Advertisement
wavellan

201803025_PHISHING_SCAM_1

Mar 25th, 2018
181
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.51 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1293.2 via Mailbox Transport; Sat, 24 Mar 2018 23:54:40 -0500
  4. Received: from MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1293.2; Sat, 24 Mar 2018 23:54:39 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) with Microsoft SMTP Server (TLS)
  9. id 15.0.1293.2 via Frontend Transport; Sat, 24 Mar 2018 23:54:39 -0500
  10. Return-Path: <info281@finerthingsonline.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 0
  13. X-Spam-Flag: NO
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [192.185.145.24]
  17. Authentication-Results: smtp23.gate.ord1d.rsapps.net; iprev=pass policy.iprev="192.185.145.24"; spf=pass smtp.mailfrom="info281@finerthingsonline.com" smtp.helo="gateway33.websitewelcome.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=finerthingsonline.com
  18. X-Suspicious-Flag: NO
  19. X-Classification-ID: 9f4a7a76-2fe8-11e8-be6d-525400bfb165-1-1
  20. Received: from [192.185.145.24] ([192.185.145.24:14049] helo=gateway33.websitewelcome.com)
  21. by smtp23.gate.ord1d.rsapps.net (envelope-from <info281@finerthingsonline.com>)
  22. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  23. id 54/A1-26800-E8B27BA5; Sun, 25 Mar 2018 00:54:39 -0400
  24. Received: from cm11.websitewelcome.com (cm11.websitewelcome.com [100.42.49.5])
  25. by gateway33.websitewelcome.com (Postfix) with ESMTP id 8226E14CE85
  26. for REMOVED; Sat, 24 Mar 2018 23:54:38 -0500 (CDT)
  27. Received: from gator3037.hostgator.com ([50.87.144.56])
  28. by cmsmtp with SMTP
  29. id zxfyecltKA3CSzxfyeo1jo; Sat, 24 Mar 2018 23:54:38 -0500
  30. Received: from [113.172.5.226] (port=59830 helo=mail.finerthingsonline.com)
  31. by gator3037.hostgator.com with esmtpa (Exim 4.89_1)
  32. (envelope-from <info281@finerthingsonline.com>)
  33. id 1ezxfx-003FrR-07
  34. for REMOVED; Sat, 24 Mar 2018 23:54:37 -0500
  35. From: jeremym200 <jeremym200@finerthingsonline.com>
  36. MIME-Version: 1.0 (1.0)
  37. Subject:
  38. Message-ID: <9D025467-B23A-400F-C8F8-6868E6E7C866@finerthingsonline.com>
  39. Date: Sun, 25 Mar 2018 04:57:27 +0000
  40. To: REMOVED
  41. Reply-To: jeremym200 <jeremym200r@finerthingsonline.com>
  42. X-Mailer: iPhone Mail (15A432)
  43. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  44. X-AntiAbuse: Primary Hostname - gator3037.hostgator.com
  45. X-AntiAbuse: Original Domain - REMOVED
  46. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  47. X-AntiAbuse: Sender Address Domain - finerthingsonline.com
  48. X-BWhitelist: no
  49. X-Source-IP: 113.172.5.226
  50. X-Source-L: No
  51. X-Exim-ID: 1ezxfx-003FrR-07
  52. X-Source:
  53. X-Source-Args:
  54. X-Source-Dir:
  55. X-Source-Sender: (mail.finerthingsonline.com) [113.172.5.226]:59830
  56. X-Source-Auth: info281@finerthingsonline.com
  57. X-Email-Count: 157
  58. X-Source-Cap: bmtqb2luZXI7bmtqb2luZXI7Z2F0b3IzMDM3Lmhvc3RnYXRvci5jb20=
  59. X-Local-Domain: yes
  60. X-MS-Exchange-Organization-Network-Message-Id: ce7dfd75-61b9-47a5-9530-08d5920c83f7
  61. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1414700;0;This mail has
  62. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  63. X-MS-Exchange-Organization-SCL: 0
  64. X-MS-Exchange-Organization-AuthSource: MBX02C-ORD1.mex08.mlsrvr.com
  65. X-MS-Exchange-Organization-AuthAs: Anonymous
  66. Content-type: text/plain;
  67. charset="UTF-8"
  68. Content-transfer-encoding: 7bit
  69.  
  70. Good afternoon REMOVED https://goo.gl/Ti3FZs
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement