Return-Path: <bounce@cheapvps.example>
Delivered-To: muhasebe@acme.com
Received: from mail.acme.com (mail.acme.com [192.0.2.10])
	by mx.acme.com with ESMTPS id 4F2a1b
	for <muhasebe@acme.com>; Tue, 17 Jun 2025 23:41:08 +0300 (EEST)
Received: from relay.cheapvps.example (relay.cheapvps.example [203.0.113.55])
	by mail.acme.com with ESMTP id 9bC3dE
	for <muhasebe@acme.com>; Tue, 17 Jun 2025 23:41:05 +0300 (EEST)
Authentication-Results: mail.acme.com; spf=fail (sender IP is 203.0.113.55) smtp.mailfrom=cheapvps.example;
	dkim=none; dmarc=fail (p=none) header.from=acme.com
X-Originating-IP: [10.0.0.5]
Message-ID: <a91f7c@relay.cheapvps.example>
Date: Tue, 17 Jun 2025 23:41:04 +0300
From: "Acme CEO | Mehmet Doganay" <ceo@acme.com>
Reply-To: finans-onay@acme-secure.example
To: muhasebe@acme.com
Subject: ACIL: tedarikci odemesi bugun yapilmali
Content-Type: text/plain; charset=utf-8

Merhaba,

Acil bir tedarikci odemesi var, bugun mesai bitmeden gonderilmeli.
Detaylar ve onay icin lutfen bu adrese yanit verin: finans-onay@acme-secure.example

Referans / dahili onay kodu: DFB{eposta_bec_spoofing}
IBAN bilgisi yanit sonrasi paylasilacaktir.

Tesekkurler,
Mehmet Doganay
CEO