Advertisement
wavellan

20210513_PHISHING_SCAM_1

May 16th, 2021
156
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.14 KB | None | 0 0
  1. Hello!
  2. I'm and I act as an official representative of a big multinational corporation. I want to offer you company partnership for the subsequent several months. Licensed strategies and commercial plan I've loaded here:
  3.  
  4.  
  5. bjacklynmedicals.com/CjKR/bill-90.zip
  6.  
  7.  
  8. If you're interested in such a business relationship, please let me know.
  9.  
  10. Sincerely,
  11. Neriah Garrison,
  12. CEO Assistant of Alstom Inc. USA Branch,
  13. +1-585-937-4429
  14.  
  15.  
  16.  
  17.  
  18. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  19. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  20. id 15.0.1497.2 via Mailbox Transport; Thu, 13 May 2021 10:05:27 -0500
  21. Received: from MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) by
  22. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  23. id 15.0.1497.2; Thu, 13 May 2021 10:05:27 -0500
  24. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  25. MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) with Microsoft SMTP Server (TLS)
  26. id 15.0.1497.2 via Frontend Transport; Thu, 13 May 2021 10:05:27 -0500
  27. Return-Path: <[email protected]>
  28. X-Spam-Threshold: 95
  29. X-Spam-Score: 0
  30. X-Spam-Flag: NO
  31. X-Virus-Scanned: OK
  32. X-Orig-To:
  33. X-Originating-Ip: [72.52.131.205]
  34. Authentication-Results: smtp33.gate.iad3b.rsapps.net; iprev=pass policy.iprev="72.52.131.205"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="linux1.hiya.digital"; dkim=pass header.d=3stechs.in; dmarc=pass (p=none; dis=none) header.from=3stechs.in
  35. X-Suspicious-Flag: NO
  36. X-Classification-ID: a62c4838-b3fc-11eb-979c-525400fb5834-1-1
  37. Received: from [72.52.131.205] ([72.52.131.205:51122] helo=linux1.hiya.digital)
  38. by smtp33.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  39. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  40. id 79/F8-18863-6304D906; Thu, 13 May 2021 11:05:27 -0400
  41. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=3stechs.in;
  42. s=default; h=MIME-Version:Message-ID:Subject:From:To:Date:Content-Type:Sender
  43. :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
  44. Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
  45. In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
  46. List-Post:List-Owner:List-Archive;
  47. bh=AF1+w06piAC/Vbz6UgRdAwkkhobrYn34USiqsJ3NrFg=; b=NGKoi766UacE/WNUbtXHUYY2iT
  48. WMTIGSmxrDnNSsaHFFAIbKqIu/QCEZ7qPtrx9Iyj+ddq9cdYdx05aG2dLJuwJtSK1iG2QRJFeQ2fr
  49. Es4Hs/7YM64ZskG+ZHgm74tA/ZIYwyiCE5jgwN1shbJIjMT638XwBaqaleO4XCYdlRuZ0NOk7AAm9
  50. dl+bemmJqVVCrWzQzszLXt1SFtnuFJUozq28DJvMsAsy2HYNpc3Une5okHYCrPHyTkMVpJC2xhLAy
  51. cLjbY6ktLEIYG8mnWSIkOijCM94xamUPmx3NdyWBZ5lLnEarLOv9oXuchHcD8dHIoDM14pZ5RUvwf
  52. f8zR2aSQ==;
  53. Received: from [103.217.110.54] (port=62442 helo=mail.3stechs.in)
  54. by linux1.hiya.digital with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  55. (Exim 4.94.2)
  56. (envelope-from <[email protected]>)
  57. id 1lhCta-000JPV-3N
  58. for ; Thu, 13 May 2021 11:05:04 -0400
  59. Date: Thu, 13 May 2021 16:05:01 +0200
  60. To:
  61. From: "Neriah Garrison of Alstom" <[email protected]>
  62. Subject: Cooperation proposal ref#9435367
  63. Message-ID: <BDB171590B25B3FAFAED086F9716EDF6098F8735@unknown>
  64. MIME-Version: 1.0
  65. X-OutGoing-Spam-Status: No, score=-0.5
  66. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  67. X-AntiAbuse: Primary Hostname - linux1.hiya.digital
  68. X-AntiAbuse: Original Domain -
  69. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  70. X-AntiAbuse: Sender Address Domain - 3stechs.in
  71. X-Get-Message-Sender-Via: linux1.hiya.digital: authenticated_id: [email protected]
  72. X-Authenticated-Sender: linux1.hiya.digital: [email protected]
  73. X-Source:
  74. X-Source-Args:
  75. X-Source-Dir:
  76. X-MS-Exchange-Organization-Network-Message-Id: 1237f83d-b9a9-4db2-cb2b-08d916208ad7
  77. X-MS-Exchange-Organization-AuthSource: MBX02C-ORD1.mex08.mlsrvr.com
  78. X-MS-Exchange-Organization-AuthAs: Anonymous
  79. Content-type: multipart/alternative;
  80. boundary="B_3704047720_1342324789"
  81.  
  82. > This message is in MIME format. Since your mail reader does not understand
  83. this format, some or all of this message may not be legible.
  84.  
  85. --B_3704047720_1342324789
  86. Content-type: text/plain;
  87. charset="UTF-8"
  88. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement