Pastebin launched a little side project called VERYVIRAL.com, check it out ;-) Want more features on Pastebin? Sign Up, it's FREE!
Guest

Untitled

By: a guest on Nov 8th, 2013  |  syntax: None  |  size: 4.76 KB  |  views: 38  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. Received: from cdpipgw01.twcable.com (10.136.163.120) by
  2.  PRVPEXHUB02.corp.twcable.com (10.136.163.11) with Microsoft SMTP Server id
  3.  8.3.298.1; Wed, 6 Nov 2013 19:56:56 -0500
  4. Received: from hrndva-postmx01.mail.rr.com ([71.74.56.227])  by
  5.  cdpipgw01.twcable.com with ESMTP; 06 Nov 2013 19:56:46 -0500
  6. Received: from lafayette.linkedin.com (lafayette.linkedin.com [69.28.149.83])
  7.         by hrndva-postmx01.mail.rr.com (8.14.2/8.14.2) with ESMTP id rA70utnU026219
  8.         for <abuse@rr.com>; Thu, 7 Nov 2013 00:56:55 GMT
  9. Received: from esv4-infra10.corp.linkedin.com (localhost.localdomain
  10.  [127.0.0.1])   by lafayette.linkedin.com (Postfix) with ESMTP id 9E49D8153E    for
  11.  <abuse@rr.com>; Wed,  6 Nov 2013 16:55:40 -0800 (PST)
  12. From: "postmaster@linkedin.com" <postmaster@linkedin.com>
  13. To: "abuse@rr.com" <abuse@rr.com>
  14. Date: Wed, 6 Nov 2013 19:55:40 -0500
  15. Subject: Abuse report for: Notice again
  16. Thread-Topic: Abuse report for: Notice again
  17. Thread-Index: Ac7bVEGbO14FGociRx6ION5b6iWofw==
  18. Message-ID: <20131107005540.9E49D8153E@lafayette.linkedin.com>
  19. Accept-Language: en-US
  20. Content-Language: en-US
  21. X-MS-Exchange-Organization-AuthAs: Anonymous
  22. X-MS-Exchange-Organization-AuthSource: PRVPEXHUB02.corp.twcable.com
  23. X-MS-Has-Attach: yes
  24. X-MS-Exchange-Organization-SCL: 0
  25. X-MS-TNEF-Correlator:
  26. x-sender-ip: 71.74.56.227
  27. x-sender-reputation: 3.7
  28. x-ironport-av: E=Sophos;i="4.93,647,1378872000";    e="0x80040212'e";
  29.     d="eml'?zip'48?scan'48,208,48";a="158836841"
  30. dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linkedin.com;
  31.         s=l20130501-1024-fGtk3S; t=1383785740;
  32.         bh=nz1S6ptnSezN6FD99nh1Mn8+Si7dQaEdYeeg/Yuj4G8=;        h=To:From:Subject:Date;
  33.         b=dmb55UHAZM4wCu3sTCbFjMCC7ncBMjVq1aia20JcHqW9m+gCst1efxITLzQgKRHm1
  34.          JMZHdEsIFnneIShm5LUEkGuQW0tI0GmemGw+eq4Lrau0gXLcGDOQNoZzAcqcNfY4f1
  35.          GnTVDQJlmlyUxV2oAzb9eXCs5kuwGeXWFycYJRTw=
  36. x-trusted-list: Sender Domain or IP is on the TRUSTED_LIST
  37. Content-Type: multipart/mixed;
  38.         boundary="_004_201311070055409E49D8153Elafayettelinkedincom_"
  39. MIME-Version: 1.0
  40.  
  41. --_004_201311070055409E49D8153Elafayettelinkedincom_
  42. Content-Type: text/plain; charset="us-ascii"
  43. Content-Transfer-Encoding: quoted-printable
  44.  
  45. This is an email in the abuse report format (ARF) for an email message rece=
  46. ived from=20
  47. IP 24.227.92.137 rrcs-24-227-92-137.se.biz.rr.com on 2013-11-05 17:58:10 UT=
  48. C.
  49. This report likely indicates a compromised machine and may contain URLs to =
  50. malware, treat with caution!
  51.  
  52. The attached email was selected amongst emails that failed DMARC,
  53. therefore it indicates that the author tried to pass for someone else
  54. indicating fraud and not spam. The faster you fix or isolate the compromise=
  55. d machine,=20
  56. the better you protect your customers or members and the Internet at large.
  57.  
  58. This ARF report contains all the information you will need to assess the pr=
  59. oblem.
  60. The zip attachment is the complete email encrypted with the password infect=
  61. ed
  62. For more information about this format please see http://tools.ietf.org/htm=
  63. l/rfc5965.
  64.  
  65. --_004_201311070055409E49D8153Elafayettelinkedincom_
  66. Content-Type: message/feedback-report; name="ATT00001"
  67. Content-Description: ATT00001
  68. Content-Disposition: attachment; filename="ATT00001"; size=224;
  69.         creation-date="Thu, 07 Nov 2013 00:56:56 GMT";
  70.         modification-date="Thu, 07 Nov 2013 00:56:56 GMT"
  71. Content-Transfer-Encoding: base64
  72.  
  73. RmVlZGJhY2stVHlwZTogZnJhdWQNClVzZXItQWdlbnQ6IHB5Zm9yZW5zaWMvMS4xDQpWZXJzaW9u
  74. OiAxLjANClNvdXJjZS1JUDogMjQuMjI3LjkyLjEzNw0KQXJyaXZhbC1EYXRlOiAyMDEzLTExLTA1
  75. IDE3OjU4OjEwIFVUQw0KQXR0YWNobWVudC1QYXNzd29yZDogaW5mZWN0ZWQNCg==
  76.  
  77. --_004_201311070055409E49D8153Elafayettelinkedincom_
  78. Content-Type: message/rfc822
  79.  
  80. Received: from [24.227.92.137] ([24.227.92.137:14654] helo=linkedin.com)        by
  81.         mail37.prod (envelope-from <usmail@expediamail.com>)    (ecelerity
  82.         3.4.2.33817 r(MessageSystems/Momo-dev:9fc2f41b555d)) with ESMTP id
  83.         01/CF-18378-1B139725; Tue, 05 Nov 2013 17:58:10 +0000
  84. From: "usmail@expediamail.com" <usmail@expediamail.com>
  85. To: "updates@linkedin.com" <updates@linkedin.com>
  86. Date: Tue, 5 Nov 2013 12:58:10 -0500
  87. Subject: Notice again
  88. Thread-Topic: Notice again
  89. Thread-Index: Ac7bVEGeoFJSWg+IQiaLUJo0UvXFJg==
  90. Message-ID: <01.CF.18378.1B139725@mail37.prod>
  91. Accept-Language: en-US
  92. X-MS-Has-Attach:
  93. X-MS-TNEF-Correlator:
  94. authentication-results: mail37.prod.linkedin.com;       iprev=pass
  95.  policy.iprev=24.227.92.137;    spf=fail smtp.mailfrom=usmail@expediamail.com
  96.  smtp.helo=linkedin.com;        dkim=neutral (message not signed) header.d=none;
  97.         dmarc=fail (p=reject;   dis=reject) d=expediamail.com
  98.  header.from=expediamail.com
  99. Content-Type: text/plain; charset="us-ascii"
  100. Content-Transfer-Encoding: quoted-printable
  101. MIME-Version: 1.0
  102.  
  103.  
  104. ====================
  105. --_004_201311070055409E49D8153Elafayettelinkedincom_
  106. Content-Type: application/zip; name="mailkszBle.zip"
  107. Content-Description: mailkszBle.zip
clone this paste RAW Paste Data