---------- Forwarded message ----------
From: Patricia Gary <patgary1@msn.com>
Date: Sunday, April 19, 2020
Subject: FBI (FLAGED W/HIGH IMPORTANCE) QUICKLY INVESTIGATE, PROSECUTE & "HARD" JAIL, "so-called "VALENTINA DUQUE CARMONA/Paulina Serna Gil", Bogus Imposters, "REPEATED" Senders Using Undisclosed & Multiple Deceptive Email Domains/ is a Danger to ConsFw: 4/18/2020
To: "duquec.valentina@UCES.EDU.CO" <duquec.valentina@uces.edu.co>, "serna.paulina@uces.edu.co" <serna.paulina@uces.edu.co>, "BN7PR08MB4066DB8B86CEB1B1DCC45AB7DDD60@BN7PR08MB4066.namprd08.prod.outlook.com" <BN7PR08MB4066DB8B86CEB1B1DCC45AB7DDD60@bn7pr08mb4066.namprd08.prod.outlook.com>, "image001.png@01D61577.40482610" <image001.png@01d61577.40482610>, "emailscamalerts@gmail.com" <emailscamalerts@gmail.com>, "reportphishing@apwg.org" <reportphishing@apwg.org>, "reportphishing@antiphishing.org" <reportphishing@antiphishing.org>, "phishing-report@us-cert.gov" <phishing-report@us-cert.gov>, "tophishing-report@us-cert.gov" <tophishing-report@us-cert.gov>
FBI (FLAGED W/HIGH IMPORTANCE) QUICKLY INVESTIGATE, PROSECUTE & "HARD" JAIL, "so-called "VALENTINA DUQUE CARMONA/Paulina Serna Gil", Bogus Imposters, "REPEATED" Senders Using Undisclosed & Multiple Deceptive Email Domains/ is a Danger to Consumers/ IMMEDIATELY REPORT THEM to the IC3
FOWARDED FULL W/ALL HEADERS (BELOW) EMAIL FOR INVESTIGATION! (If this affiliated bogus imposter so-called "VALENTINA DUQUE CARMONA/Paulina Serna Gil" or any other of their affiliated imposters emails me again in any similar and/or attempted scam, I will treat as urgent in formal and direct complaints)
Received: from BN8NAM12HT082.eop-nam12.prod.
(2603:10b6:208:238::14) by BL0PR11MB3411.namprd11.prod.
via MN2PR22CA0009.NAMPRD22.PROD.
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=RQLVRl85AbKI/
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-
bh=
b=TVfzQ2uh1tx+
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
40.107.94.48) smtp.rcpttodomain=msn.com smtp.mailfrom=uces.edu.co;
dmarc=bestguesspass action=none header.from=uces.edu.co; dkim=pass (signature
was verified) header.d=ucesedu.onmicrosoft.
spf=[1,1,smtp.mailfrom=uces.
dmarc=[1,1,header.from=uces.
Received: from BN8NAM12FT051.eop-nam12.prod.
(2a01:111:e400:fc66::48) by
BN8NAM12HT082.eop-nam12.prod.
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_
2020 20:36:56 +0000
Authentication-Results: spf=pass (sender IP is 40.107.94.48)
smtp.mailfrom=UCES.EDU.CO; msn.com; dkim=pass (signature was verified)
header.d=ucesedu.onmicrosoft.
header.from=UCES.EDU.CO;
Received-SPF: Pass (protection.outlook.com: domain of UCES.EDU.CO designates
40.107.94.48 as permitted sender) receiver=protection.outlook.
client-ip=40.107.94.48; helo=NAM10-MW2-obe.outbound.
Received: from NAM10-MW2-obe.outbound.
BN8NAM12FT051.mail.
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_
15.20.2921.12 via Frontend Transport; Sat, 18 Apr 2020 20:36:55 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=l/i/vkJrmWuZCN/
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-
bh=
b=Id+
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=uces.edu.co; dmarc=pass action=none header.from=uces.edu.co;
dkim=pass header.d=uces.edu.co; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=ucesedu.onmicrosoft.com; s=selector2-ucesedu-
h=From:Date:Subject:Message-
bh=
b=
Received: from BN7PR08MB4066.namprd08.prod.
by BN7PR08MB4820.namprd08.prod.
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_
2020 20:36:54 +0000
Received: from BN7PR08MB4066.namprd08.prod.
([fe80::1d87:7a28:a1de:a3b4]) by BN7PR08MB4066.namprd08.prod.
([fe80::1d87:7a28:a1de:a3b4%
20:36:53 +0000
From: "VALENTINA DUQUE CARMONA" <duquec.valentina@UCES.EDU.CO>
To: "Paulina Serna Gil" <serna.paulina@uces.edu.co>
Subject: 4/18/2020
Thread-Topic: 4/18/2020
Thread-Index:
AdYVsdQg0QPCotvZRBO9HJvxShayz
Date: Sat, 18 Apr 2020 20:36:52 +0000
Message-ID:
<BN7PR08MB4066DB8B86CEB1B1DCC
Accept-Language: es-ES, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Authentication-Results-
smtp.mailfrom=duquec.
x-originating-ip: [192.111.132.42]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-
x-ms-traffictypediagnostic: BN7PR08MB4820:|BN8NAM12HT082:
x-ms-exchange-transport-
x-microsoft-antispam-prvs:
<BN7PR08MB482096C2DDC5E36FC52
x-ms-oob-tlc-oobclassifiers: OLM:1728;
x-forefront-prvs: 0377802854
X-Forefront-Antispam-Report-
CIP:255.255.255.255;CTRY:;
received-spf: None (protection.outlook.com: UCES.EDU.CO does not designate
permitted sender hosts)
x-ms-exchange-senderadcheck: 1
X-Microsoft-Antispam-
X-Microsoft-Antispam-Message-
eMS/
x-ms-exchange-antispam-
aaVtMmPxRFQr0BfhDv7k62nOOjjp9
Content-Type: multipart/related;
boundary="_004_
type="multipart/alternative"
X-MS-Exchange-Transport-
X-IncomingHeaderCount: 42
Return-Path: duquec.valentina@UCES.EDU.CO
X-MS-Exchange-Organization-
(UTC)
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
0f01ea3d-7f7a-4758-415d-
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-Organization-
X-MS-Exchange-Transport-
BN8NAM12FT051.eop-nam12.prod.
X-MS-Exchange-Transport-
BN8NAM12FT051.eop-nam12.prod.
X-Forefront-Antispam-Report:
CIP:40.107.94.48;CTRY:US;
X-MS-Exchange-Organization-
BN8NAM12FT051.eop-nam12.prod.
X-MS-Exchange-Organization-
X-MS-Office365-Filtering-
cd99fee1-f928-41d5-e9f1-
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 40.107.94.48
X-SID-PRA: DUQUEC.VALENTINA@UCES.EDU.CO
X-SID-Result: PASS
X-MS-Exchange-Organization-
X-MS-Exchange-
X-MS-Exchange-Organization-
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-ATPSafeLinks-
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-
(UTC)
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-RMS-
00000000-0000-0000-0000-
X-MS-Exchange-Transport-
X-MS-Exchange-Transport-
X-MS-Exchange-Processed-By-
X-Microsoft-Antispam-Mailbox-
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;
X-Message-Info:
5vMbyqxGkdd3Xqg5QdeHKFa3lM2Emi
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MT
X-Microsoft-Antispam-Message-
mfBMAaws5I3BBTUDpiEEZbqKBGV7N4
MIME-Version: 1.0
--_004_
Content-Type: multipart/alternative;
boundary="_000_
--_000_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
[cid:image001.png@01D61577.
--_000_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-
osoft-com:office:office" xmlns:w=3D"urn:schemas-
xmlns:m=3D"http://schemas.
//www.w3.org/TR/REC-html40"><
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!-
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-
span.EmailStyle18
{mso-style-type:personal-
font-family:"Calibri",sans-
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><
No comments:
Post a Comment