Если метаданные можно выдернуть, то там будет понятно. Я предположу, что это вирусняк на корпоративной машине/лаптопе.
Можешь в профильную службу Аэрофлота переслать скриншот. Спасибо не скажут, но может меньше вред нанесет, если так.
Оно) ?
Received: from mxfront4q.mail.yandex.net (localhost [127.0.0.1])
by mxfront4q.mail.yandex.net with LMTP id y0AnTF69u1-AActJejU;
Thu, 13 Aug 2020 17:02:16 +0300
Received: from mx2.aeroflot.ru (mx2.aeroflot.ru [80.92.36.248])
by mxfront4q.mail.yandex.net (mxfront/Yandex) with ESMTPS id QQHqnptcVI-2EwaetTY;
Thu, 13 Aug 2020 17:02:15 +0300
(using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits))
(Client certificate not present)
Return-Path:
akirikov@aeroflot.ru
X-Yandex-Front: mxfront4q.mail.yandex.net
X-Yandex-TimeMark: 1597327335.052
Authentication-Results: mxfront4q.mail.yandex.net; spf=pass (mxfront4q.mail.yandex.net: domain of aeroflot.ru designates 80.92.36.248 as permitted sender, rule=[mx]) smtp.mail=
akirikov@aeroflot.ru
X-Yandex-Suid-Status: 4 211004414,4 106998899,4 34107128,4 409856717,4 50472015,4 70580426,4 486254984,4 84882204,4 213786308,4 7757901,4 274801804,4 13487784,4 118756150,4 25974723,4 332998598,4 294889699,4 284797074,4 285822819,4 37378742,4 86630915,4 34809009,4 202191080,4 400121859,4 326116144,4 30906233,4 324957813,4 277172771,4 186908155,4 73077665,4 108436279,4 295184546
X-Yandex-Spam: 4
X-Yandex-Fwd: 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
Received: from MLK-EXCH-02.msk.aeroflot.ru (172.16.1.232) by mx2.aeroflot.ru
(192.168.41.68) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2044.4; Thu, 13
Aug 2020 17:02:12 +0300
Received: from MLK-EXCH-02.msk.aeroflot.ru (172.16.1.232) by
MLK-EXCH-02.msk.aeroflot.ru (172.16.1.232) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.2044.4; Thu, 13 Aug 2020 17:02:13 +0300
Received: from MLK-EXCH-02.msk.aeroflot.ru ([172.16.0.232]) by
MLK-EXCH-02.msk.aeroflot.ru ([172.16.0.232]) with mapi id 15.01.2044.004;
Thu, 13 Aug 2020 17:02:12 +0300
From: =?koi8-r?B?68nSycvP1yDhzMXL08HOxNIg5dfHxc7YxdfJ3g==?=
<
akirikov@aeroflot.ru>
Subject: RE: Life Opportunity .
Thread-Topic: Life Opportunity .
Thread-Index: AdZxdI31sX6u2VNN3USgH0Sh5YD29gAAQHnAAAA5tnAAAABAcA==
Date: Thu, 13 Aug 2020 14:02:12 +0000
Message-ID: <
14b1bb9e054a419f9f7d531fa6f91e84@aeroflot.ru>
Reply-To: "
gsosffoundationforhelp@gmail.com"
<
gsosffoundationforhelp@gmail.com>
Accept-Language: ru-RU, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [68.235.38.52]
Content-Type: multipart/alternative;
boundary="
000_14b1bb9e054a419f9f7d531fa6f91e84aeroflotru"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-KSE-ServerInfo: MLK-EDGE-02.aeroflot.ru, 9
X-KSE-Antivirus-Interceptor-Info: scan successful
X-KSE-Antivirus-Info: Clean, bases: 13.08.2020 10:37:00
X-KSE-Attachment-Filter-Triggered-Rules: Clean
X-KSE-Attachment-Filter-Triggered-Filters: Clean
X-KSE-BulkMessagesFiltering-Scan-Result: InTheLimit
X-Yandex-Forward: 917ce60e4b76ed40c3604edbb53ed173
X-Yandex-Forward: a2ba8f2d1746e040fc7959f0067e8370
X-Yandex-Forward: 52a931a1fe1d17ec8c50458e94aee612
X-Yandex-Forward: 646bdcfcdc91e714d3fd1e08e060754b
X-Yandex-Forward: 2de9ee9835dc11e64f37bc8f129e50a5
X-Yandex-Forward: cc759e33ed1b8944baece954563f8c5f
X-Yandex-Forward: 8fa25b795691887e66d3d2298a76fa09
X-Yandex-Forward: 97ac60a7d5dc305af9bdf9862318ae2d
X-Yandex-Forward: 08b8fe6aa64f9e7d4462468af7b90095
X-Yandex-Forward: 41aa3c7b92e28c5285e4d6bd4cab31da
X-Yandex-Forward: 6ffd873b9522ae040b02beac5995d384
X-Yandex-Forward: 2ad3b7382bf12ad030159d47928b9d28
X-Yandex-Forward: f322620b491ebe4f2b068ac017b5c033
X-Yandex-Forward: caee9567eaea966c45efe113e915454d
X-Yandex-Forward: e1b57cbc150a72c886024e1877a2c3ef
X-Yandex-Forward: cd469b6f3a890011414953be9c54f36a
X-Yandex-Forward: b13670b8f6afbde8bf99f7f3bbbacadb
X-Yandex-Forward: 6ab74ccd0ffab71cbb5d699a0263be44
X-Yandex-Forward: 4cbfc6776188186836f81ebf021d080d
X-Yandex-Forward: ea52dda1a65af8e92c6271aa769737c1
X-Yandex-Forward: 7725a34151766ada7b6258be5845d96b
X-Yandex-Forward: 70be0ee231f661616de9f6b0456869f5
X-Yandex-Forward: 1359833870d3f1b8d4312931817d21b7
X-Yandex-Forward: a6ec7c15ce7a59709acec692dbf0af05
--
000_14b1bb9e054a419f9f7d531fa6f91e84aeroflotru
Content-Type: text/plain; charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
Your life might not be going as planned, But God has not forgotten about yo=
u. Myself and Family have agreed to give $3m to you To Help you through the=
pandemic, Please reply back to verify.
--
000_14b1bb9e054a419f9f7d531fa6f91e84aeroflotru
Content-Type: text/html; charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns

=3D"urn:schemas-micr=
osoft-com

ffice

ffice" xmlns:w=3D"urn:schemas-microsoft-com

ffice:word" =
xmlns:m=3D"
http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dkoi8-r">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type

ersonal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type

ersonal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type

ersonal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ta=
homa","sans-serif";color:black;background:white">Your life m=
ight not be going as planned, But God has not forgotten about you. Myself a=
nd Family have agreed to give $3m to you To Help you through
the pandemic, Please reply back to verify. <o

></o

></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ta=
homa","sans-serif";color:black;background:white"><o

> =
</o

></span></p>
</div>
</body>
</html>
--
000_14b1bb9e054a419f9f7d531fa6f91e84aeroflotru--