Advertisement
wavellan

20240918_PHISHING_SCAM_1

Sep 18th, 2024
73
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.96 KB | None | 0 0
  1. Please confirm you have received my previous proposal so we can proceed.
  2.  
  3. Yuliia
  4.  
  5.  
  6.  
  7.  
  8. Received: from SJ0PR05MB9373.namprd05.prod.outlook.com (::1) by
  9. SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Wed, 18 Sep 2024 10:19:29
  10. +0000
  11. Received: from BN9PR03CA0328.namprd03.prod.outlook.com (2603:10b6:408:112::33)
  12. by SJ0PR05MB9373.namprd05.prod.outlook.com (2603:10b6:a03:449::22) with
  13. Microsoft SMTP Server (version=TLS1_2,
  14. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7982.16; Wed, 18 Sep
  15. 2024 10:19:25 +0000
  16. Received: from BL6PEPF0001AB72.namprd02.prod.outlook.com
  17. (2603:10b6:408:112:cafe::72) by BN9PR03CA0328.outlook.office365.com
  18. (2603:10b6:408:112::33) with Microsoft SMTP Server (version=TLS1_2,
  19. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
  20. Transport; Wed, 18 Sep 2024 10:19:25 +0000
  21. Authentication-Results: spf=pass (sender IP is 170.82.244.100)
  22. smtp.mailfrom=impuestos.gob.bo; dkim=pass (signature was verified)
  23. header.d=impuestos.gob.bo;dmarc=pass action=none
  24. header.from=impuestos.gob.bo;compauth=pass reason=100
  25. Received-SPF: Pass (protection.outlook.com: domain of impuestos.gob.bo
  26. designates 170.82.244.100 as permitted sender)
  27. receiver=protection.outlook.com; client-ip=170.82.244.100;
  28. helo=S-NAL-ZSEND-01.impuestos.gob.bo; pr=C
  29. Received: from S-NAL-ZSEND-01.impuestos.gob.bo (170.82.244.100) by
  30. BL6PEPF0001AB72.mail.protection.outlook.com (10.167.242.165) with Microsoft
  31. SMTP Server id 15.20.7918.13 via Frontend Transport; Wed, 18 Sep 2024
  32. 10:19:24 +0000
  33. Received: from s-nal-zmta-02.sin.gobierno.bo (s-nal-zmta-02.zimbra.impuestos.gob.bo [10.1.2.46])
  34. by S-NAL-ZSEND-01.impuestos.gob.bo (Postfix) with ESMTP id C1B1B10A1FF;
  35. Wed, 18 Sep 2024 06:15:41 -0400 (-04)
  36. DKIM-Filter: OpenDKIM Filter v2.11.0 S-NAL-ZSEND-01.impuestos.gob.bo C1B1B10A1FF
  37. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=impuestos.gob.bo;
  38. s=default; t=1726654541;
  39. bh=St4nUbCgSBSO290QoGkjYquR0UdZuWmW5e20b3AHeyc=;
  40. h=Date:From:Reply-To:Subject:From;
  41. b=uk40mi3rp6jy2CCQbkLmnzzYpNQRNwYcrSpOsJEMUTXPP2JOBAH02ffQmvY1F3kHV
  42. L1w9IEqrmpDsSvVpYH4RyVXv6aP6+kZ5P9QmzdqaQBfeaYdWyhYrmXawKUr5ToFHRz
  43. o85WznQcljgsq03h3B30dyxppK/zVd8jR4akB2kw=
  44. Received: from localhost (localhost [127.0.0.1])
  45. by s-nal-zmta-02.sin.gobierno.bo (Postfix) with ESMTP id 37494409CBAF;
  46. Wed, 18 Sep 2024 06:15:41 -0400 (-04)
  47. Received: from s-nal-zmta-02.sin.gobierno.bo ([127.0.0.1])
  48. by localhost (s-nal-zmta-02.sin.gobierno.bo [127.0.0.1]) (amavisd-new, port 10032)
  49. with ESMTP id JWgWSCKCvye5; Wed, 18 Sep 2024 06:15:41 -0400 (-04)
  50. Received: from localhost (localhost [127.0.0.1])
  51. by s-nal-zmta-02.sin.gobierno.bo (Postfix) with ESMTP id AD234409CB90;
  52. Wed, 18 Sep 2024 06:15:40 -0400 (-04)
  53. X-Virus-Scanned: amavisd-new at s-nal-zmta-02.sin.gobierno.bo
  54. Received: from s-nal-zmta-02.sin.gobierno.bo ([127.0.0.1])
  55. by localhost (s-nal-zmta-02.sin.gobierno.bo [127.0.0.1]) (amavisd-new, port 10026)
  56. with ESMTP id myrhNAQ9I_JW; Wed, 18 Sep 2024 06:15:40 -0400 (-04)
  57. Received: from s-nal-zmail-distrital.sin.gobierno.bo (unknown [10.1.2.53])
  58. by s-nal-zmta-02.sin.gobierno.bo (Postfix) with ESMTP id F250D409CB8E;
  59. Wed, 18 Sep 2024 06:15:36 -0400 (-04)
  60. Date: Wed, 18 Sep 2024 06:15:36 -0400 (BOT)
  61. From: Yuliia Kadulina <[email protected]>
  62. Reply-To: Yuliia <[email protected]>
  63. Message-ID: <398946469.40465446.1726654536960.JavaMail.zimbra@impuestos.gob.bo>
  64. Subject: Mutual Benefit
  65. MIME-Version: 1.0
  66. X-Originating-IP: [10.1.2.45]
  67. X-Mailer: Zimbra 8.8.15_GA_4372 (zclient/8.8.15_GA_4372)
  68. Thread-Index: dOeoh4BcmtOt54unKhOzxeEQUj68sg==
  69. Thread-Topic: Mutual Benefit
  70. To: Undisclosed recipients:;
  71. Return-Path: [email protected]
  72. X-MS-Exchange-Organization-ExpirationStartTime: 18 Sep 2024 10:19:25.0957
  73. (UTC)
  74. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  75. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  76. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  77. X-MS-Exchange-Organization-Network-Message-Id:
  78. 3a56305b-3c61-4755-123a-08dcd7cb5ef1
  79. X-EOPAttributedMessage: 0
  80. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  81. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  82. X-MS-PublicTrafficType: Email
  83. X-MS-TrafficTypeDiagnostic:
  84. BL6PEPF0001AB72:EE_|SJ0PR05MB9373:EE_|SJ0PR05MB8678:EE_
  85. X-MS-Exchange-Organization-AuthSource:
  86. BL6PEPF0001AB72.namprd02.prod.outlook.com
  87. X-MS-Exchange-Organization-AuthAs: Anonymous
  88. X-MS-Office365-Filtering-Correlation-Id: 3a56305b-3c61-4755-123a-08dcd7cb5ef1
  89. X-MS-Exchange-Organization-SCL: 5
  90. X-Forefront-Antispam-Report:
  91. CIP:170.82.244.100;CTRY:BO;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:S-NAL-ZSEND-01.impuestos.gob.bo;PTR:S-NAL-ZSEND-01.impuestos.gob.bo;CAT:SPM;SFS:(13230040)(12012899012)(29132699027)(4102299003)(17300700004);DIR:INB;
  92. X-Microsoft-Antispam:
  93. BCL:0;ARA:13230040|12012899012|29132699027|4102299003|17300700004;
  94. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Sep 2024 10:19:24.7832
  95. (UTC)
  96. X-MS-Exchange-CrossTenant-Network-Message-Id: 3a56305b-3c61-4755-123a-08dcd7cb5ef1
  97. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  98. X-MS-Exchange-CrossTenant-AuthSource:
  99. BL6PEPF0001AB72.namprd02.prod.outlook.com
  100. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  101. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  102. X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR05MB9373
  103. X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.6533284
  104. X-MS-Exchange-Processed-By-BccFoldering: 15.20.7962.017
  105. X-Microsoft-Antispam-Mailbox-Delivery:
  106. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  107. X-Microsoft-Antispam-Message-Info:
  108.  
  109. Content-type: multipart/alternative;
  110. boundary="B_3809516928_214248846"
  111.  
  112. > This message is in MIME format. Since your mail reader does not understand
  113. this format, some or all of this message may not be legible.
  114.  
  115. --B_3809516928_214248846
  116. Content-type: text/plain;
  117. charset="UTF-8"
  118. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement