Advertisement
wavellan

20180402_PHISHING_SCAM_1

Apr 2nd, 2018
291
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.52 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1293.2 via Mailbox Transport; Mon, 2 Apr 2018 06:34:46 -0500
  4. Received: from MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1293.2; Mon, 2 Apr 2018 06:34:46 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) with Microsoft SMTP Server (TLS)
  9. id 15.0.1293.2 via Frontend Transport; Mon, 2 Apr 2018 06:34:46 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To:
  17. X-Originating-Ip: [159.65.178.110]
  18. Authentication-Results: smtp17.gate.ord1c.rsapps.net; iprev=pass policy.iprev="159.65.178.110"; spf=fail smtp.mailfrom="[email protected]" smtp.helo="glphamburg-de0i.mail.protection.outlook.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=glp-hamburg.de
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: d8043d02-3669-11e8-8a35-bc305beffb0c-1-1
  21. Received: from [159.65.178.110] ([159.65.178.110:46884] helo=glphamburg-de0i.mail.protection.outlook.com)
  22. by smtp17.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTP
  24. id 16/EC-01715-65512CA5; Mon, 02 Apr 2018 07:34:46 -0400
  25. Received: from [159.65.178.110] (helo=info.glp-hamburg.de)
  26. by mail.glp-hamburg.de with esmtpsa (TLSv1.2:LIG-GKS-AES256-ITR-SHA682:146)
  27. (Exim 4.80)
  28. (envelope-from <[email protected]>)
  29. id 8CJVqm-342I7O-h9; Mon, 02 Apr 2018 04:34:46 -0800
  30. Received: from localhost.localdomain (localhost [127.0.0.1])
  31. by info.glp-hamburg.de (Postfix) with ESMTPS id PiC301osU83; Mon, 02 Apr 2018 04:34:46 -0800)
  32. Date: Mon, 2 Apr 2018 04:34:46 -0800
  33. From: Alan <[email protected]>
  34. Reply-To: <[email protected]>
  35. To:
  36. Message-ID: <[email protected]>
  37. Subject: These super-caplets are for you and your knob, then!
  38. MIME-Version: 1.0
  39. X-Authenticated-Sender: [email protected]
  40. X-MS-Exchange-Organization-Network-Message-Id: 8c3eedf8-4ab3-4d66-94fe-08d5988dbc8a
  41. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1416500;0;This mail has
  42. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  43. X-MS-Exchange-Organization-SCL: 5
  44. X-MS-Exchange-Organization-AuthSource: MBX04D-ORD1.mex08.mlsrvr.com
  45. X-MS-Exchange-Organization-AuthAs: Anonymous
  46. Content-type: multipart/alternative;
  47. boundary="B_3605520400_1809742224"
  48.  
  49. > This message is in MIME format. Since your mail reader does not understand
  50. this format, some or all of this message may not be legible.
  51.  
  52. --B_3605520400_1809742224
  53. Content-type: text/plain;
  54. charset="UTF-8"
  55. Content-transfer-encoding: 7bit
  56.  
  57. One powerful drug for men of all ages! Increase your size significantly!
  58.  
  59. Try it now!
  60.  
  61.  
  62. http://masterchance.ru
  63.  
  64.  
  65.  
  66.  
  67.  
  68. --B_3605520400_1809742224
  69. Content-type: text/html;
  70. charset="UTF-8"
  71. Content-transfer-encoding: quoted-printable
  72.  
  73. <!doctype html>
  74. <html>
  75. <head>
  76. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  77. </head>
  78. <body>
  79. <main></main>
  80. <p>One powerful drug for men of all ages! Increase your size significantly!=
  81. </p>
  82. <p></p>
  83. <p></p>
  84. <p>Try it now! <br>
  85. <br>
  86. </p>
  87. <p><a href=3D"http://masterchance.ru">http://masterchance.ru</a><br>
  88. <br>
  89. </p>
  90. <br>
  91. <br>
  92. </body>
  93. </html>
  94.  
  95.  
  96. --B_3605520400_1809742224--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement