General

  • Target
    Re_ Serviço Anti-Phishing do WiZink.eml
  • Size 3.1MB
  • Sample261030-mtny1aec36
  • SHA256 921097561dd12545b508f4d7fd99d5f2721d823a598e17aa9ca0539ed67714b5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Re_ Serviço Anti-Phishing do WiZink.eml
    .eml 3.1MB
  • 1000114841.jpg
    .jpg 152KB
  • 1000114842.jpg
    .jpg 491KB
  • 1000114843.jpg
    .jpg 421KB
  • 1000114844.jpg
    .jpg 755KB
  • 1000114845.jpg
    .jpg 451KB
  • email-html-2.txt
    .html 7KB
  • email-plain-1.txt
    4KB

Re_ Serviço Anti-Phishing do WiZink.eml

  • SHA256 921097561dd12545b508f4d7fd99d5f2721d823a598e17aa9ca0539ed67714b5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

In-Reply-To

97047bebc1754db4bb5a612eabe12374@FRWPR10MB9493.EURPRD10.PROD.OUTLOOK.COM

Return-Path

alertaseguranca+[email protected]

Date

Wed, 28 Oct 2026 11:34:56 +0000

Subject

=?UTF-8?Q?Re=3A_Servi=C3=A7o_Anti=2DPhishing_do_WiZink?=

Content-Type

multipart/mixed; boundary="000000000000969afb065ee4f4ba"

Received

from ZR6PR03MB911455.eurprd03.prod.outlook.com (::1) by AM0PR03MB4562.eurprd03.prod.outlook.com with HTTPS; Wed, 28 Oct 2026 11:35:51 +0000

from OS6P279CA0149.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3a::6) by ZR6PR03MB911455.eurprd03.prod.outlook.com (2603:10a6:910:d8::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 11:35:43 +0000

from WA1PEPF00009B3E.eurprd05.prod.outlook.com (2603:10a6:e10:3a:cafe::20) by OS6P279CA0149.outlook.office365.com (2603:10a6:e10:3a::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 11:35:43 +0000

from nat.eu.perception-point.io (99.80.189.20) by WA1PEPF00009B3E.mail.protection.outlook.com (10.167.242.39) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 11:35:42 +0000

from DB6PR07CU003.outbound.protection.outlook.com (mail-db6pr07cu00301.outbound.protection.outlook.com [40.93.64.89]) by inbound-smtp.eu-west-1.amazonaws.com with SMTP id hnfbeoiu7qj5jdvob54af2slitrenpj67gmrr0o1 for [email protected]; Wed, 28 Oct 2026 11:35:34 +0000 (UTC)

from PAZP264CA0026.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:122::13) by DB9PR03MB7755.eurprd03.prod.outlook.com (2603:10a6:10:2cc::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Wed, 28 Oct 2026 11:35:26 +0000

from MI3PEPF0000855C.eurprd05.prod.outlook.com (2603:10a6:102:122:cafe::6a) by PAZP264CA0026.outlook.office365.com (2603:10a6:102:122::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.22 via Frontend Transport; Wed, 28 Oct 2026 11:35:26 +0000

from PA4PR04CU001.outbound.protection.outlook.com (2a01:111:f403:c20a::7) by MI3PEPF0000855C.mail.protection.outlook.com (2603:10a6:298:1::98) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 11:35:25 +0000

from WA1PEPF00005B9F.POLP291.PROD.OUTLOOK.COM (2603:10a6:1d8::62a) by DB9PR10MB5380.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:333::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.8; Wed, 28 Oct 2026 11:35:11 +0000

from WA1PEPF00009B37.eurprd05.prod.outlook.com (2603:10a6:1d8::114) by WA1PEPF00005B9F.outlook.office365.com (2603:10a6:1d8::62a) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.7 via Frontend Transport; Wed, 28 Oct 2026 11:35:11 +0000

from mail-ej1-x636.google.com (2a00:1450:4864:20::636) by WA1PEPF00009B37.mail.protection.outlook.com (2603:10a6:1d8::114) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.4 via Frontend Transport; Wed, 28 Oct 2026 11:35:10 +0000

by mail-ej1-x636.google.com with SMTP id a640c23a62f3a-c423b145922so110945666b.3 for <[email protected]>; Wed, 28 Oct 2026 04:35:10 -0700 (PDT)

X-Received

by 2002:a17:906:6205:b0:c41:9228:baef with SMTP id a640c23a62f3a-c49bdead419mr162612066b.8.1793187309304; Wed, 28 Oct 2026 04:35:09 -0700 (PDT)

Received-Spf

Fail (protection.outlook.com: domain of wizink.pt does not designate 99.80.189.20 as permitted sender) receiver=protection.outlook.com; client-ip=99.80.189.20; helo=nat.eu.perception-point.io;

pass (spfCheck: domain of wizink.pt designates 40.93.64.89 as permitted sender) client-ip=40.93.64.89; envelope-from=alertaseguranca+[email protected]; helo=DB6PR07CU003.outbound.protection.outlook.com;

Pass (protection.outlook.com: domain of wizink.pt designates 2a01:111:f403:c20a::7 as permitted sender) receiver=protection.outlook.com; client-ip=2a01:111:f403:c20a::7; helo=PA4PR04CU001.outbound.protection.outlook.com; pr=C

Pass (protection.outlook.com: domain of gmail.com designates 2a00:1450:4864:20::636 as permitted sender) receiver=protection.outlook.com; client-ip=2a00:1450:4864:20::636; helo=mail-ej1-x636.google.com; pr=C

Message-Id

<CAKLz45mr90WsN5-X4fKdPvX1FNkH9cmuxzysj8fOxMfGGq08xA@mail.gmail.com>

Extracted URLs

  • file http://www.wizink.es

  • file http://www.wizink.es/

  • file https://www.wizink.pt

  • file https://www.wizink.pt/