While one of the employees is communicating with two employees in the bank with different topics, he suddenly receives two messages from another person with the same content of the two messages. Whereas this person who sends has nothing to do with the content of the two messages. In other words, he received two messages from another person with the same message ID(6590FA190ABB2E489DD3DC2B7F9804B705C2081914@exchange) for both emails.
As the following:
Message1 logs
Received: from EXCHANGE.******* ([IP) by exchange
([IP]) with mapi; Sun, 20 Sep 2020 08:44:33 +0300
From: **********i <********@*******.com>
To: ******** <****@**********.com>
Subject: RE: votre pointage
Thread-Topic: votre pointage
Thread-Index:
AdUqioKlbBi41jSZTgWwNeKLYX0KwBGvGIUwEaJRyAAGVTJ1UAW/M+KABdeV5xAF8/UbEAxEg1aABSpqq2AGTZAUcAYzzBiA
Date: Sun, 20 Sep 2020 08:44:30 +0300
Message-ID: <6590FA190ABB2E489DD3DC2B7F9804B705C2081914@exchange>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 04
X-MS-Exchange-Organization-AuthSource: Exchange.*******.com.**
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator:
Content-Type: multipart/related;
boundary="_016_6590FA190ABB2E489DD3DC2B7F9804B705C2081914exchange_";
type="multipart/alternative"
MIME-Version: 1.0
Task categogry : AntispamEngine
kavscmesrv.exe
Message:
From: 16005402025377209-112953-1-***.com@delivery.****.com
To: ****@*******.com
Cc:
Subject: Mail Statment Daily (19 Sep 2020)
Status: Mass mail
Action taken: Message deleted
Object moved to Backup.
Message received on, UTC: 9/20/2020 3:45:07 AM
Anti-Spam databases release date, UTC: 09/19/2020 20:46:00
Application: Kaspersky Security 9.0 for Microsoft Exchange Servers
Mail server name: Exchange
X-headers:
Received: from mail.******.com (IP) by Exchange.********.com.** (ip) with Microsoft SMTP Server (TLS) id 14.0.639.21; Sun, 20 Sep 2020 06:45:07 +0300
Received: from mail234.trans.pepitrans1.com ([ip]:60554) by mail.*****.com with esmtp (Exim 4.91) (envelope-from <16005402025377209-112953-1-
*********.com@delivery..**********.com>) id 1kJqMl-0006c6-BU for ********@*****com; Sun, 20 Sep 2020 04:50:19 +0100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=pepipost; d=******.com; h=Message-ID:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe:Date; i=smail_daily@*****.com; bh=KdFe+xBGhybdpGdqqu8lxEqMps4=; b=Y+hs8Zfu+iYmadTeIopD0Oy6AV51RAR6ErgGum6PXX6cdmd3+oydXIUNORB8jOKwMKepmgiTaVd+ yFIJ4Dc4LYNtOcOdsNT9bEfZnjp99q97bHwnO5Rf9eY+1IVAoMsF5OokuS583o46Y6nH1H7JfJR9 fhDpMChpQiYIWMQWo7o=
Message-ID: <d52b10309f506402ae15ae7b011115e7@*****.com>
Subject: Mail Statment Daily (19 Sep 2020)
MIME-Version: 1.0
Content-Type: multipart/alternative
X-InjTime: 1600566521
List-Unsubscribe: <mailto:16005402025377209@usub.ftrans03.com?subject=Unsubscribe>, <delivery.*****.com/ZXIFWL
id=112953=Yk4ABQlTWwBVSFRTUQlSVlNTVUo=C1QQWFocXVFcXAwhVFNTXVYVAFQIX0oADlQeV1VTVQNXBVEJBgcGBw8KVVhLWkRASFtNGgJRCAoXXBAfTQoHTwZYBlcaUVpdF2I9KHFlfAtRBR5DVA==>
X-FNCID: 112953-16005402025377209-0
X-Traffic-Type: 112953-4
Date: Sun, 20 Sep 2020 07:18:43 +0530
X-Sophos-IBS: success
X-CTCH-PVer: 0000001
X-CTCH-Spam: Unknown
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: str=0001.0A682F15.5F66B4FC.0017:SCFSTAT75445247,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CTCH-Score: -4.000
X-CTCH-ScoreCust: 0.000
X-CTCH-Rules:
X-Sophos-Firewall: smtpd v1.0
Return-Path: 16005402025377209-112953-1-***@***.com
X-MS-Exchange-Organization-OriginalArrivalTime: 20 Sep 2020 03:45:07.5639 (UTC)
X-MS-Exchange-Organization-OriginalClientIPAddress: 192.168.99.248
X-MS-Exchange-Organization-OriginalServerIPAddress: IP
X-MS-Exchange-Organization-AuthSource: Exchange.*****.com.**
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-MessageDirectionality: Incoming
This thread was automatically locked due to age.
