Advertisement
wavellan

201808028_PHISHING_SCAM_1

Aug 8th, 2018
238
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.61 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Wed, 8 Aug 2018 11:32:20 -0500
  4. Received: from MBX12C-ORD1.mex08.mlsrvr.com (172.29.9.37) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Wed, 8 Aug 2018 11:32:19 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX12C-ORD1.mex08.mlsrvr.com (172.29.9.37) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Wed, 8 Aug 2018 11:32:19 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [46.161.42.79]
  18. Authentication-Results: smtp32.gate.ord1d.rsapps.net; iprev=pass policy.iprev="46.161.42.79"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="mail.ednawest.com"; dkim=none (message not signed) header.d=none
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: 9d33755c-9b28-11e8-a958-52540099eaf5-1-1
  21. Received: from [46.161.42.79] ([46.161.42.79:56502] helo=mail.ednawest.com)
  22. by smtp32.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id FB/57-07479-21B1B6B5; Wed, 08 Aug 2018 12:32:19 -0400
  25. Date: Wed, 8 Aug 2018 09:32:20 -0700
  26. Subject: REMOVED
  27. From: Felicia <info>
  28. To: REMOVED
  29. Message-ID: <hzbqxpp-83so1c-36@>
  30. MIME-Version: 1.0
  31. X-MS-Exchange-Organization-Network-Message-Id: c4003efb-ae52-4752-297f-08d5fd4c827e
  32. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1442900;0;This mail has
  33. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  34. X-MS-Exchange-Organization-SCL: 5
  35. X-MS-Exchange-Organization-AuthSource: MBX12C-ORD1.mex08.mlsrvr.com
  36. X-MS-Exchange-Organization-AuthAs: Anonymous
  37. Content-type: text/plain;
  38. charset="UTF-8"
  39. Content-transfer-encoding: 7bit
  40.  
  41. It appears that, (REMOVED), 's your password. You may not know me and you are probably wondering why you're getting this e mail, right?
  42.  
  43. actually, I put in place a trojans on the adult videos (adult) web site and guess what happens, you visited this website to have fun (you know what I mean). When you were watching videos, your internet browser started off operating as a RDP (Remote Access) which provided accessibility of your screen and web camera. and then, my software program obtained all of your current contacts from the Messenger, Outlook, Facebook, along with emails.
  44.  
  45. What did I actually do?
  46.  
  47. I created a double-screen video. First part shows the video you are seeing (you have got a good taste haha . . .), and Second part shows the recording of your webcam.
  48.  
  49. exactly what should you do?
  50.  
  51. Well, I think, $11000 is a fair price for your little secret. You will make the payment by Bitcoin (if you do not know this, search "how to purchase bitcoin" in Google).
  52.  
  53. Bitcoin Address: 1CErbU6dx9FfjkiG2Z7Sc1wxxfcrU95z2Y
  54. (It is case sensitive, so copy and paste it)
  55.  
  56. Very important:
  57. You've 1 day in order to make the payment. (I have a special pixel within this e-mail, and at this moment I know you have read this email message). If I do not get the BitCoins, I will certainly send your videos to all of your contacts including family, colleagues, and so forth. Having said that, if I receive the payment, I'll destroy the recording immidiately. If you need evidence, reply with "Yes!" and i'll definitely mail out your video recording to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by responding to this message.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement