Basic blackmail scam, this time in my own language (Dutch). // Return-Path: <xxx@xxx.xxx>
Delivered-To: 5@136483_x000D_
Received: from imap-director-1.dovecot.shared.ns.xion.oxcs.net ([10.93.5.1])_x000D_
by imap-backend-1.dovecot.shared.ns.xion.oxcs.net with LMTP_x000D_
id gFYXOk/2pGHkUwAAMryqbg_x000D_
(envelope-from <xxx@xxx.xxx>)_x000D_
for <5@136483>; Mon, 29 Nov 2021 15:48:31 +0000_x000D_
Received: from mx.mijndomein.xion.oxcs.net ([10.93.2.2])_x000D_
by imap-director-1.dovecot.shared.ns.xion.oxcs.net with LMTP_x000D_
id 8DpkOU/2pGFGZQAAfd1Dvg_x000D_
(envelope-from <xxx@xxx.xxx>)_x000D_
for <xxx@xxx.xxx>; Mon, 29 Nov 2021 15:48:31 +0000_x000D_
Received: from nmtai202.oxseu-vadesecure.net (nmtai302.oxseu-vadesecure.net [135.125.7.162])_x000D_
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)_x000D_
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)_x000D_
(No client certificate requested)_x000D_
by mx.mijndomein.xion.oxcs.net (Postfix) with ESMTPS id 4J2qWg6XSxz1Z1bc_x000D_
for <xxx@xxx.xxx>; Mon, 29 Nov 2021 15:48:31 +0000 (UTC)_x000D_
Received: from 170.84.97-42.dynamic.visionnettelecom.net.br ([170.84.97.42])_x000D_
by oxseu3nmtai02p.internal.vadesecure.com with ngmta_x000D_
id 966ece33-16bc0f0c3f3236c4; Mon, 29 Nov 2021 15:48:29 +0000_x000D_
From: <xxx@xxx.xxx>_x000D_
To: <xxx@xxx.xxx>_x000D_
Subject: Je hebt nog een betaalopdracht uitstaan._x000D_
Date: 29 Nov 2021 08:36:12 -0400_x000D_
//_x000D_
X-VadeSecure-Status: Spam_x000D_
X-VadeSecure-Verdict: spam:medium_x000D_
X-VadeSecure-Malware: Clean_x000D_
X-VadeSecure-Originating-IP: 170.84.97.42_x000D_
Received-SPF: Softfail_x000D_
Received-DKIM: none_x000D_
Authentication-Results: oxseu-vadesecure.net; iprev=[170.84.97-42.dynamic.visi_x000D_
onnettelecom.net.br.]; ip=170.84.97.42; spf=Softfail; client-ip=170.84.97.42;_x000D_
smtp.mailfrom=xxx@xxx.xxx; dkim=none