Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
Received: from DM5PR12MB1179.namprd12.prod.outlook.com (2603:10b6:300:ee::17) by MW2PR12..
Decoded Output download
<? Received: from DM5PR12MB1179.namprd12.prod.outlook.com (2603:10b6:300:ee::17)
by MW2PR12MB2570.namprd12.prod.outlook.com with HTTPS via
MWHPR04CA0031.NAMPRD04.PROD.OUTLOOK.COM; Thu, 11 Apr 2019 00:21:11 +0000
Received: from DM3PR12CA0051.namprd12.prod.outlook.com (2603:10b6:0:56::19) by
DM5PR12MB1179.namprd12.prod.outlook.com (2603:10b6:3:77::20) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1771.21; Thu, 11 Apr 2019 00:21:09 +0000
Received: from BY2NAM05FT012.eop-nam05.prod.protection.outlook.com
(2a01:111:f400:7e52::205) by DM3PR12CA0051.outlook.office365.com
(2603:10b6:0:56::19) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1792.15 via Frontend
Transport; Thu, 11 Apr 2019 00:21:08 +0000
Authentication-Results: spf=permerror (sender IP is 40.80.155.159)
smtp.mailfrom=ex3.net; kloveair1.com; dkim=none (message not signed)
header.d=none;kloveair1.com; dmarc=none action=none header.from=ex3.net;
Received-SPF: PermError (protection.outlook.com: domain of ex3.net used an
invalid SPF mechanism)
Received: from BCVA2.kloveair1.com (40.80.155.159) by
BY2NAM05FT012.mail.protection.outlook.com (10.152.100.149) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1792.7 via Frontend Transport; Thu, 11 Apr 2019 00:21:08 +0000
X-ASG-Debug-ID: 1554942063-10e439a308350ce0001-2WIvgE
Received: from mail.ess.barracuda.com (mail.ess.barracuda.com [209.222.82.142]) by BCVA2.kloveair1.com with ESMTP id 6S0lMHzzdJFfTfSF (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <[email protected]>; Wed, 10 Apr 2019 17:21:04 -0700 (PDT)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-RBL-Trusted-Forwarder: 209.222.82.142
Received: from host01.ex3.net (18-28-68-199.ipv4.ex3.com [199.68.28.18]) by mx138.us-east-2b.ess.aws.cudaops.com; Thu, 11 Apr 2019 00:21:02 +0000
Received: from User (unknown [23.227.201.112])
(Authenticated sender: [email protected])
by host01.ex3.net (Postfix) with ESMTP id 90372603E9D;
Wed, 10 Apr 2019 10:53:19 -0700 (MST)
X-Barracuda-Effective-Source-IP: 18-28-68-199.ipv4.ex3.com[199.68.28.18]
X-Barracuda-Apparent-Source-IP: 199.68.28.18
X-Barracuda-RBL-IP: 199.68.28.18
X-Barracuda-BBL-IP: 199.68.28.18
Reply-To: <[email protected]>
From: Osondu Foundation <[email protected]>
Subject: Appeal For Humanitarian Projects In Nigeria
Date: Wed, 10 Apr 2019 11:06:09 -0700
X-ASG-Orig-Subj: Appeal For Humanitarian Projects In Nigeria
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: undisclosed-recipients:;
X-BESS-ID: 1554942061-893275-21901-10582-1
X-BESS-VER: 2019.1_20190410.1839
X-BESS-Apparent-Source-IP: 199.68.28.18
X-BESS-Spam-Status: SCORE=2.17 using global scores of QUARANTINE_LEVEL=N/A KILL_LEVEL=5.0 tests=FORGED_MUA_OUTLOOK, MSOE_MID_WRONG_CASE, BSF_SC0_MISMATCH_TO, BSF_SC0_SA912_RP_FR, RDNS_DYNAMIC
Received-SPF: error (mx138.us-east-2b.ess.aws.cudaops.com: error in processing during lookup of [email protected]: NIL)
X-BESS-Spam-Report: Code version 3.2, rules version 3.2.2.211741 [from cloudscan40.us-
east-2a.ess.aws.cudaops.com]
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------
1.36 FORGED_MUA_OUTLOOK META: Forged mail pretending to be from MS Outlook
0.70 MSOE_MID_WRONG_CASE META:
0.00 BSF_SC0_MISMATCH_TO META: Envelope rcpt doesn't match header
0.01 BSF_SC0_SA912_RP_FR META: Custom Rule BSF_SC0_SA912_RP_FR
0.10 RDNS_DYNAMIC META: Delivered to trusted network by host with dynamic-looking rDNS
X-BESS-Spam-Score: 2.17
X-BESS-BRTS-Status: 1
X-Barracuda-Connect: mail.ess.barracuda.com[209.222.82.142]
X-Barracuda-Start-Time: 1554942064
X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384
X-Barracuda-URL: https://bcva2.kloveair1.com:443/cgi-mod/mark.cgi
X-Barracuda-Scan-Msg-Size: 4415
X-Barracuda-BRTS-Status: 1
X-Virus-Scanned: by bsmtpd at kloveair1.com
X-Barracuda-Spam-Score: 2.17
X-Barracuda-Spam-Status: No, SCORE=2.17 using global scores of TAG_LEVEL=2.9 QUARANTINE_LEVEL=4.1 KILL_LEVEL=4.6 tests=BSF_SC0_MISMATCH_TO, BSF_SC0_SA912_RP_FR, FORGED_MUA_OUTLOOK, MSOE_MID_WRONG_CASE, RDNS_DYNAMIC
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.69718
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header
0.70 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.01 BSF_SC0_SA912_RP_FR Custom Rule BSF_SC0_SA912_RP_FR
1.36 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.10 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 11 Apr 2019 00:21:08.7078
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
650a714e-6bcb-4a3f-dbee-08d6be139839
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Forefront-Antispam-Report:
CIP:40.80.155.159;IPV:CAL;SCL:-1;CTRY:US;EFV:NLI;SFV:SKN;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:DM5PR12MB1179;H:BCVA2.kloveair1.com;FPR:;SPF:None;LANG:en;
X-MS-Exchange-Organization-SCL: -1
X-MS-Exchange-Organization-AuthSource:
BY2NAM05FT012.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: kloveair1.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 650a714e-6bcb-4a3f-dbee-08d6be139839
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(8559020)(8990200)(5600139)(711020)(4605104)(2017052603328);SRVR:DM5PR12MB1179;
X-MS-TrafficTypeDiagnostic: DM5PR12MB1179:
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Apr 2019 00:21:08.6668
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 650a714e-6bcb-4a3f-dbee-08d6be139839
X-MS-Exchange-CrossTenant-Id: 1e215246-3fb6-4aea-b4e0-009f2a1de44e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1e215246-3fb6-4aea-b4e0-009f2a1de44e;Ip=[40.80.155.159];Helo=[BCVA2.kloveair1.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR12MB1179
X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.4827081
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1771.000
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:I;ENG:(750119)(520011016);
X-Microsoft-Antispam-Message-Info:
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
?>
Did this file decode correctly?
Original Code
Received: from DM5PR12MB1179.namprd12.prod.outlook.com (2603:10b6:300:ee::17)
by MW2PR12MB2570.namprd12.prod.outlook.com with HTTPS via
MWHPR04CA0031.NAMPRD04.PROD.OUTLOOK.COM; Thu, 11 Apr 2019 00:21:11 +0000
Received: from DM3PR12CA0051.namprd12.prod.outlook.com (2603:10b6:0:56::19) by
DM5PR12MB1179.namprd12.prod.outlook.com (2603:10b6:3:77::20) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1771.21; Thu, 11 Apr 2019 00:21:09 +0000
Received: from BY2NAM05FT012.eop-nam05.prod.protection.outlook.com
(2a01:111:f400:7e52::205) by DM3PR12CA0051.outlook.office365.com
(2603:10b6:0:56::19) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1792.15 via Frontend
Transport; Thu, 11 Apr 2019 00:21:08 +0000
Authentication-Results: spf=permerror (sender IP is 40.80.155.159)
smtp.mailfrom=ex3.net; kloveair1.com; dkim=none (message not signed)
header.d=none;kloveair1.com; dmarc=none action=none header.from=ex3.net;
Received-SPF: PermError (protection.outlook.com: domain of ex3.net used an
invalid SPF mechanism)
Received: from BCVA2.kloveair1.com (40.80.155.159) by
BY2NAM05FT012.mail.protection.outlook.com (10.152.100.149) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1792.7 via Frontend Transport; Thu, 11 Apr 2019 00:21:08 +0000
X-ASG-Debug-ID: 1554942063-10e439a308350ce0001-2WIvgE
Received: from mail.ess.barracuda.com (mail.ess.barracuda.com [209.222.82.142]) by BCVA2.kloveair1.com with ESMTP id 6S0lMHzzdJFfTfSF (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for <[email protected]>; Wed, 10 Apr 2019 17:21:04 -0700 (PDT)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-RBL-Trusted-Forwarder: 209.222.82.142
Received: from host01.ex3.net (18-28-68-199.ipv4.ex3.com [199.68.28.18]) by mx138.us-east-2b.ess.aws.cudaops.com; Thu, 11 Apr 2019 00:21:02 +0000
Received: from User (unknown [23.227.201.112])
(Authenticated sender: [email protected])
by host01.ex3.net (Postfix) with ESMTP id 90372603E9D;
Wed, 10 Apr 2019 10:53:19 -0700 (MST)
X-Barracuda-Effective-Source-IP: 18-28-68-199.ipv4.ex3.com[199.68.28.18]
X-Barracuda-Apparent-Source-IP: 199.68.28.18
X-Barracuda-RBL-IP: 199.68.28.18
X-Barracuda-BBL-IP: 199.68.28.18
Reply-To: <[email protected]>
From: Osondu Foundation <[email protected]>
Subject: Appeal For Humanitarian Projects In Nigeria
Date: Wed, 10 Apr 2019 11:06:09 -0700
X-ASG-Orig-Subj: Appeal For Humanitarian Projects In Nigeria
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: undisclosed-recipients:;
X-BESS-ID: 1554942061-893275-21901-10582-1
X-BESS-VER: 2019.1_20190410.1839
X-BESS-Apparent-Source-IP: 199.68.28.18
X-BESS-Spam-Status: SCORE=2.17 using global scores of QUARANTINE_LEVEL=N/A KILL_LEVEL=5.0 tests=FORGED_MUA_OUTLOOK, MSOE_MID_WRONG_CASE, BSF_SC0_MISMATCH_TO, BSF_SC0_SA912_RP_FR, RDNS_DYNAMIC
Received-SPF: error (mx138.us-east-2b.ess.aws.cudaops.com: error in processing during lookup of [email protected]: NIL)
X-BESS-Spam-Report: Code version 3.2, rules version 3.2.2.211741 [from cloudscan40.us-
east-2a.ess.aws.cudaops.com]
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------
1.36 FORGED_MUA_OUTLOOK META: Forged mail pretending to be from MS Outlook
0.70 MSOE_MID_WRONG_CASE META:
0.00 BSF_SC0_MISMATCH_TO META: Envelope rcpt doesn't match header
0.01 BSF_SC0_SA912_RP_FR META: Custom Rule BSF_SC0_SA912_RP_FR
0.10 RDNS_DYNAMIC META: Delivered to trusted network by host with dynamic-looking rDNS
X-BESS-Spam-Score: 2.17
X-BESS-BRTS-Status: 1
X-Barracuda-Connect: mail.ess.barracuda.com[209.222.82.142]
X-Barracuda-Start-Time: 1554942064
X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384
X-Barracuda-URL: https://bcva2.kloveair1.com:443/cgi-mod/mark.cgi
X-Barracuda-Scan-Msg-Size: 4415
X-Barracuda-BRTS-Status: 1
X-Virus-Scanned: by bsmtpd at kloveair1.com
X-Barracuda-Spam-Score: 2.17
X-Barracuda-Spam-Status: No, SCORE=2.17 using global scores of TAG_LEVEL=2.9 QUARANTINE_LEVEL=4.1 KILL_LEVEL=4.6 tests=BSF_SC0_MISMATCH_TO, BSF_SC0_SA912_RP_FR, FORGED_MUA_OUTLOOK, MSOE_MID_WRONG_CASE, RDNS_DYNAMIC
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.69718
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header
0.70 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.01 BSF_SC0_SA912_RP_FR Custom Rule BSF_SC0_SA912_RP_FR
1.36 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.10 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 11 Apr 2019 00:21:08.7078
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
650a714e-6bcb-4a3f-dbee-08d6be139839
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Forefront-Antispam-Report:
CIP:40.80.155.159;IPV:CAL;SCL:-1;CTRY:US;EFV:NLI;SFV:SKN;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:DM5PR12MB1179;H:BCVA2.kloveair1.com;FPR:;SPF:None;LANG:en;
X-MS-Exchange-Organization-SCL: -1
X-MS-Exchange-Organization-AuthSource:
BY2NAM05FT012.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: kloveair1.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 650a714e-6bcb-4a3f-dbee-08d6be139839
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(8559020)(8990200)(5600139)(711020)(4605104)(2017052603328);SRVR:DM5PR12MB1179;
X-MS-TrafficTypeDiagnostic: DM5PR12MB1179:
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Apr 2019 00:21:08.6668
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 650a714e-6bcb-4a3f-dbee-08d6be139839
X-MS-Exchange-CrossTenant-Id: 1e215246-3fb6-4aea-b4e0-009f2a1de44e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1e215246-3fb6-4aea-b4e0-009f2a1de44e;Ip=[40.80.155.159];Helo=[BCVA2.kloveair1.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR12MB1179
X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.4827081
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1771.000
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:I;ENG:(750119)(520011016);
X-Microsoft-Antispam-Message-Info:
KvNEcNNPUzA4EsYloIMAN3dIXjxJSUtVTLvNpiCCG0QRMUuIJ4NEPfmAgMZK2m7MXzAk//TnsM+cc2MUJ06gpNLreV3xGvqv+gpDvCWttIiN+Uy7hGQFXkPJO9UfIEK6Q1umT7a+ZdoCkjzsbuoE67Wxe1PXDuV4gL6xjLyr3ryO4gROzE/VU9nExJyPNUL0AUn4FEM50AVoptSRbHQI/x9qyXmE47whdPZTg5yDqYHo9PK9FXlJJi+0BCZ6v4gjPmpTReBMHrhMovKFP5xstjUpNAX1IVHz/hAIiITwbZPc/SMhcJ4zn/euduk8dwrmIgnQ3OTg3W4Yz2p7PeNlQIFY+5bP2pBp5Ny6kOo5M9RMuiQrWrkvLsSzyvJI83qkRbcepH7Ltj0P7dW+HvDsq/imOxWLeEoONgsLye+LPQVQcHUKk9EUo7fiOESnCbavAOt7o39Pg+Pu0XjFRBxs34IHocoQjWSE5mzUDVrOh4LHIMYBkwHum4D5UA7GPsVLBZCoYa/MxenoIYTuRFDSLNxeXwXZfj5YnZOVD837xfPTzsXYIUGIfHsG1wWUDt7ASHnmJDhR+EJuYzt6mQD/Ms99LscuVRn5X2A8ph8XQDtdfbwhTpFARpEQXlIN9kuLeyPwPlj/hk6byMQQafpOgjZBXTd9szy72dw2cCTdkxvGMLp+unaAg9xpGuRcZz3isz/dRbGmz+yUJZBZOPDxoT2kqYa9gEhyjxzPgRWoRSGr1hHmwheByQXdT8kqp+HXScKy15hAZDwaTjpnutsfqhzeplxJNiF+Liw1vq4wet1ZrrXX4/J3iUV6BzmMP9QCpajOslVR0l6hTvqb0+1pIp6kSsiYi9cVNopVo6f61uE=
Function Calls
None |
Stats
MD5 | 0fc2f9e88cd84bb0a20224e4b4cf434f |
Eval Count | 0 |
Decode Time | 113 ms |