Advertisement
wavellan

20230223_PHISHING_SCAM_1

Feb 23rd, 2023
1,099
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.65 KB | None | 0 0
  1. Dear Sir/Madam,
  2.  
  3. I am Ibrahim Aldaas, the Director of Loans and Investments at Abu
  4. Dhabi Group in the United Arab Emirates. We offer business and
  5. project loans to finance large-scale projects in various sectors
  6. including business, construction, industrial, shopping & retail,
  7. IT, oil & gas, real estate, healthcare, education, and sports &
  8. leisure.
  9.  
  10. Our company is currently present in Asia and plans to expand to
  11. other continents such as North America, South America, Africa,
  12. Europe, and Australia.
  13.  
  14. If you are an entrepreneur with a viable project, we can provide
  15. funding. We consider both ongoing and abandoned projects, as long
  16. as they have the potential to generate a good return on
  17. investment.
  18.  
  19. We also offer a 1% commission to brokers, referrals, and agents.
  20.  
  21. Please let us know if you require our services.
  22.  
  23. Best regards,
  24. Ibrahim Aldaas
  25. Director of Loans and Investments
  26. Abu Dhabi Group (UAE)
  27.  
  28.  
  29.  
  30.  
  31.  
  32. Received: from CH3PR05MB10028.namprd05.prod.outlook.com (::1) by
  33. MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Thu, 23 Feb 2023
  34. 21:18:01 +0000
  35. Received: from BN8PR15CA0054.namprd15.prod.outlook.com (2603:10b6:408:80::31)
  36. by CH3PR05MB10028.namprd05.prod.outlook.com (2603:10b6:610:12a::5) with
  37. Microsoft SMTP Server (version=TLS1_2,
  38. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6134.21; Thu, 23 Feb
  39. 2023 21:17:58 +0000
  40. Received: from BN8NAM12FT095.eop-nam12.prod.protection.outlook.com
  41. (2603:10b6:408:80:cafe::be) by BN8PR15CA0054.outlook.office365.com
  42. (2603:10b6:408:80::31) with Microsoft SMTP Server (version=TLS1_2,
  43. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6134.21 via Frontend
  44. Transport; Thu, 23 Feb 2023 21:17:58 +0000
  45. Authentication-Results: spf=pass (sender IP is 162.214.100.184)
  46. smtp.mailfrom=onsiteblindsdraperycleaning.com; dkim=pass (signature was
  47. verified) header.d=onsiteblindsdraperycleaning.com;dmarc=bestguesspass
  48. action=none header.from=onsiteblindsdraperycleaning.com;compauth=pass
  49. reason=109
  50. Received-SPF: Pass (protection.outlook.com: domain of
  51. onsiteblindsdraperycleaning.com designates 162.214.100.184 as permitted
  52. sender) receiver=protection.outlook.com; client-ip=162.214.100.184;
  53. helo=162-214-100-184.unifiedlayer.com; pr=C
  54. Received: from 162-214-100-184.unifiedlayer.com (162.214.100.184) by
  55. BN8NAM12FT095.mail.protection.outlook.com (10.13.183.225) with Microsoft SMTP
  56. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  57. 15.20.6156.5 via Frontend Transport; Thu, 23 Feb 2023 21:17:58 +0000
  58. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  59. d=onsiteblindsdraperycleaning.com; s=default; h=Content-Transfer-Encoding:
  60. Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
  61. Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
  62. List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
  63. bh=eWj9SSiReYT8v6m4bRPE3Vm9clQ0m0bF5zrlQn0IhW8=; b=o7WDUbDgZtVMNC/DmPPSWp+bxD
  64. wF7YjlFBP2TRtD2GROib28N6ME60TaDNSLBfVB6R277RYdLYverrm9NwQeGErCsOuPYyQ6HmLXbGx
  65. KPXTCsAhPbQFze1NIbA4i8QluaFy3jUuO+ddSVk9+oFEOE+PgzqOLoF1LjPMSj6BU9v1M2P2v67Tb
  66. 6P21REyW5ybXQhYswntfoe2gbZyp0txYMgNz4EPdMOkCjvVwdusSvEoQ2m1F32SZ+mtxDK2US4tKU
  67. syJf2WVDdV1SGvxAF58HbMmPk5RvfxzgZiDjh8qLQ7W/yXupjKKTr+gGnTdulrQpbTNrzXCsF247a
  68. UgyGtFGg==;
  69. Received: from ec2-13-38-76-225.eu-west-3.compute.amazonaws.com ([13.38.76.225]:61938)
  70. by ama.amazoop.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  71. (Exim 4.95)
  72. (envelope-from <[email protected]>)
  73. id 1pSujB-00089S-JT
  74. for ;
  75. Fri, 17 Feb 2023 01:00:19 -0600
  76. From: Abu Dhabi Group <[email protected]>
  77. To:
  78. Subject: [We Offer Business Loan & Project Funding]
  79. Date: 17 Feb 2023 08:00:17 +0100
  80. Message-ID: <[email protected]>
  81. MIME-Version: 1.0
  82. charset="utf-8"
  83. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  84. X-AntiAbuse: Primary Hostname - ama.amazoop.com
  85. X-AntiAbuse: Original Domain -
  86. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  87. X-AntiAbuse: Sender Address Domain - onsiteblindsdraperycleaning.com
  88. X-Get-Message-Sender-Via: ama.amazoop.com: authenticated_id: [email protected]
  89. X-Authenticated-Sender: ama.amazoop.com: [email protected]
  90. X-Source:
  91. X-Source-Args:
  92. X-Source-Dir:
  93. Return-Path: [email protected]
  94. X-MS-Exchange-Organization-ExpirationStartTime: 23 Feb 2023 21:17:58.5015
  95. (UTC)
  96. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  97. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  98. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  99. X-MS-Exchange-Organization-Network-Message-Id:
  100. ba85cd83-0874-4bbf-8d3d-08db15e37011
  101. X-EOPAttributedMessage: 0
  102. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  103. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  104. X-MS-PublicTrafficType: Email
  105. X-MS-TrafficTypeDiagnostic: BN8NAM12FT095:EE_|CH3PR05MB10028:EE_
  106. X-MS-Exchange-Organization-AuthSource:
  107. BN8NAM12FT095.eop-nam12.prod.protection.outlook.com
  108. X-MS-Exchange-Organization-AuthAs: Anonymous
  109. X-MS-Office365-Filtering-Correlation-Id: ba85cd83-0874-4bbf-8d3d-08db15e37011
  110. X-MS-Exchange-Organization-SCL: 5
  111. X-Forefront-Antispam-Report:
  112. CIP:162.214.100.184;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:162-214-100-184.unifiedlayer.com;PTR:162-214-100-184.unifiedlayer.com;CAT:SPM;SFS:(13230025)(451199018)(36756003)(336012)(58800400005)(33656002)(66899018)(956004)(2616005)(6966003)(22186003)(7596003)(7636003)(54836003)(103936005)(1076003)(5660300002)(83380400001)(356005)(8676002)(6916009)(4744005)(1096003)(26005)(9786002)(86362001)(527004009)(17130700004);DIR:INB;
  113. X-Microsoft-Antispam: BCL:0;
  114. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Feb 2023 21:17:58.2046
  115. (UTC)
  116. X-MS-Exchange-CrossTenant-Network-Message-Id: ba85cd83-0874-4bbf-8d3d-08db15e37011
  117. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  118. X-MS-Exchange-CrossTenant-AuthSource:
  119. BN8NAM12FT095.eop-nam12.prod.protection.outlook.com
  120. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  121. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  122. X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR05MB10028
  123. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.5588697
  124. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6134.021
  125. X-Microsoft-Antispam-Mailbox-Delivery:
  126. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
  127. X-Microsoft-Antispam-Message-Info:
  128.  
  129. Content-type: text/plain;
  130. charset="UTF-8"
  131. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement