Advertisement
wavellan

20230410_PHISHING_SCAM_1

Apr 10th, 2023
130
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.10 KB | None | 0 0
  1. Hello,
  2.  
  3. Kindly, excuse my 'invasion" of your privacy. I seek a confidentiality partner to facilitate and provide guidance for investment of funds in your country. I run a private consultancy, and currently have access to a high-net-worth individual who, due to instability in her country, is interested in a confidential collaboration that can facilitate relocation of her financial resources through investments with best possible R.O.I. overseas.
  4.  
  5. If interested, please contact me for details.
  6.  
  7. Regards,
  8. Mr. Sam A. Williams
  9.  
  10.  
  11.  
  12.  
  13. Received: from BY5PR05MB7026.namprd05.prod.outlook.com (::1) by
  14. MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Mon, 10 Apr 2023
  15. 18:46:59 +0000
  16. ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
  17. b=ZndSihmt3Nrv9Vtqjd56iNh0x4f6yIB329h0vm/BtQxYcVC7h80XAtyp7ty7eLOParXtSlUYG0WuUa7imKNh4yjW45KFjOOPudRxPlXxy9AVDB4P9OKazGCQBMnrMBnrRs0Gmp2SellQWq/xe7Hk9QGbYENlL3iYF5yrHiMEloP+y77uRGkvSgfL69c6CSggsNf13B3+eONEkd6d7QrOafCg2sQhq634XeXdpO+rdQonhsTgHComV7l/J0ZZUx0ebsR+7bMaBg240GB0uDNS+Pd6f+gJkM2H6ozR48IhB/mooysJ47ggkUIo/aifMD06bBUUqG4jJEAE5A1JFHmoEA==
  18. ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
  19. s=arcselector9901;
  20. h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
  21. bh=/P1YsiwaqEcHWiAW6NVnzGCAzH110qr6HQNMo/VQktQ=;
  22. b=fzALA6Avupc5CHgAx1Sk08eSLNTCF4kjxVRJfFEJxEEY8cM45O7YfOoxTiFXavexWMnCJ21OTyVsA9aOhiDEZ1kiQabJ63pYpZ53b/cjyTzdrjf/dn3nx690hQQiT2FBMgoE5zoAzV5DayXJE/3jjZF0KKQF37H7AisNV1CJDi5H7m9IhKZpjt/k8F1ViXL1VVNKRegEzGLF/XXgZDUBYmVjUp2j2ZF1Miu30FoBGTkipDGyiuzRLXZ1cMkjAmpNYC/1hiv04wjrAI/irTjoofY35AlvRYiBNKe6g9B3gR+b7LIcWN8qxqzNPO97wByQxRoybtNMu9KYhkNi1XFt5w==
  23. ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=softfail (sender ip
  24. is 40.95.45.167) smtp.rcpttodomain= smtp.mailfrom=lantic.net;
  25. dmarc=none action=none header.from=lantic.net; dkim=pass (signature was
  26. verified) header.d=wwjwm.onmicrosoft.com; arc=pass (0 oda=0 ltdi=1)
  27. Received: from DM6PR02CA0148.namprd02.prod.outlook.com (2603:10b6:5:332::15)
  28. by BY5PR05MB7026.namprd05.prod.outlook.com (2603:10b6:a03:1b9::26) with
  29. Microsoft SMTP Server (version=TLS1_2,
  30. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6277.38; Mon, 10 Apr
  31. 2023 18:46:56 +0000
  32. Received: from DM6NAM12FT015.eop-nam12.prod.protection.outlook.com
  33. (2603:10b6:5:332:cafe::6b) by DM6PR02CA0148.outlook.office365.com
  34. (2603:10b6:5:332::15) with Microsoft SMTP Server (version=TLS1_2,
  35. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6277.39 via Frontend
  36. Transport; Mon, 10 Apr 2023 18:46:56 +0000
  37. Authentication-Results: spf=softfail (sender IP is 40.95.45.167)
  38. smtp.mailfrom=lantic.net; dkim=pass (signature was verified)
  39. header.d=wwjwm.onMicrosoft.com;dmarc=none action=none
  40. header.from=lantic.net;compauth=fail reason=001
  41. Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
  42. lantic.net discourages use of 40.95.45.167 as permitted sender)
  43. Received: from NAM12-MW2-obe.outbound.protection.outlook.com (40.95.45.167) by
  44. DM6NAM12FT015.mail.protection.outlook.com (10.13.179.131) with Microsoft SMTP
  45. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  46. 15.20.6298.20 via Frontend Transport; Mon, 10 Apr 2023 18:46:55 +0000
  47. ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
  48. b=XBGnHUPIuE9ewz8SqEZHMkxQsWrIespp4xPNNzq2L13rrCTl7UcZiHXTksI06X2mj4VYWDqri0e7nAA0N78TsMC16Gx/R9PmsTUJGhI8CfYRVhxpA71JRzOZZWLPyu9ybgmcQPEGP9z/xAfA9dKPYXR8ZrosccHh4wtV+GxPwTx2na+QnVLKFFhGa8ygK+tOiGq2UTTL4g0dMRizNbGeJdzSAo3+NYBsBs5qj0CZk7Zlzm17QA+rdCp4w1FJ0FXAX7jGvfwG28/VNvwLi8H4WKPqbw9CGxRWhbAv3buE334Vs3xGPmSY5yVPLr++n/vZDz/0sP3o9jBeMpdBXKh9rA==
  49. ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
  50. s=arcselector9901;
  51. h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
  52. bh=/P1YsiwaqEcHWiAW6NVnzGCAzH110qr6HQNMo/VQktQ=;
  53. b=JMPa7j7kMOlLuM8tTT4/vnxnSGoh94i/ruL89IFeZXgvJoxHvQnOXV3uiKaaITO/o3dm2mx0jO39dTj704fnSN0hHpGhs3ZsbpqR7wJs6dXTbUoTOYwfkKKTN/APcwfp0FvibXMhFi4YePwtZ8OtI8yuMg6njEHbihqrHuIm8SWplrlhqJH2gNES9x1En6Cd4O0POPU4BtZmtFgZCctD/uxOxxfUQxVmTgAEQg/DL8IEahCYsKObzWix31MOEC6geOgcDUXU//T0yfYJqNAaE4xleFhWtYPeKyDgL1g6X7P8s2HukPzFLaEhU+Dv9W9gKUyQKQFBT1FDCT0hCw6OBw==
  54. ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip
  55. is 8.42.207.81) smtp.rcpttodomain=yahoo.com smtp.mailfrom=lantic.net;
  56. dmarc=none action=none header.from=lantic.net; dkim=none (message not
  57. signed); arc=none
  58. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
  59. s=selector2-wwjwm-onMicrosoft-com;
  60. h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
  61. bh=/P1YsiwaqEcHWiAW6NVnzGCAzH110qr6HQNMo/VQktQ=;
  62. b=e7jiOFU7kOdzGLxxoMXN4bUsZPnEl0RMDLx8JrdjWSZWLlpSRD4E8PBxVmqB10K8DTgoL6K8Wjl2Bczv7YsBTmfrhtqIjCWa5Ce/2CM4wbSESuFd3aUu3SzpNwFZCvtpcSfkJV8pSTinauFJkmnNzagV2j2CqV1fhMH2n1JGd3s=
  63. Received: from BN0PR07CA0009.namprd07.prod.outlook.com (2603:10b6:408:141::8)
  64. by MW6PR01MB8276.prod.exchangelabs.com (2603:10b6:303:242::22) with Microsoft
  65. SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  66. 15.20.6298.16; Mon, 10 Apr 2023 18:46:54 +0000
  67. Received: from BN8NAM12FT013.eop-nam12.prod.protection.outlook.com
  68. (2603:10b6:408:141:cafe::73) by BN0PR07CA0009.outlook.office365.com
  69. (2603:10b6:408:141::8) with Microsoft SMTP Server (version=TLS1_2,
  70. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6277.39 via Frontend
  71. Transport; Mon, 10 Apr 2023 18:46:53 +0000
  72. X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 8.42.207.81)
  73. smtp.mailfrom=lantic.net; dkim=none (message not signed)
  74. header.d=none;dmarc=none action=none header.from=lantic.net;
  75. Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
  76. lantic.net discourages use of 8.42.207.81 as permitted sender)
  77. Received: from mail1.jas.com (8.42.207.81) by
  78. BN8NAM12FT013.mail.protection.outlook.com (10.13.182.227) with Microsoft SMTP
  79. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  80. 15.20.6298.27 via Frontend Transport; Mon, 10 Apr 2023 18:46:52 +0000
  81. Received: from USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) by
  82. USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server
  83. (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  84. 15.2.1118.26; Mon, 10 Apr 2023 14:46:34 -0400
  85. Received: from User (23.146.242.227) by USBCDPSMBX01.jas1.ds.Jas.com
  86. (172.29.10.51) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
  87. Transport; Mon, 10 Apr 2023 14:46:32 -0400
  88. Reply-To: <[email protected]>
  89. From: "Mr. Sam A. Williams" <[email protected]>
  90. Subject: Facilitate and provide guidance
  91. Date: Mon, 10 Apr 2023 11:46:33 -0700
  92. MIME-Version: 1.0
  93. X-Priority: 3
  94. X-MSMail-Priority: Normal
  95. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  96. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
  97. Message-ID: <aaddde29-88a7-4a5d-b49f-b7d6c3974566@USBCDPSMBX01.jas1.ds.Jas.com>
  98. To: Undisclosed recipients:;
  99. Return-Path: [email protected]
  100. X-EOPAttributedMessage: 1
  101. X-MS-TrafficTypeDiagnostic:
  102. BN8NAM12FT013:EE_|MW6PR01MB8276:EE_|DM6NAM12FT015:EE_|BY5PR05MB7026:EE_|MWHPR0501MB3899:EE_
  103. X-MS-Office365-Filtering-Correlation-Id: 9885f4f9-6c29-48f4-3c0d-08db39f3f55e
  104. X-MS-Exchange-SenderADCheck: 2
  105. X-MS-Exchange-AntiSpam-Relay: 1
  106. X-Microsoft-Antispam-Untrusted: BCL:0;
  107. X-Microsoft-Antispam-Message-Info-Original:
  108. X-Forefront-Antispam-Report-Untrusted:
  109. X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW6PR01MB8276
  110. X-MS-Exchange-Organization-ExpirationStartTime: 10 Apr 2023 18:46:55.9486
  111. (UTC)
  112. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  113. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  114. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  115. X-MS-Exchange-Organization-Network-Message-Id:
  116. 9885f4f9-6c29-48f4-3c0d-08db39f3f55e
  117. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  118. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  119. X-MS-Exchange-Transport-CrossTenantHeadersStripped:
  120. DM6NAM12FT015.eop-nam12.prod.protection.outlook.com
  121. X-MS-Exchange-Transport-CrossTenantHeadersPromoted:
  122. DM6NAM12FT015.eop-nam12.prod.protection.outlook.com
  123. X-MS-PublicTrafficType: Email
  124. X-MS-Exchange-Organization-AuthSource:
  125. DM6NAM12FT015.eop-nam12.prod.protection.outlook.com
  126. X-MS-Exchange-Organization-AuthAs: Anonymous
  127. X-MS-Office365-Filtering-Correlation-Id-Prvs:
  128. 337c8e2f-1d17-4053-f936-08db39f3f344
  129. X-MS-Exchange-Organization-SCL: 5
  130. X-Forefront-Antispam-Report:
  131. CIP:40.95.45.167;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:NAM12-MW2-obe.outbound.protection.outlook.com;PTR:mail-mw2nam12rlhn2167.outbound.protection.outlook.com;CAT:PHISH;SFS:(13230028)(451199021)(26402899009)(109986019)(19302899009)(31686004)(7636003)(8676002)(31696002)(86362001)(83380400001)(336012)(956004)(8636004)(26005)(9686003)(66899021)(4744005)(22186003)(58800400005)(1096003)(5660300002)(3480700007)(2700400008);DIR:INB;
  132. X-Microsoft-Antispam: BCL:0;
  133. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Apr 2023 18:46:55.8237
  134. (UTC)
  135. X-MS-Exchange-CrossTenant-Network-Message-Id: 9885f4f9-6c29-48f4-3c0d-08db39f3f55e
  136. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  137. X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]
  138. X-MS-Exchange-CrossTenant-AuthSource:
  139. DM6NAM12FT015.eop-nam12.prod.protection.outlook.com
  140. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  141. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  142. X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR05MB7026
  143. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.3541152
  144. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6277.035
  145. X-Microsoft-Antispam-Mailbox-Delivery:
  146. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
  147. X-Microsoft-Antispam-Message-Info:
  148. Content-type: text/plain;
  149. charset="UTF-8"
  150. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement