Advertisement
Guest User

Tesco Phishing

a guest
Feb 20th, 2015
762
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.67 KB | None | 0 0
  1. Return-path: <bounce-7592-239123744-1472-248@inbox-service.com>
  2. Envelope-to: jamie@hackteam.co.uk
  3. Delivery-date: Fri, 20 Feb 2015 03:32:15 +0000
  4. Received: from mail by mail58.extendcp.com with spamvirus-scanned (Exim 4.80.1)
  5. id 1YOeK4-00070C-Nt
  6. for jamie@hackteam.co.uk; Fri, 20 Feb 2015 03:32:15 +0000
  7. X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
  8. mail58.extendcp.co.uk
  9. X-Spam-Level: **
  10. X-Spam-Status: No, score=2.7 required=8.0 tests=DKIM_SIGNED,DKIM_VALID,
  11. DKIM_VALID_AU,HTML_IMAGE_RATIO_02,HTML_MESSAGE,URIBL_BLOCKED,URIBL_JP_SURBL
  12. autolearn=disabled version=3.3.1
  13. Received: from cetus.xobnicampaigns.com ([185.31.156.98])
  14. by mail58.extendcp.com with esmtp (Exim 4.80.1)
  15. id 1YOeK4-0006z1-KX
  16. for jamie@hackteam.co.uk; Fri, 20 Feb 2015 03:32:12 +0000
  17. DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=vipuk; d=vipnotices.presstitlesnews.com;
  18. h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type; i=info@vipnotices.presstitlesnews.com;
  19. bh=G0YBYjlCWzgRTVZNjdIEQkWzL+c=;
  20. b=iW9sodxsmy2j24GVOvWu7uaGWLIFLdZ3GAZPaGyQi+Gl7Vd5CQvb93dLmLppjcbJnPqjxiH1sAr3
  21. SghONdQajuU3aaO3dd+QuPI9KlxwhiNqjqFZD+kZT/YeW/LjY1TDb7yyrQyv8l48ygVq7WIWw+1q
  22. AklXzmveQmpFHIr0aoc=
  23. DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=vipuk; d=vipnotices.presstitlesnews.com;
  24. b=A6xrxoVYltfJ7y44KRLOPWBUk8arwywfJck9udEMmqzinyIV4pB81fsN9v9ydjoGKR3y5dOsMbPK
  25. f5zemuSGOa2AIpCrW36LfoSDiLuDI8KBEgsLZFhYIRN6a3PWY5/JJT6Pxc3dDJwT2eHy78jPwq3c
  26. m3ErsXSZXheUY1hzE/Q=;
  27. Received: from localhost.localdomain (109.71.42.198) by cetus.xobnicampaigns.com id hsqlbo0001g0 for <jamie@hackteam.co.uk>; Thu, 19 Feb 2015 23:18:30 +0000 (envelope-from <bounce-7592-239123744-1472-248@inbox-service.com>)
  28. Date: Thu, 19 Feb 2015 23:19:49 +0000
  29. To: "jamie@hackteam.co.uk" <jamie@hackteam.co.uk>
  30. From: Tesco <info@vipnotices.presstitlesnews.com>
  31. Reply-to: Tesco <info@vipnotices.presstitlesnews.com>
  32. Subject: Congratulations! You have received a random winning code.
  33. Message-ID: <0f32b7b4f38a0de5052ccf4f44e22f7c@localhost.localdomain>
  34. X-Priority: 3
  35. X-Mailer: INBSERVICE
  36. X-Complaints-To: abuse@inbox-service.com
  37. List-Unsubscribe: <http://www.inbox-service.com/u.php?p=st/rs/p587/rz/sw/rs>, <mailto:fbl@inbox-service.com?subject=unsubscribe:st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs>
  38. X-MessageID: st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs
  39. X-Report-Abuse: <http://www.inbox-service.com/report_abuse.php?mid=st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs>
  40. X-SMTPAPI: {"unique_args":{"abuse-id":"st-p587-amFtaWVAaGFja3RlYW0uY28udWs%3D-rz-rt-rs"}, "category":"campaign"}
  41. MIME-Version: 1.0
  42. Content-Type: multipart/alternative;
  43. boundary="b1_0f32b7b4f38a0de5052ccf4f44e22f7c"
  44.  
  45.  
  46. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c
  47. Content-Type: text/plain; charset = "utf-8"
  48. Content-Transfer-Encoding: quoted-printable
  49.  
  50. Use my winning code! (http://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8=
  51. p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa)=0AIf you do not see images,=
  52. click here (http://www.inbox-service.com/wb.php?p=3Dst/sw/rs/p587/rz/rs) t=
  53. o see the online version=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKY=
  54. mqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0Ahttp://network.adsmar=
  55. ket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrdiaphgo=
  56. oCa Hi ,=0ACongratulations!=0AYou have been chosen to receive a random=0Awi=
  57. nning code:=0AWinning code: 69N45X3=0AWith this winning code, you are the=
  58. =0Apossible lucky winner of a =C2=A3250 shopping=0Avoucher! http://network.=
  59. adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrd=
  60. iaphgooCa=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pk=
  61. o3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa http://network.adsmarket.com/click/jWR=
  62. pmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa http://networ=
  63. k.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Am=
  64. rdiaphgooCa=0Ahttp://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5=
  65. pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa Good luck!=0AYour =C2=A3250 Shopping=
  66. Voucher Team http://network.adsmarket.com/click/jWRpmWKcqZiKYmqYX8p6w4iQa5=
  67. pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0Ahttp://network.adsmarket.com/click=
  68. /jWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa=0A=0AYou =
  69. are receiving this email because you subscribed the site itshd.com on 0000-=
  70. 00-00=0Aand we are managing this database.=0AIf you do not wish to receive =
  71. further emails click here (http://www.inbox-service.com/u.php?p=3Dst/rs/p58=
  72. 7/rz/sw/rs/rt) . Thank you.
  73.  
  74. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c
  75. Content-Type: text/html; charset = "utf-8"
  76. Content-Transfer-Encoding: quoted-printable
  77.  
  78. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"=0A "http:=
  79. //www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">=0A<html xmlns=3D"http:=
  80. //www.w3.org/1999/xhtml">=0A <head>=0A <meta http-equiv=3D"Content-Type=
  81. " content=3D"text/html; charset=3Dutf-8" />=0A <meta name=3D"viewport" c=
  82. ontent=3D"width=3Ddevice-width, minimum-scale=3D1.0, maximum-scale=3D1.0" /=
  83. >=0A <title>=0A Tesco Voucher=0A </title>=0A <style type=3D"t=
  84. ext/css">=0A/*<![CDATA[*/=0A #outlook a { padding: 0; } body { width: 10=
  85. 0% !important; -webkit-text-size-adjust: none; -ms-text-size-adjust: none; =
  86. margin: 0; padding: 0; } .ReadMsgBody { width: 100%; } .ExternalClass { wid=
  87. th: 100%; display: block !important; } .ExternalClass * { line-height: 100%=
  88. ; } #backgroundTable { margin: 0; padding: 0; width: 100% !important; } img=
  89. { outline: none; -ms-interpolation-mode: bicubic; } a img { border: none; =
  90. }=0A /*]]>*/=0A </style>=0A </head>=0A <body style=3D"width: 100% !=
  91. important;-webkit-text-size-adjust: none;-ms-text-size-adjust: none;margin:=
  92. 0;padding: 0;">=0A <!--start background table-->=0A <table width=3D"=
  93. 100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" id=3D"backgroundTabl=
  94. e" style=3D"margin: 0;padding: 0;width: 100% !important">=0A <tr>=0A =
  95. <td align=3D"center">=0A <table width=3D"100%" border=3D"0" =
  96. cellspacing=3D"0" cellpadding=3D"0">=0A <tr>=0A <td=
  97. height=3D"36" align=3D"center" bgcolor=3D"#FFFFFF" style=3D"font-family:Ar=
  98. ial, Helvetica, sans-serif; color:#888; font-size:11px;">=0A =
  99. <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//ht=
  100. tp%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3ua=
  101. iWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank" style=3D"font-family:Ar=
  102. ial, Helvetica, sans-serif; color:#888; font-size:11px; text-decoration:non=
  103. e; font-weight:bold;">Use my winning code!</a><br />=0A If y=
  104. ou do not see images, click <a href=3D"http://www.inbox-service.com/wb.php?=
  105. p=3Dst/sw/rs/p587/rz/rs" target=3D"_self" style=3D"font-family:Arial, Helve=
  106. tica, sans-serif; color:#888; font-size:11px;">here</a> to see the online v=
  107. ersion=0A </td>=0A </tr>=0A </table><br />=
  108. =0A <table width=3D"572" border=3D"0" cellpadding=3D"0" cellspacin=
  109. g=3D"0" align=3D"center">=0A <tr>=0A <td colspan=3D=
  110. "3">=0A <a href=3D"http://www.inbox-service.com/tl.php?p=3Ds=
  111. t/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZ=
  112. iKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><=
  113. img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/01.jpg"=
  114. width=3D"572" border=3D"0" height=3D"182" style=3D"display:block;" alt=3D"=
  115. Shopping Voucher" /></a>=0A </td>=0A </tr>=0A =
  116. <tr>=0A <td width=3D"278">=0A <a href=3D"=
  117. http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fn=
  118. etwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJ=
  119. kGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.d=
  120. e/ftp/NL/images_green_voucher/img/02.jpg" width=3D"278" border=3D"0" height=
  121. =3D"176" style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A =
  122. </td>=0A <td width=3D"286" bgcolor=3D"#FFFFFF">=0A =
  123. <span style=3D"font-family: Arial; font-weight:bold; font-size: =
  124. 10pt; color:#00162E;">Hi ,</span><br />=0A <span style=3D"fo=
  125. nt-family: Arial; font-weight:bold; font-size: 16pt; color:#00162E;">Congra=
  126. tulations!</span><br />=0A <span style=3D"font-family: Arial=
  127. ; font-weight:normal; font-size: 10pt; color:#00162E;">You have been chosen=
  128. to receive a random<br />=0A winning code:<br /></span> <sp=
  129. an style=3D"font-family: Arial; font-weight:bold; font-size: 17pt; color:#0=
  130. 0162E;">Winning code: 69N45X3</span><br />=0A <span style=3D=
  131. "font-family: Arial; font-weight:normal; font-size: 10pt; color:#00162E;">W=
  132. ith this winning code, you are the<br />=0A possible lucky w=
  133. inner of a =C2=A3250 shopping<br />=0A voucher!</span>=0A =
  134. </td>=0A <td width=3D"8">=0A <a href=
  135. =3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F=
  136. %2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kj=
  137. e5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontr=
  138. ol.de/ftp/NL/images_green_voucher/img/03.jpg" width=3D"8" border=3D"0" heig=
  139. ht=3D"176" style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A =
  140. </td>=0A </tr>=0A <tr>=0A <td w=
  141. idth=3D"278">=0A <a href=3D"http://www.inbox-service.com/tl.=
  142. php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2Fj=
  143. WRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"=
  144. _blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/im=
  145. g/04.jpg" width=3D"278" border=3D"0" height=3D"74" style=3D"display:block;"=
  146. alt=3D"Shopping Voucher" /></a>=0A </td>=0A <td =
  147. width=3D"286" bgcolor=3D"#FFFFFF">=0A <a href=3D"http://www.=
  148. inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsm=
  149. arket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52Amrd=
  150. iaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/im=
  151. ages_green_voucher/img/button.jpg" width=3D"286" border=3D"0" height=3D"74"=
  152. style=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A <=
  153. /td>=0A <td width=3D"8">=0A <a href=3D"http://w=
  154. ww.inbox-service.com/tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.a=
  155. dsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52A=
  156. mrdiaphgooCa" target=3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL=
  157. /images_green_voucher/img/05.jpg" width=3D"8" border=3D"0" height=3D"74" st=
  158. yle=3D"display:block;" alt=3D"Shopping Voucher" /></a>=0A </td=
  159. >=0A </tr>=0A <tr>=0A <td width=3D"278">=
  160. =0A <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw=
  161. /rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYm=
  162. qYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img =
  163. src=3D"https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/06.jpg" wid=
  164. th=3D"278" border=3D"0" height=3D"33" style=3D"display:block;" alt=3D"Shopp=
  165. ing Voucher" /></a>=0A </td>=0A <td width=3D"286"=
  166. bgcolor=3D"#52B608" style=3D"padding-left:10px;">=0A <span =
  167. style=3D"font-family: Arial; font-weight:normal; font-size: 10px; color:#00=
  168. 162E;"><b>Good luck!</b><br />=0A Your =C2=A3250 Shopping Vo=
  169. ucher Team</span>=0A </td>=0A <td width=3D"8" bgc=
  170. olor=3D"#52B608">=0A <a href=3D"http://www.inbox-service.com=
  171. /tl.php?p=3Dst/sw/rs/p587/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick=
  172. %2FjWRpmWKcqZiKYmqYX8p6w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=
  173. =3D"_blank"><img src=3D"https://www.rlcontrol.de/ftp/NL/images_green_vouche=
  174. r/img/07.jpg" width=3D"8" border=3D"0" height=3D"33" style=3D"display:block=
  175. ;" alt=3D"Shopping Voucher" /></a>=0A </td>=0A </tr=
  176. >=0A <tr>=0A <td width=3D"572" colspan=3D"3">=0A =
  177. <a href=3D"http://www.inbox-service.com/tl.php?p=3Dst/sw/rs/p5=
  178. 87/rz/rs//http%3A%2F%2Fnetwork.adsmarket.com%2Fclick%2FjWRpmWKcqZiKYmqYX8p6=
  179. w4iQa5pko3uaiWeYm2Kje5yJkGqZX52AmrdiaphgooCa" target=3D"_blank"><img src=3D=
  180. "https://www.rlcontrol.de/ftp/NL/images_green_voucher/img/08.jpg" width=3D"=
  181. 572" border=3D"0" height=3D"27" style=3D"display:block;" alt=3D"Shopping Vo=
  182. ucher" /></a>=0A </td>=0A </tr>=0A </table=
  183. ><br />=0A <br />=0A <br />=0A <br />=0A =
  184. <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=
  185. =0A <tr>=0A <td height=3D"36" align=3D"center" styl=
  186. e=3D"font-family:Arial, Helvetica, sans-serif; color:#888; font-size:11px;"=
  187. >=0A You are receiving this email because you subscribed the=
  188. site itshd.com on 0000-00-00<br />=0A and we are managing t=
  189. his database.<br />=0A If you do not wish to receive further=
  190. emails <a href=3D"http://www.inbox-service.com/u.php?p=3Dst/rs/p587/rz/sw/=
  191. rs/rt" target=3D"_blank" style=3D"font-family:Arial, Helvetica, sans-serif;=
  192. color:#888; font-size:11px;">click here</a>. Thank you.=0A </=
  193. td>=0A </tr>=0A </table>=0A </td>=0A </tr>=
  194. =0A </table>=0A =0A<img src=3D"http://www.inbox-service.com/to.php?p=3D=
  195. st/sw/rs/p587/rz/rs" width=3D"5" height=3D"2" alt=3D".">=0A=0A</body>=0A</h=
  196. tml>
  197.  
  198.  
  199. --b1_0f32b7b4f38a0de5052ccf4f44e22f7c--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement