API tools faq
paste
wavellan

20210510_PHISHING_SCAM_1

wavellan
May 12th, 2021
161
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.08 KB | None | 0 0
raw download clone embed print report
  1. Dear Customer, #MPDT3298471
  2.  
  3. Your free trial period is almost over...
  4. How's it going so far?
  5.  
  6. A payment method you provided will be used
  7. to continue your subscription.
  8. Due to the plan you chose you will be billed $89.99
  9. per month as soon as your free trial will be expired
  10.  
  11.  
  12. To cancel the subscription, answer "Stop"
  13.  
  14.  
  15.  
  16.  
  17. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  18. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  19. id 15.0.1497.2 via Mailbox Transport; Mon, 10 May 2021 12:28:02 -0500
  20. Received: from MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) by
  21. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  22. id 15.0.1497.2; Mon, 10 May 2021 12:28:01 -0500
  23. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  24. MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) with Microsoft SMTP Server (TLS)
  25. id 15.0.1497.2 via Frontend Transport; Mon, 10 May 2021 12:28:02 -0500
  26. Return-Path: <[email protected]>
  27. X-Spam-Threshold: 95
  28. X-Spam-Score: 100
  29. Precedence: junk
  30. X-Spam-Flag: YES
  31. X-Virus-Scanned: OK
  32. X-Orig-To:
  33. X-Originating-Ip: [189.113.8.84]
  34. Authentication-Results: smtp28.gate.ord1c.rsapps.net; iprev=pass policy.iprev="189.113.8.84"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="smtpex-hw5.task.com.br"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=hidrotecnicaltda.com.br
  35. X-Suspicious-Flag: NO
  36. X-Classification-ID: 109f9944-b1b5-11eb-9690-a0369f1890f1-1-1
  37. Received: from [189.113.8.84] ([189.113.8.84:34431] helo=smtpex-hw5.task.com.br)
  38. by smtp28.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
  39. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES256-GCM-SHA384)
  40. id 43/38-20312-02D69906; Mon, 10 May 2021 13:28:00 -0400
  41. Received: from udmgroup.com.au ([::ffff:118.240.116.139])
  42. (AUTH: PLAIN [email protected], TLS: TLS1.2,256bits,ECDHE_RSA_AES_256_GCM_SHA384)
  43. by smtpex-hw5.task.com.br with ESMTPSA; Mon, 10 May 2021 14:27:56 -0300
  44. id 0000000000240206.0000000060996D1D.0000D822
  45. To:
  46. List-Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
  47. Reply-To: <[email protected]>
  48. Date: Mon, 10 May 2021 19:27:51 +0200
  49. From: Sophos.Labs <[email protected]>
  50. Subject: Your trial 0ENINJ-6VWWK-0SFBC will expire in 24 hours
  51. Message-ID: <[email protected]>
  52. X-rpcampaign: 820795-1264508
  53. List-Issue: NO
  54. List-ID: x_9738160:x_33531:personal:hidrotecnicaltda.com.br
  55. MIME-Version: 1.0
  56. X-MS-Exchange-Organization-Network-Message-Id: 57f6744d-9f42-45ae-e9e6-08d913d8f685
  57. X-MS-Exchange-Organization-SCL: 5
  58. X-MS-Exchange-Organization-AuthSource: MBX04D-ORD1.mex08.mlsrvr.com
  59. X-MS-Exchange-Organization-AuthAs: Anonymous
  60. Content-type: multipart/alternative;
  61. boundary="B_3703655603_763041922"
  62.  
  63. > This message is in MIME format. Since your mail reader does not understand
  64. this format, some or all of this message may not be legible.
  65.  
  66. --B_3703655603_763041922
  67. Content-type: text/plain;
  68. charset="UTF-8"
  69. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!