wavellan

20230528_PHISHING_SCAM_1

May 28th, 2023
172
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.67 KB | None | 0 0
  1. Dear YOUR_NAME_HERE
  2.  
  3. My name is Emily Sullivan. There’s an open vacancy in the department and I would like to offer the position of Logistics Manager to you.
  4. That will require desire to learn, PC or laptop with stable connection to the Internet, and a USA citizenship.
  5.  
  6. Please reply to this letter if this sounds right for you and we will contact you to set the date for a telephone interview.
  7.  
  8.  
  9. --
  10. Best regards,
  11. Emily Sullivan
  12. Corporate Recruiter
  13.  
  14.  
  15.  
  16. Received: from LV3PR05MB10408.namprd05.prod.outlook.com
  17. (2603:10b6:408:19b::11) by MWHPR0501MB3899.namprd05.prod.outlook.com with
  18. HTTPS; Sun, 28 May 2023 14:08:14 +0000
  19. Received: from BN0PR02CA0048.namprd02.prod.outlook.com (2603:10b6:408:e5::23)
  20. by LV3PR05MB10408.namprd05.prod.outlook.com (2603:10b6:408:19b::11) with
  21. Microsoft SMTP Server (version=TLS1_2,
  22. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6455.18; Sun, 28 May
  23. 2023 14:08:12 +0000
  24. Received: from BN8NAM12FT036.eop-nam12.prod.protection.outlook.com
  25. (2603:10b6:408:e5:cafe::f2) by BN0PR02CA0048.outlook.office365.com
  26. (2603:10b6:408:e5::23) with Microsoft SMTP Server (version=TLS1_2,
  27. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6433.22 via Frontend
  28. Transport; Sun, 28 May 2023 14:08:12 +0000
  29. Authentication-Results: spf=pass (sender IP is 209.85.208.179)
  30. smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
  31. header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
  32. reason=100
  33. Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
  34. 209.85.208.179 as permitted sender) receiver=protection.outlook.com;
  35. client-ip=209.85.208.179; helo=mail-lj1-f179.google.com; pr=C
  36. Received: from mail-lj1-f179.google.com (209.85.208.179) by
  37. BN8NAM12FT036.mail.protection.outlook.com (10.13.182.224) with Microsoft SMTP
  38. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  39. 15.20.6455.20 via Frontend Transport; Sun, 28 May 2023 14:08:12 +0000
  40. Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-2af177f12d1so25517361fa.0
  41. for <>; Sun, 28 May 2023 07:08:12 -0700 (PDT)
  42. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  43. d=gmail.com; s=20221208; t=1685282891; x=1687874891;
  44. h=content-transfer-encoding:mime-version:message-id:subject:from:to
  45. :date:from:to:cc:subject:date:message-id:reply-to;
  46. bh=kwNmlS77rCWyNNWftccHMg5qh1fqYW2XanEGTAYQvu4=;
  47. b=mylo8+gpxePSMT2wcKTpG+ng76ZXwCMt1EspD6QEJ9EcvOYudCnrIkNke7IDt81Uhp
  48. meu3cLG6F8232NZKxGbxLZ/CuHADJ+7uGk1m+J5WCFCbAjSoNBX/1DPGIQgWGETvcIT6
  49. XcOnZAINO+Vf4KMrKlcEKysIJx4FVSK2vnDaZXK9Owx53HhLvCfAcXPtBmLdPYS5ok77
  50. q9khlj2Oiu0wWyvETzwUTrE8zYzS0KcJehK+bQpgXAoo9h8+bptjOsnaLOxCNERz572Z
  51. JzvxFZA6Ul3qyGEwACsSE563Zd/mVbHPP9qi+aULJQPk12or5TGZSwmmBYQx6iBKrkBx
  52. DnHA==
  53. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  54. d=1e100.net; s=20221208; t=1685282891; x=1687874891;
  55. h=content-transfer-encoding:mime-version:message-id:subject:from:to
  56. :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
  57. bh=kwNmlS77rCWyNNWftccHMg5qh1fqYW2XanEGTAYQvu4=;
  58. b=cxZxKf0UTvTxHY/l2me2H6d4iTYv019eLSsNDeuqipMYc4nTaDpJqvm2tfoDFvEWoF
  59. 7VYyW05mbDVwFHoc0pWI5j5QQliSruJXXEcBKkw4FrpViKi8ANh5R80iz5yExnk1YAV7
  60. QvHDkTzwxr3PKva3YsyIt5WTz4XIyL7xUoAa6T9r/N0CR2UM7uoOXJBAqR2B2lC1PdF+
  61. 8AA+oXaDZEM63dpzp9FpLDdLqt/6xKTxMNMto6e0nvKj1Y+1G9tqYSHQG2DeI6HPS4M/
  62. eY7FYdWnCTo4KeYJED6IE2LI6NM80jhoqUAeursThi+OePrg+v8L1UrVL43UFeU9tT7M
  63. wnlA==
  64. X-Gm-Message-State: AC+VfDxFiXPBwoADrm0HikqAfPoXClWC90+74OzSy3ks2wsDRS4WB80b
  65. rlqsFQjQqLtDPvy3+YUEJPSXD27Wfds=
  66. X-Google-Smtp-Source: ACHHUZ5jSSN1VhCtwvENR8ptqzVMov2qEPsNjFLnoyZnWJD9iXPB4b3Pw11xExBRxd27A5uYQea5cQ==
  67. X-Received: by 2002:a2e:8818:0:b0:2af:1dce:8efd with SMTP id x24-20020a2e8818000000b002af1dce8efdmr2847914ljh.36.1685282890919;
  68. Sun, 28 May 2023 07:08:10 -0700 (PDT)
  69. Return-Path: [email protected]
  70. Received: from [127.0.0.1] ([91.194.3.45])
  71. by smtp.gmail.com with ESMTPSA id x2-20020a2e7c02000000b002adb8c028dcsm1984779ljc.75.2023.05.28.07.08.10
  72. for <>
  73. (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
  74. Sun, 28 May 2023 07:08:10 -0700 (PDT)
  75. Date: Sun, 28 May 2023 09:08:09 +0000
  76. To:
  77. From: Emily Sullivan <[email protected]>
  78. Subject: Hello .. IDG11325
  79. Message-ID: <QikS907ZEZZjWUbt1HtxcYhwiAxKLFGfCaAfDmTxI@localhost>
  80. X-Priority: 3 (Normal)
  81. X-Mailer: iPhone Mail (17A860)
  82. MIME-Version: 1.0
  83. X-MS-Exchange-Organization-ExpirationStartTime: 28 May 2023 14:08:12.7114
  84. (UTC)
  85. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  86. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  87. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  88. X-MS-Exchange-Organization-Network-Message-Id:
  89. 84008bfe-b8a7-40c4-bbd5-08db5f84f95e
  90. X-EOPAttributedMessage: 0
  91. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  92. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  93. X-MS-PublicTrafficType: Email
  94. X-MS-TrafficTypeDiagnostic:
  95. BN8NAM12FT036:EE_|LV3PR05MB10408:EE_|MWHPR0501MB3899:EE_
  96. X-MS-Exchange-Organization-AuthSource:
  97. BN8NAM12FT036.eop-nam12.prod.protection.outlook.com
  98. X-MS-Exchange-Organization-AuthAs: Anonymous
  99. X-MS-Office365-Filtering-Correlation-Id: 84008bfe-b8a7-40c4-bbd5-08db5f84f95e
  100. X-MS-Exchange-Organization-SCL: 1
  101. X-Microsoft-Antispam: BCL:0;
  102. X-Forefront-Antispam-Report:
  103. CIP:209.85.208.179;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-lj1-f179.google.com;PTR:mail-lj1-f179.google.com;CAT:NONE;SFS:(13230028)(7916004)(84050400002)(451199021)(58800400005)(356005)(7636003)(7596003)(76482006)(1096003)(956004)(7126003)(83380400001)(66574015)(33716001)(426003)(336012)(66899021)(86362001)(6916009)(4744005)(73392003)(9686003)(82202003)(26005)(22186003)(7246003)(5660300002)(8676002);DIR:INB;
  104. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 May 2023 14:08:12.6176
  105. (UTC)
  106. X-MS-Exchange-CrossTenant-Network-Message-Id: 84008bfe-b8a7-40c4-bbd5-08db5f84f95e
  107. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  108. X-MS-Exchange-CrossTenant-AuthSource:
  109. BN8NAM12FT036.eop-nam12.prod.protection.outlook.com
  110. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  111. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  112. X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV3PR05MB10408
  113. X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.0637068
  114. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6433.019
  115. X-Microsoft-Antispam-Mailbox-Delivery:
  116. ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097);
  117. Content-type: text/plain;
  118. charset="UTF-8"
  119. Content-transfer-encoding: quoted-printable
  120.  
Advertisement
Add Comment
Please, Sign In to add comment