Advertisement
wavellan

20231129_PHISHING_SCAM_1

Nov 29th, 2023
82
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.14 KB | None | 0 0
  1. Good Day,
  2.  
  3. I have a business proposal that will be profitable for both of us, No upfront fee is required, contact me prior to providing you with further communications.
  4.  
  5. Thanks
  6. Miss Zihan
  7.  
  8.  
  9.  
  10.  
  11.  
  12.  
  13.  
  14. Received: from IA0PR05MB10023.namprd05.prod.outlook.com (2603:10b6:208:400::8)
  15. by MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Wed, 29 Nov 2023
  16. 05:17:16 +0000
  17. Received: from DS7PR07CA0001.namprd07.prod.outlook.com (2603:10b6:5:3af::10)
  18. by IA0PR05MB10023.namprd05.prod.outlook.com (2603:10b6:208:400::8) with
  19. Microsoft SMTP Server (version=TLS1_2,
  20. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7025.27; Wed, 29 Nov
  21. 2023 05:17:12 +0000
  22. Received: from DM6NAM12FT008.eop-nam12.prod.protection.outlook.com
  23. (2603:10b6:5:3af:cafe::8) by DS7PR07CA0001.outlook.office365.com
  24. (2603:10b6:5:3af::10) with Microsoft SMTP Server (version=TLS1_2,
  25. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7046.22 via Frontend
  26. Transport; Wed, 29 Nov 2023 05:17:12 +0000
  27. Authentication-Results: spf=softfail (sender IP is 200.164.224.12)
  28. smtp.mailfrom=mehmetyagizllc.33mail.com; dkim=none (message not signed)
  29. header.d=none;dmarc=permerror action=none
  30. header.from=mehmetyagizllc.33mail.com;compauth=fail reason=001
  31. Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
  32. mehmetyagizllc.33mail.com discourages use of 200.164.224.12 as permitted
  33. sender)
  34. Received: from mail.receita.pb.gov.br (200.164.224.12) by
  35. DM6NAM12FT008.mail.protection.outlook.com (10.13.179.15) with Microsoft SMTP
  36. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  37. 15.20.7046.21 via Frontend Transport; Wed, 29 Nov 2023 05:17:10 +0000
  38. Received: from localhost (localhost.localdomain [127.0.0.1])
  39. by mail.receita.pb.gov.br (Postfix) with ESMTP id 292C1780BB;
  40. Wed, 29 Nov 2023 02:08:10 -0300 (-03)
  41. Received: from mail.receita.pb.gov.br ([127.0.0.1])
  42. by localhost (mail.receita.pb.gov.br [127.0.0.1]) (amavisd-new, port 10032)
  43. with ESMTP id v2u9QtFN7CAC; Wed, 29 Nov 2023 02:08:10 -0300 (-03)
  44. Received: from localhost (localhost.localdomain [127.0.0.1])
  45. by mail.receita.pb.gov.br (Postfix) with ESMTP id 1286E7A86F;
  46. Wed, 29 Nov 2023 02:08:09 -0300 (-03)
  47. X-Virus-Scanned: amavisd-new at sefaz.pb.gov.br
  48. Received: from mail.receita.pb.gov.br ([127.0.0.1])
  49. by localhost (mail.receita.pb.gov.br [127.0.0.1]) (amavisd-new, port 10026)
  50. with ESMTP id 2ugqrGPOi_eg; Wed, 29 Nov 2023 02:08:09 -0300 (-03)
  51. Received: from [192.168.0.31] (unknown [84.239.50.16])
  52. by mail.receita.pb.gov.br (Postfix) with ESMTPSA id 7678677684;
  53. Wed, 29 Nov 2023 02:08:02 -0300 (-03)
  54. MIME-Version: 1.0
  55. Content-Description: Mail message body
  56. Subject: Re:From Miss. Zihan Mingze
  57. To: Recipients <[email protected]>
  58. From: "Miss. Zihan Mingze" <[email protected]>
  59. Date: Tue, 28 Nov 2023 21:07:57 -0800
  60. Message-Id: <[email protected]>
  61. Return-Path: [email protected]
  62. X-MS-Exchange-Organization-ExpirationStartTime: 29 Nov 2023 05:17:11.3834
  63. (UTC)
  64. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  65. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  66. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  67. X-MS-Exchange-Organization-Network-Message-Id:
  68. 71b27254-2099-4b48-a7c7-08dbf09a70f5
  69. X-EOPAttributedMessage: 0
  70. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  71. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  72. X-MS-PublicTrafficType: Email
  73. X-MS-TrafficTypeDiagnostic:
  74. DM6NAM12FT008:EE_|IA0PR05MB10023:EE_|MWHPR0501MB3899:EE_
  75. X-MS-Exchange-Organization-AuthSource:
  76. DM6NAM12FT008.eop-nam12.prod.protection.outlook.com
  77. X-MS-Exchange-Organization-AuthAs: Anonymous
  78. X-MS-Office365-Filtering-Correlation-Id: 71b27254-2099-4b48-a7c7-08dbf09a70f5
  79. X-MS-Exchange-Organization-SCL: 5
  80. X-Forefront-Antispam-Report:
  81. CIP:200.164.224.12;CTRY:BR;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.receita.pb.gov.br;PTR:mail.receita.pb.gov.br;CAT:SPOOF;SFS:(13230031)(84050400002)(230922051799003)(451199024)(84300400001)(356005)(7596003)(336012)(5660300002)(6266002)(8676002)(6862004)(1096003)(6666004)(86362001)(2860700004)(22186003)(6966003)(6200100001)(9686003)(558084003)(58800400005)(956004)(26005)(1076003)(66899024)(62346018);DIR:INB;
  82. X-Microsoft-Antispam: BCL:0;
  83. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Nov 2023 05:17:10.9459
  84. (UTC)
  85. X-MS-Exchange-CrossTenant-Network-Message-Id: 71b27254-2099-4b48-a7c7-08dbf09a70f5
  86. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  87. X-MS-Exchange-CrossTenant-AuthSource:
  88. DM6NAM12FT008.eop-nam12.prod.protection.outlook.com
  89. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  90. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  91. X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA0PR05MB10023
  92. X-MS-Exchange-Transport-EndToEndLatency: 00:00:06.0476616
  93. X-MS-Exchange-Processed-By-BccFoldering: 15.20.7046.004
  94. X-Microsoft-Antispam-Mailbox-Delivery:
  95. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  96.  
  97. Content-type: text/plain;
  98. charset="UTF-8"
  99. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement