Advertisement
wavellan

20180706_PHISHING_SCAM_1

Jul 6th, 2018
299
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.32 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Fri, 6 Jul 2018 14:01:18 -0500
  4. Received: from MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Fri, 6 Jul 2018 14:01:17 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Fri, 6 Jul 2018 14:01:17 -0500
  10. Return-Path: <jaroslaw@royaljob.pl>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [77.79.246.210]
  18. Authentication-Results: smtp29.gate.ord1d.rsapps.net; iprev=pass policy.iprev="77.79.246.210"; spf=pass smtp.mailfrom="jaroslaw@royaljob.pl" smtp.helo="p30.progreso.pl"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=royaljob.pl
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: f5a59d58-814e-11e8-91e7-525400f257a9-1-1
  21. Received: from [77.79.246.210] ([77.79.246.210:52723] helo=p30.progreso.pl)
  22. by smtp29.gate.ord1d.rsapps.net (envelope-from <jaroslaw@royaljob.pl>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id A8/79-11894-D7CBF3B5; Fri, 06 Jul 2018 15:01:17 -0400
  25. Received: (qmail 6550 invoked from network); 6 Jul 2018 19:01:03 -0000
  26. Message-ID: <A8.79.11894.D7CBF3B5@smtp29.gate.ord1d.rsapps.net>
  27. Received: from unknown (HELO ?199.168.137.151?) (jaroslaw@royaljob.pl@127.0.0.2)
  28. by p30.progreso.pl with ESMTPA; 6 Jul 2018 19:01:03 -0000
  29. MIME-Version: 1.0
  30. Content-Description: Mail message body
  31. Subject: Investment Opportunity From Garry Hoffman!
  32. To: Recipients <jaroslaw@royaljob.pl>
  33. From: Garry Hoffman <jaroslaw@royaljob.pl>
  34. Date: Fri, 6 Jul 2018 10:01:03 -0700
  35. Reply-To: <garrynhofffman@gmail.com>
  36. X-MS-Exchange-Organization-Network-Message-Id: 0acb6a81-502a-4f1e-4ad4-08d5e372dace
  37. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1436100;0;This mail has
  38. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  39. X-MS-Exchange-Organization-SCL: 5
  40. X-MS-Exchange-Organization-AuthSource: MBX08C-ORD1.mex08.mlsrvr.com
  41. X-MS-Exchange-Organization-AuthAs: Anonymous
  42. Content-type: text/plain;
  43. charset="UTF-8"
  44. Content-transfer-encoding: 7bit
  45.  
  46. Greetings,
  47.  
  48. My name is Major Garry Hoffman. I am an American soldier, presently in Afghanistan for the training, advising the Afghan forces and also helping in stabilizing the country against security challenges. With a very desperate need for assistance, I have decided to contact you for your kind assistance to move the sum of (US$38,000,000.00) Thirty eight Million United States Dollars to you if I can be assured that my share will be safe in your care until I complete my service.
  49.  
  50. Some money in various currencies was discovered in boxes at a farmhouse during a rescue operation we conducted in one of the attacks by the terrorists and it was agreed by my colleagues and I that some part of this money be shared among us. The above figure was given to me as my share, and to conceal this kind of money became a problem for me, so with the help of a British doctor working with Red Cross, I was able to get the package out to a safe location entirely out of trouble spot. he does not know the real content of the package, and believes that it belongs to a British /American medical doctor who died in a raid here in Afghanistan, and before giving up, trusted me to hand over the package to his Family.
  51.  
  52. I have now found a much secured way of getting the package out of Afghanistan to you for pick up and I will discuss this with you when I am sure that you are willing to assist me. I am ready to compensate you with 30% of the $38 million USD for your assistance.
  53.  
  54. I do not know how long we will remain here, and I have been shot, wounded and survived two suicide bomb attacks by the special grace of God, this and other reasons I will mention later has prompted me to reach out for help.
  55.  
  56. Please contact me as soon as possible with the following details:
  57.  
  58. Full Name:
  59. Full Address:
  60. Tel/cell numbers:
  61. Occupation:
  62.  
  63. God Bless you as I look forward to your positive response.
  64.  
  65. Truly yours,
  66.  
  67. Major Garry Hoffman.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement