Advertisement
wavellan

20191024_PHISHING_SCAM_1

Oct 24th, 2019
371
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.59 KB | None | 0 0
  1.  
  2. From: James Henderson
  3. Sent: Thursday, October 24, 2019 1:19 AM
  4. To: James Henderson
  5. Subject: €650,000.00 Cashout
  6.  
  7. You have emerged as one of the lucky winners in the Guinness Brewery Program, to receive €650,000.00. Kindly contact [email protected] with your name age and phone number to claim your prize
  8.  
  9.  
  10.  
  11.  
  12. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  13. MBX05B-IAD3.mex08.mlsrvr.com (172.29.17.24) with Microsoft SMTP Server (TLS)
  14. id 15.0.1473.3 via Mailbox Transport; Thu, 24 Oct 2019 05:20:22 -0400
  15. Received: from MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) by
  16. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  17. id 15.0.1473.3; Thu, 24 Oct 2019 04:20:22 -0500
  18. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  19. MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) with Microsoft SMTP Server (TLS)
  20. id 15.0.1473.3 via Frontend Transport; Thu, 24 Oct 2019 04:20:22 -0500
  21. Return-Path: <[email protected]>
  22. X-Spam-Threshold: 95
  23. X-Spam-Score: 0
  24. X-Spam-Flag: NO
  25. X-Virus-Scanned: OK
  26. X-Orig-To:
  27. X-Originating-Ip: [206.227.0.19]
  28. Authentication-Results: smtp37.gate.iad3b.rsapps.net; iprev=pass policy.iprev="206.227.0.19"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="mxin06.kern.org"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=kern.org
  29. X-Suspicious-Flag: NO
  30. X-Classification-ID: 80e4a182-f63f-11e9-8d41-5254002ca64a-1-1
  31. Received: from [206.227.0.19] ([206.227.0.19:47334] helo=mxin06.kern.org)
  32. by smtp37.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  33. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  34. id 17/39-04867-5DC61BD5; Thu, 24 Oct 2019 05:20:22 -0400
  35. Received: from mxin06.kern.org (localhost.localdomain [127.0.0.1])
  36. by mxin06.kern.org (Proxmox) with ESMTP id 2A7D7C2A6F;
  37. Thu, 24 Oct 2019 01:46:25 -0700 (PDT)
  38. Received: from mxout02.kern.org (mxout02.kern.org [206.227.0.26])
  39. by mxin06.kern.org (Proxmox) with ESMTP id F2C58C2A9A;
  40. Thu, 24 Oct 2019 01:46:23 -0700 (PDT)
  41. Received: from MAIL5.kcsos.us (unknown [10.98.40.205])
  42. by mxout02.kern.org (Postfix) with ESMTPS id 77611E05B8;
  43. Thu, 24 Oct 2019 01:46:23 -0700 (PDT)
  44. Received: from MAIL2.kcsos.us ([10.98.40.202]) by MAIL5.kcsos.us ([::1]) with
  45. mapi id 14.03.0415.000; Thu, 24 Oct 2019 01:46:22 -0700
  46. From: James Henderson <[email protected]>
  47. To: James Henderson <[email protected]>
  48. Subject: =?Windows-1252?Q?RE:_=80650,000.00_Cashout?=
  49. Thread-Topic: =?Windows-1252?Q?=80650,000.00_Cashout?=
  50. Thread-Index: AdWKQ7XSEyDeKiahS3uJWcYe4OhJjAAApSKq
  51. Date: Thu, 24 Oct 2019 08:46:21 +0000
  52. Message-ID: <[email protected]>
  53. References: <[email protected]>
  54. In-Reply-To: <[email protected]>
  55. Accept-Language: en-US
  56. Content-Language: en-US
  57. X-MS-Has-Attach:
  58. X-MS-TNEF-Correlator:
  59. MIME-Version: 1.0
  60. X-MS-Exchange-Organization-Network-Message-Id: 191a793c-55bc-4b41-5ca2-08d75863658e
  61. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1544900;0;This mail has
  62. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  63. X-MS-Exchange-Organization-SCL: 0
  64. X-MS-Exchange-Organization-AuthSource: MBX08C-ORD1.mex08.mlsrvr.com
  65. X-MS-Exchange-Organization-AuthAs: Anonymous
  66. Content-type: multipart/alternative;
  67. boundary="B_3654751443_458448382"
  68.  
  69. > This message is in MIME format. Since your mail reader does not understand
  70. this format, some or all of this message may not be legible.
  71.  
  72. --B_3654751443_458448382
  73. Content-type: text/plain;
  74. charset="UTF-8"
  75. Content-transfer-encoding: quoted-printable
  76.  
  77. =20
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement