Advertisement
wavellan

20240528_PHISHING_SCAM_1

May 28th, 2024
164
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.66 KB | None | 0 0
  1. I'm a marketer for a consortium seeking projects to fund. Please share your project details for potential collaboration if you have any available.
  2.  
  3. Regards,
  4. Michael Ward
  5.  
  6.  
  7.  
  8.  
  9.  
  10. Received: from CO1PR05MB8393.namprd05.prod.outlook.com (::1) by
  11. SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Mon, 27 May 2024 19:34:29
  12. +0000
  13. Received: from MW4PR03CA0335.namprd03.prod.outlook.com (2603:10b6:303:dc::10)
  14. by CO1PR05MB8393.namprd05.prod.outlook.com (2603:10b6:303:e4::12) with
  15. Microsoft SMTP Server (version=TLS1_2,
  16. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.16; Mon, 27 May
  17. 2024 19:34:26 +0000
  18. Received: from SJ1PEPF00002323.namprd03.prod.outlook.com
  19. (2603:10b6:303:dc:cafe::ea) by MW4PR03CA0335.outlook.office365.com
  20. (2603:10b6:303:dc::10) with Microsoft SMTP Server (version=TLS1_2,
  21. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7611.30 via Frontend
  22. Transport; Mon, 27 May 2024 19:34:26 +0000
  23. Authentication-Results: spf=pass (sender IP is 170.155.9.131)
  24. smtp.mailfrom=transporte.gba.gob.ar; dkim=pass (signature was verified)
  25. header.d=transporte.gba.gob.ar;dmarc=pass action=none
  26. header.from=transporte.gba.gob.ar;compauth=pass reason=100
  27. Received-SPF: Pass (protection.outlook.com: domain of transporte.gba.gob.ar
  28. designates 170.155.9.131 as permitted sender)
  29. receiver=protection.outlook.com; client-ip=170.155.9.131;
  30. helo=mx.infraccionesba.gob.gba.gob.ar; pr=C
  31. Received: from mx.infraccionesba.gob.gba.gob.ar (170.155.9.131) by
  32. SJ1PEPF00002323.mail.protection.outlook.com (10.167.242.85) with Microsoft
  33. SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7633.15
  34. via Frontend Transport; Mon, 27 May 2024 19:34:23 +0000
  35. Received: from localhost (localhost.localdomain [127.0.0.1])
  36. by mx.infraccionesba.gob.gba.gob.ar (Postfix) with ESMTP id 442DA1F2D9E;
  37. Mon, 27 May 2024 16:33:49 -0300 (-03)
  38. Received: from mx.infraccionesba.gob.gba.gob.ar ([127.0.0.1])
  39. by localhost (mx.infraccionesba.gob.gba.gob.ar [127.0.0.1]) (amavisd-new, port 10032)
  40. with ESMTP id 2M_1Mb-3b6i1; Mon, 27 May 2024 16:33:48 -0300 (-03)
  41. Received: from localhost (localhost.localdomain [127.0.0.1])
  42. by mx.infraccionesba.gob.gba.gob.ar (Postfix) with ESMTP id AFD381F2DB0;
  43. Mon, 27 May 2024 16:33:48 -0300 (-03)
  44. DKIM-Filter: OpenDKIM Filter v2.10.3 mx.infraccionesba.gob.gba.gob.ar AFD381F2DB0
  45. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  46. d=transporte.gba.gob.ar; s=D22BA9D8-BB85-11EC-A79A-2E00C8E6803B;
  47. t=1716838428; bh=K+W8QtYTJKHSQwBxU1V77CNXk2Cq9lJRpwvuUlpTiHs=;
  48. h=MIME-Version:To:From:Date:Message-Id;
  49. b=DWYrav3QN6PZdvHfnB61OeJyFGMeEv3cAZlqWqAo6Mfspd2UHWgozKJRs1Wg9J7G5
  50. uamS3Fap/6aW4sjLWdwPDXKvI12yi45CoXKCvjJEtLCiHrhQcgeVf/XmGwFrdYJ8FT
  51. JxVxf408Is4iH3tTGbixdmAhpno/UXRe4asmk6tDl3lLm3kNi/Nq6V3PNPQLzaE4eG
  52. QOLMZc7j6rag1uMsat5Um0vAZswzA7oy7Wgu5pJJf7uhiliTxIw93WuMDO3QYojGXU
  53. xWROBPltZI1WXbnd2A/9/WdNG2mHQ+FuRiB6ZCEX94+9GQPcw11r+W3TVEDTyApFkr
  54. 8UOliMEW08SzA==
  55. X-Virus-Scanned: amavisd-new at infraccionesba.gba.gob.ar
  56. Received: from mx.infraccionesba.gob.gba.gob.ar ([127.0.0.1])
  57. by localhost (mx.infraccionesba.gob.gba.gob.ar [127.0.0.1]) (amavisd-new, port 10026)
  58. with ESMTP id YiVL_9H5HInM; Mon, 27 May 2024 16:33:48 -0300 (-03)
  59. Received: from [192.168.0.131] (unknown [160.119.127.156])
  60. by mx.infraccionesba.gob.gba.gob.ar (Postfix) with ESMTPSA id 8A6E11F2D6B;
  61. Mon, 27 May 2024 16:33:37 -0300 (-03)
  62. MIME-Version: 1.0
  63. Content-Description: Mail message body
  64. Subject: Kindly Respond for funding
  65. To: Recipients <[email protected]>
  66. From: "Michael" <[email protected]>
  67. Date: Tue, 28 May 2024 01:03:22 +0530
  68. Message-Id: <[email protected]>
  69. Return-Path: [email protected]
  70. X-MS-Exchange-Organization-ExpirationStartTime: 27 May 2024 19:34:24.2702
  71. (UTC)
  72. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  73. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  74. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  75. X-MS-Exchange-Organization-Network-Message-Id:
  76. d3c7abdb-8d99-4720-5bf7-08dc7e8403b4
  77. X-EOPAttributedMessage: 0
  78. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  79. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  80. X-MS-PublicTrafficType: Email
  81. X-MS-TrafficTypeDiagnostic:
  82. SJ1PEPF00002323:EE_|CO1PR05MB8393:EE_|SJ0PR05MB8678:EE_
  83. X-MS-Exchange-Organization-AuthSource:
  84. SJ1PEPF00002323.namprd03.prod.outlook.com
  85. X-MS-Exchange-Organization-AuthAs: Anonymous
  86. X-MS-Office365-Filtering-Correlation-Id: d3c7abdb-8d99-4720-5bf7-08dc7e8403b4
  87. X-MS-Exchange-Organization-SCL: 5
  88. X-Forefront-Antispam-Report:
  89. CIP:170.155.9.131;CTRY:AR;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mx.infraccionesba.gob.gba.gob.ar;PTR:ErrorRetry;CAT:SPM;SFS:(13230031)(62346018);DIR:INB;
  90. X-Microsoft-Antispam: BCL:0;ARA:13230031|62346018;
  91. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 May 2024 19:34:23.8796
  92. (UTC)
  93. X-MS-Exchange-CrossTenant-Network-Message-Id: d3c7abdb-8d99-4720-5bf7-08dc7e8403b4
  94. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  95. X-MS-Exchange-CrossTenant-AuthSource:
  96. SJ1PEPF00002323.namprd03.prod.outlook.com
  97. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  98. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  99. X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8393
  100. X-MS-Exchange-Transport-EndToEndLatency: 00:00:06.0910222
  101. X-MS-Exchange-Processed-By-BccFoldering: 15.20.7633.001
  102. X-Microsoft-Antispam-Mailbox-Delivery:
  103. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  104.  
  105. Content-type: text/plain;
  106. charset="UTF-8"
  107. Content-transfer-encoding: 7bit
  108.  
  109.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement