Skip to content

Instantly share code, notes, and snippets.

@MSAdministrator
Created October 2, 2025 16:09
Show Gist options
  • Select an option

  • Save MSAdministrator/a02133a9e35f015981cbb6a6930699b1 to your computer and use it in GitHub Desktop.

Select an option

Save MSAdministrator/a02133a9e35f015981cbb6a6930699b1 to your computer and use it in GitHub Desktop.
EXT Signature Required!
Received: from VE1P191MB0909.EURP191.PROD.OUTLOOK.COM (2603:10a6:800:148::14)
by AM9P191MB1523.EURP191.PROD.OUTLOOK.COM with HTTPS; Tue, 5 Aug 2025
19:33:44 +0000
Authentication-Results: spf=pass (sender IP is 52.101.69.94)
smtp.mailfrom=suspiciousdomain.com; dkim=pass (signature was verified)
header.d=randomcompany.onmicrosoft.com;dmarc=bestguesspass action=none
header.from=suspiciousdomain.com;compauth=pass reason=109
Received-SPF: Pass (protection.outlook.com: domain of suspiciousdomain.com designates
52.101.69.94 as permitted sender) receiver=protection.outlook.com;
client-ip=52.101.69.94; helo=AM0PR83CU005.outbound.protection.outlook.com;
pr=C
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 140.228.29.97)
smtp.mailfrom=suspiciousdomain.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=suspiciousdomain.com;
Received-SPF: Fail (protection.outlook.com: domain of suspiciousdomain.com does not
designate 140.228.29.97 as permitted sender) receiver=protection.outlook.com;
client-ip=140.228.29.97; helo=[127.0.0.1];
Content-Type: text/html; charset=utf-8
From: Doc|fg5w4ff/DnOdK46Imrjnjp79c94dLZs9yeWFU3K5IplGfc9Ax6B1i3bPlQg01dY1OuYlY5inmyHAq05rs0wRvMi62DYvkrDXkByY5cdESw6Nyf16Lm5fjNsde6Wfafy7HaIm1EGuA3yG2bRlTIMoN+l2LK2RileM5K+Dh4ZFpmYriK2tCxD/mIncdU9TBswKtJpTU7cJuXbzYfwAuqYZGje/rXng4Z2Dnd0pmJ/[email protected]
To: <[email protected]>
Subject: EXT Signature Required!
Message-ID: <[email protected]>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 05 Aug 2025 19:32:32 +0000
Return-Path: Doc|fg5w4ff/DnOdK46Imrjnjp79c94dLZs9yeWFU3K5IplGfc9Ax6B1i3bPlQg01dY1OuYlY5inmyHAq05rs0wRvMi62DYvkrDXkByY5cdESw6Nyf16Lm5fjNsde6Wfafy7HaIm1EGuA3yG2bRlTIMoN+l2LK2RileM5K+Dh4ZFpmYriK2tCxD/mIncdU9TBswKtJpTU7cJuXbzYfwAuqYZGje/rXng4Z2Dnd0pmJ/[email protected]
X-EOPAttributedMessage: 1
X-MS-TrafficTypeDiagnostic: AMS1EPF0000004B:EE_|DB9PR03MB7355:EE_|DB1PEPF000509FB:EE_|VE1P191MB0909:EE_|AM9P191MB1523:EE_
X-MS-Office365-Filtering-Correlation-Id: 41de8425-6dff-44f9-7745-08ddd456d6cf
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Forefront-Antispam-Report-Untrusted: CIP:140.228.29.97;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:[127.0.0.1];PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(231020011799012)(36860700013)(376014)(82310400026)(38142699006)(61400799027)(34070700014)(13003099007)(24112699015)(8096899003)(95630200002);DIR:OUT;SFP:1102;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Antispam: BCL:0;ARA:13230040|231020011799012|12062699021|35042699022|38142699006|24112699015|13003099007|8052699015|8096899003|95630200002;
MIME-Version: 1.0
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style>
/* Font Definitions */
@font-face {font-family:"Cambria Math";panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm;font-size:11.0pt;font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink {color:#0563C1;text-decoration:underline;}
</style>
</head>
<body>
<div id="footer" style="background-color: #ffeb9c; width: 100%; border: 1px solid #FFEB9C; padding: 2pt; -webkit-border-radius: 5px; -moz-border-radius: 5px; border-radius: 5px;border-style: solid; border-color: #9C6500;">
<strong>Caution</strong>: This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.
</div>
<br>
<div>
<span style="font-size: xx-large;">DocuSign</span>
<p></p>
<div style="background: #1e4ca1; color: #efefef; padding: 20px;" align="center">
<br>
<span style="font-size: large;">John.smith Your Documents are ready.</span>
<p>&nbsp;</p>
<a style="text-decoration: none; color: white; border-radius: 2px; border: #fcfcfc 1px solid; padding: 10px;" href="https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.google.co.za%2Furl%3Fq%3Dhttps%253A%252F%252Fsuspiciousphishingsite.com%252Fbnbs%252Fhm%252F%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw1HZQKoOHwS_BVnjDx6CqRI%23%3F204707343Family%3DamFzb24uYmFya3VzQGNlbnRyaWNhLmNvbQ%3D%3D&amp;data=05%7C02%7Cjohn.smith%40targetcompany.com%7C41de84256dff44f9774508ddd456d6cf%7Ca603898f7de245bab67dd35fb519b2cf%7C0%7C0%7C638900192246464751%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&amp;sdata=Wg6j0yLSiXEIc9RrVFLBUwXwzBUcnbXfH6AhO4XJv%2BI%3D&amp;reserved=0" originalsrc="https://www.google.co.za/url?q=https%3A%2F%2Fsuspiciousphishingsite.com%2Fbnbs%2Fhm%2F&amp;sa=D&amp;sntz=1&amp;usg=AOvVaw1HZQKoOHwS_BVnjDx6CqRI#?204707343Family=amFzb24uYmFya3VzQGNlbnRyaWNhLmNvbQ==">DOCUMENT HERE</a>
<p>&nbsp;</p>
</div>
<p style="font-size: 10px;">Diese E-Mail enthält vetrtrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese E-Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet.</p>
<p></p>
<p>&nbsp;</p>
<div class="WordSection1">
<p>&nbsp;</p>
<p class="MsoNormal"><span style="font-size:10.0pt">Thanks Jane. Will do and sounds like they will be a great addition to the team.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">&nbsp;</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">I will send the Contract over the weekend.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">&nbsp;</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Regards,</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">&nbsp;</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Sarah</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">&nbsp;</span></p>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#323133;">Sarah Williams</span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#323133;">Director &amp; Principal HR Consultant</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#323133;">&nbsp;</span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#323133;">P:</span></b><span style="font-size:10.0pt;color:#323133;">&nbsp;&nbsp;<a href="tel:0400123456">0400 123 456</a></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#323133;">E:</span></b><span style="font-size:10.0pt;color:#323133;">&nbsp;&nbsp;<a href="mailto:[email protected]">[email protected]</a>&nbsp;</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#323133;">Suite 4B, 265 Sample Street, Melbourne, VIC 3000&nbsp;</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#323133;"><a href="http://consultingfirm.com.au/"><b>consultingfirm.com.au</b></a></span></p>
</div>
</div>
</div>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment