Advertisement
wavellan

20180802_PHISHING_SCAM_2

Aug 7th, 2018
200
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.76 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Thu, 2 Aug 2018 16:39:35 -0500
  4. Received: from MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Thu, 2 Aug 2018 16:39:35 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Thu, 2 Aug 2018 16:39:35 -0500
  10. Return-Path: <bounce-REMOVED@sg.fastwebtracking.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. X-Spam-Flag: YES
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [51.255.10.35]
  17. Authentication-Results: smtp31.gate.ord1d.rsapps.net; iprev=pass policy.iprev="51.255.10.35"; spf=pass smtp.mailfrom="bounce-REMOVED@sg.fastwebtracking.com" smtp.helo="gateway35.hack-pr.team"; dkim=pass header.d=fastwebtracking.com; dmarc=none (p=nil; dis=none) header.from=fastwebtracking.com
  18. X-Suspicious-Flag: NO
  19. X-Classification-ID: 8bbc8916-969c-11e8-8fe0-525400b3ac8c-1-1
  20. Received: from [51.255.10.35] ([51.255.10.35:41624] helo=gateway35.hack-pr.team)
  21. by smtp31.gate.ord1d.rsapps.net (envelope-from <bounce-REMOVED@sg.fastwebtracking.com>)
  22. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  23. id 7D/44-29927-61A736B5; Thu, 02 Aug 2018 17:39:35 -0400
  24. DKIM-Signature: v=1; a=rsa-sha256;
  25. bh=H8vFwTHNJZeTMhEgELPCPoV8V7vUosE4jWYrcyk+kEA=; d=fastwebtracking.com;
  26. h=Message-ID: Date: Subject: From: To: MIME-Version: Content-Type:
  27. Precedence: Feedback-ID; i=@fastwebtracking.com; s=mail; c=relaxed/relaxed;
  28. t=1533245973;
  29. b=bYfiF6Vi3Ua4olVK6CymeBr0ccmlbcMz0JDNfDif7xSBEXH93MQ6Zrfj8Qef9WS8ZVtZHHr71
  30. jhq6s5pDH2bHNoAz02Hjaaj8XdtD7PNEnunlNeJ0ChD/tWr5QvsxZGUgs3fMnTGkw/83EK5ix
  31. fUXRf3dzIdhW27rqe0/RmkWko=
  32. Message-ID: <6a4ed12b4e2bc9667ecafa7dc4ff6607@sg.fastwebtracking.com>
  33. Date: Thu, 02 Aug 2018 21:39:33 +0000
  34. Subject: Invitation to buy shares in WikiSoft Corp.
  35. From: WikiSoft <analytics@fastwebtracking.com>
  36. To: REMOVED
  37. MIME-Version: 1.0
  38. X-Subscriber-Uid: ex626tp2qz806
  39. X-Mailer: SwiftMailer - 5.4.x
  40. X-EBS: http://analytics-ua3566732.com/lists/block-address
  41. X-Campaign-Uid: nv437deqfn1cb
  42. Precedence: bulk
  43. Feedback-ID: nv437deqfn1cb:ex626tp2qz806:sm095va0e8d4d:hw486ha30gfa3
  44. X-MS-Exchange-Organization-Network-Message-Id: 548c0d08-a5d4-434b-e742-08d5f8c070c7
  45. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1441700;0;This mail has
  46. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  47. X-MS-Exchange-Organization-SCL: 5
  48. X-MS-Exchange-Organization-AuthSource: MBX11D-ORD1.mex08.mlsrvr.com
  49. X-MS-Exchange-Organization-AuthAs: Anonymous
  50. Content-type: multipart/alternative;
  51. boundary="B_3616448658_2049282374"
  52.  
  53. > This message is in MIME format. Since your mail reader does not understand
  54. this format, some or all of this message may not be legible.
  55.  
  56. --B_3616448658_2049282374
  57. Content-type: text/plain;
  58. charset="UTF-8"
  59. Content-transfer-encoding: quoted-printable
  60.  
  61. Invitation to buy shares in WikiSoft Corp.=20
  62. wikisoft =C2=AE=20
  63. =20
  64. BREAKING NEWS=20
  65. WikiSoft Corp. is going to be public listed on
  66. the U.S OTC Stock Market in August 2018.=20
  67. =20
  68. Invitation to buy shares in
  69. WikiSoft Corp.=20
  70. Wikisoft Corp. is preparing its public listing on the OTC Stock Market in t=
  71. he United States, August 2018 as the first WIKI company in the World. The s=
  72. hares will be offered at $1.85 USD per share including discount on a first-c=
  73. ome, first-serve basis. The closing date for reserving shares is Aug 8, 2018=
  74. . You can make the reservation of shares to investor@wikisoft.com or use the
  75. Reservation form=20
  76. WikiSoft Corp
  77. 315 Montgomery Street, 1600 San Francisco, CA 94104 USA
  78. Phone: +45 20 300 606
  79. www.wikisoft.com=20
  80. Rasmus Refer,
  81. Chairman of the Board
  82. https://dk.linkedin.com/in/rasmusrefer=20
  83. =20
  84. This email was sent to REMOVED on 2018-08-02 21:39:33
  85. Update profile
  86. Unsubscribe | Report abuse
  87.  
  88. --B_3616448658_2049282374
  89. Content-type: text/html;
  90. charset="UTF-8"
  91. Content-transfer-encoding: quoted-printable
  92.  
  93. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.=
  94. w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  95. <html xmlns=3D"http://www.w3.org/1999/xhtml" xmlns:o=3D"urn:schemas-microsoft-c=
  96. om:office:office" xmlns:v=3D"urn:schemas-microsoft-com:vml">
  97. <head>
  98. <!--[if gte mso 9]><xml>
  99. <o:OfficeDocumentSettings>
  100. <o:AllowPNG/>
  101. <o:PixelsPerInch>96</o:PixelsPerInch>
  102. </o:OfficeDocumentSettings>
  103. </xml><![endif]-->
  104. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  105. <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1, maximum=
  106. -scale=3D1, user-scalable=3Dno">
  107. <title>:: WikiSoft Email ::</title>
  108. <style type=3D"text/css">@media only screen and (max-device-width: 767px) {
  109. .mainbody {
  110. width:100% !important;
  111. }
  112. }
  113. @media only screen and (max-device-width: 480px) {
  114. .mainbody {
  115. width:100% !important;
  116. }
  117. .mb_pad1 {
  118. padding-left: 20px !important;
  119. padding-right: 20px !important;
  120. }
  121. .mb-title1 {
  122. font-size:16px !important;
  123. }
  124. }
  125. </style><style type=3D"text/css">span.preheader{display:none!important;mso-h=
  126. ide:all;}</style>
  127. </head>
  128. <body bgcolor=3D"#d6dce4" bottommargin=3D"0" data-gramm=3D"true" data-gramm_edito=
  129. r=3D"true" data-gramm_id=3D"2eb12a9c-3720-ad15-04c2-3a200a04112a" leftmargin=3D"0"=
  130. rightmargin=3D"0" topmargin=3D"0">
  131. <span class=3D"preheader" style=3D"display:none!important;mso-hide:all;">Invita=
  132. tion to buy shares in WikiSoft Corp.</span>
  133. <table align=3D"center" bgcolor=3D"#d6dce4" border=3D"0" cellpadding=3D"0" cellspac=
  134. ing=3D"0" class=3D"mainbody" style=3D"width:100%!important; padding-bottom:0px; pa=
  135. dding-top:0px; padding-left:0px; margin:0px auto; line-height:100%!important=
  136. ; padding-right:0px; background-color:#d6dce4; font-family:Arial,sans-serif=
  137. ;">
  138. <tbody>
  139. <tr>
  140. <td align=3D"center" valign=3D"top">
  141. <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" class=3D"mainbody" style=3D"m=
  142. ax-width:600px; padding-bottom:0px; padding-top:0px; padding-left:0px; margi=
  143. n:0px auto; line-height:100%!important; padding-right:0px" width=3D"600">
  144. <tbody>
  145. <tr>
  146. <td valign=3D"top">
  147. <table bgcolor=3D"#8bc750" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"=
  148. width:100%!important; border-collapse:collapse; padding-bottom:0px; padding-=
  149. top:0px; padding-left:0px; margin:0px auto; line-height:100%!important; padd=
  150. ing-right:0px;" width=3D"100%">
  151. <tbody>
  152. <tr style=3D"background:#5a9ada; color:#fff; padding:50px; text-align:center"=
  153. >
  154. <td style=3D"padding:50px 0; font-size:80px; letter-spacing:-1px; font-weight=
  155. :700; font-family:'helvetica Neue'">
  156. <g class=3D"gr_ gr_30 gr-alert gr_spell gr_inline_cards gr_run_anim Contextua=
  157. lSpelling ins-del multiReplace" data-gr-id=3D"30" id=3D"30">wikisoft</g>
  158. <sup style=3D"font-size:18px;font-weight:normal;position:relative;top: -7px;l=
  159. eft: -16px;">
  160. =C2=AE</sup></td>
  161. </tr>
  162. </tbody>
  163. </table>
  164. </td>
  165. </tr>
  166. <tr>
  167. <td align=3D"center" valign=3D"top">
  168. <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
  169. <tbody>
  170. <tr>
  171. <td align=3D"left" class=3D"mb_pad1" style=3D"padding-bottom:20px; padding-top:20=
  172. px; padding-left:40px; padding-right:40px; background-color:#19334c">
  173. <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
  174. <tbody>
  175. <tr>
  176. <td>&nbsp;</td>
  177. </tr>
  178. <tr style=3D"text-align:center; color:#fff">
  179. <td style=3D"font-size:15px; font-weight:500; font-family:'helvetica Neue'">B=
  180. REAKING NEWS</td>
  181. </tr>
  182. <tr>
  183. <td>
  184. <p style=3D"text-align:center; color:#fff; font-size:18px; line-height:25px; =
  185. font-family:'helvetica Neue'; font-weight:200; letter-spacing:1px">
  186. WikiSoft Corp. is&nbsp;going to be <g class=3D"gr_ gr_40 gr-alert gr_spell gr=
  187. _inline_cards gr_run_anim ContextualSpelling" data-gr-id=3D"40" id=3D"40">
  188. public</g> listed on<br>
  189. the U.S OTC Stock Market in August 2018.</p>
  190. </td>
  191. </tr>
  192. </tbody>
  193. </table>
  194. </td>
  195. </tr>
  196. </tbody>
  197. </table>
  198. </td>
  199. </tr>
  200. <tr>
  201. <td align=3D"center" valign=3D"top">
  202. <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"" width=3D"100%">
  203. <tbody>
  204. <tr>
  205. <td align=3D"left" class=3D"mb_pad1" style=3D"padding-bottom:20px; padding-top:20=
  206. px; padding-left:40px; padding-right:40px; background-color:#fff">
  207. <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
  208. <tbody>
  209. <tr>
  210. <td>&nbsp;</td>
  211. </tr>
  212. <tr style=3D"text-align:center; color:#1a334b">
  213. <td style=3D"font-size:32px; font-family:'helvetica'; line-height:35px;">Inv=
  214. itation to buy shares in<br>
  215. WikiSoft Corp.</td>
  216. </tr>
  217. <tr style=3D"text-align:center; line-height:35px;">
  218. <td>
  219. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  220. 'helvetica'; font-weight: 200;">
  221. Wikisoft Corp. is preparing its public listing on the OTC Stock Market in t=
  222. he&nbsp;<g class=3D"gr_ gr_37 gr-alert gr_gramm gr_inline_cards gr_run_anim Gr=
  223. ammar only-ins replaceWithoutSep" data-gr-id=3D"37" id=3D"37">United</g> States,=
  224. August 2018 as the first WIKI company
  225. in the World.</p>
  226. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  227. 'helvetica'; font-weight: 200;">
  228. The shares will be offered at $1.85 USD per share including discount on a f=
  229. irst-come, first-serve basis.</p>
  230. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  231. 'helvetica'; font-weight: 200;">
  232. The closing date for reserving shares is Aug&nbsp;8, 2018.</p>
  233. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  234. 'helvetica'; font-weight: 200;">
  235. You can make the&nbsp;<g class=3D"gr_ gr_38 gr-alert gr_gramm gr_inline_cards=
  236. gr_run_anim Grammar only-ins doubleReplace replaceWithoutSep" data-gr-id=3D"3=
  237. 8" id=3D"38">reservation</g> of shares to investor@wikisoft.com or use the<br>
  238. <span style=3D"border-bottom:1px solid #1a334b"><a href=3D"http://analytics-ua3=
  239. 566732.com/campaigns/nv437deqfn1cb/track-url/REMOVED" style=3D"color: #1a334b; text-decoration:none" target=
  240. =3D"_blank">Reservation form</a></span></p>
  241. </td>
  242. </tr>
  243. <tr style=3D"text-align:center; color:#1a334b;font-family:'helvetica'; font-s=
  244. ize:20px; line-height:35px; font-weight:200">
  245. <td>
  246. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  247. 'helvetica'; font-weight: 200;">
  248. <span style=3D"font-weight:bold; font-size:15px">WikiSoft Corp</span><br>
  249. 315 Montgomery Street, 1600 San Francisco, CA 94104 USA<br>
  250. Phone: &#43;45 20 300 606<br>
  251. www.wikisoft.com</p>
  252. </td>
  253. </tr>
  254. <tr style=3D"text-align:center; color:#1a334b;">
  255. <td>
  256. <p style=3D"line-height: 18px; color: #1a334b; font-size: 14px; font-family: =
  257. 'helvetica'; font-weight: 200;">
  258. Rasmus Refer,<br>
  259. Chairman of the Board<br>
  260. <span>https://dk.linkedin.com/in/rasmusrefer</span></p>
  261. </td>
  262. </tr>
  263. <tr>
  264. <td style=3D"height:&quot;30&quot;">&nbsp;</td>
  265. <td>&nbsp;</td>
  266. </tr>
  267. <tr style=3D"text-align:right; color:#1a334b;">
  268. <td>
  269. <p style=3D"line-height: 14px; color: #1a334b; font-size: 10px; font-family: =
  270. 'helvetica'; font-weight: 200;">
  271. This email was sent to REMOVED on 2018-08-02 21:39:33<br>
  272. <a href=3D"http://analytics-ua3566732.com/campaigns/" style=3D"text-decoratio=
  273. n: underline; color: #4285f4;">Update profile</a><br>
  274. <a data-unsubtag=3D"_DIRECT_UNSUBSCRIBE_URL_" href=3D"http://analytics-ua356673=
  275. 2.com/campaigns/nv437deqfn1cb/track-url/" style=3D"text-decoration: underline; color: #4285f4;">Unsu=
  276. bscribe</a> |
  277. <a href=3D"http://analytics-ua3566732.com/campaigns/" style=3D"text-decoratio=
  278. n: underline; color: #4285f4;">
  279. Report abuse</a></p>
  280. </td>
  281. </tr>
  282. </tbody>
  283. </table>
  284. </td>
  285. </tr>
  286. </tbody>
  287. </table>
  288. </td>
  289. </tr>
  290. </tbody>
  291. </table>
  292. </td>
  293. </tr>
  294. </tbody>
  295. </table>
  296. <img width=3D"1" height=3D"1" src=3D"http://analytics-ua3566732.com/" alt=3D"">
  297. </body>
  298. </html>
  299.  
  300.  
  301. --B_3616448658_2049282374--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement