Advertisement
wavellan

20180912_PHISHING_SCAM_1

Sep 12th, 2018
197
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.26 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Wed, 12 Sep 2018 02:04:45 -0500
  4. Received: from MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Wed, 12 Sep 2018 02:04:45 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Wed, 12 Sep 2018 02:04:45 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [50.28.55.165]
  18. Authentication-Results: smtp28.gate.ord1c.rsapps.net; iprev=pass policy.iprev="50.28.55.165"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="server1.magenserver.com"; dkim=fail (signature verification failed) header.d=rcmediagroups.com; dmarc=none (p=nil; dis=none) header.from=rcmediagroups.com
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: 210e41d0-b65a-11e8-8eda-a0369f1890f1-1-1
  21. Received: from [50.28.55.165] ([50.28.55.165:41288] helo=server1.magenserver.com)
  22. by smtp28.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id 53/8F-16894-D8AB89B5; Wed, 12 Sep 2018 03:04:45 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  26. d=rcmediagroups.com; s=default; h=Reply-To:Date:From:To:Subject:
  27. Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
  28. Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
  29. Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
  30. List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
  31. bh=pMEMW/o+76ZWLuYnRa2MjIJxlR+/pwl5Phznj3uyPdI=; b=h/JwcP0RShRRMiG+rLrrhzgGL
  32. igR5Ubc9Ygf5qXzpG3IO1EV8WobhuSORQWgM5Q/dlcAzb6YRhj7nWyiRXy52AjMfibhdwk0DfZ3ce
  33. 5zlZ+048uYlKN7KcjB9iFdOwDqWqqxMrio2m7Xxj8HEeGVBb3/mN0Zb0iqmT7TO7S3mFZWbUqgVpb
  34. 40yjERCVlstl9tzahp3AM9wfctwDb7PVVe7BmZ0g21f2erFlRyuVcdzoLSAx4H+jFSD7+QMH1gj4g
  35. M6O8lpRKWDyHD6QbWhVx+H+zyvEtNPBasrQ6hKJ11u8jJyVuA9YCIK0H8spZc5dhtwGuimf2fSDbg
  36. 2AwV241yQ==;
  37. Received: from [185.228.80.59] (port=30701)
  38. by server1.magenserver.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
  39. (Exim 4.91)
  40. (envelope-from <[email protected]>)
  41. id 1fzzCd-000QGt-Dd; Wed, 12 Sep 2018 03:04:43 -0400
  42. Message-ID: <[email protected]>
  43. MIME-Version: 1.0
  44. Content-Description: Mail message body
  45. Subject: Shared Interest
  46. To: Recipients <[email protected]>
  47. From: "UOB" <[email protected]>
  48. Date: Wed, 12 Sep 2018 00:04:39 -0700
  49. X-OutGoing-Spam-Status: No, score=1.5
  50. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  51. X-AntiAbuse: Primary Hostname - server1.magenserver.com
  52. X-AntiAbuse: Original Domain -
  53. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  54. X-AntiAbuse: Sender Address Domain - rcmediagroups.com
  55. X-Get-Message-Sender-Via: server1.magenserver.com: authenticated_id: [email protected]
  56. X-Authenticated-Sender: server1.magenserver.com: [email protected]
  57. X-Source:
  58. X-Source-Args:
  59. X-Source-Dir:
  60. X-MS-Exchange-Organization-Network-Message-Id: f3ec5b46-e171-42f9-c021-08d6187e0534
  61. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1449900;0;This mail has
  62. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  63. X-MS-Exchange-Organization-SCL: 5
  64. X-MS-Exchange-Organization-AuthSource: MBX12D-ORD1.mex08.mlsrvr.com
  65. X-MS-Exchange-Organization-AuthAs: Anonymous
  66. Content-type: text/plain;
  67. charset="UTF-8"
  68. Content-transfer-encoding: 7bit
  69.  
  70. Good day,
  71.  
  72. Due to our shared interest on linkedlin, it is my desire to know you because i will like to share a benefiting business opportunity with you.
  73.  
  74. I am Christine Mei Leng, I work with the United overseas Bank (Singapore) as a professional finance regional Head.
  75.  
  76. I , however I shall send you a detailed email for consideration.
  77.  
  78.  
  79. Thank you and I look forward to hearing from you.
  80.  
  81.  
  82. Regards
  83. Christine Mei Leng
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement