Scam Number: (for texting… apparently): (213) 537-2740
Scammer’s Website or Email: [email protected]
Additional information about this scam:
I got an email subjected: job, from a guy with the account name “KO”.
He asked for my phone number so they could do an interview, so I gave him a burner number. He then asked me to log into a gmail account that he provided…. Long story short, his google account is no-more.
Oh I forgot, here is the email headers:
Received: from SN7PR19MB8144.namprd19.prod.outlook.com (2603:10b6:806:26c::19)
by SJ0PR19MB4462.namprd19.prod.outlook.com with HTTPS; Thu, 8 Jun 2023
20:27:22 +0000
Received: from BY5PR16CA0025.namprd16.prod.outlook.com (2603:10b6:a03:1a0::38)
by SN7PR19MB8144.namprd19.prod.outlook.com (2603:10b6:806:26c::19) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6500.14; Thu, 8 Jun
2023 20:27:21 +0000
Received: from DM6NAM11FT048.eop-nam11.prod.protection.outlook.com
(2603:10b6:a03:1a0:cafe::e0) by BY5PR16CA0025.outlook.office365.com
(2603:10b6:a03:1a0::38) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6477.25 via Frontend
Transport; Thu, 8 Jun 2023 20:27:21 +0000
Authentication-Results: spf=pass (sender IP is 209.85.160.41)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.160.41 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.160.41; helo=mail-oa1-f41.google.com; pr=C
Received: from mail-oa1-f41.google.com (209.85.160.41) by
DM6NAM11FT048.mail.protection.outlook.com (10.13.173.114) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6455.42 via Frontend Transport; Thu, 8 Jun 2023 20:27:21 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:9DDACCED1AD449889AE827A9FC6C4CED43654899EED30E5FEFC95A119F601B3C;UpperCasedChecksum:5B5D2B8D43524E19AD9FECB05EA79F6226F8A3417765A0DE21DE06D22D3A5A98;SizeAsReceived:2630;Count:15
Received: by mail-oa1-f41.google.com with SMTP id 586e51a60fabf-19f268b1d83so70758fac.1
for [email protected]; Thu, 08 Jun 2023 13:27:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686256040; x=1688848040;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=VoilgulAMUiUFlA9ZCcW6asghnB1koeOi/PhTwBMo4g=;
b=VQz2YFIi1zIEdn9wu6qix17Q45E4aNglSOYzvkVJ0Zyl5Cd116sK6XCDraKxuvGt/T
eiIJvqCMAWT0EetsINAiBEYh5ataNyhfJM6/fUT+l9IRWK/Xd8XptuOY6h+APipTVZmX
YolxQykCsjTNSRKZypzmLgp700DJrKhSi7uLITrJPFQpgsmo8zzOJp65Fs5U2AkUzy8q
la8KmQMTB4xkErXTVlpJb4F/XgtKydbBQ8Otw6vwIDb+bNerDbz4DC/Dj9cGXLNs19xJ
RF0JJlexCYq28Z7+DVKZnHZvYwHt/4GUyq4XqRN2DKhnJNgd8OD66NI8ptM/ptuThLG6
BSgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686256040; x=1688848040;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=VoilgulAMUiUFlA9ZCcW6asghnB1koeOi/PhTwBMo4g=;
b=CleWLmHdH8RLovZ0gQ7cy+3YgrRHBvN49d8iOWA4LsDqcVsZIGrN0jeBgp8U+0euyM
m4/ag7C7UXBy0dtliYNbgZYzzdeW/f1x2yqrOb46ZkjuDln0ZVHzLgF7zLYFgPh0iiM/
Vb15sLbNanXlm5plLZOod13QzvRMUYK7NeN6nv7eV4MrIb/RVIYwWwbyQbRBj6HVXJ2o
0iRYetaRmD5JNO2Io8vWgllplEql9uuEQgY+gcL5p+C8GN/vOehOlIZp2n7nKWlP0zBw
3gK2w+SiJGkorKS5SlK1F/BdpeC2QUzDDUdj548xN8drynwMfzPnY12nMW0H2SHE/6vG
/Eaw==
X-Gm-Message-State: AC+VfDyCVV7dm5M7QjK76jc7cQ5sbcuAtLZDg/5kfmvpTf+5ohjlOBr1
dYG24PO3cT61oRMvkOCVnmTSi9nvzk6xMmim87ulJicXwSo5KQ==
X-Google-Smtp-Source: ACHHUZ7AajOkFC0bOHquW12R50sh7sUbh1oEb9bHC+eJ/sq1reWLdRS8CG82YTTGzqqDe+CjC/tev2M6VeAttRaZIAQ=
X-Received: by 2002:a05:6870:b798:b0:17f:8386:fa3a with SMTP id
ed24-20020a056870b79800b0017f8386fa3amr6254966oab.20.1686256040622; Thu, 08
Jun 2023 13:27:20 -0700 (PDT)
MIME-Version: 1.0
References: CANVJNgXQ5Y30dfxyfYv4UCU3fMjnWVz7=sGqQCB0MGmFacF-Nw@mail.gmail.com
SJ0PR19MB446241998EAC57F45CF02168AC50A@SJ0PR19MB4462.namprd19.prod.outlook.com
In-Reply-To: SJ0PR19MB446241998EAC57F45CF02168AC50A@SJ0PR19MB4462.namprd19.prod.outlook.com
From: KO [email protected]
Date: Thu, 8 Jun 2023 14:26:32 -0600
Message-ID: CANVJNgXNM4e-xmZDFfddY5Rgy961xQSewTdXeQVbUx6v3Qi3SA@mail.gmail.com
Subject: Re: job
To: Ashton Fox [email protected]
Content-Type: multipart/alternative; boundary=“0000000000004d418c05fda414a4”
X-IncomingHeaderCount: 15
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 08 Jun 2023 20:27:21.1404
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
10a096c2-a53c-41a0-c75d-08db685ec308
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
DM6NAM11FT048:EE_|SN7PR19MB8144:EE_|SJ0PR19MB4462:EE_
X-MS-Exchange-Organization-AuthSource:
DM6NAM11FT048.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-UserLastLogonTime: 6/8/2023 8:01:55 PM
X-MS-Office365-Filtering-Correlation-Id: 10a096c2-a53c-41a0-c75d-08db685ec308
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 209.85.160.41
X-SID-PRA: [email protected]
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-AtpMessageProperties: SA|SL
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Jun 2023 20:27:21.1091
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 10a096c2-a53c-41a0-c75d-08db685ec308
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
DM6NAM11FT048.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR19MB8144
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7657849
X-MS-Exchange-Processed-By-BccFoldering: 15.20.6500.009
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
qZelhIiYnPm8XPty+wcISN97AbY6MzMD3Ir3e2rEFMSahRwIMVWymyynAeSR12YPJDcLM3JOrdaCblFIcmu02ikP0LVsGF4hrFhSk5l+FmUoNRmr41gixL3LPQt5sJ6Nzm0QgWz4nFYOqqlPCy6htXcklsMo3GsTl7Ya2gnJ/0n0BH4Gc+VLZayUc4lr1Pa/TPtd4o+64cE=
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:I;OFR:SpamFilterPass;ENG:(5062000305)(90000117)(90013020)(91025020)(91040095)(9050020)(9065024)(9100338)(1010023)(944500132)(4810010)(4910033)(8820095)(9920006)(9510006)(10105021)(9320005)(9230038);
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?2RgvwGrYPzOwCel16n50uEpqtkzMW2mVo23Crs5NMHBNRM0wG7Uz9lFLofd8?=
=?us-ascii?Q?iPYarMinamMvs3JFJZxRzrdZdTNQnSN5ijONmL+bMhTGSnUuH/BmKZoiIIX7?=
=?us-ascii?Q?GEzAMHrOKL7qEKscc07knvmz1/m/yGZujiyc9y3e1Gm7C5Ck0k5EXns1B8iT?=
=?us-ascii?Q?w8t9Lyj7ZhuF3+sCYc0bJ1fbhq1N8UznYBHuKuRL1CWat6iAS/KkLOBRN+Bg?=
=?us-ascii?Q?x72SQ8ZVrqpTaTyKVBqCxnD2al+kNzy8fWdHg3QcRSR71Auo3OtntrK4V9g+?=
=?us-ascii?Q?28O9oAQvoIAzZ9QmM9fkAzGo9xBbZGojM2L1rku8M+NsTwW3FvPvtGPe2xkF?=
=?us-ascii?Q?rf2qqHpTT3gHoBFChqJ8n5A60QzFo1Qie3KLl4F+ukyT+rgx7AadkcXgypCp?=
=?us-ascii?Q?8NyNQnDK0R0if8+BxbHftrIrhazIAimfzDJ+NZN3s8A6Bb/cYmCwI36XSBlU?=
=?us-ascii?Q?Tlp29x2c1sTrX4rbhdpj0i1xh7Lj4CzYQQ6avO3WEqnP3zDzZebSKCT1imu8?=
=?us-ascii?Q?byDFJ97GJTFlG/A908g9Vxir+6rXseiobaL3IkRxrSRlwCpwx3fYOeRwXWWp?=
=?us-ascii?Q?hLACMNG6GWmWQamsgJwOEhFz3ZnIo2t0sQth544K/p+5XYL2dJTVl6FfGeDZ?=
=?us-ascii?Q?/rquc1dZJ5gEd1jPa8DTBzNJtydWZr3VTpbUmOCtWga+61uRKc9gQ5J4vhbs?=
=?us-ascii?Q?nPqMIdsFO83Oh6tUmhptPImZB8QcHwrB63HjKQeT1OEzJUrlHawspeFi4aU2?=
=?us-ascii?Q?IMihsTSRKMFqLFuQgpvn/2/yiP19pttmhiJaj2mVJzmo/xdxPt5Jn6sh44AT?=
=?us-ascii?Q?OwVhVmtinI/1+Te7fAFUWDbSpUkSccF8CualcGXgpI0WT/jCbRKkjYpMLaYl?=
=?us-ascii?Q?wjPBg+x+bWJqXfSpyi4OUIxTDkmVSh4ixHSk9fJ9SAYanb8TZJFEzJtNBGiV?=
=?us-ascii?Q?nTVeWLV3O801CrepqYoRKf6W8hI77IQBTcDGAeP7Vpt7e0WTrc291qDUdEjT?=
=?us-ascii?Q?us2m8QudGEx+MV5+GKJjOSBHG3BqU36eLMidDEuR73cJXTeoK2xHWBNFLge5?=
=?us-ascii?Q?KehAXkKBTdgdaYgXjFZv0ZkaQs3UU5OFKnRnW96ZwMaCOCLt5Ev+45jLqBrV?=
=?us-ascii?Q?JqHJ0w6dIx/itPqNnH5IBGbdBUOOw8MtT2zo6jKErCiabUsbVPtQmXDmvH3I?=
=?us-ascii?Q?1Z0q8B6oDQOA720P0gX/WZB5R94p0y4TRnu7MonkJR4C7ItipeWWxnoIBOTK?=
=?us-ascii?Q?7eFARdLges8vLXbdFzX6p6o8wHB/H2bXtCxL8vdUzITRCMtIsfYRRdqFucCP?=
=?us-ascii?Q?m5/xAT5Vgre2kcI0IMujAHxHZJOft+IB/C1OamLO/4l1w8BISkNBo6pIdb2J?=
=?us-ascii?Q?lRPMkx1fvavBEEvfm4MsmdKitK3YC92DkJL4LUk36sU5ReVM/Raftee4uce2?=
=?us-ascii?Q?QyLj1MSJzRpn0nWml+9cwVDevaMXIBPmQLLKrWghybfEQiPQl3fw+7Ykf+HU?=
=?us-ascii?Q?hR6jm5eAXZLea0abzWEZTXyaadp5yUf3ywU7SOqSqSIfvysFZZXfvkCW+Arl?=
=?us-ascii?Q?WW1lssILraYe5Rb2jDkagooeW5wawEQ1nOAfoUK47iMGvMjW3cbeJGE4w6h2?=
=?us-ascii?Q?wBKLhCvuzvLOJLt/6hq8A0fEx7GPbwUA74coQWbtJhfRCJI9UOyJXfgsngYy?=
=?us-ascii?Q?kvt6gtrCnomzvOyI3mUVvYthwf/oTnP+zTqtWSO8ScPFOOE9?=
