API tools faq
paste
Advertisement
wavellan

201808062_PHISHING_SCAM_1

wavellan
Aug 7th, 2018
233
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.40 KB | None | 0 0
raw download clone embed print report
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Thu, 2 Aug 2018 04:12:18 -0500
  4. Received: from MBX03C-ORD1.mex08.mlsrvr.com (172.29.9.17) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Thu, 2 Aug 2018 04:12:18 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX03C-ORD1.mex08.mlsrvr.com (172.29.9.17) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Thu, 2 Aug 2018 04:12:18 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [61.60.224.33]
  18. Authentication-Results: smtp28.gate.ord1c.rsapps.net; iprev=pass policy.iprev="61.60.224.33"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="cm1.tinp.net.tw"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=cm1.tinp.net.tw
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: 26d2dd9c-9634-11e8-8a3b-a0369f1890f1-1-1
  21. Received: from [61.60.224.33] ([61.60.224.33:53123] helo=cm1.tinp.net.tw)
  22. by smtp28.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTP
  24. id 4C/A6-10420-1FAC26B5; Thu, 02 Aug 2018 05:12:17 -0400
  25. Received: by cm1.tinp.net.tw (Postfix, from userid 99)
  26. id 5C5B914A030; Thu, 2 Aug 2018 16:21:26 +0800 (CST)
  27. Received: from cm1.tinp.net.tw (unknown [123.20.241.234])
  28. by cm1.tinp.net.tw (Postfix) with ESMTP id 044FD14A027;
  29. Thu, 2 Aug 2018 16:21:23 +0800 (CST)
  30. To: REMOVED
  31. From: Marco <[email protected]>
  32. Subject: RE (4):
  33. Message-ID: <[email protected]>
  34. Date: Thu, 2 Aug 2018 02:24:46 -0600
  35. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101
  36. Thunderbird/52.5.2
  37. MIME-Version: 1.0
  38. Content-Language: en
  39. X-Spam-Checker-Version: SpamAssassin 3.0.6 (2005-12-07) on cm1
  40. X-Spam-Level: ***
  41. X-Spam-Status: No, score=3.0 required=9.0 tests=FROM_ENDS_IN_NUMS,HTML_90_100,
  42. HTML_MESSAGE,MPART_ALT_DIFF,RATWARE_GECKO_BUILD autolearn=no
  43. version=3.0.6
  44. X-MS-Exchange-Organization-Network-Message-Id: b2e60cbc-385c-44b8-3be4-08d5f8580bb6
  45. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1441700;0;This mail has
  46. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  47. X-MS-Exchange-Organization-SCL: 5
  48. X-MS-Exchange-Organization-AuthSource: MBX03C-ORD1.mex08.mlsrvr.com
  49. X-MS-Exchange-Organization-AuthAs: Anonymous
  50. Content-type: multipart/alternative;
  51. boundary="B_3616440029_1943831284"
  52.  
  53. > This message is in MIME format. Since your mail reader does not understand
  54. this format, some or all of this message may not be legible.
  55.  
  56. --B_3616440029_1943831284
  57. Content-type: text/plain;
  58. charset="UTF-8"
  59. Content-transfer-encoding: 7bit
  60.  
  61. Surprise!
  62.  
  63.  
  64.  
  65.  
  66.  
  67. __________
  68.  
  69.  
  70. --B_3616440029_1943831284
  71. Content-type: text/html;
  72. charset="UTF-8"
  73. Content-transfer-encoding: quoted-printable
  74.  
  75. <html>
  76. <head>
  77. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  78. </head>
  79. <body text=3D"#000000" bgcolor=3D"#FFFFFF">
  80. <p><font face=3D"Andalus"><b><a href=3D"http://spiritofmambo.fr/lwtqrjhm/Marco"=
  81. >Surprise!</a></b></font></p>
  82. <p><br>
  83. </p>
  84. <p><br>
  85. </p>
  86. <p>__________<br>
  87. </p>
  88. </body>
  89. </html>
  90.  
  91.  
  92. --B_3616440029_1943831284--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!