Advertisement
wavellan

20180515_PHISHING_SCAM_2

May 15th, 2018
414
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.45 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Tue, 15 May 2018 15:43:32 -0500
  4. Received: from MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Tue, 15 May 2018 15:43:31 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Tue, 15 May 2018 15:43:32 -0500
  10. Return-Path: <jascapital.leasefinance04@hotmail.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 0
  13. X-Spam-Flag: NO
  14. Authentication-Results: smtp6.gate.ord1c.rsapps.net x-tls.subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com"; auth=pass (cipher=AES256-GCM-SHA384)
  15. X-Virus-Scanned: OK
  16. X-Orig-To:
  17. X-Originating-Ip: [40.92.0.76]
  18. Authentication-Results: smtp6.gate.ord1c.rsapps.net; iprev=pass policy.iprev="40.92.0.76"; spf=pass smtp.mailfrom="jascapital.leasefinance04@hotmail.com" smtp.helo="nam01-bn3-obe.outbound.protection.outlook.com"; dkim=pass header.d=hotmail.com; dmarc=pass (p=none; dis=none) header.from=hotmail.com
  19. X-Suspicious-Flag: NO
  20. X-Classification-ID: a109eb88-5880-11e8-a92f-bc305bf03f9c-1-1
  21. Received: from [40.92.0.76] ([40.92.0.76:8983] helo=NAM01-BN3-obe.outbound.protection.outlook.com)
  22. by smtp6.gate.ord1c.rsapps.net (envelope-from <jascapital.leasefinance04@hotmail.com>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=AES256-GCM-SHA384
  24. subject="/C=US/ST=WA/L=Redmond/O=Microsoft Corporation/OU=Microsoft Corporation/CN=mail.protection.outlook.com")
  25. id 1F/B4-24033-3764BFA5; Tue, 15 May 2018 16:43:32 -0400
  26. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
  27. s=selector1;
  28. h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
  29. bh=QUrejwtUivOaSNiSQTYGbNKKIPOKHs3QEUR3CkbPZY8=;
  30. b=NJKfsObxb08DkaUkHfUC+qCTlfcQuNdt/znQerHVbUwm3OWC7njpc50shkGT+/Dyv/SN77ap7Ngnc/GYoSa/IK2GpFsuyN4i1wFmgaKOWu9kXmV7pu9SP3FhYP5lH0YhR0ka7XvvEZ3w6Hkpg5iKza9N14sQ30M5Qq41Kf+CpFXe/wABBW2eivVK81c0h0XI2ZvhshBQEPENGnGhAL8wf5OtZ4J81idJx35pGVFwg43WqKtqFmUTcvbwAfFlKZXcrEfPDfad3nNtkY0watJz57d3fa3IsEm9MPGVqCmWsd+eEcTx0k5LYQPR+Pn+b+9oHRa/Au3xAypPGATlbSnIGQ==
  31. Received: from BN3NAM01FT037.eop-nam01.prod.protection.outlook.com
  32. (10.152.66.59) by BN3NAM01HT070.eop-nam01.prod.protection.outlook.com
  33. (10.152.66.232) with Microsoft SMTP Server (version=TLS1_2,
  34. cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.715.13; Tue, 15
  35. May 2018 20:43:30 +0000
  36. Received: from DM5PR02MB3177.namprd02.prod.outlook.com (10.152.66.56) by
  37. BN3NAM01FT037.mail.protection.outlook.com (10.152.67.120) with Microsoft SMTP
  38. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
  39. 15.20.755.15 via Frontend Transport; Tue, 15 May 2018 20:43:30 +0000
  40. Received: from DM5PR02MB3177.namprd02.prod.outlook.com
  41. ([fe80::699c:1012:7572:a467]) by DM5PR02MB3177.namprd02.prod.outlook.com
  42. ([fe80::699c:1012:7572:a467%13]) with mapi id 15.20.0755.018; Tue, 15 May
  43. 2018 20:43:29 +0000
  44. From: Alistair Sean Jeffries <jascapital.leasefinance04@hotmail.com>
  45. Subject: *** BGs | SBLCs | LCs | DLCs & OTHER MONETIZABLE FINANCIAL
  46. INSTRUMENTS***
  47. Thread-Topic: *** BGs | SBLCs | LCs | DLCs & OTHER MONETIZABLE FINANCIAL
  48. INSTRUMENTS***
  49. Thread-Index: AQHT7IxZGff0TBEqRECTqSeR79NWWg==
  50. Date: Tue, 15 May 2018 20:43:29 +0000
  51. Message-ID: <DM5PR02MB3177F5470C39B2B8F8A7CDE3E9930@DM5PR02MB3177.namprd02.prod.outlook.com>
  52. Accept-Language: en-US
  53. Content-Language: en-US
  54. X-MS-Has-Attach:
  55. X-MS-TNEF-Correlator:
  56. x-incomingtopheadermarker: OriginalChecksum:BEE52FCEECE0F7CA10B679488510EF8BCAA395B3BEE1F0F7EAE21F2F7A9B8415;UpperCasedChecksum:A0CE3277F3BAADA3BF21F46F8E97BB18DDD5872B7747C98AD001C3D664A0723E;SizeAsReceived:7942;Count:43
  57. x-ms-exchange-messagesentrepresentingtype: 1
  58. x-tmn: [uY3E4mf++a/e5Rul0KswlqmBKgsWSef5]
  59. x-ms-publictraffictype: Email
  60. x-microsoft-exchange-diagnostics: 1;BN3NAM01HT070;7:i54Eol+KdK6eiDExaKTWpg8N8ZkA89DuCv7J1XQOjz+f7JBrkxUPVks+O7tiZ3pyxVjGhLWiV7Dq8lfGdkbVXQL2gSLJbj18kySXYOaHmK/dVKF1WM48AP2ljSjljPHQ1EHd8RIeo/ZpG+IS5hFRMLwfP2+tkYyv33CGzYzjXFip4GO/FkOXNPJujYYNmks2pwKr3lr7mfXYq7ONrqteApSHjSEZvxbKWrZOp30UOtvvYEPlBEwOKwAqEbEh0wA8
  61. x-incomingheadercount: 43
  62. x-eopattributedmessage: 0
  63. x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125464)(1701031045);SRVR:BN3NAM01HT070;
  64. x-ms-exchange-slblob-mailprops: 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
  65. x-ms-traffictypediagnostic: BN3NAM01HT070:
  66. x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:BN3NAM01HT070;BCL:0;PCL:0;RULEID:;SRVR:BN3NAM01HT070;
  67. x-forefront-prvs: 0673F5BE31
  68. x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(199004)(189003)(40134004)(104016004)(5660300001)(8666007)(6436002)(20460500001)(86362001)(87572001)(733005)(19627405001)(54896002)(59450400001)(6506007)(26005)(3660700001)(106356001)(6346003)(6306002)(33656002)(105586002)(9686003)(1671002)(3280700002)(486006)(476003)(55016002)(97736004)(74316002)(102836004)(73972006)(82202002)(8656006)(7696005)(81156014)(8936002)(8676002)(25786009)(83332001)(7416002)(2900100001)(109986005)(881003)(68736007)(14454004)(39060400002)(325944009)(5250100002)(99286004)(399284005)(15852004)(217873001);DIR:OUT;SFP:1901;SCL:1;SRVR:BN3NAM01HT070;H:DM5PR02MB3177.namprd02.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:;
  69. received-spf: None (protection.outlook.com: hotmail.com does not designate
  70. permitted sender hosts)
  71. x-microsoft-antispam-message-info: vx04z2ImeEqAgF37tPrcW1RETBwE6cD0A10RNx1rqtWiCYuXQQJjU8iEVep2dwGD3rWxnPBfIrpUGnj5jfcowEdQ/1S17HBU9iyAz26CFC1IE1pJyxbYnmz8nj0Rc01mroUBI3OdMUJVOzQqVsNyGMkHYYtQADIwGGnSpRZeBzaZMx4tmSgyDw5lMyz6RaC/
  72. MIME-Version: 1.0
  73. X-MS-Office365-Filtering-Correlation-Id: ab58fd81-7c19-4c2c-0ea1-08d5baa48427
  74. X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
  75. X-MS-Exchange-CrossTenant-Network-Message-Id: ab58fd81-7c19-4c2c-0ea1-08d5baa48427
  76. X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 7181d4b0-87d6-4f4e-ba33-0d3746212cec
  77. X-MS-Exchange-CrossTenant-originalarrivaltime: 15 May 2018 20:43:29.6723
  78. (UTC)
  79. X-MS-Exchange-CrossTenant-fromentityheader: Internet
  80. X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
  81. X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3NAM01HT070
  82. To: Undisclosed recipients:;
  83. X-MS-Exchange-Organization-Network-Message-Id: e0cc7b6e-7ff2-4459-29d0-08d5baa48577
  84. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1425100;0;This mail has
  85. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  86. X-MS-Exchange-Organization-SCL: 0
  87. X-MS-Exchange-Organization-AuthSource: MBX11D-ORD1.mex08.mlsrvr.com
  88. X-MS-Exchange-Organization-AuthAs: Anonymous
  89. Content-type: multipart/alternative;
  90. boundary="B_3609259354_1950586613"
  91.  
  92. > This message is in MIME format. Since your mail reader does not understand
  93. this format, some or all of this message may not be legible.
  94.  
  95. --B_3609259354_1950586613
  96. Content-type: text/plain;
  97. charset="UTF-8"
  98. Content-transfer-encoding: 7bit
  99.  
  100. Dear Partner/Associate.
  101.  
  102. We can help facilitate any form of banking instrument (BG/SBLC/MTN/DLC/LC) Which can be engage in PPP Trading, Discounting, signature project(s) such as Aviation, Agriculture, Petroleum, Telecommunication,automobile, construction of Dams, Bridges, Real Estate and all kind of projects, We remain the best financial consulting company with years of experience in the international and local finance market. For serious enquiries Please contact
  103.  
  104. CONTACT : Mr. Alistair Sean Jeffries
  105. EMAIL : jascapital.leasefinance@gmail.com
  106. SKYPE : live:jascapital.leasefinance_1
  107. Assurance - Business Advisory - Corporate Finance - Risk Advisory - Tax - Turnaround & Insolvency
  108. Consultant, Publisher Guarantee Bank Guarantee and Surety Bond Guarantee, Tender project Non Collateral
  109.  
  110. This Communication is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential or copyright. You are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited without the authority of the sender
  111.  
  112. Liability limited by a scheme approved under Professional Standards Legislation.
  113.  
  114.  
  115.  
  116.  
  117. --B_3609259354_1950586613
  118. Content-type: text/html;
  119. charset="UTF-8"
  120. Content-transfer-encoding: quoted-printable
  121.  
  122. <html>
  123. <head>
  124. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  125. <style type=3D"text/css" style=3D"display:none;"><!-- P {margin-top:0;margin-bo=
  126. ttom:0;} --></style>
  127. </head>
  128. <body>
  129. <div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font-fam=
  130. ily:Calibri,Helvetica,sans-serif;" dir=3D"ltr">
  131. <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt;=
  132. color:rgb(0,0,0)">
  133. <div>Dear Partner/Associate.</div>
  134. <div><br>
  135. </div>
  136. <div>&nbsp; &nbsp; We can help facilitate any form of banking instrument (B=
  137. G/SBLC/MTN/DLC/LC) Which can be engage in PPP Trading, Discounting, signatur=
  138. e project(s) such as Aviation, Agriculture, Petroleum, Telecommunication,aut=
  139. omobile, construction of Dams, Bridges,
  140. Real Estate and all kind of projects, We remain the best financial consult=
  141. ing company with years of experience in the international and local finance =
  142. market. For serious enquiries Please contact</div>
  143. <div><br>
  144. </div>
  145. <div>CONTACT :&nbsp; &nbsp;Mr. Alistair Sean Jeffries</div>
  146. <div>EMAIL&nbsp; &nbsp;:&nbsp; &nbsp; jascapital.leasefinance@gmail.com</di=
  147. v>
  148. <div>SKYPE&nbsp; :&nbsp; &nbsp; &nbsp;live:jascapital.leasefinance_1</div>
  149. <div>Assurance - Business Advisory - Corporate Finance - Risk Advisory - Ta=
  150. x - Turnaround &amp; Insolvency</div>
  151. <div>Consultant, Publisher Guarantee Bank Guarantee and Surety Bond Guarant=
  152. ee, Tender project Non Collateral</div>
  153. <div><br>
  154. </div>
  155. <div>This Communication is intended only for the use of the individual or e=
  156. ntity to which it is addressed and may contain information that is privilege=
  157. d, confidential or copyright. You are hereby notified that any dissemination=
  158. , distribution or copying of this
  159. communication is strictly prohibited without the authority of the sender&n=
  160. bsp;</div>
  161. <div><br>
  162. </div>
  163. <div>Liability limited by a scheme approved under Professional Standards Le=
  164. gislation.</div>
  165. <div><br>
  166. </div>
  167. <br>
  168. </div>
  169. </div>
  170. <img style=3D"width:0;max-height:0;overflow:hidden" src=3D"https://my-email-sig=
  171. nature.link/signature.gif?u=3D333605&amp;e=3D23644110&amp;v=3D03066feedc3d2ae98500=
  172. 66beff874f9dff43f4abe95fafb3e4f10c853f8e098f">
  173. </body>
  174. </html>
  175.  
  176.  
  177. --B_3609259354_1950586613--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement