Phishing_ddd982b7-b699-4bd7-e228-08defc7be1f6_carlosramirealvarado@gmail.com_() 08_17_2026 16_44_21.eml
- SHA256 157fcba24110c0a7274284b7fd0b54f7f62f832a181be4769d3f42e849b04aad
Email Headers
Mon, 17 Aug 2026 16:44:21 +0000
Phishing:ddd982b7-b699-4bd7-e228-08defc7be1f6|[email protected]|() 08/17/2026 16:44:21
multipart/mixed; boundary="_002_JMRddd982b7b6994bd7e22808defc7be1f6Phish639225818616909_"
from AMBPR03MB762772.eurprd03.prod.outlook.com (2603:10a6:20b:816::19) by DBAPR03MB6661.eurprd03.prod.outlook.com with HTTPS; Mon, 17 Aug 2026 16:48:13 +0000
from AS9PR05CA0246.eurprd05.prod.outlook.com (2603:10a6:20b:493::21) by AMBPR03MB762772.eurprd03.prod.outlook.com (2603:10a6:20b:816::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.16; Mon, 17 Aug 2026 16:48:08 +0000
from AM3PEPF0000A79B.eurprd04.prod.outlook.com (2603:10a6:20b:493:cafe::73) by AS9PR05CA0246.outlook.office365.com (2603:10a6:20b:493::21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.17 via Frontend Transport; Mon, 17 Aug 2026 16:48:08 +0000
from nat.eu.perception-point.io (99.80.189.20) by AM3PEPF0000A79B.mail.protection.outlook.com (10.167.16.106) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.339.3 via Frontend Transport; Mon, 17 Aug 2026 16:48:08 +0000
from AM0PR07CU002.outbound.protection.outlook.com (mail-am0pr07cu00205.outbound.protection.outlook.com [40.93.65.69]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id f58uq0v9p36970f23luv9ufbbqvi7f78frt6kl01 for [email protected]; Mon, 17 Aug 2026 16:48:05 +0000 (UTC)
from DUZPR01CA0040.eurprd01.prod.exchangelabs.com (2603:10a6:10:468::18) by DU0PR03MB9590.eurprd03.prod.outlook.com (2603:10a6:10:421::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Mon, 17 Aug 2026 16:44:26 +0000
from DU2PEPF00028D05.eurprd03.prod.outlook.com (2603:10a6:10:468:cafe::76) by DUZPR01CA0040.outlook.office365.com (2603:10a6:10:468::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.17 via Frontend Transport; Mon, 17 Aug 2026 16:44:26 +0000
from GVXPR05CU001.outbound.protection.outlook.com (2a01:111:f403:c202::7) by DU2PEPF00028D05.mail.protection.outlook.com (2603:10a6:18:3::6a5) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.315.6 via Frontend Transport; Mon, 17 Aug 2026 16:44:24 +0000
from GVXPR03MB8308.eurprd03.prod.outlook.com (2603:10a6:150:6e::13) by DBAPR03MB6600.eurprd03.prod.outlook.com (2603:10a6:10:190::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Mon, 17 Aug 2026 16:44:22 +0000
from GVXPR03MB8308.eurprd03.prod.outlook.com ([fe80::d8b8:ec52:8900:faa0]) by GVXPR03MB8308.eurprd03.prod.outlook.com ([fe80::d8b8:ec52:8900:faa0%4]) with mapi id 15.21.0315.016; Mon, 17 Aug 2026 16:44:21 +0000
SoftFail (protection.outlook.com: domain of transitioning alsea.net discourages use of 99.80.189.20 as permitted sender)
pass (spfCheck: domain of alsea.net designates 40.93.65.69 as permitted sender) client-ip=40.93.65.69; [email protected]; helo=AM0PR07CU002.outbound.protection.outlook.com;
Pass (protection.outlook.com: domain of alsea.net designates 2a01:111:f403:c202::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c202::7; helo=GVXPR05CU001.outbound.protection.outlook.com; pr=C
<JMR.ddd982b7-b699-4bd7-e228-08defc7be1f6.Phish.639225818616909996@microsoft.com>
Extracted URLs
-
file https://eur05.safelinks.protection.outlook.com/?url=