20231127_PHISHING_SCAM_1

Hi YOUR_NAME_HERE

My name is Nora Marshall. I am employed at a company that has expertise in logistics.
We currently have an open position within our department.

We're looking for a dependable candidate for the available position, and if you're keen, we can explore the possibility of collaborating with you. I will provideyou with all the necessary documents for the evaluation.

Having either U.S. citizenship or have the right to work in the United States.

Should this spark your curiosity, respond, and we will initiate contact.


Yours faithfully,
Nora Marshall
Corporate Recruiter




Received: from MW4PR05MB8234.namprd05.prod.outlook.com (2603:10b6:303:121::19)
 by MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Mon, 27 Nov 2023
 23:07:18 +0000
Received: from SJ0PR03CA0059.namprd03.prod.outlook.com (2603:10b6:a03:33e::34)
 by MW4PR05MB8234.namprd05.prod.outlook.com (2603:10b6:303:121::19) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7025.29; Mon, 27 Nov
 2023 23:07:14 +0000
Received: from MW2NAM12FT104.eop-nam12.prod.protection.outlook.com
 (2603:10b6:a03:33e:cafe::14) by SJ0PR03CA0059.outlook.office365.com
 (2603:10b6:a03:33e::34) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7025.28 via Frontend
 Transport; Mon, 27 Nov 2023 23:07:14 +0000
Authentication-Results: spf=pass (sender IP is 209.85.208.181)
 smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
 header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
 reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
 209.85.208.181 as permitted sender) receiver=protection.outlook.com;
 client-ip=209.85.208.181; helo=mail-lj1-f181.google.com; pr=C
Received: from mail-lj1-f181.google.com (209.85.208.181) by
 MW2NAM12FT104.mail.protection.outlook.com (10.13.181.144) with Microsoft SMTP
 Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7046.21 via
 Frontend Transport; Mon, 27 Nov 2023 23:07:14 +0000
Received: by mail-lj1-f181.google.com with SMTP id 38308e7fff4ca-2c876f1e44dso59811281fa.0
        for <>; Mon, 27 Nov 2023 15:07:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1701126432; x=1701731232; darn=;
        h=mime-version:message-id:subject:from:to:date:from:to:cc:subject
         :date:message-id:reply-to;
        bh=ygHIn3z135rR4ZNXSM3UfrFZTcvW8xoFCEbCBmzCPS8=;
        b=FU/LOHJFHpIlIp0PxRg8Se38QcbBtqgZ3aOKS6xU/SEJbCbJOHV2JJ3Qnsb8+txJVh
         jAz9kdFzsR+xsHpTiK43bFTGTLyfJ6gxr5QpkjJ3gJ3Fy9rhM8lum+xpzGDoWK8aDe7z
         Nc2PlzVwJje6EbYnTyHoYa6ZmVr8Ug1oNJUn6QbjFwdVMwi5f05cAZqICIhMCJDSFymX
         tpFKmerXvjefoeZftpz7KZxUeVeRPbId24Ww+1E2hMgsAWn8fjXDKbuAVl8wQxQdhAp0
         z1OREdFDcLWdsLuFBUsrZ3M+//kIGJshQ1DPOZ/RFP7ny2TKHucweWVWS/KNFXfp/gGl
         s/ZA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1701126432; x=1701731232;
        h=mime-version:message-id:subject:from:to:date:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=ygHIn3z135rR4ZNXSM3UfrFZTcvW8xoFCEbCBmzCPS8=;
        b=wTT4e8JTnB6RNvCEyH+KuzUXYsjd/i2VY2l5LjkTwc2OyXnqj+GvEijJdS7BGNHROE
         U5McT5OhB0DKEdMrzPzmsEjUXoVInTzVr70f5PIbONOzV0Mv8SPNxx+MTK7W8FkWt4KE
         noSHnotp9C59zVe7dTZrUOMJysEgq9URO8J/9e7vZ+YnKDxWEq/NWZf2vES13zBgA34/
         spzdLxofTpM5A0R/6tPFjfBv51lxIXOLdkJOSAojSn7qJlLvSevEMLJariLFuz/CBi4+
         EHYn4DMKOzr0CuBtT4nmmjsfBxH+SBZJfztQPAVVzA4A5OxHVQfNk6NQjwpnKUtppBzk
         nm/g==
X-Gm-Message-State: AOJu0YwQVEpcGkEP96PttVpe84/mTEBvzyz+SL5//djSnCKlMxPw50tZ
	m6+sgrEoPgnvilwTxSPRff5paBtvVXs=
X-Google-Smtp-Source: AGHT+IEz94Tj+pUrxUuMh9uCWRXn5xL90FKrqFBEBHL7kl5eHLiSERK3t4f1QyzB5ObxWPACYqER7g==
X-Received: by 2002:ac2:4e10:0:b0:50a:a5f7:47fb with SMTP id e16-20020ac24e10000000b0050aa5f747fbmr10854333lfr.49.1701126431917;
        Mon, 27 Nov 2023 15:07:11 -0800 (PST)
Return-Path: [email protected]
Received: from [127.0.0.1] ([91.194.2.221])
        by smtp.gmail.com with ESMTPSA id i17-20020a056512319100b0050ab72b97fcsm1625249lfe.124.2023.11.27.15.07.11
        for <>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 27 Nov 2023 15:07:11 -0800 (PST)
Date: Mon, 27 Nov 2023 18:07:10 +0000
To:
From: Nora Marshall <[email protected]>
Subject: Hello ......   UIB05202
Message-ID: <aAPDIwJkRKA6CFG5b5Oe8QkZX0nHZE8DT6Q4ENkaOo@localhost>
X-Priority: 3 (Normal)
X-Mailer: Microsoft Outlook 16.0
MIME-Version: 1.0
X-MS-Exchange-Organization-ExpirationStartTime: 27 Nov 2023 23:07:14.3786
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 c763ccd0-6e1a-4d3a-c488-08dbef9d9819
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 MW2NAM12FT104:EE_|MW4PR05MB8234:EE_|MWHPR0501MB3899:EE_
X-MS-Exchange-Organization-AuthSource:
 MW2NAM12FT104.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: c763ccd0-6e1a-4d3a-c488-08dbef9d9819
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:209.85.208.181;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-lj1-f181.google.com;PTR:mail-lj1-f181.google.com;CAT:SPM;SFS:(13230031)(7916004)(84050400002)(230922051799003)(451199024)(4744005)(7246003)(7636003)(7596003)(356005)(426003)(336012)(9686003)(82202003)(33716001)(26005)(73392003)(5660300002)(7126003)(956004)(22186003)(58800400005)(76482006)(8676002)(1096003)(86362001)(6916009)(27256005)(70300200001)(36394005);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Nov 2023 23:07:14.3317
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c763ccd0-6e1a-4d3a-c488-08dbef9d9819
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 MW2NAM12FT104.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR05MB8234
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.7345379
X-MS-Exchange-Processed-By-BccFoldering: 15.20.7025.020
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit