Advertisement
wavellan

20180517_PHISHING_SCAM_2

May 17th, 2018
578
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.33 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Thu, 17 May 2018 06:39:35 -0500
  4. Received: from MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Thu, 17 May 2018 06:39:34 -0500
  7. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  8. MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Thu, 17 May 2018 06:39:34 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [197.81.195.127]
  18. Authentication-Results: smtp8.gate.iad3b.rsapps.net; iprev=pass policy.iprev="197.81.195.127"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="amsaonline.amsamail.co.za"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=amsa.co.za
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: f7db8484-59c6-11e8-88f7-5254005eee35-1-1
  21. Received: from [197.81.195.127] ([197.81.195.127:40866] helo=amsaonline.amsamail.co.za)
  22. by smtp8.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTP
  24. id 16/FB-08543-5F96DFA5; Thu, 17 May 2018 07:39:34 -0400
  25. Received: from localhost (localhost.localdomain [127.0.0.1])
  26. by amsaonline.amsamail.co.za (Postfix) with ESMTP id 950DA3FACD4
  27. for REMOVED; Thu, 17 May 2018 13:00:17 +0200 (SAST)
  28. Received: from amsaonline.amsamail.co.za ([127.0.0.1])
  29. by localhost (amsaonline.amsamail.co.za [127.0.0.1]) (amavisd-new, port 10032)
  30. with ESMTP id syALhaq27B29 for REMOVED;
  31. Thu, 17 May 2018 13:00:17 +0200 (SAST)
  32. Received: from localhost (localhost.localdomain [127.0.0.1])
  33. by amsaonline.amsamail.co.za (Postfix) with ESMTP id F34653E475C
  34. for REMOVED; Thu, 17 May 2018 13:00:16 +0200 (SAST)
  35. X-Amavis-Modified: Mail body modified (using disclaimer) -
  36. amsaonline.amsamail.co.za
  37. Received: from amsaonline.amsamail.co.za ([127.0.0.1])
  38. by localhost (amsaonline.amsamail.co.za [127.0.0.1]) (amavisd-new, port 10026)
  39. with ESMTP id cQOxDYV-o0EH for REMOVED;
  40. Thu, 17 May 2018 13:00:16 +0200 (SAST)
  41. Received: from mail.amsa.co.za (unknown [223.237.28.146])
  42. by amsaonline.amsamail.co.za (Postfix) with ESMTPA id 1892B3F4E53
  43. for REMOVED; Thu, 17 May 2018 13:00:13 +0200 (SAST)
  44. From: kingmonolith <[email protected]>
  45. To: REMOVED
  46. Subject:
  47. Date: Thu, 17 May 2018 14:00:13 +0300
  48. Message-ID: <[email protected]>
  49. MIME-Version: 1.0
  50. X-Mailer: Microsoft Outlook 15.0
  51. Thread-Index: cTQwZTE4dC52dl5tbkAoQDleITM3dQ==
  52. Content-Language: en-us
  53. X-MS-Exchange-Organization-Network-Message-Id: 8d0f792c-0e52-4e73-8c61-08d5bbeadcfe
  54. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1425500;0;This mail has
  55. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  56. X-MS-Exchange-Organization-SCL: 5
  57. X-MS-Exchange-Organization-AuthSource: MBX09D-ORD1.mex08.mlsrvr.com
  58. X-MS-Exchange-Organization-AuthAs: Anonymous
  59. Content-type: multipart/alternative;
  60. boundary="B_3609420458_2084624807"
  61.  
  62. > This message is in MIME format. Since your mail reader does not understand
  63. this format, some or all of this message may not be legible.
  64.  
  65. --B_3609420458_2084624807
  66. Content-type: text/plain;
  67. charset="UTF-8"
  68. Content-transfer-encoding: 7bit
  69.  
  70. Hey REMOVED
  71.  
  72.  
  73.  
  74. https://goo.gl/epgbSo
  75.  
  76.  
  77.  
  78.  
  79.  
  80.  
  81.  
  82.  
  83.  
  84.  
  85.  
  86.  
  87. --B_3609420458_2084624807
  88. Content-type: text/html;
  89. charset="UTF-8"
  90. Content-transfer-encoding: quoted-printable
  91.  
  92. <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
  93. t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
  94. =3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
  95. /TR/REC-html40">
  96. <head>
  97. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  98. <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
  99. <style><!--
  100. /* Font Definitions */
  101. @font-face
  102. {font-family:"Cambria Math";
  103. panose-1:2 4 5 3 5 4 6 3 2 4;}
  104. @font-face
  105. {font-family:Calibri;
  106. panose-1:2 15 5 2 2 2 4 3 2 4;}
  107. /* Style Definitions */
  108. p.MsoNormal, li.MsoNormal, div.MsoNormal
  109. {margin:0cm;
  110. margin-bottom:.0001pt;
  111. font-size:11.0pt;
  112. font-family:"Calibri","sans-serif";}
  113. a:link, span.MsoHyperlink
  114. {mso-style-priority:99;
  115. color:#0563C1;
  116. text-decoration:underline;}
  117. a:visited, span.MsoHyperlinkFollowed
  118. {mso-style-priority:99;
  119. color:#954F72;
  120. text-decoration:underline;}
  121. span.EmailStyle17
  122. {mso-style-type:personal-compose;
  123. font-family:"Calibri","sans-serif";
  124. color:windowtext;}
  125. .MsoChpDefault
  126. {mso-style-type:export-only;
  127. font-family:"Calibri","sans-serif";}
  128. @page WordSection1
  129. {size:612.0pt 792.0pt;
  130. margin:2.0cm 42.5pt 2.0cm 3.0cm;}
  131. div.WordSection1
  132. {page:WordSection1;}
  133. --></style><!--[if gte mso 9]><xml>
  134. <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
  135. </xml><![endif]--><!--[if gte mso 9]><xml>
  136. <o:shapelayout v:ext=3D"edit">
  137. <o:idmap v:ext=3D"edit" data=3D"1" />
  138. </o:shapelayout></xml><![endif]-->
  139. </head>
  140. <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
  141. <div class=3D"WordSection1">
  142. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  143. :Tahoma">Hey REMOVED<o:p></o:p></span></p>
  144. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  145. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  146. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  147. :Tahoma"><a href=3D"https://goo.gl/epgbSo">https://goo.gl/epgbSo</a><o:p></o:p=
  148. ></span></p>
  149. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  150. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  151. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  152. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  153. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  154. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  155. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  156. :Tahoma"><o:p></o:p></span></p>
  157. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.2pt;font-family=
  158. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  159. </div>
  160. <br>
  161. <br>
  162. </body>
  163. </html>
  164.  
  165.  
  166. --B_3609420458_2084624807--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement