NOTE: If this idiot thinks his infected pdf attachment makes this look more genuine, he's mistaken. It's a HUGE red flag. Not to mention the free email address . There's no business opportunity for the reader in an infected document, just heartache.
From: URGENT BUSINESS ASSISTANCE <loaninquiry2@gmail.com> To: undisclosed-recipients:;03:44:19 CDT, Monday 23 September 2019
Attachments: FROM FRED GAMBO.pdf
Message ID: <CALce-w_LBhSmQ2QOuCWMFpTj26Cfn+n5ZichcuxLbEAZkNFcKg@mail.gmail.com>
Return Path: <loaninquiry2@gmail.com>
Reply To: fredgambo@hotmail.com
MIME Version: 1.0
Content Type: multipart/mixed; boundary="000000000000e4e2aa0593346c75"
Attachments:
FROM FRED GAMBO.pdf [Content-Type: application/pdf]
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.175]) by pure.maildistiller.com with ESMTPS id DB7351A005E for <>; Mon, 23 Sep 2019 08:44:18 +0000 (UTC)
from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id A4BE870007F for <>; Mon, 23 Sep 2019 08:44:18 +0000 (UTC)
by mail-io1-f68.google.com with SMTP id j4so31384388iog.11 for <>; Mon, 23 Sep 2019 01:44:18 -0700 (PDT)
by 2002:a92:4902:0:0:0:0:0 with HTTP; Mon, 23 Sep 2019 01:44:17 -0700 (PDT)
Please open the attached pdf file
Envelope Sender: <loaninquiry2@gmail.com>
'From' Header: URGENT BUSINESS ASSISTANCE <loaninquiry2@gmail.com>
Subject: Re:
Timestamp: 03:44:19 CDT, Monday 23 September 2019
Message-ID: <CALce-w_LBhSmQ2QOuCWMFpTj26Cfn+n5ZichcuxLbEAZkNFcKg@mail.gmail.com>
Attachments: FROM FRED GAMBO.pdf
Client IP Address: 209.85.166.68
Client GeoIP Lookup: United States
Email Size: 85.2 kB
Encrypted? No
No comments:
Post a Comment