phish_alert_sp2_2.0.0.0 (35).eml
- SHA256 c13488f96ca6c153142d10c25a1307bd0cdeb0f5c3befe4a90954b8985784c47
Email Headers
PS1PPFD03921DA5886065144DE0E432CC8590C92@PS1PPFD03921DA5.apcprd03.prod.outlook.com
Thu, 30 Jul 2026 01:19:20 +0000
=?UTF-8?B?QWJkdWwgSGFraW06IChFVklDU1QwMDAyNDIzKSAgT3JkZXIgZm9y?= =?UTF-8?B?IFBPIE51bWJlciA5MDg1MTI0IFVOSVRFRCBSRVNPVVJDRVM=?=
multipart/mixed; boundary="----sinikael-?=_1-17853846008100.3745089952720111"
from PA1PR04MB10205.eurprd04.prod.outlook.com (::1) by DU2PR04MB8581.eurprd04.prod.outlook.com with HTTPS; Thu, 30 Jul 2026 01:21:38 +0000
from DU7P251CA0003.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:551::33) by PA1PR04MB10205.eurprd04.prod.outlook.com (2603:10a6:102:465::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.14; Thu, 30 Jul 2026 01:21:11 +0000
from DB5PEPF00014B93.eurprd02.prod.outlook.com (2603:10a6:10:551:cafe::6a) by DU7P251CA0003.outlook.office365.com (2603:10a6:10:551::33) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.14 via Frontend Transport; Thu, 30 Jul 2026 01:21:11 +0000
from eu-smtp-inbound-delivery-1.mimecast.com (91.220.42.227) by DB5PEPF00014B93.mail.protection.outlook.com (10.167.8.231) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Thu, 30 Jul 2026 01:21:11 +0000
from OS8PR02CU002.outbound.protection.outlook.com (mail-japanwestazon11022114.outbound.protection.outlook.com [40.107.75.114]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id uk-mta-9-loNdAoZOOM-vFEBKUnIxiQ-1; Thu, 30 Jul 2026 02:20:59 +0100
from PS1PPFD03921DA5.apcprd03.prod.outlook.com (2603:1096:308::2eb) by TY0PR03MB8278.apcprd03.prod.outlook.com (2603:1096:405:15::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.13; Thu, 30 Jul 2026 01:19:37 +0000
from PS1PPFD03921DA5.apcprd03.prod.outlook.com ([fe80::dfcb:69af:e115:bbd5]) by PS1PPFD03921DA5.apcprd03.prod.outlook.com ([fe80::dfcb:69af:e115:bbd5%5]) with mapi id 15.21.0270.009; Thu, 30 Jul 2026 01:19:36 +0000
Pass (protection.outlook.com: domain of unitedrm.com.sg designates 40.107.75.114 as permitted sender) receiver=protection.outlook.com; client-ip=40.107.75.114; helo=OS8PR02CU002.outbound.protection.outlook.com; pr=C
<PS1PPFD03921DA530A804FB27AAA07EDB5090C92@PS1PPFD03921DA5.apcprd03.prod.outlook.com>
Extracted URLs
-
file https://report.mimecastcybergraph.com?action=safe&magiclink=https%3A%2F%2Fapi.services.mimecast.com%2Foauth2%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Do20nRkVXf7VUVnANkXhoOwGytEwGN0YAlyeDJn7oBTGNl2kN%26state%3DeyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMjU2R0NNIn0.fY6S4kbeOhML7sBe-bsnT9KrdKlf9hO31Ydwdo9f0TiTpBBSzUgGuZRPGifheNWeJ_KgL-AEozG7CyRvDYE1Es2_asE9dFr6yRy9aFgdyFmwM74_bhRuANTtYixTT2ZTB5a0NYGAEEJfRY15OYxV3ogV68NgvM5UUbEY36BjWVDKIO-fgwqX7vuhnMCIo1We7y1SsGu4Iv4XoSfvXC0n8AQEBia-5_zPxzwONmkU4FE0uvZaGY_JmxVSn53B5y-Wu9rw7AZ4vihlAGvkyPg6x8IXEdTir9GydrhZX6T8eDv1sl1IiN6uc9Wwk_WNDgoLd5q9v11k01jEEgL5r51uLQ.7d0KGpB224lOgwyA.1SHZ5ra9FFf9Ao3VyTWRmr04Gp--ZRt-PqGVRiQmSUHQm4PLU5qplXGVD-yEN9jfQ6U8s_VVNl1EDwtxJgOFQ0cr-oAsk49M3PfittkPJ8YgZXpfuo_HfNObLDkiEWEQZ_kfHV4rX2ErEjKILcDPjS4kAVTk9wwiDpGtvqGY1TyMm02wenT4xBMo2nwYyEwy5EljzBhtVPzrbaSAtkT0IIfyR6px0W5NwQxIxdd36eiNU486cX9RdK_ETipXmDcEVkdIwHFYT7DJKStNEMzCxmqcR-ZsrCubJlpBnGY_LxqvwN0MLr3X7v_jWH66zcr1pUE8vMkQR-F5UgIVJzoE5uZqKImhnlAn3-nenHH8USNQLU-6p_UgFAc2CeNzBIEzyZifVhcWim5wsAR_SaqgTqi5J1nowRir-eLWZJPL1kVhjehU3GkVLgKJdeqyutixchprkQW0ODXpgfIlko8i5hD-pPegZPNmsxS8_KANfEwfHc_xwYchrHyNi3hwhwJvNfbq9pezV78dD-3Mchlznv-EXpe_aAtUxDGXSJFAxuIsFiKPRZj0aUKLOQiqL1sJ8F0mDKwfyPVEeUJsjGbMI_u_OnOemTuAWFMbuMHSkBKD7O6mU3_iRtxNqiBMOpKMSBCdoNHEdXzfW66fAlY6suQ81r1Tv5CQlN5jZqLRI27aw8X5ZmPfSdUGHj-CL1SaiuQpR893kheM_bW_51c589Y7KJHZnMJjbaQ6QyWOdbZ0DApALCGSh2kfd8w6F2D69Jba_KZRqyCS7_g6YZyBh8AgjT23EU5n-Hkbtd9Qh_9z2XddmexhyIHtChcq-g49h3miF4sEIddWqoLOSmklQEIN65ViDTM69U7l.BRB87GX7fGWaTGK4Jw_hZQ%26redirect_uri%3Dhttps%3A%2F%2Freport.mimecastcybergraph.com%2Fcallback
-
file https://report.mimecastcybergraph.com?magiclink=https%3A%2F%2Fapi.services.mimecast.com%2Foauth2%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Do20nRkVXf7VUVnANkXhoOwGytEwGN0YAlyeDJn7oBTGNl2kN%26state%3DeyJhbGciOiJSU0EtT0FFUC0yNTYiLCJlbmMiOiJBMjU2R0NNIn0.fY6S4kbeOhML7sBe-bsnT9KrdKlf9hO31Ydwdo9f0TiTpBBSzUgGuZRPGifheNWeJ_KgL-AEozG7CyRvDYE1Es2_asE9dFr6yRy9aFgdyFmwM74_bhRuANTtYixTT2ZTB5a0NYGAEEJfRY15OYxV3ogV68NgvM5UUbEY36BjWVDKIO-fgwqX7vuhnMCIo1We7y1SsGu4Iv4XoSfvXC0n8AQEBia-5_zPxzwONmkU4FE0uvZaGY_JmxVSn53B5y-Wu9rw7AZ4vihlAGvkyPg6x8IXEdTir9GydrhZX6T8eDv1sl1IiN6uc9Wwk_WNDgoLd5q9v11k01jEEgL5r51uLQ.7d0KGpB224lOgwyA.1SHZ5ra9FFf9Ao3VyTWRmr04Gp--ZRt-PqGVRiQmSUHQm4PLU5qplXGVD-yEN9jfQ6U8s_VVNl1EDwtxJgOFQ0cr-oAsk49M3PfittkPJ8YgZXpfuo_HfNObLDkiEWEQZ_kfHV4rX2ErEjKILcDPjS4kAVTk9wwiDpGtvqGY1TyMm02wenT4xBMo2nwYyEwy5EljzBhtVPzrbaSAtkT0IIfyR6px0W5NwQxIxdd36eiNU486cX9RdK_ETipXmDcEVkdIwHFYT7DJKStNEMzCxmqcR-ZsrCubJlpBnGY_LxqvwN0MLr3X7v_jWH66zcr1pUE8vMkQR-F5UgIVJzoE5uZqKImhnlAn3-nenHH8USNQLU-6p_UgFAc2CeNzBIEzyZifVhcWim5wsAR_SaqgTqi5J1nowRir-eLWZJPL1kVhjehU3GkVLgKJdeqyutixchprkQW0ODXpgfIlko8i5hD-pPegZPNmsxS8_KANfEwfHc_xwYchrHyNi3hwhwJvNfbq9pezV78dD-3Mchlznv-EXpe_aAtUxDGXSJFAxuIsFiKPRZj0aUKLOQiqL1sJ8F0mDKwfyPVEeUJsjGbMI_u_OnOemTuAWFMbuMHSkBKD7O6mU3_iRtxNqiBMOpKMSBCdoNHEdXzfW66fAlY6suQ81r1Tv5CQlN5jZqLRI27aw8X5ZmPfSdUGHj-CL1SaiuQpR893kheM_bW_51c589Y7KJHZnMJjbaQ6QyWOdbZ0DApALCGSh2kfd8w6F2D69Jba_KZRqyCS7_g6YZyBh8AgjT23EU5n-Hkbtd9Qh_9z2XddmexhyIHtChcq-g49h3miF4sEIddWqoLOSmklQEIN65ViDTM69U7l.BRB87GX7fGWaTGK4Jw_hZQ%26redirect_uri%3Dhttps%3A%2F%2Freport.mimecastcybergraph.com%2Fcallback
-
file https://url.uk.m.mimecastprotect.com/s/7InBCpz6OsnlJOkJsPfxfGKQvQ?domain=unitedresources-intl.com/
-
file https://url.uk.m.mimecastprotect.com/s/8uzHCq2XPh84xkBxsXhYfESkeg?domain=unitedresources-intl.com/