Advertisement
wavellan

20180222_PHISHING_SCAM_1

Feb 23rd, 2018
1,086
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.62 KB | None | 0 0
  1. https://goo.gl/HDHsuD
  2.  
  3. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  4. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  5. id 15.0.1293.2 via Mailbox Transport; Fri, 23 Feb 2018 09:00:27 -0600
  6. Received: from MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) by
  7. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  8. id 15.0.1293.2; Fri, 23 Feb 2018 09:00:26 -0600
  9. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  10. MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) with Microsoft SMTP Server (TLS)
  11. id 15.0.1293.2 via Frontend Transport; Fri, 23 Feb 2018 09:00:26 -0600
  12. Return-Path: <[email protected]>
  13. X-Spam-Threshold: 95
  14. X-Spam-Score: 100
  15. Precedence: junk
  16. X-Spam-Flag: YES
  17. X-Virus-Scanned: OK
  18. X-Orig-To: REMOVED
  19. X-Originating-Ip: [179.188.30.56]
  20. Authentication-Results: smtp24.gate.ord1d.rsapps.net; iprev=pass policy.iprev="179.188.30.56"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="relay-179-188-30-56.globo.com"; dkim=pass header.d=globomail.com; dmarc=none (p=nil; dis=none) header.from=globomail.com
  21. X-Classification-ID: 47611694-18aa-11e8-bbb6-52540091a1c4-1-1
  22. Received: from [179.188.30.56] ([179.188.30.56:45889] helo=relay-179-188-30-56.globo.com)
  23. by smtp24.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  24. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTP
  25. id F9/7F-27930-A8C209A5; Fri, 23 Feb 2018 10:00:26 -0500
  26. DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=gldkim1; d=globomail.com;
  27. h=From:To:Subject:Date:Message-Id:MIME-Version:Content-Type;
  28. bh=rIMW1Xe5yOefu53yQCVB8mDzLEA=;
  29. b=HQNBxPOXjPyF+d9PI+m/qZNJgdKY/DjxDjLtw5VqIkZX5pau7x7lTwjjzCKE9mE57aA24FeRooGK
  30. 8Tlm3BsOYCyQwVhMt2OdkXcj/vUVI+XWrEE4AUxb9dD4WWbvgOdEZfcRPsrAsjF8348FtWEJVFxX
  31. unltOc7awPa91Poybh52iquMS86/GHMQHw6unsW55cfIpljp8S5j9gAF3pvrduqi5EPsymPHbhje
  32. 3XnXWmTYd/pBuwi0tooEJVmYjr62/m6wU8L0Of+e78LybmShU3e+c32/ddRR4Y+/JIcqyE0utXP6
  33. XXqGj2qqo7he72rqY1pi0TqWdhBK4URGLfD5Zw==
  34. Received: from jimmy0001.correio.biz (127.0.0.1) by globomail.com id hi0m8k1oqmo4 for ; Fri, 23 Feb 2018 12:00:24 -0300 (envelope-from <[email protected]>)
  35. Received: from kim0005.globo.correio.biz (kim0005.globo.correio.biz [179.188.28.6])
  36. by jimmy0001.correio.biz (Postfix) with ESMTP id CB2AE180486
  37. for Fri, 23 Feb 2018 12:00:24 -0300 (BRT)
  38. x-globo-id: q3vzQ9z0xXEJ3LVyUs3-jIGn404pOixBbQRkA4AziGo4ETGq8KEYYewfwSjjAZX9aSv8-9nUpns_4Ld3eUNGVaPZp0YtbjdhKkwqfleS5gYPhv6qcqt1GWjYYJABvo4CpqivVXJnQjuPIG0no83UJN8koirIkNbPmpQA-cGL_1DlFmTvnXlLi_KpdRp7SbYY2m1KPIUafKyy-M2dvhW5pQ== NmM3NTc0NjE3MzczNmY2ZTY5NDA2NzZjNmY2MjZmNmQ2MTY5NmMyZTYzNmY2ZA==
  39. X-AuthUser: [email protected]
  40. Received: from smtp.globo.locaweb.com.br (unknown [114.125.26.68])
  41. (Authenticated sender: [email protected])
  42. by kim0005.globo.correio.biz (Postfix) with ESMTPA id 77D391003D6
  43. for ; Fri, 23 Feb 2018 12:00:15 -0300 (BRT)
  44. From: yvonne rodriguez <[email protected]>
  45. To:
  46. Subject:
  47. Date: Fri, 23 Feb 2018 14:59:53 +0000
  48. Message-ID: <[email protected]>
  49. MIME-Version: 1.0
  50. X-Mailer: Microsoft Outlook 16.0
  51. Thread-Index: MzIxVHNwTjREaTBFY3F1M00wajd1OQ==
  52. Content-Language: en-us
  53. X-MS-Exchange-Organization-Network-Message-Id: 3719a392-d7e4-4131-51ba-08d57ace2c49
  54. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1398300;0;This mail has
  55. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  56. X-MS-Exchange-Organization-SCL: 5
  57. X-MS-Exchange-Organization-AuthSource: MBX12D-ORD1.mex08.mlsrvr.com
  58. X-MS-Exchange-Organization-AuthAs: Anonymous
  59. Content-type: multipart/alternative;
  60. boundary="B_3602214446_280407157"
  61.  
  62. > This message is in MIME format. Since your mail reader does not understand
  63. this format, some or all of this message may not be legible.
  64.  
  65. --B_3602214446_280407157
  66. Content-type: text/plain;
  67. charset="UTF-8"
  68. Content-transfer-encoding: 7bit
  69.  
  70. Good afternoon
  71.  
  72.  
  73.  
  74.  
  75.  
  76. https://goo.gl/HDHsuD
  77.  
  78.  
  79.  
  80.  
  81.  
  82.  
  83. yvonne rodriguez
  84.  
  85.  
  86.  
  87. --B_3602214446_280407157
  88. Content-type: text/html;
  89. charset="UTF-8"
  90. Content-transfer-encoding: quoted-printable
  91.  
  92. <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
  93. t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
  94. =3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
  95. /TR/REC-html40">
  96. <head>
  97. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  98. <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
  99. <style><!--
  100. /* Font Definitions */
  101. @font-face
  102. {font-family:"Cambria Math";
  103. panose-1:2 4 5 3 5 4 6 3 2 4;}
  104. @font-face
  105. {font-family:Calibri;
  106. panose-1:2 15 5 2 2 2 4 3 2 4;}
  107. /* Style Definitions */
  108. p.MsoNormal, li.MsoNormal, div.MsoNormal
  109. {margin:0cm;
  110. margin-bottom:.0001pt;
  111. font-size:11.0pt;
  112. font-family:"Calibri","sans-serif";}
  113. a:link, span.MsoHyperlink
  114. {mso-style-priority:99;
  115. color:#0563C1;
  116. text-decoration:underline;}
  117. a:visited, span.MsoHyperlinkFollowed
  118. {mso-style-priority:99;
  119. color:#954F72;
  120. text-decoration:underline;}
  121. span.EmailStyle17
  122. {mso-style-type:personal-compose;
  123. font-family:"Calibri","sans-serif";
  124. color:windowtext;}
  125. .MsoChpDefault
  126. {mso-style-type:export-only;
  127. font-family:"Calibri","sans-serif";}
  128. @page WordSection1
  129. {size:612.0pt 792.0pt;
  130. margin:2.0cm 42.5pt 2.0cm 3.0cm;}
  131. div.WordSection1
  132. {page:WordSection1;}
  133. --></style><!--[if gte mso 9]><xml>
  134. <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
  135. </xml><![endif]--><!--[if gte mso 9]><xml>
  136. <o:shapelayout v:ext=3D"edit">
  137. <o:idmap v:ext=3D"edit" data=3D"1" />
  138. </o:shapelayout></xml><![endif]-->
  139. </head>
  140. <body link=3D"#0563C1" vlink=3D"#954F72">
  141. <div class=3D"WordSection1">
  142. <p class=3D"MsoNormal"><span style=3D"font-size:10.1pt;font-family:Arial">Good =
  143. afternoon
  144. </p>
  145. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma"><o:p=
  146. >&nbsp;</o:p></span></p>
  147. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma"><o:p=
  148. >&nbsp;</o:p></span></p>
  149. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Verdana"><a =
  150. href=3D"https://goo.gl/HDHsuD">https://goo.gl/HDHsuD</a><o:p></o:p></span></p>
  151. <p class=3D"MsoNormal"><span style=3D"font-size:10.4pt;font-family:Verdana"><o:=
  152. p>&nbsp;</o:p></span></p>
  153. <p class=3D"MsoNormal"><span style=3D"font-size:10.4pt;font-family:Verdana"><o:=
  154. p>&nbsp;</o:p></span></p>
  155. <p class=3D"MsoNormal"><span style=3D"font-size:10.4pt;font-family:Verdana"><o:=
  156. p>&nbsp;</o:p></span></p>
  157. yvonne rodriguez<o:p></o:p></span>
  158. <p></p>
  159. <p class=3D"MsoNormal"><span style=3D"font-size:10.1pt;font-family:Verdana"><o:=
  160. p></o:p></span></p>
  161. </div>
  162. </body>
  163. </html>
  164.  
  165.  
  166. --B_3602214446_280407157--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement