20260621_EMAIL_SCAM_1

Greetings,

I hope this message reaches you in good health. Could you please confirm that you've received it? I have an important matter I’d like to discuss with you.

Kind regards,
Ms. Svitlana Kravchenko





Received: from SA1PR05MB8144.namprd05.prod.outlook.com (::1) by
 SJ0PR05MB8613.namprd05.prod.outlook.com with HTTPS; Sun, 21 Jun 2026 22:47:15
 +0000
Received: from CH0PR04CA0048.namprd04.prod.outlook.com (2603:10b6:610:77::23)
 by SA1PR05MB8144.namprd05.prod.outlook.com (2603:10b6:806:18a::23) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.11; Sun, 21 Jun
 2026 22:47:12 +0000
Received: from CH1PEPF0000A346.namprd04.prod.outlook.com
 (2603:10b6:610:77:cafe::46) by CH0PR04CA0048.outlook.office365.com
 (2603:10b6:610:77::23) with Microsoft SMTP Server (version=TLS1_3,
 cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.19 via Frontend Transport; Sun,
 21 Jun 2026 22:47:12 +0000
Authentication-Results: spf=pass (sender IP is 197.136.17.182)
 smtp.mailfrom=tvetcdacc.go.ke; dkim=pass (signature was verified)
 header.d=tvetcdacc.go.ke;dmarc=bestguesspass action=none
 header.from=tvetcdacc.go.ke;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of tvetcdacc.go.ke
 designates 197.136.17.182 as permitted sender)
 receiver=protection.outlook.com; client-ip=197.136.17.182;
 helo=mail.tvetcdacc.go.ke; pr=C
Received: from mail.tvetcdacc.go.ke (197.136.17.182) by
 CH1PEPF0000A346.mail.protection.outlook.com (10.167.244.11) with Microsoft
 SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.139.8
 via Frontend Transport; Sun, 21 Jun 2026 22:47:10 +0000
Received: from localhost (localhost [127.0.0.1])
	by mail.tvetcdacc.go.ke (Postfix) with ESMTP id 5FCACD48FD0;
	Mon, 22 Jun 2026 00:43:52 +0300 (EAT)
Received: from mail.tvetcdacc.go.ke ([127.0.0.1])
 by localhost (mail.tvetcdacc.go.ke [127.0.0.1]) (amavis, port 10032)
 with ESMTP id nwkGQelMaBjb; Mon, 22 Jun 2026 00:43:52 +0300 (EAT)
Received: from localhost (localhost [127.0.0.1])
	by mail.tvetcdacc.go.ke (Postfix) with ESMTP id 0A672D48F8A;
	Mon, 22 Jun 2026 00:43:52 +0300 (EAT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.tvetcdacc.go.ke 0A672D48F8A
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tvetcdacc.go.ke;
	s=3DF67FB4-4CEA-11F0-913E-99E6DE18E794; t=1782078232;
	bh=U1hz3unN3X2xPE7b2QUbAr5uEalXwgLzWrDxEFmHQCk=;
	h=Date:From:Message-ID:MIME-Version;
	b=TgmJXZ0q3v2r84hd3IgZ99GOVHzK3LyFXGm1jrnzAkz0TmjliZ78UwoMowrc7YYri
	 q44hbneGeSZeYcYoLKuTNbZfavpfdos/kekq8KlYb4+l3ZrOkHuNvfwqw2v0OKak/T
	 w4YZdaveE2E/MZRyE5uZlQ20H+e+lqcCkxmWG6ocn6z6+N5RKx0wdjJDN3ImyPOEdr
	 PSe4rT27AJgkckQmKT9bKSFuN0aunBXrHsp5NeoArKbr0a2p6Nhg1+002Yd/LRp2QY
	 gw4Z+Pz7fEQ7n8zG2d2ap0Y49eoKMyQOMXwChwVJ/HNG1reCYn1+lFp+uh0kWs3nig
	 fiEFLTeNUK0KQ==
X-Virus-Scanned: amavis at tvetcdacc.go.ke
Received: from mail.tvetcdacc.go.ke ([127.0.0.1])
 by localhost (mail.tvetcdacc.go.ke [127.0.0.1]) (amavis, port 10026)
 with ESMTP id hWtQ4abxNXk7; Mon, 22 Jun 2026 00:43:51 +0300 (EAT)
Received: from mail.tvetcdacc.go.ke (mail.tvetcdacc.go.ke [197.136.17.182])
	by mail.tvetcdacc.go.ke (Postfix) with ESMTP id DB320D48FA8;
	Mon, 22 Jun 2026 00:43:46 +0300 (EAT)
Date: Mon, 22 Jun 2026 00:43:46 +0300 (EAT)
From: Svitlana Kravchenko <[email protected]>
Reply-To: Svitlana Kravchenko <[email protected]>
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
References: <[email protected]> <[email protected]>
Subject: Awaiting Your Response
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [197.136.17.182]
X-Mailer: Zimbra 8.8.15_GA_4581 (zclient/8.8.15_GA_4581)
Thread-Topic: Awaiting Your Response
Thread-Index: mWGk2geb8aBTU9auuTSssy1rJ/Wv8SVDJu5i
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 21 Jun 2026 22:47:11.3963
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 765d08be-1ed1-4515-fac4-08decfe70820
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 CH1PEPF0000A346:EE_|SA1PR05MB8144:EE_|SJ0PR05MB8613:EE_
X-MS-Exchange-Organization-AuthSource:
 CH1PEPF0000A346.namprd04.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: 765d08be-1ed1-4515-fac4-08decfe70820
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:197.136.17.182;CTRY:KE;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.tvetcdacc.go.ke;PTR:ErrorRetry;CAT:SPM;SFS:(13230040)(29132699027)(5063699009)(56012099006)(19002099009)(4143699003)(22082099003)(16102099003)(18002099003)(17300700004);DIR:INB;
X-Microsoft-Antispam:
 BCL:0;ARA:13230040|29132699027|5063699009|56012099006|19002099009|4143699003|22082099003|16102099003|18002099003|17300700004;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jun 2026 22:47:10.6858
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 765d08be-1ed1-4515-fac4-08decfe70820
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 CH1PEPF0000A346.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR05MB8144
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.3246411
X-MS-Exchange-Processed-By-BccFoldering: 15.21.0159.007
X-MS-Exchange-ExternalInOutlookResult: NotEnabled
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910005)(944506478)(944626604)(4710164)(4715104)(4999238)(920097)(930201)(3100021)(140003);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info: