0a:572c:5727:7447%14]) with mapi id
 15.01.1466.009; Sun, 6 Sep 2020 20:08:05 -0400

RE: [120043247] Fraudulent and Malicious Activity using Email
 Account: peterm@cranridpetroleum.co.zw

[120043247] Fraudulent and Malicious Activity using Email

multipart/related;
	boundary="_004_f57ca5e452fe4ed2852726acb18809f4cscglobalcom_";
	type="multipart/alternative"

inline; filename="image001.jpg"; size=2233;
	creation-date="Mon, 07 Sep 2020 00:08:05 GMT";
	modification-date="Mon, 07 Sep 2020 00:08:05 GMT"