Advertisement
wavellan

20180912_PHISHING_SCAM_2

Sep 12th, 2018
255
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.35 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Wed, 12 Sep 2018 06:34:04 -0500
  4. Received: from MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Wed, 12 Sep 2018 06:34:03 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Wed, 12 Sep 2018 06:34:03 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [185.140.232.72]
  18. Authentication-Results: smtp25.gate.ord1d.rsapps.net; iprev=pass policy.iprev="185.140.232.72"; spf=softfail smtp.mailfrom="[email protected]" smtp.helo="credisur.com.ar"; dkim=fail (key not found in DNS) header.d=credisur.com.ar; dmarc=none (p=nil; dis=none) header.from=credisur.com.ar
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: bc35a4a8-b67f-11e8-9be0-52540081550e-1-1
  21. Received: from [185.140.232.72] ([185.140.232.72:50146] helo=credisur.com.ar)
  22. by smtp25.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  24. id 0E/E5-10957-5A9F89B5; Wed, 12 Sep 2018 07:34:02 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=credisur.com.ar
  26. ; s=dkim; h=Content-Type:MIME-Version:Date:Message-ID:Subject:From:To:Sender:
  27. Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
  28. Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
  29. In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
  30. List-Post:List-Owner:List-Archive;
  31. bh=YuM0CMXgrQSxK3QsmLhkAM2kG1AILzjdupQfwZlE+rE=; b=coXJOC49mexEhRD0K3dba8RDpS
  32. agQ7s4DhnH2K0LYVl3nnpuWbDqDGamL5tqnzIxWXFBrV97XJ5QTahGhIhYX6ZoeBf45YUqcZ0YQvt
  33. N9WH/McUvHtcLsxrtkL45IxghF66GvCjF/lpcyOlkf5xtKxlZ/gl9LFq95ggHzj29acc=;
  34. To: REMOVED
  35. Subject: Your personal discount
  36. Message-ID: <[email protected]>
  37. Date: Wed, 12 Sep 2018 03:33:59 -0700
  38. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101
  39. Thunderbird/52.6.0
  40. MIME-Version: 1.0
  41. Content-Language: en
  42. X-MS-Exchange-Organization-Network-Message-Id: 284dc44b-c682-4655-d073-08d618a3a474
  43. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1449900;0;This mail has
  44. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  45. X-MS-Exchange-Organization-SCL: 5
  46. X-MS-Exchange-Organization-AuthSource: MBX10D-ORD1.mex08.mlsrvr.com
  47. X-MS-Exchange-Organization-AuthAs: Anonymous
  48. Content-type: multipart/mixed;
  49. boundary="B_3619587473_1559368546"
  50.  
  51. > This message is in MIME format. Since your mail reader does not understand
  52. this format, some or all of this message may not be legible.
  53.  
  54. --B_3619587473_1559368546
  55. Content-type: multipart/alternative;
  56. boundary="B_3619587473_1250398118"
  57.  
  58.  
  59. --B_3619587473_1250398118
  60. Content-type: text/plain;
  61. charset="UTF-8"
  62. Content-transfer-encoding: 7bit
  63.  
  64.  
  65.  
  66. Learning is a gift. Even when pain is your teacher.
  67.  
  68. You are never too old to set another goal or dream a new dream.
  69.  
  70. Email these to your friends and family and don't forget to print these out to hang on your bedroom or cubicle wall. You will notice a difference in your day, and your future when you live your life with incredible positivity and energy.
  71.  
  72. All things are difficult before they are easy.
  73.  
  74.  
  75.  
  76. Best Regards
  77.  
  78.  
  79.  
  80.  
  81. --B_3619587473_1250398118
  82. Content-type: text/html;
  83. charset="UTF-8"
  84. Content-transfer-encoding: quoted-printable
  85.  
  86. <html>
  87. <head>
  88. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  89. </head>
  90. <body text=3D"#000000" bgcolor=3D"#FFFFFF">
  91. <p><a href=3D"http://betterwayworkshops.com/w/tyt2.php"><img src=3D"cid:part1.6=
  92. [email protected]" alt=3D"" moz-do-not-send=3D"false" height=3D"391=
  93. " width=3D"308" border=3D"0"></a></p>
  94. <p><br>
  95. </p>
  96. <p>Learning is a gift. Even when pain is your teacher. </p>
  97. <p>You are never too old to set another goal or dream a new dream. </p>
  98. <p>Email these to your friends and family and don't forget to print these o=
  99. ut to hang on your bedroom or cubicle wall. You will notice a difference in =
  100. your day, and your future when you live your life with incredible positivity=
  101. and energy.
  102. </p>
  103. <p>All things are difficult before they are easy. </p>
  104. <p><br>
  105. </p>
  106. <p><img src=3D"cid:[email protected]" alt=3D""></p>
  107. <p>Best Regards</p>
  108. <p><br>
  109. </p>
  110. </body>
  111. </html>
  112.  
  113.  
  114. --B_3619587473_1250398118--
  115.  
  116.  
  117. --B_3619587473_1559368546
  118. Content-type: image/gif; name="ibnmr.gif";
  119. x-mac-creator="4F50494D";
  120. x-mac-type="47494666"
  121. Content-ID: <[email protected]>
  122. Content-disposition: inline;
  123. filename="ibnmr.gif"
  124. Content-transfer-encoding: base64
  125.  
  126. --B_3619587473_1559368546
  127. Content-type: image/gif; name="tqnvk.gif";
  128. x-mac-creator="4F50494D";
  129. x-mac-type="47494666"
  130. Content-ID: <[email protected]>
  131. Content-disposition: inline;
  132. filename="tqnvk.gif"
  133. Content-transfer-encoding: base64
  134.  
  135.  
  136. R0lGODlhZAAEAIAAAABmzGb/mSH5BAAAAAAALAAAAABkAAQAAAIajI+py+0Po5y02uuA3rz7
  137. D4biSJbmiabqKhYAOw==
  138. --B_3619587473_1559368546--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement