Advertisement
Guest User

Tesco Phishing

a guest
Feb 20th, 2015
798
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.67 KB | None | 0 0
  1. Return-path: <[email protected]>
  2. Envelope-to: [email protected]
  3. Delivery-date: Fri, 20 Feb 2015 03:32:15 +0000
  4. Received: from mail by mail58.extendcp.com with spamvirus-scanned (Exim 4.80.1)
  5. id 1YOeK4-00070C-Nt
  6. for [email protected]; Fri, 20 Feb 2015 03:32:15 +0000
  7. X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
  8. mail58.extendcp.co.uk
  9. X-Spam-Level: **
  10. X-Spam-Status: No, score=2.7 required=8.0 tests=DKIM_SIGNED,DKIM_VALID,
  11. DKIM_VALID_AU,HTML_IMAGE_RATIO_02,HTML_MESSAGE,URIBL_BLOCKED,URIBL_JP_SURBL
  12. autolearn=disabled version=3.3.1
  13. Received: from cetus.xobnicampaigns.com ([185.31.156.98])
  14. by mail58.extendcp.com with esmtp (Exim 4.80.1)
  15. id 1YOeK4-0006z1-KX
  16. for [email protected]; Fri, 20 Feb 2015 03:32:12 +0000
  17. DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=vipuk; d=vipnotices.presstitlesnews.com;
  18. h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type; [email protected];
  19. bh=G0YBYjlCWzgRTVZNjdIEQkWzL+c=;
  20. b=iW9sodxsmy2j24GVOvWu7uaGWLIFLdZ3GAZPaGyQi+Gl7Vd5CQvb93dLmLppjcbJnPqjxiH1sAr3
  21. SghONdQajuU3aaO3dd+QuPI9KlxwhiNqjqFZD+kZT/YeW/LjY1TDb7yyrQyv8l48ygVq7WIWw+1q
  22. AklXzmveQmpFHIr0aoc=
  23. DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=vipuk; d=vipnotices.presstitlesnews.com;
  24. b=A6xrxoVYltfJ7y44KRLOPWBUk8arwywfJck9udEMmqzinyIV4pB81fsN9v9ydjoGKR3y5dOsMbPK
  25. f5zemuSGOa2AIpCrW36LfoSDiLuDI8KBEgsLZFhYIRN6a3PWY5/JJT6Pxc3dDJwT2eHy78jPwq3c
  26. m3ErsXSZXheUY1hzE/Q=;
  27. Received: from localhost.localdomain (109.71.42.198) by cetus.xobnicampaigns.com id hsqlbo0001g0 for <[email protected]>; Thu, 19 Feb 2015 23:18:30 +0000 (envelope-from <[email protected]>)
  28. Date: Thu, 19 Feb 2015 23:19:49 +0000
  29. From: Tesco <[email protected]>
  30. Reply-to: Tesco <[email protected]>
  31. Subject: Congratulations! You have received a random winning code.
  32. Message-ID: <[email protected]>
  33. X-Priority: 3
  34. X-Mailer: INBSERVICE
  35. X-Complaints-To: [email protected]
  36. List-Unsubscribe: <http://www.inbox-service.com/u.php?p=st/rs/p587/rz/sw/rs>, <mailto:[email protected]?subject=unsubscribe:st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs>
  37. X-MessageID: st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs
  38. X-Report-Abuse: <http://www.inbox-service.com/report_abuse.php?mid=st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs>
  39. X-SMTPAPI: {"unique_args":{"abuse-id":"st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs"}, "category":"campaign"}
  40. MIME-Version: 1.0
  41. Content-Type: multipart/alternative;
  42. boundary="b1_0f32b7b4f38a0de5052ccf4f44e22f7c"
  43.  
  44.  
  45. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c
  46. Content-Type: text/plain; charset = "utf-8"
  47. Content-Transfer-Encoding: quoted-printable
  48.  
  49. Use my winning code! (http://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8=
  50. p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa)=0AIf you do not see images,=
  51. click here (http://www.inbox-service.com/wb.php?p=3Dst/sw/rs/p587/rz/rs) t=
  52. o see the online version=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKY=
  53. mqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0Ahttp://network.adsmar=
  54. ket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrdiaphgo=
  55. oCa Hi ,=0ACongratulations!=0AYou have been chosen to receive a random=0Awi=
  56. nning code:=0AWinning code: 69N45X3=0AWith this winning code, you are the=
  57. =0Apossible lucky winner of a =C2=A3250 shopping=0Avoucher! http://network.=
  58. adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrd=
  59. iaphgooCa=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pk=
  60. o3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa http://network.adsmarket.com/click/jWR=
  61. pmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa http://networ=
  62. k.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Am=
  63. rdiaphgooCa=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5=
  64. pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa Good luck!=0AYour =C2=A3250 Shopping=
  65. Voucher Team http://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5=
  66. pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0Ahttp://network.adsmarket.com/click=
  67. /jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0A=0AYou =
  68. are receiving this email because you subscribed the site itshd.com on 0000-=
  69. 00-00=0Aand we are managing this database.=0AIf you do not wish to receive =
  70. further emails click here (http://www.inbox-service.com/u.php?p=3Dst/rs/p58=
  71. 7/rz/sw/rs/rt) . Thank you.
  72.  
  73. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c
  74. Content-Type: text/html; charset = "utf-8"
  75. Content-Transfer-Encoding: quoted-printable
  76.  
  77. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"=0A "http:=
  78. //www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">=0A<html xmlns=3D"http:=
  79. //www.w3.org/1999/xhtml">=0A <head>=0A <meta http-equiv=3D"Content-Type=
  80. " content=3D"text/html; charset=3Dutf-8" />=0A <meta name=3D"viewport" c=
  81. ontent=3D"width=3Ddevice-width, minimum-scale=3D1.0, maximum-scale=3D1.0" /=
  82. >=0A <title>=0A Tesco Voucher=0A </title>=0A <style type=3D"t=
  83. ext/css">=0A/*<![CDATA[*/=0A #outlook a { padding: 0; } body { width: 10=
  84. 0% !important; -webkit-text-size-adjust: none; -ms-text-size-adjust: none; =
  85. margin: 0; padding: 0; } .ReadMsgBody { width: 100%; } .ExternalClass { wid=
  86. th: 100%; display: block !important; } .ExternalClass * { line-height: 100%=
  87. ; } #backgroundTable { margin: 0; padding: 0; width: 100% !important; } img=
  88. { outline: none; -ms-interpolation-mode: bicubic; } a img { border: none; =
  89. }=0A /*]]>*/=0A </style>=0A </head>=0A <body style=3D"width: 100% !=
  90. important;-webkit-text-size-adjust: none;-ms-text-size-adjust: none;margin:=
  91. 0;padding: 0;">=0A <!--start background table-->=0A <table width=3D"=
  92. 100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" id=3D"backgroundTabl=
  93. e" style=3D"margin: 0;padding: 0;width: 100% !important">=0A <tr>=0A =
  94. <td align=3D"center">=0A <table width=3D"100%" border=3D"0" =
  95. cellspacing=3D"0" cellpadding=3D"0">=0A <tr>=0A <td=
  96. height=3D"36" align=3D"center" bgcolor=3D"#FFFFFF" style=3D"font-family:Ar=
  97. ial, Helvetica, sans-serif; color:#888; font-size:11px;">=0A =
  98. <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//ht=
  99. tp%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3ua=
  100. iWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank" style=3D"font-family:Ar=
  101. ial, Helvetica, sans-serif; color:#888; font-size:11px; text-decoration:non=
  102. e; font-weight:bold;">Use my winning code!</a><br />=0A If y=
  103. ou do not see images, click <a href=3D"http://www.inbox-service.com/wb.php?=
  104. p=3Dst/sw/rs/p587/rz/rs" target=3D"_self" style=3D"font-family:Arial, Helve=
  105. tica, sans-serif; color:#888; font-size:11px;">here</a> to see the online v=
  106. ersion=0A </td>=0A </tr>=0A </table><br />=
  107. =0A <table width=3D"572" border=3D"0" cellpadding=3D"0" cellspacin=
  108. g=3D"0" align=3D"center">=0A <tr>=0A <td colspan=3D=
  109. "3">=0A <a href=3D"http://www.inbox-service.com/tl.php?p=3Ds=
  110. t/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZ=
  111. iKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><=
  112. img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/01.jpg"=
  113. width=3D"572" border=3D"0" height=3D"182" style=3D"display:block;" alt=3D"=
  114. Shopping Voucher" /></a>=0A </td>=0A </tr>=0A =
  115. <tr>=0A <td width=3D"278">=0A <a href=3D"=
  116. http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fn=
  117. etwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJ=
  118. kGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.d=
  119. e/ftp/NL/images_green_voucher/img/02.jpg" width=3D"278" border=3D"0" height=
  120. =3D"176" style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A =
  121. </td>=0A <td width=3D"286" bgcolor=3D"#FFFFFF">=0A =
  122. <span style=3D"font-family: Arial; font-weight:bold; font-size: =
  123. 10pt; color:#00162E;">Hi ,</span><br />=0A <span style=3D"fo=
  124. nt-family: Arial; font-weight:bold; font-size: 16pt; color:#00162E;">Congra=
  125. tulations!</span><br />=0A <span style=3D"font-family: Arial=
  126. ; font-weight:normal; font-size: 10pt; color:#00162E;">You have been chosen=
  127. to receive a random<br />=0A winning code:<br /></span> <sp=
  128. an style=3D"font-family: Arial; font-weight:bold; font-size: 17pt; color:#0=
  129. 0162E;">Winning code: 69N45X3</span><br />=0A <span style=3D=
  130. "font-family: Arial; font-weight:normal; font-size: 10pt; color:#00162E;">W=
  131. ith this winning code, you are the<br />=0A possible lucky w=
  132. inner of a =C2=A3250 shopping<br />=0A voucher!</span>=0A =
  133. </td>=0A <td width=3D"8">=0A <a href=
  134. =3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F=
  135. %2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kj=
  136. e5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontr=
  137. ol.de/ftp/NL/images_green_voucher/img/03.jpg" width=3D"8" border=3D"0" heig=
  138. ht=3D"176" style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A =
  139. </td>=0A </tr>=0A <tr>=0A <td w=
  140. idth=3D"278">=0A <a href=3D"http://www.inbox-service.com/tl.=
  141. php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2Fj=
  142. WRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"=
  143. _blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/im=
  144. g/04.jpg" width=3D"278" border=3D"0" height=3D"74" style=3D"display:block;"=
  145. alt=3D"Shopping Voucher" /></a>=0A </td>=0A <td =
  146. width=3D"286" bgcolor=3D"#FFFFFF">=0A <a href=3D"http://www.=
  147. inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsm=
  148. arket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrd=
  149. iaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/im=
  150. ages_green_voucher/img/button.jpg" width=3D"286" border=3D"0" height=3D"74"=
  151. style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A <=
  152. /td>=0A <td width=3D"8">=0A <a href=3D"http://w=
  153. ww.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.a=
  154. dsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52A=
  155. mrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL=
  156. /images_green_voucher/img/05.jpg" width=3D"8" border=3D"0" height=3D"74" st=
  157. yle=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A </td=
  158. >=0A </tr>=0A <tr>=0A <td width=3D"278">=
  159. =0A <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw=
  160. /rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYm=
  161. qYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img =
  162. src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/06.jpg" wid=
  163. th=3D"278" border=3D"0" height=3D"33" style=3D"display:block;" alt=3D"Shopp=
  164. ing Voucher" /></a>=0A </td>=0A <td width=3D"286"=
  165. bgcolor=3D"#52B608" style=3D"padding-left:10px;">=0A <span =
  166. style=3D"font-family: Arial; font-weight:normal; font-size: 10px; color:#00=
  167. 162E;"><b>Good luck!</b><br />=0A Your =C2=A3250 Shopping Vo=
  168. ucher Team</span>=0A </td>=0A <td width=3D"8" bgc=
  169. olor=3D"#52B608">=0A <a href=3D"http://www.inbox-service.com=
  170. /tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick=
  171. %2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=
  172. =3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_vouche=
  173. r/img/07.jpg" width=3D"8" border=3D"0" height=3D"33" style=3D"display:block=
  174. ;" alt=3D"Shopping Voucher" /></a>=0A </td>=0A </tr=
  175. >=0A <tr>=0A <td width=3D"572" colspan=3D"3">=0A =
  176. <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p5=
  177. 87/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6=
  178. w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D=
  179. "https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/08.jpg" width=3D"=
  180. 572" border=3D"0" height=3D"27" style=3D"display:block;" alt=3D"Shopping Vo=
  181. ucher" /></a>=0A </td>=0A </tr>=0A </table=
  182. ><br />=0A <br />=0A <br />=0A <br />=0A =
  183. <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
  184. =0A <tr>=0A <td height=3D"36" align=3D"center" styl=
  185. e=3D"font-family:Arial, Helvetica, sans-serif; color:#888; font-size:11px;"=
  186. >=0A You are receiving this email because you subscribed the=
  187. site itshd.com on 0000-00-00<br />=0A and we are managing t=
  188. his database.<br />=0A If you do not wish to receive further=
  189. emails <a href=3D"http://www.inbox-service.com/u.php?p=3Dst/rs/p587/rz/sw/=
  190. rs/rt" target=3D"_blank" style=3D"font-family:Arial, Helvetica, sans-serif;=
  191. color:#888; font-size:11px;">click here</a>. Thank you.=0A </=
  192. td>=0A </tr>=0A </table>=0A </td>=0A </tr>=
  193. =0A </table>=0A =0A<img src=3D"http://www.inbox-service.com/to.php?p=3D=
  194. st/sw/rs/p587/rz/rs" width=3D"5" height=3D"2" alt=3D".">=0A=0A</body>=0A</h=
  195. tml>
  196.  
  197.  
  198. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement