Advertisement
wavellan

20180303_PHISHING_SCAM_1

Mar 3rd, 2018
412
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.06 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1293.2 via Mailbox Transport; Sat, 3 Mar 2018 13:21:39 -0600
  4. Received: from MBX12C-ORD1.mex08.mlsrvr.com (172.29.9.37) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1293.2; Sat, 3 Mar 2018 13:21:39 -0600
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX12C-ORD1.mex08.mlsrvr.com (172.29.9.37) with Microsoft SMTP Server (TLS)
  9. id 15.0.1293.2 via Frontend Transport; Sat, 3 Mar 2018 13:21:38 -0600
  10. Return-Path: <info@safeglasstechnologies.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 0
  13. X-Spam-Flag: NO
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [67.225.195.119]
  17. Authentication-Results: smtp24.gate.ord1c.rsapps.net; iprev=pass policy.iprev="67.225.195.119"; spf=neutral smtp.mailfrom="info@safeglasstechnologies.com" smtp.helo="www12.qth.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=safeglasstechnologies.com
  18. X-Classification-ID: 18587710-1f18-11e8-ba5f-0026b94accf9-1-1
  19. Received: from [67.225.195.119] ([67.225.195.119:59875] helo=www12.qth.com)
  20. by smtp24.gate.ord1c.rsapps.net (envelope-from <info@safeglasstechnologies.com>)
  21. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  22. id EA/09-11306-2C5FA9A5; Sat, 03 Mar 2018 14:21:38 -0500
  23. Received: from [157.48.37.232] (port=42475 helo=31.207.47.45)
  24. by www12.qth.com with esmtpa (Exim 4.89_1)
  25. (envelope-from <info@safeglasstechnologies.com>)
  26. id 1esCiu-004IuZ-Oj
  27. for REMOVED; Sat, 03 Mar 2018 13:21:38 -0600
  28. Message-ID: <EA.09.11306.2C5FA9A5@smtp24.gate.ord1c.rsapps.net>
  29. From: alex.greene10 <info@safeglasstechnologies.com>
  30. To: REMOVED
  31. Subject:
  32. Date: Sat, 3 Mar 2018 23:21:13 +0400
  33. MessageID: <E8125892C0143B18C4C1883501F5A05C@safeglasstechnologies.com>
  34. MIME-Version: 1.0
  35. X-Mailer: Microsoft Outlook 15.0
  36. Content-Language: en-us
  37. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  38. X-AntiAbuse: Primary Hostname - www12.qth.com
  39. X-AntiAbuse: Original Domain - REMOVED
  40. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  41. X-AntiAbuse: Sender Address Domain - safeglasstechnologies.com
  42. X-Get-Message-Sender-Via: www12.qth.com: authenticated_id: info@safeglasstechnologies.com
  43. X-Authenticated-Sender: www12.qth.com: info@safeglasstechnologies.com
  44. X-MS-Exchange-Organization-Network-Message-Id: 4ba44dc5-e718-4bc8-e2ae-08d5813bfd11
  45. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1410500;0;This mail has
  46. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  47. X-MS-Exchange-Organization-SCL: 0
  48. X-MS-Exchange-Organization-AuthSource: MBX12C-ORD1.mex08.mlsrvr.com
  49. X-MS-Exchange-Organization-AuthAs: Anonymous
  50. Content-type: multipart/alternative;
  51. boundary="B_3602921268_1436068934"
  52.  
  53. > This message is in MIME format. Since your mail reader does not understand
  54. this format, some or all of this message may not be legible.
  55.  
  56. --B_3602921268_1436068934
  57. Content-type: text/plain;
  58. charset="UTF-8"
  59. Content-transfer-encoding: 7bit
  60.  
  61. hiya REMOVED
  62.  
  63.  
  64. https://goo.gl/ZPbZ84
  65.  
  66. Thanks!
  67.  
  68.  
  69. --B_3602921268_1436068934
  70. Content-type: text/html;
  71. charset="UTF-8"
  72. Content-transfer-encoding: quoted-printable
  73.  
  74. <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
  75. t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
  76. =3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
  77. /TR/REC-html40">
  78. <head>
  79. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  80. <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
  81. <style><!--
  82. /* Font Definitions */
  83. @font-face
  84. {font-family:"Cambria Math";
  85. panose-1:2 4 5 3 5 4 6 3 2 4;}
  86. @font-face
  87. {font-family:Calibri;
  88. panose-1:2 15 5 2 2 2 4 3 2 4;}
  89. /* Style Definitions */
  90. p.MsoNormal, li.MsoNormal, div.MsoNormal
  91. {margin:0cm;
  92. margin-bottom:.0001pt;
  93. font-size:11.0pt;
  94. font-family:"Calibri","sans-serif";}
  95. a:link, span.MsoHyperlink
  96. {mso-style-priority:99;
  97. color:#0563C1;
  98. text-decoration:underline;}
  99. a:visited, span.MsoHyperlinkFollowed
  100. {mso-style-priority:99;
  101. color:#954F72;
  102. text-decoration:underline;}
  103. span.EmailStyle17
  104. {mso-style-type:personal-compose;
  105. font-family:"Calibri","sans-serif";
  106. color:windowtext;}
  107. .MsoChpDefault
  108. {mso-style-type:export-only;
  109. font-family:"Calibri","sans-serif";}
  110. @page WordSection1
  111. {size:612.0pt 792.0pt;
  112. margin:2.0cm 42.5pt 2.0cm 3.0cm;}
  113. div.WordSection1
  114. {page:WordSection1;}
  115. --></style><!--[if gte mso 9]><xml>
  116. <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
  117. </xml><![endif]--><!--[if gte mso 9]><xml>
  118. <o:shapelayout v:ext=3D"edit">
  119. <o:idmap v:ext=3D"edit" data=3D"1" />
  120. </o:shapelayout></xml><![endif]-->
  121. </head>
  122. <body link=3D"#0563C1" vlink=3D"#954F72">
  123. <div class=3D"WordSection1">hiya REMOVED<br>
  124. <br>
  125. <br>
  126. <a target=3D"_blank" href=3D"http://bit.ly/2oK9jXi">https://goo.gl/ZPbZ84</a> <=
  127. br>
  128. <br>
  129. Thanks!</div>
  130. </body>
  131. </html>
  132.  
  133.  
  134. --B_3602921268_1436068934--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement