API tools faq
paste
Advertisement
wavellan

20210816_PHISHING_SCAM_1

wavellan
Aug 16th, 2021
141
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.01 KB | None | 0 0
raw download clone embed print report
  1. ------------------------------------------------------------------------------
  2.  
  3. WARNING: Your email security system has determined the message below may be a potential threat.
  4.  
  5. It may indicate the recipient has won a lottery and must pay to receive winnings.
  6.  
  7. If you do not know the sender or cannot verify the integrity of the message, please do not respond or click on links in the message. Depending on the security settings, clickable URLs may have been modified to provide additional security.
  8.  
  9. ------------------------------------------------------------------------------
  10. ------------ Suspicious threat disclaimer ends here ------------
  11.  
  12. Attn Email Bearer,
  13.  
  14. Good day to you and hope this email meets you in good spirit and mood, I have good news for you from SHIV NADAR PHILANTHROPIST FOUNDATION. The Shiv Nadar Foundation was established in 1994 by Shiv Nadar, Founder, HCL infoSystems - a US$ 10 billion leading global enterprise. The Foundation is committed to the creation of a more equitable, merit-based society by empowering individuals through transformational education to bridge the socio-economic divide. To that purpose the Foundation has established institutions and programs in the underdeveloped disciplinary areas in India and the rest of the world related to rural and urban education and art.
  15.  
  16. The foundation/founder has indeed been a great Philanthropist to this generation and is truly committed to "giving while living," We are pleased to inform you that you are one of the lucky people to benefit and receive $ 1,500,000.00 USD from our foundation's ongoing goodwill project, donations program. This is part of the foundation Goodwill project to cushion the effect of COVID19 that has become a nightmare in the world.
  17.  
  18. Your email was randomly selected in a Geo-economy zoning system and you're one of the lucky winners for this Grant, Please contact us for further information regarding this Goodwill grant.
  19.  
  20. Sincerely,
  21. Sunita Pooja Sikka
  22. Manager, Corporate Communication
  23. HCL Corporation & Shiv Nadar Foundation
  24.  
  25.  
  26.  
  27.  
  28. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  29. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  30. id 15.0.1497.2 via Mailbox Transport; Mon, 16 Aug 2021 07:47:06 -0500
  31. Received: from MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) by
  32. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  33. id 15.0.1497.2; Mon, 16 Aug 2021 07:47:05 -0500
  34. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  35. MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) with Microsoft SMTP Server (TLS)
  36. id 15.0.1497.2 via Frontend Transport; Mon, 16 Aug 2021 07:47:05 -0500
  37. Return-Path: <[email protected]>
  38. X-Spam-Threshold: 95
  39. X-Spam-Score: 100
  40. Precedence: junk
  41. X-Spam-Flag: YES
  42. X-Virus-Scanned: OK
  43. X-Orig-To:
  44. X-Originating-Ip: [198.174.211.168]
  45. Authentication-Results: smtp18.gate.ord1d.rsapps.net; iprev=pass policy.iprev="198.174.211.168"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="na-nb-spam-01.nystromcounseling.com"; dkim=none (message not signed) header.d=none; dmarc=pass (p=none; dis=none) header.from=nystromcounseling.com
  46. X-Suspicious-Flag: NO
  47. X-Classification-ID: 0e3cc690-fe90-11eb-be00-5254005167a7-1-1
  48. Received: from [198.174.211.168] ([198.174.211.168:16536] helo=NA-NB-SPAM-01.nystromcounseling.com)
  49. by smtp18.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  50. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  51. id 59/BF-02344-84E5A116; Mon, 16 Aug 2021 08:47:05 -0400
  52. X-IronPort-Outbreak-Delimiter: ------------ Suspicious threat disclaimer ends here ------------
  53. X-IronPort-Original-Subject: HCL INFOSYSTEMS
  54. X-IronPort-Redirect-Domain: secure-web.cisco.com/%(auth)s/%(url)s
  55. Subject: [SUSPICIOUS MESSAGE] HCL INFOSYSTEMS
  56. X-IronPort-AV: E=Sophos;i="5.84,324,1620709200";
  57. d="scan'208";a="12230237"
  58. Received: from exchange16.nal.loc ([10.62.50.93])
  59. by NA-NB-SPAM-01.nystromcounseling.com with ESMTP; 14 Aug 2021 11:14:37 -0500
  60. Received: from EXCHANGE16.nal.loc (10.62.50.93) by EXCHANGE16.nal.loc
  61. (10.62.50.93) with Microsoft SMTP Server (version=TLS1_2,
  62. cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12; Sat, 14 Aug
  63. 2021 10:53:58 -0500
  64. Received: from [95.211.137.238] (95.211.137.238) by EXCHANGE16.nal.loc
  65. (10.62.50.93) with Microsoft SMTP Server (version=TLS1_0,
  66. cipher=TLS_RSA_WITH_AES_256_CBC_SHA) id 15.1.2242.12 via Frontend Transport;
  67. Sat, 14 Aug 2021 10:53:56 -0500
  68. MIME-Version: 1.0
  69. Content-Description: Mail message body
  70. To: Recipients <[email protected]>
  71. From: Sunita Pooja Sikka <[email protected]>
  72. Date: Sat, 14 Aug 2021 08:53:51 -0700
  73. Reply-To: <[email protected]>
  74. Message-ID: <[email protected]>
  75. X-MS-Exchange-Organization-Network-Message-Id: 66fad4ec-1151-4f70-bc39-08d960b3f3ef
  76. X-MS-Exchange-Organization-SCL: 5
  77. X-MS-Exchange-Organization-AuthSource: MBX02C-ORD1.mex08.mlsrvr.com
  78. X-MS-Exchange-Organization-AuthAs: Anonymous
  79. Content-type: text/plain;
  80. charset="UTF-8"
  81. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!