Advertisement
wavellan

20230301_PHISHING_SCAM_1

Mar 1st, 2023
116
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.82 KB | None | 0 0
  1. Greetings dear
  2.  
  3. I know you will be surprised reading from me today but consider this a
  4. divine intervention. My name is Sharon Kathleen Dean, widow with stage
  5. 4 cancer.
  6.  
  7. I saw your email in my search for someone I can trust to assist and
  8. utilize the proceeds realized from my estates and investments for
  9. charity, basically helping the less privileged, widows and orphans
  10. because according to the doctors my days are numbered.
  11.  
  12. I desire to entrust this amount of money in your care and It is my
  13. last wish to use this money strictly for charity hence seek a sincere
  14. heart to actualize this as my health no longer permits me.
  15.  
  16. I am willing to give you a substantial part of the funds for your
  17. personal and family needs so reply to my email
  18. {[email protected]} and give me your word never to betray my
  19. trust. I have to rest now and will explain further when I hear from
  20. you.
  21.  
  22. God bless you,
  23.  
  24. Regards
  25. Sharon Kathleen Dean
  26.  
  27.  
  28.  
  29.  
  30. Received: from SN6PR05MB5054.namprd05.prod.outlook.com (::1) by
  31. MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Thu, 2 Mar 2023
  32. 02:17:57 +0000
  33. Received: from MW2PR16CA0012.namprd16.prod.outlook.com (2603:10b6:907::25) by
  34. SN6PR05MB5054.namprd05.prod.outlook.com (2603:10b6:805:f0::14) with Microsoft
  35. SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  36. 15.20.6134.30; Thu, 2 Mar 2023 02:17:54 +0000
  37. Received: from MW2NAM12FT022.eop-nam12.prod.protection.outlook.com
  38. (2603:10b6:907:0:cafe::f5) by MW2PR16CA0012.outlook.office365.com
  39. (2603:10b6:907::25) with Microsoft SMTP Server (version=TLS1_2,
  40. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6134.30 via Frontend
  41. Transport; Thu, 2 Mar 2023 02:17:54 +0000
  42. Authentication-Results: spf=pass (sender IP is 209.85.217.53)
  43. smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
  44. header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
  45. reason=100
  46. Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
  47. 209.85.217.53 as permitted sender) receiver=protection.outlook.com;
  48. client-ip=209.85.217.53; helo=mail-vs1-f53.google.com; pr=C
  49. Received: from mail-vs1-f53.google.com (209.85.217.53) by
  50. MW2NAM12FT022.mail.protection.outlook.com (10.13.180.89) with Microsoft SMTP
  51. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  52. 15.20.6178.6 via Frontend Transport; Thu, 2 Mar 2023 02:17:53 +0000
  53. Received: by mail-vs1-f53.google.com with SMTP id d20so21065572vsf.11
  54. for <>; Wed, 01 Mar 2023 18:17:53 -0800 (PST)
  55. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  56. d=gmail.com; s=20210112;
  57. h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
  58. :subject:date:message-id:reply-to;
  59. bh=ufk3iqehbIUVi8cbEqIE2TCyAWnbPf1kO6CeX/VLsW8=;
  60. b=TI8MrT0I7aLIvjggsgzug6xwnY8L5fIY6sR6Pj8t6J2mEzWGcjDHS3jTQKREZiKjFF
  61. uc3WEsGBZPFgQ7ZHKV/0jIBHmfIyhce2DG2OKZbYBbq5f7hJiaGBauxi5lNh+42Xk700
  62. urFEhx2SU2gaOqHHcFYgl3lIAb/EHqXeUxeEn+4V3oCNdQ2feh8S6GZq6ilTc9vNuO1W
  63. B9FGo69Mcv6Je1HSbuoNP4hZikRt6hCkefMOijKJfUhAFq4xMeWoxFMleYkxO/HY5HF6
  64. jzTOYSL/sqOnnYzACYxvSA0naEMoVsythfnhxd1aAGIQ3fW0RTrlwTw5ECtCjZun+T0o
  65. jByQ==
  66. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  67. d=1e100.net; s=20210112;
  68. h=to:subject:message-id:date:from:reply-to:mime-version
  69. :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
  70. bh=ufk3iqehbIUVi8cbEqIE2TCyAWnbPf1kO6CeX/VLsW8=;
  71. b=p7BQjT4lqautVWCGfzUfMBI7v2Uca/bcn+djDP+e7Tg8kvobgHx9n8M6Oqci398EGF
  72. eNKj94A0ZffkwdCB70MbomNdjm5v4Q+yfTw/Od6q2qsJl/XCXK0ee7dFLNadzxPB4cUL
  73. VkaJB8VNuqBwMu6JCB+oYxjF6EAiRrqJ0zV0s391L2uKhsP0oBgB0PQdITe8Y/etXn8N
  74. 1i17uXZeanXXT8ydHTptRQaQqTLIlR6b5fYUCBPzoi7Gs6uQ2BZr+bK+BxA+GV4D6EU9
  75. A3fdQ3R3Pe73jalVjsU7E9OI4Gf8cPae9HHzyeZVOfTmbTkfkQz1y5NhF5BfxKnTD7hN
  76. JEWQ==
  77. X-Gm-Message-State: AO0yUKXvU9DxWm175KQGL25XZIzCn+cIZfbVjvad/3PtOLzJAWDmrtoX
  78. CF+sQLs1ANho9rl6xMIefiDfIdt+M/pKgArAazs=
  79. X-Google-Smtp-Source: AK7set8ocKmN2djjdcKu6P8of0xPgwe2vGmbyOj5CyC+HCoca+Ud463X0I9Ps7bZpFzQTTm00mLXgxxWpWpIaUzzgcU=
  80. X-Received: by 2002:a05:6102:186:b0:412:d18:c718 with SMTP id
  81. r6-20020a056102018600b004120d18c718mr5808377vsq.3.1677723472561; Wed, 01 Mar
  82. 2023 18:17:52 -0800 (PST)
  83. MIME-Version: 1.0
  84. Received: by 2002:ab0:48ae:0:0:0:0:0 with HTTP; Wed, 1 Mar 2023 18:17:51 -0800 (PST)
  85. From: Sharon K Dean <[email protected]>
  86. Date: Thu, 2 Mar 2023 03:17:51 +0100
  87. Message-ID: <CA+8qJFmf=1LjPn7P22Y=x9+o6YqszQ3pcq4ghz5oq0pGKxsMPQ@mail.gmail.com>
  88. Subject: Hello dear
  89. To: undisclosed-recipients:;
  90. Bcc:
  91. Return-Path: [email protected]
  92. X-MS-Exchange-Organization-ExpirationStartTime: 02 Mar 2023 02:17:53.9881
  93. (UTC)
  94. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  95. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  96. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  97. X-MS-Exchange-Organization-Network-Message-Id:
  98. 64563c84-c492-4e2c-67bf-08db1ac454b1
  99. X-EOPAttributedMessage: 0
  100. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  101. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  102. X-MS-PublicTrafficType: Email
  103. X-MS-TrafficTypeDiagnostic: MW2NAM12FT022:EE_|SN6PR05MB5054:EE_
  104. X-MS-Exchange-Organization-AuthSource:
  105. MW2NAM12FT022.eop-nam12.prod.protection.outlook.com
  106. X-MS-Exchange-Organization-AuthAs: Anonymous
  107. X-MS-Office365-Filtering-Correlation-Id: 64563c84-c492-4e2c-67bf-08db1ac454b1
  108. X-MS-Exchange-Organization-SCL: 5
  109. X-Forefront-Antispam-Report:
  110. CIP:209.85.217.53;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-vs1-f53.google.com;PTR:mail-vs1-f53.google.com;CAT:SPM;SFS:(13230025)(84050400002)(451199018)(109986016)(83380400001)(26005)(82202003)(73392003)(336012)(58800400005)(2860700004)(7636003)(356005)(7596003)(3480700007)(5660300002)(7116003)(22186003)(55446002)(4744005)(8676002)(76482006)(42186006)(1096003)(86362001)(17780700006);DIR:INB;
  111. X-Microsoft-Antispam: BCL:0;
  112. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2023 02:17:53.9256
  113. (UTC)
  114. X-MS-Exchange-CrossTenant-Network-Message-Id: 64563c84-c492-4e2c-67bf-08db1ac454b1
  115. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  116. X-MS-Exchange-CrossTenant-AuthSource:
  117. MW2NAM12FT022.eop-nam12.prod.protection.outlook.com
  118. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  119. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  120. X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB5054
  121. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.3255580
  122. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6134.027
  123. X-Microsoft-Antispam-Mailbox-Delivery:
  124. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
  125. X-Microsoft-Antispam-Message-Info:
  126.  
  127. Content-type: text/plain;
  128. charset="UTF-8"
  129. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement