Advertisement
wavellan

20180527_PHISHING_SCAM_2

May 29th, 2018
289
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.00 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Sun, 27 May 2018 08:04:21 -0500
  4. Received: from MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Sun, 27 May 2018 08:04:20 -0500
  7. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  8. MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Sun, 27 May 2018 08:04:20 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [192.185.145.239]
  18. Authentication-Results: smtp8.gate.iad3b.rsapps.net; iprev=pass policy.iprev="192.185.145.239"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="gateway33.websitewelcome.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=truckbeds.com
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: 77fc3eee-61ae-11e8-88f7-5254005eee35-1-1
  21. Received: from [192.185.145.239] ([192.185.145.239:19132] helo=gateway33.websitewelcome.com)
  22. by smtp8.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id DE/D6-08543-4DCAA0B5; Sun, 27 May 2018 09:04:20 -0400
  25. Received: from cm17.websitewelcome.com (cm17.websitewelcome.com [100.42.49.20])
  26. by gateway33.websitewelcome.com (Postfix) with ESMTP id BBCA3611B69
  27. for REMOVED; Sun, 27 May 2018 08:04:19 -0500 (CDT)
  28. Received: from PSS8.win.hostgator.com ([192.185.6.27])
  29. by cmsmtp with SMTP
  30. id MvLPftbMfPvAdMvLPf8GTv; Sun, 27 May 2018 08:04:19 -0500
  31. X-Authority-Reason: nr=8
  32. X-Src-Sender: (truckbeds.com) [180.183.245.122]:59532
  33. Received: from mail.truckbeds.com (mx-ll-180.183.245-122.dynamic.3bb.co.th [180.183.245.122]) by PSS8.win.hostgator.com with SMTP
  34. (version=TLS\Tls
  35. cipher=Aes256 bits=256);
  36. Sun, 27 May 2018 08:04:14 -0500
  37. From: Jose Quesada <[email protected]>
  38. To: REMOVED
  39. Subject:
  40. Date: Sun, 27 May 2018 13:04:00 +0000
  41. Message-ID: <[email protected]>
  42. MIME-Version: 1.0
  43. X-Mailer: Microsoft Outlook 15.0
  44. Thread-Index: NXojcCRmI3UyNkApcWM4MiF2NTIzZQ==
  45. Content-Language: en-us
  46. X-Exim-Id: 92035653n8v3$839xfv9y$qwhmspkn$
  47. X-MS-Exchange-Organization-Network-Message-Id: 29feb714-0196-455b-5e78-08d5c3d25c7f
  48. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1427700;0;This mail has
  49. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  50. X-MS-Exchange-Organization-SCL: 5
  51. X-MS-Exchange-Organization-AuthSource: MBX01D-ORD1.mex08.mlsrvr.com
  52. X-MS-Exchange-Organization-AuthAs: Anonymous
  53. Content-type: multipart/alternative;
  54. boundary="B_3610472370_1635539812"
  55.  
  56. > This message is in MIME format. Since your mail reader does not understand
  57. this format, some or all of this message may not be legible.
  58.  
  59. --B_3610472370_1635539812
  60. Content-type: text/plain;
  61. charset="UTF-8"
  62. Content-transfer-encoding: 7bit
  63.  
  64. Sup William
  65.  
  66.  
  67.  
  68.  
  69.  
  70. https://goo.gl/dUK6oo
  71.  
  72.  
  73.  
  74.  
  75.  
  76. Jose
  77.  
  78.  
  79.  
  80.  
  81. --B_3610472370_1635539812
  82. Content-type: text/html;
  83. charset="UTF-8"
  84. Content-transfer-encoding: quoted-printable
  85.  
  86. <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
  87. t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
  88. =3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
  89. /TR/REC-html40">
  90. <head>
  91. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  92. <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
  93. <style><!--
  94. /* Font Definitions */
  95. @font-face
  96. {font-family:"Cambria Math";
  97. panose-1:2 4 5 3 5 4 6 3 2 4;}
  98. @font-face
  99. {font-family:Calibri;
  100. panose-1:2 15 5 2 2 2 4 3 2 4;}
  101. /* Style Definitions */
  102. p.MsoNormal, li.MsoNormal, div.MsoNormal
  103. {margin:0cm;
  104. margin-bottom:.0001pt;
  105. font-size:11.0pt;
  106. font-family:"Calibri","sans-serif";}
  107. a:link, span.MsoHyperlink
  108. {mso-style-priority:99;
  109. color:#0563C1;
  110. text-decoration:underline;}
  111. a:visited, span.MsoHyperlinkFollowed
  112. {mso-style-priority:99;
  113. color:#954F72;
  114. text-decoration:underline;}
  115. span.EmailStyle17
  116. {mso-style-type:personal-compose;
  117. font-family:"Calibri","sans-serif";
  118. color:windowtext;}
  119. .MsoChpDefault
  120. {mso-style-type:export-only;
  121. font-family:"Calibri","sans-serif";}
  122. @page WordSection1
  123. {size:612.0pt 792.0pt;
  124. margin:2.0cm 42.5pt 2.0cm 3.0cm;}
  125. div.WordSection1
  126. {page:WordSection1;}
  127. --></style><!--[if gte mso 9]><xml>
  128. <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
  129. </xml><![endif]--><!--[if gte mso 9]><xml>
  130. <o:shapelayout v:ext=3D"edit">
  131. <o:idmap v:ext=3D"edit" data=3D"1" />
  132. </o:shapelayout></xml><![endif]-->
  133. </head>
  134. <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
  135. <div class=3D"WordSection1">
  136. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  137. :Tahoma">Sup William<o:p></o:p></span></p>
  138. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  139. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  140. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  141. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  142. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  143. :Tahoma"><a href=3D"https://goo.gl/dUK6oo">https://goo.gl/dUK6oo</a><o:p></o:p=
  144. ></span></p>
  145. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  146. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  147. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  148. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  149. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  150. :Tahoma">Jose<o:p></o:p></span></p>
  151. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.3pt;font-family=
  152. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  153. </div>
  154. </body>
  155. </html>
  156.  
  157.  
  158. --B_3610472370_1635539812--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement