hxxp://Received[:] from PMPEXC16[.]cloudptempresas[.]pt (10[.]167[.]116[.]37) by PMPEXC11[.]cloudptempresas[.]pt (10[.]167[.]116[.]32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]1[.]2507[.]17 via Mailbox Transport; Thu, 4 May 2023 08[:]36[:]52 +0100 Received[:] from picamsmta02[.]ptempresas[.]pt (62[.]28[.]46[.]79) by hubs[.]mail[.]ptempresas[.]pt (10[.]167[.]116[.]37) with Microsoft SMTP Server id 15[.]1[.]2507[.]17; Thu, 4 May 2023 08[:]36[:]52 +0100 Received[:] from picamsmta02[.]ptempresas[.]pt (localhost [127[.]0[.]0[.]1]) by picamsmta02[.]ptempresas[.]pt (Postfix) with ESMTP id 4QBlxt0JvpzxNfm for <comercial@m-tec[.]pt>; Thu, 4 May 2023 08[:]36[:]50 +0100 (WEST) X-MPS-TrackID[:] 4QBlxs6tz3zxNd41J3U Received[:] from srv3[.]pedroferraz[.]eu (srv3[.]pedroferraz[.]eu [185[.]146[.]93[.]24]) (using TLSv1[.]3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (No client certificate requested) by picamsmta02[.]ptempresas[.]pt (Postfix) with ESMTPS id 4QBlxs6tz3zxNd4 for <comercial@m-tec[.]pt>; Thu, 4 May 2023 08[:]36[:]49 +0100 (WEST) DMARC-Filter[:] OpenDMARC Filter v1[.]3[.]2 picamsmta02[.]ptempresas[.]pt 4QBlxs6tz3zxNd4 Authentication-Results[:] securitymail[.]altice-empresas[.]pt; dmarc=none (p=none dis=none) header[.]from=ricambiofoz[.]com DKIM-Filter[:] OpenDKIM Filter v2[.]11[.]0 picamsmta02[.]ptempresas[.]pt 4QBlxs6tz3zxNd4 Authentication-Results[:] securitymail[.]altice-empresas[.]pt; dkim=none; dkim-atps=neutral Authentication-Results[:] securitymail[.]altice-empresas[.]pt; spf=pass smtp[.]mailfrom=ricambiofoz@ricambiofoz[.]com smtp[.]helo=srv3[.]pedroferraz[.]eu Received[:] from webmail[.]ricambiofoz[.]com (localhost[.]localdomain [IPv6[::][:]1]) by srv3[.]pedroferraz[.]eu (Postfix) with ESMTPSA id CB602C174B; Thu, 4 May 2023 08[:]35[:]49 +0100 (WEST) MIME-Version[:] 1[.]0 Date[:] Thu, 4 May 2023 08[:]35[:]49 +0100 To[:] undisclosed-recipients[:]; Subject[:] Nota de aviso de pagamento 2028242575 Bekker Logistica / User-Agent[:] Roundcube Webmail/1[.]4[.]13 Message-ID[:] <b1108266c625c40ae24f791db89cc804@akzonobel[.]com> X-Sender[:] NOREPLY@akzonobel[.]com Content-Type[:] multipart/mixed; boundary="=_f0c80acf0abd99626491a46140dffaa1" X-PPP-Message-ID[:] <168318575041[.]3372934[.]9291213669620074984@localhost[.]localdomain> From[:] <ricambiofoz@ricambiofoz[.]com> X-PPP-Vhost[:] ricambiofoz[.]com Received-SPF[:] Pass (picamsmta02[.]ptempresas[.]pt[:] domain of ricambiofoz@ricambiofoz[.]com designates 185[.]146[.]93[.]24 as permitted sender) receiver=picamsmta02[.]ptempresas[.]pt; client-ip=185[.]146[.]93[.]24; envelope-from=<ricambiofoz@ricambiofoz[.]com>; helo=srv3[.]pedroferraz[.]eu; Return-Path[:] ricambiofoz@ricambiofoz[.]com X-MS-Exchange-Organization-Network-Message-Id[:] 3731a109-ae61-4f24-f628-08db4c7253e2 X-MS-Exchange-Organization-AuthSource[:] PMPEXC16[.]cloudptempresas[.]pt X-MS-Exchange-Organization-AuthAs[:] Anonymous X-MS-Exchange-Transport-EndToEndLatency[:] 00[:]00[:]00[.]2650190 X-MS-Exchange-Processed-By-BccFoldering[:] 15[.]01[.]2507[.]017

Sharing

Copy URL Twitter E-mail

General

Target

http://Received: from PMPEXC16.cloudptempresas.pt (10.167.116.37) by PMPEXC11.cloudptempresas.pt (10.167.116.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.17 via Mailbox Transport; Thu, 4 May 2023 08:36:52 +0100 Received: from picamsmta02.ptempresas.pt (62.28.46.79) by hubs.mail.ptempresas.pt (10.167.116.37) with Microsoft SMTP Server id 15.1.2507.17; Thu, 4 May 2023 08:36:52 +0100 Received: from picamsmta02.ptempresas.pt (localhost [127.0.0.1]) by picamsmta02.ptempresas.pt (Postfix) with ESMTP id 4QBlxt0JvpzxNfm for <[email protected]>; Thu, 4 May 2023 08:36:50 +0100 (WEST) X-MPS-TrackID: 4QBlxs6tz3zxNd41J3U Received: from srv3.pedroferraz.eu (srv3.pedroferraz.eu [185.146.93.24]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (No client certificate requested) by picamsmta02.ptempresas.pt (Postfix) with ESMTPS id 4QBlxs6tz3zxNd4 for <[email protected]>; Thu, 4 May 2023 08:36:49 +0100 (WEST) DMARC-Filter: OpenDMARC Filter v1.3.2 picamsmta02.ptempresas.pt 4QBlxs6tz3zxNd4 Authentication-Results: securitymail.altice-empresas.pt; dmarc=none (p=none dis=none) header.from=ricambiofoz.com DKIM-Filter: OpenDKIM Filter v2.11.0 picamsmta02.ptempresas.pt 4QBlxs6tz3zxNd4 Authentication-Results: securitymail.altice-empresas.pt; dkim=none; dkim-atps=neutral Authentication-Results: securitymail.altice-empresas.pt; spf=pass [email protected] smtp.helo=srv3.pedroferraz.eu Received: from webmail.ricambiofoz.com (localhost.localdomain [IPv6:::1]) by srv3.pedroferraz.eu (Postfix) with ESMTPSA id CB602C174B; Thu, 4 May 2023 08:35:49 +0100 (WEST) MIME-Version: 1.0 Date: Thu, 4 May 2023 08:35:49 +0100 To: undisclosed-recipients:; Subject: Nota de aviso de pagamento 2028242575 Bekker Logistica / User-Agent: Roundcube Webmail/1.4.13 Message-ID: <[email protected]> X-Sender: [email protected] Content-Type: multipart/mixed; boundary="=_f0c80acf0abd99626491a46140dffaa1" X-PPP-Message-ID: <[email protected]> From: <[email protected]> X-PPP-Vhost: ricambiofoz.com Received-SPF: Pass (picamsmta02.ptempresas.pt: domain of [email protected] designates 185.146.93.24 as permitted sender) receiver=picamsmta02.ptempresas.pt; client-ip=185.146.93.24; envelope-from=<[email protected]>; helo=srv3.pedroferraz.eu; Return-Path: [email protected] X-MS-Exchange-Organization-Network-Message-Id: 3731a109-ae61-4f24-f628-08db4c7253e2 X-MS-Exchange-Organization-AuthSource: PMPEXC16.cloudptempresas.pt X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.2650190 X-MS-Exchange-Processed-By-BccFoldering: 15.01.2507.017

Sharing

General

Malware Config

Signatures

Files