wavellan

20200808_PHISHING_SCAM_2

Aug 8th, 2020
1,913
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.80 KB | None | 0 0
  1. This Is To Inform All Webmail Account Users, That The Web Admin Is Currently Congested. We Are Hereby Deleting Inactive Accounts.
  2. Please Notify That This Account Is Active By Verifying It Below
  3. CLICK-HERE - https://weblog.clan.su/Weblog.htm
  4. Webmail Verification Center.
  5. Case number: 8941624.
  6. Property: Account Security.
  7. Copyright © 2020 Webmail Service All Rights Reserved.
  8.  
  9.  
  10.  
  11.  
  12.  
  13. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  14. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  15. id 15.0.1497.2 via Mailbox Transport; Sat, 8 Aug 2020 03:29:59 -0500
  16. Received: from MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) by
  17. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  18. id 15.0.1497.2; Sat, 8 Aug 2020 03:29:59 -0500
  19. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  20. MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) with Microsoft SMTP Server (TLS)
  21. id 15.0.1497.2 via Frontend Transport; Sat, 8 Aug 2020 03:29:59 -0500
  22. Return-Path: <[email protected]>
  23. X-Spam-Threshold: 95
  24. X-Spam-Score: 100
  25. Precedence: junk
  26. X-Spam-Flag: YES
  27. X-Virus-Scanned: OK
  28. X-Orig-To:
  29. X-Originating-Ip: [176.221.93.135]
  30. Authentication-Results: smtp27.gate.ord1d.rsapps.net; iprev=pass policy.iprev="176.221.93.135"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="smtp01-n13.telecomputing.no"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=franzefoss.no
  31. X-Suspicious-Flag: NO
  32. X-Classification-ID: 58131144-d951-11ea-9e99-5254003773d7-1-1
  33. Received: from [176.221.93.135] ([176.221.93.135:16924] helo=smtp01-n13.telecomputing.no)
  34. by smtp27.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  35. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  36. id BC/B6-26506-6826E2F5; Sat, 08 Aug 2020 04:29:59 -0400
  37. IronPort-SDR: Ae/oo7hxMSNC+j6WEUGafLJ4O1bIHjuqSgKEts22bIZIlNWbpnuNHDcOSPwoBhtSr048IcQdD4
  38. /sLg6xqS+VtSGxhHZwMa3v7fwZbgDbi4LUVsp+gqrQhTyYjF0FnvP94YWmteKQDIJhvTGLUaM8
  39. Y7cRFlnIzXXjfDNyP4jLpVDAzpmJ+Ezq5nyZoECMYRiS4ZAvRZH3F0uw3dTp4fKAjvnvtvJUQb
  40. R+DvVRNq4SZe2BwwMTNVfC+lc6JXZoRjVRSawqa0bsnA5tGFvbgpzHOMiQ6X7JbfZr6FemUYJM
  41. 1rg=
  42. X-IronPort-AV: E=Sophos;i="5.75,448,1589234400";
  43. d="scan'208,217";a="60360994"
  44. Received: from n13os2ce5cn1.n13.tconet.net ([10.66.201.57])
  45. by no-ironport04.telecomputing.no with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 08 Aug 2020 10:29:58 +0200
  46. Received: from N13OS2CE9CN2.N13.TCONET.NET (10.66.201.200) by
  47. N13OS2CE5CN1.N13.TCONET.NET (10.66.201.57) with Microsoft SMTP Server (TLS)
  48. id 15.0.1497.2; Sat, 8 Aug 2020 10:29:56 +0200
  49. Received: from N13OS2CE9CN2.N13.TCONET.NET ([10.66.201.200]) by
  50. N13OS2CE9CN2.N13.TCONET.NET ([10.66.201.200]) with mapi id 15.00.1497.006;
  51. Sat, 8 Aug 2020 10:29:56 +0200
  52. From: Hege Reinemo <[email protected]>
  53. To: Hege Reinemo <[email protected]>
  54. Subject: RE: IT Service Center
  55. Thread-Topic: IT Service Center
  56. Thread-Index: AdZtXhjD9cHwpycSG0C7cWvMw8pqKg==
  57. Date: Sat, 8 Aug 2020 08:29:56 +0000
  58. Message-ID: <[email protected]>
  59. Accept-Language: nb-NO, en-US
  60. Content-Language: en-US
  61. X-MS-Has-Attach:
  62. X-MS-TNEF-Correlator:
  63. x-ms-exchange-transport-fromentityheader: Hosted
  64. MIME-Version: 1.0
  65. X-MS-Exchange-Organization-Network-Message-Id: 0c7d60ae-d9c1-4af6-ba28-08d83b753cf7
  66. X-MS-Exchange-Organization-SCL: 5
  67. X-MS-Exchange-Organization-AuthSource: MBX09D-ORD1.mex08.mlsrvr.com
  68. X-MS-Exchange-Organization-AuthAs: Anonymous
  69. Content-type: multipart/alternative;
  70. boundary="B_3679725881_335083431"
  71.  
  72. > This message is in MIME format. Since your mail reader does not understand
  73. this format, some or all of this message may not be legible.
  74.  
  75. --B_3679725881_335083431
  76. Content-type: text/plain;
  77. charset="UTF-8"
  78. Content-transfer-encoding: quoted-printable
Add Comment
Please, Sign In to add comment