Tender File

Nur Integrator LLP is an IT services company. The mailbox sales@nur-integrator.example received a message apparently from its own department, with an attachment. The recipient did not open it and forwarded the message to you.

There are about fifteen messages in the mailbox that day. No bodies are shown and none are needed: everything required is in the envelope and in the SPF, DKIM and DMARC results.

Be careful with quick conclusions: not every failed check means forgery, and not every passed check means the message is genuine.

Subjects and display names are in Russian, as in the real environment.