Advertisement
wavellan

20211022_PHISHING_SCAM_1

Oct 22nd, 2021
114
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.52 KB | None | 0 0
  1. RackSpace
  2.  
  3.  
  4.  
  5. Dear yourdomainname.com
  6.  
  7.  
  8.  
  9. Password for your account [your e-mail address here] will expire today Friday, October 22, 2021. Kindly use the below to continue using same password to avoid been logged from current session.
  10.  
  11.  
  12.  
  13.  
  14.  
  15. Keep Same Password
  16.  
  17.  
  18.  
  19.  
  20.  
  21. This message is for [your e-mail address here]
  22.  
  23.  
  24. --B_3717742987_1869526032
  25. Content-type: text/html;
  26. charset="UTF-8"
  27. Content-transfer-encoding: quoted-printable
  28.  
  29. <html>
  30. <head>
  31. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  32. <body<P>
  33. <title>Final Reminder [your e-mail address here]</title>
  34. </head>
  35. <body>
  36. <p><span style=3D"COLOR: #000000"><strong><font size=3D"5">RackSpace</font></st=
  37. rong></span></p>
  38. <p>&nbsp;</p>
  39. <p>Dear yourdomainnamehere</p>
  40. <p>&nbsp;</p>
  41. <p>Password for your account [your e-mail address here] will expire today Friday, Oct=
  42. ober 22, 2021. Kindly use the below to continue using same password to avoid=
  43. been logged from current session.</p>
  44. <p>&nbsp;</p>
  45. <p>&nbsp;</p>
  46. <p><a style=3D"FONT-SIZE: 15px; BORDER-TOP: 0px; FONT-FAMILY: 'Segoe UI', 'Se=
  47. goe UI Web (West European)', 'Segoe UI', -apple-system, system-ui, Roboto, '=
  48. Helvetica Neue', sans-serif; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; BO=
  49. RDER-BOTTOM: 0px; COLOR: white; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADDI=
  50. NG-LEFT: 8px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 8px; BACKGROUND-=
  51. COLOR: #2a7efb; font-variant-numeric: inherit; font-variant-east-asian: inhe=
  52. rit; font-stretch: inherit; text-decoration-line: none" href=3D"https://futty-=
  53. gatting.weebly.com/" rel=3D"noopener noreferrer" target=3D"_blank" data-auth=3D"No=
  54. tApplicable" data-linkindex=3D"0">Keep
  55. Same Password</a></p>
  56. <p>&nbsp;</p>
  57. <p>&nbsp;</p>
  58. <p>This message is for [your e-mail address here]</p>
  59. </body>
  60. </html>
  61.  
  62.  
  63. --B_3717742987_1869526032--
  64.  
  65.  
  66.  
  67.  
  68. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  69. MBX05A-IAD3.mex08.mlsrvr.com (172.29.17.23) with Microsoft SMTP Server (TLS)
  70. id 15.0.1497.18 via Mailbox Transport; Fri, 22 Oct 2021 05:07:03 -0400
  71. Received: from MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) by
  72. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  73. id 15.0.1497.2; Fri, 22 Oct 2021 04:07:02 -0500
  74. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  75. MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) with Microsoft SMTP Server (TLS)
  76. id 15.0.1497.2 via Frontend Transport; Fri, 22 Oct 2021 04:07:02 -0500
  77. Return-Path: <[email protected]>
  78. X-Spam-Threshold: 95
  79. X-Spam-Score: 0
  80. X-Spam-Flag: NO
  81. X-Virus-Scanned: OK
  82. X-Orig-To:
  83. X-Originating-Ip: [121.254.168.203]
  84. Authentication-Results: smtp25.gate.ord1d.rsapps.net; iprev=pass policy.iprev="121.254.168.203"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="smtp4.hiworks.co.kr"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=medi-core.co.kr
  85. X-Suspicious-Flag: NO
  86. X-Classification-ID: 6a7d5fda-3317-11ec-877d-52540081550e-1-1
  87. Received: from [121.254.168.203] ([121.254.168.203:52481] helo=smtp4.hiworks.co.kr)
  88. by smtp25.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  89. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  90. id 2B/73-03267-53F72716; Fri, 22 Oct 2021 05:07:02 -0400
  91. Received: (qmail 70208 invoked from network); 22 Oct 2021 18:06:59 +0900
  92. Received: from unknown (HELO hiworks.co.kr) (192.168.10.38)
  93. by 0 (qmail 1.03 + ejcp v14) with SMTP;
  94. 22 Oct 2021 18:06:59 +0900
  95. Received: (qmail 109608 invoked from network); 22 Oct 2021 18:06:58 +0900
  96. Received: from unknown (HELO Reload) ([email protected]@85.203.46.234)
  97. by 0 (qmail 1.03 + ejcp v14) with AES256-GCM-SHA384 encrypted SMTP;
  98. 22 Oct 2021 18:06:58 +0900
  99. X-Authinfo: HIWORKS SMTP authenticated <[email protected]|85.203.46.234|[email protected]|211022180658_4388108761>
  100. From: Rackspace <[email protected]>
  101. Subject: Final Reminder
  102. To: <>
  103. MIME-Version: 1.0
  104. Date: Fri, 22 Oct 2021 09:06:59 +0000
  105. Message-ID: <[email protected]>
  106. X-MS-Exchange-Organization-Network-Message-Id: d2cdd864-b053-4d5d-e433-08d9953b5000
  107. X-MS-Exchange-Organization-AuthSource: MBX06C-ORD1.mex08.mlsrvr.com
  108. X-MS-Exchange-Organization-AuthAs: Anonymous
  109. Content-type: multipart/alternative;
  110. boundary="B_3717742987_1869526032"
  111.  
  112. > This message is in MIME format. Since your mail reader does not understand
  113. this format, some or all of this message may not be legible.
  114.  
  115. --B_3717742987_1869526032
  116. Content-type: text/plain;
  117. charset="UTF-8"
  118. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement