Advertisement
wavellan

20230615_PHISHING_SCAM_1

Jun 15th, 2023
136
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.80 KB | None | 0 0
  1. Dear YOUR_NAME_HERE
  2.  
  3. My name is Erin Mosley. There’s a vacancy for Logistics Manager and I would like to offer this position to you.
  4. This requires personal computer or laptop with reliable connection to the Internet, willingness to learn, and permit to work in the US.
  5.  
  6. Please reply to this letter if this sounds right for you and we will contact you to schedule a phone interview.
  7.  
  8.  
  9.  
  10. Best regards,
  11. Erin Mosley
  12. Human Resources
  13.  
  14.  
  15.  
  16.  
  17.  
  18. Received: from PH8PR05MB9292.namprd05.prod.outlook.com (2603:10b6:510:1cf::15)
  19. by MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Thu, 15 Jun 2023
  20. 21:03:21 +0000
  21. Received: from BYAPR21CA0019.namprd21.prod.outlook.com (2603:10b6:a03:114::29)
  22. by PH8PR05MB9292.namprd05.prod.outlook.com (2603:10b6:510:1cf::15) with
  23. Microsoft SMTP Server (version=TLS1_2,
  24. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6477.37; Thu, 15 Jun
  25. 2023 21:03:18 +0000
  26. Received: from DM6NAM12FT033.eop-nam12.prod.protection.outlook.com
  27. (2603:10b6:a03:114:cafe::f0) by BYAPR21CA0019.outlook.office365.com
  28. (2603:10b6:a03:114::29) with Microsoft SMTP Server (version=TLS1_2,
  29. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6521.12 via Frontend
  30. Transport; Thu, 15 Jun 2023 21:03:17 +0000
  31. Authentication-Results: spf=pass (sender IP is 209.85.208.174)
  32. smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
  33. header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
  34. reason=100
  35. Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
  36. 209.85.208.174 as permitted sender) receiver=protection.outlook.com;
  37. client-ip=209.85.208.174; helo=mail-lj1-f174.google.com; pr=C
  38. Received: from mail-lj1-f174.google.com (209.85.208.174) by
  39. DM6NAM12FT033.mail.protection.outlook.com (10.13.179.14) with Microsoft SMTP
  40. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  41. 15.20.6521.12 via Frontend Transport; Thu, 15 Jun 2023 21:03:17 +0000
  42. Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2b4450708d0so3146701fa.0
  43. for <>; Thu, 15 Jun 2023 14:03:17 -0700 (PDT)
  44. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  45. d=gmail.com; s=20221208; t=1686862996; x=1689454996;
  46. h=content-transfer-encoding:mime-version:message-id:subject:from:to
  47. :date:from:to:cc:subject:date:message-id:reply-to;
  48. bh=os5cjB1H64n3m/ouUZHp6AkXwB+m+VzFZXJIWTwUfxg=;
  49. b=hBWp7VCkouB2G9xJyjNvArvbJ75P9jGzc7pb+hheI/PGgJPsi/uxfzcMj1ilnIuu5/
  50. 8IIP3Tcn86PI3hL1wqPRl/fVTDEZHyuK5bv2ayZuuj3zS4Fh/o9UV+YevojpWdY9+PCD
  51. 9riWrNz13rQ+CTuoUQKJZcjZmoag+fLj+vumvbkSzjjM0bj8TwV8NmoVQs01Q1JU0jv1
  52. jmliGDCRc2Lrd8TefDzc2rqBLmTAEXQVFFfgrMQHB1OjYxLobm4gdhDTWzfm/7Bik/Al
  53. ChCc642sEEGpElF4CEkTtx13ZX4E/AB4Ja1JpSiNgfy8Q9LWbofhYzxvrO/oFepS2hSo
  54. rFXQ==
  55. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  56. d=1e100.net; s=20221208; t=1686862996; x=1689454996;
  57. h=content-transfer-encoding:mime-version:message-id:subject:from:to
  58. :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
  59. bh=os5cjB1H64n3m/ouUZHp6AkXwB+m+VzFZXJIWTwUfxg=;
  60. b=DW1DHr03gosLsau4Qpb32hnuj5BmeEJ9DL/xUY4Y1roTKrvg2D7o9rur2ALwN6JXiT
  61. B8BUI9X7thwZRFsVElHBuqb2IGOP5y+g0L7hSqs1YXQJypiqKcaeUahwh7lYgIZeL8q5
  62. 4QLNR6vyDBFuByYeN2VmIzYF3LuAlWQOyvjY16/30FxPLxgtA1K/fzfu4RJyYYHB7TWT
  63. Fsdn8kOhrDnER6MzA54zY1a6tlFPZ+aZU80A9m7WUcNQ9ir7Dp3nIqRqe9tFjLE/KvRB
  64. hfx/AS3esDdstnONXT9KORwo3UqDWtVidYJ14Zax2GOUcYecFX3pejyT5j1Rc11Inhtj
  65. QMQw==
  66. X-Gm-Message-State: AC+VfDyO8djOa+DGbxU6xvzO/oW513En5OlfzOlOWxR70JBn95iVKXu4
  67. NpPyYiiDOpBAnCk8kOxeAkZgnd34QPc=
  68. X-Google-Smtp-Source: ACHHUZ6hNIoS3r1IJ1wZLxyRZaztfeRuwJrqTFk3EqXHp/l9ikOlZw0ugMGasvyg7iDFP8RWWRfsWQ==
  69. X-Received: by 2002:a2e:a492:0:b0:2b2:1089:dcc8 with SMTP id h18-20020a2ea492000000b002b21089dcc8mr369789lji.2.1686862995865;
  70. Thu, 15 Jun 2023 14:03:15 -0700 (PDT)
  71. Return-Path: [email protected]
  72. Received: from [127.0.0.1] ([91.194.3.54])
  73. by smtp.gmail.com with ESMTPSA id k15-20020a2e240f000000b002b1a872c826sm2993354ljk.61.2023.06.15.14.03.15
  74. for <>
  75. (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
  76. Thu, 15 Jun 2023 14:03:15 -0700 (PDT)
  77. Date: Thu, 15 Jun 2023 16:03:14 +0000
  78. To: YOUR_NAME_HERE
  79. From: Erin Mosley <[email protected]>
  80. Subject: Hello ... / #G11211
  81. Message-ID: <Lm6gkK1cvo1if7CXtmGC4GsQuzi4d26nuENYRKbtzw@localhost>
  82. X-Priority: 3 (Normal)
  83. X-Mailer: WebService/1.1.13634 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36
  84. MIME-Version: 1.0
  85. X-MS-Exchange-Organization-ExpirationStartTime: 15 Jun 2023 21:03:17.6799
  86. (UTC)
  87. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  88. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  89. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  90. X-MS-Exchange-Organization-Network-Message-Id:
  91. 0f86b82b-9c4b-4fab-d99e-08db6de3f152
  92. X-EOPAttributedMessage: 0
  93. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  94. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  95. X-MS-PublicTrafficType: Email
  96. X-MS-TrafficTypeDiagnostic:
  97. DM6NAM12FT033:EE_|PH8PR05MB9292:EE_|MWHPR0501MB3899:EE_
  98. X-MS-Exchange-Organization-AuthSource:
  99. DM6NAM12FT033.eop-nam12.prod.protection.outlook.com
  100. X-MS-Exchange-Organization-AuthAs: Anonymous
  101. X-MS-Office365-Filtering-Correlation-Id: 0f86b82b-9c4b-4fab-d99e-08db6de3f152
  102. X-MS-Exchange-Organization-SCL: 1
  103. X-Microsoft-Antispam: BCL:0;
  104. X-Forefront-Antispam-Report:
  105. CIP:209.85.208.174;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-lj1-f174.google.com;PTR:mail-lj1-f174.google.com;CAT:NONE;SFS:(13230028)(7916004)(84050400002)(451199021)(1096003)(9686003)(26005)(8676002)(7596003)(7636003)(58800400005)(356005)(82202003)(6916009)(86362001)(76482006)(33716001)(22186003)(66574015)(83380400001)(5660300002)(336012)(7246003)(426003)(956004)(7126003)(4744005)(73392003)(66899021)(70300200001);DIR:INB;
  106. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jun 2023 21:03:17.6330
  107. (UTC)
  108. X-MS-Exchange-CrossTenant-Network-Message-Id: 0f86b82b-9c4b-4fab-d99e-08db6de3f152
  109. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  110. X-MS-Exchange-CrossTenant-AuthSource:
  111. DM6NAM12FT033.eop-nam12.prod.protection.outlook.com
  112. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  113. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  114. X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR05MB9292
  115. X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.2887029
  116. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6477.035
  117. X-Microsoft-Antispam-Mailbox-Delivery:
  118. ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097);
  119. Content-type: text/plain;
  120. charset="UTF-8"
  121. Content-transfer-encoding: quoted-printable
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement