API tools faq
paste
Advertisement
wavellan

20241116_PHISHING_SCAM_1

wavellan
Nov 16th, 2024
64
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.35 KB | None | 0 0
raw download clone embed print report
  1. Attn: Dear Beneficiary.
  2.  
  3. What is the reason for the delay? your funds have been approved.
  4. Would you like to claim your funds now? if this isn't claimed by you,
  5. it will be turned over to the State for confiscation.
  6.  
  7. Yours Sincerely,
  8. Mr. Amer Kazim
  9. Public Communication.
  10.  
  11.  
  12.  
  13.  
  14. Received: from DS7PR05MB10092.namprd05.prod.outlook.com (::1) by
  15. SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Sat, 16 Nov 2024 07:54:24
  16. +0000
  17. Received: from BN8PR04CA0051.namprd04.prod.outlook.com (2603:10b6:408:d4::25)
  18. by DS7PR05MB10092.namprd05.prod.outlook.com (2603:10b6:8:e9::8) with
  19. Microsoft SMTP Server (version=TLS1_2,
  20. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.18; Sat, 16 Nov
  21. 2024 07:54:21 +0000
  22. Received: from BN1PEPF00006003.namprd05.prod.outlook.com
  23. (2603:10b6:408:d4:cafe::30) by BN8PR04CA0051.outlook.office365.com
  24. (2603:10b6:408:d4::25) with Microsoft SMTP Server (version=TLS1_2,
  25. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.18 via Frontend
  26. Transport; Sat, 16 Nov 2024 07:54:21 +0000
  27. Authentication-Results: spf=pass (sender IP is 219.84.174.92)
  28. smtp.mailfrom=grnet.com.tw; dkim=none (message not signed)
  29. header.d=none;dmarc=bestguesspass action=none
  30. header.from=grnet.com.tw;compauth=pass reason=109
  31. Received-SPF: Pass (protection.outlook.com: domain of grnet.com.tw designates
  32. 219.84.174.92 as permitted sender) receiver=protection.outlook.com;
  33. client-ip=219.84.174.92; helo=ns1.grnet.com.tw; pr=C
  34. Received: from ns1.grnet.com.tw (219.84.174.92) by
  35. BN1PEPF00006003.mail.protection.outlook.com (10.167.243.235) with Microsoft
  36. SMTP Server id 15.20.8158.14 via Frontend Transport; Sat, 16 Nov 2024
  37. 07:54:19 +0000
  38. Received: from WIN-CLJ1B0GQ6JP ([87.120.120.11])
  39. (authenticated user [email protected])
  40. by ns1.grnet.com.tw (Kerio MailServer 6.7.0)
  41. (using TLSv1/SSLv3 with cipher AES256-SHA (256 bits))
  42. for ;
  43. Sat, 16 Nov 2024 15:54:14 +0800
  44. From: "Mr. Amer Kazim" <[email protected]>
  45. Subject: Attn: Dear Beneficiary.
  46. To:
  47. MIME-Version: 1.0
  48. Reply-To: <[email protected]>
  49. Date: Fri, 15 Nov 2024 23:54:15 -0800
  50. Message-Id: <[email protected]>
  51. Return-Path: [email protected]
  52. X-MS-Exchange-Organization-ExpirationStartTime: 16 Nov 2024 07:54:20.4637
  53. (UTC)
  54. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  55. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  56. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  57. X-MS-Exchange-Organization-Network-Message-Id:
  58. e4cc61a1-22f3-48ed-e1a3-08dd0613e0f2
  59. X-EOPAttributedMessage: 0
  60. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  61. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  62. X-MS-PublicTrafficType: Email
  63. X-MS-TrafficTypeDiagnostic:
  64. BN1PEPF00006003:EE_|DS7PR05MB10092:EE_|SJ0PR05MB8678:EE_
  65. X-MS-Exchange-Organization-AuthSource:
  66. BN1PEPF00006003.namprd05.prod.outlook.com
  67. X-MS-Exchange-Organization-AuthAs: Anonymous
  68. X-MS-Office365-Filtering-Correlation-Id: e4cc61a1-22f3-48ed-e1a3-08dd0613e0f2
  69. X-MS-Exchange-Organization-SCL: 5
  70. X-Forefront-Antispam-Report:
  71. CIP:219.84.174.92;CTRY:TW;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ns1.grnet.com.tw;PTR:ErrorRetry;CAT:SPM;SFS:(13230040)(8096899003)(10062699018);DIR:INB;
  72. X-Microsoft-Antispam: BCL:0;ARA:13230040|8096899003|10062699018;
  73. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Nov 2024 07:54:19.6668
  74. (UTC)
  75. X-MS-Exchange-CrossTenant-Network-Message-Id: e4cc61a1-22f3-48ed-e1a3-08dd0613e0f2
  76. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  77. X-MS-Exchange-CrossTenant-AuthSource:
  78. BN1PEPF00006003.namprd05.prod.outlook.com
  79. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  80. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  81. X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB10092
  82. X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.3409368
  83. X-MS-Exchange-Processed-By-BccFoldering: 15.20.8158.013
  84. X-Microsoft-Antispam-Mailbox-Delivery:
  85. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  86.  
  87. Content-type: multipart/alternative;
  88. boundary="B_3814592367_32304226"
  89.  
  90. > This message is in MIME format. Since your mail reader does not understand
  91. this format, some or all of this message may not be legible.
  92.  
  93. --B_3814592367_32304226
  94. Content-type: text/plain;
  95. charset="UTF-8"
  96. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!