API tools faq
paste
Advertisement
wavellan

20231030_PHISHING_SCAM_1

wavellan
Oct 30th, 2023
279
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.80 KB | None | 0 0
raw download clone embed print report
  1. We have deposited your funds (5.5Milion USD) through
  2.  
  3. Western Union department after our final meeting Today
  4. contact Western Union director Mr.Harry Ben
  5.  
  6. He will give you the instruction how you will be
  7. receiving $5000 each a day
  8. send him your Full information to avoid wrong transfer such as,
  9.  
  10. Receiver's Name__
  11. Address: __
  12. Country: __
  13. Phone Number: _
  14.  
  15. From Ministry of Finance
  16. your Funds Worths $5.5Milion USD
  17.  
  18. Mr.Harry Ben
  19.  
  20. ONLY ON THIS EMAIL ADDRESS
  21. We have deposited your funds (5.5Milion USD) through
  22. Western Union department after our final meeting Today
  23. contact Western Union director Mr.Harry Ben
  24.  
  25. He will give you the instruction how you will be
  26. receiving $5000 each a day
  27. send him your Full information to avoid wrong transfer such as,
  28.  
  29. Receiver's Name__
  30. Address: __
  31. Country: __
  32. Phone Number: _
  33.  
  34. From Ministry of Finance
  35. your Funds Worths $5.5Milion USD
  36.  
  37. Mr.Harry Ben
  38.  
  39. ONLY ON THIS EMAIL ADDRESS
  40.  
  41.  
  42.  
  43.  
  44. Received: from PH7PR05MB9129.namprd05.prod.outlook.com (2603:10b6:510:1fb::9)
  45. by MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Sun, 29 Oct 2023
  46. 07:27:11 +0000
  47. Received: from MW4PR04CA0077.namprd04.prod.outlook.com (2603:10b6:303:6b::22)
  48. by PH7PR05MB9129.namprd05.prod.outlook.com (2603:10b6:510:1fb::9) with
  49. Microsoft SMTP Server (version=TLS1_2,
  50. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6907.26; Sun, 29 Oct
  51. 2023 07:27:07 +0000
  52. Received: from MW2NAM12FT067.eop-nam12.prod.protection.outlook.com
  53. (2603:10b6:303:6b:cafe::2) by MW4PR04CA0077.outlook.office365.com
  54. (2603:10b6:303:6b::22) with Microsoft SMTP Server (version=TLS1_2,
  55. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6933.26 via Frontend
  56. Transport; Sun, 29 Oct 2023 07:27:06 +0000
  57. Authentication-Results: spf=pass (sender IP is 195.228.240.62)
  58. smtp.mailfrom=t-email.hu; dkim=none (message not signed)
  59. header.d=none;dmarc=bestguesspass action=none
  60. header.from=t-email.hu;compauth=pass reason=109
  61. Received-SPF: Pass (protection.outlook.com: domain of t-email.hu designates
  62. 195.228.240.62 as permitted sender) receiver=protection.outlook.com;
  63. client-ip=195.228.240.62; helo=mail-outd.mail.t-online.hu; pr=C
  64. Received: from mail-outd.mail.t-online.hu (195.228.240.62) by
  65. MW2NAM12FT067.mail.protection.outlook.com (10.13.181.33) with Microsoft SMTP
  66. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  67. 15.20.6954.11 via Frontend Transport; Sun, 29 Oct 2023 07:27:06 +0000
  68. Received: from maxwm00a.mail.t-online.hu (maxwm00a.mail.telekom.hu [195.228.240.98])
  69. by mail-outd.mail.t-online.hu (Postfix) with ESMTP id 4SHjM00krnzDSMJ;
  70. Sat, 28 Oct 2023 16:57:48 +0200 (CEST)
  71. Received: from 156.0.213.59 ([156.0.213.59]) by webmail.telekom.hu (Horde
  72. Framework) with HTTP; Sat, 28 Oct 2023 16:59:21 +0200
  73. Date: Sat, 28 Oct 2023 16:59:21 +0200
  74. Message-ID: <[email protected]>
  75. From: IC3 <[email protected]>
  76. To:
  77. Subject: Reference No.: TSO-BOP/XTTL4302/22.
  78. Reply-to: [email protected]
  79. User-Agent: Horde Application Framework 5
  80. MIME-Version: 1.0
  81. X-VadeSecure-Status: Legit
  82. X-VadeSecure-Score: 30
  83. X-VadeSecure-Verdict: Legit
  84. Authentication-Results-Original: iprev=notverified ip=195.228.240.98;
  85. spf=notverified client-ip=195.228.240.98 [email protected];
  86. dkim=notverified (), header.i=; dmarc=notverified
  87. Received-SPF: SPF not checked
  88. X-VadeSecure-Status: Legit
  89. X-VadeSecure-Score: 30
  90. X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrleeigdehkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfotefijgettffvgffngffmqffopdcuqfgfvfenuceurghilhhouhhtmecufedttdenuchmihhsshhinhhgucfvqfcufhhivghlugculdeftddmnecujfgurhephffvufhrfggtggfgsegrkedtredtreejnecuhfhrohhmpefkveefuceophgrthhlohhksehtqdgvmhgrihhlrdhhuheqnecuggftrfgrthhtvghrnhepjefhkeelueduueekuddtgfejhfekteegffegvdffvdekledvtdfhjefhfeelvefhnecukfhppeduleehrddvvdekrddvgedtrdelkedpudehiedrtddrvddufedrheelnecuvehluhhsthgvrhfuihiivgepudegnecurfgrrhgrmhepmhhouggvpehsmhhtphdpihhnvghtpeduleehrddvvdekrddvgedtrdelkedphhgvlhhopehmrgigfihmtddtrgdrmhgrihhlrdhtqdhonhhlihhnvgdrhhhupdhmrghilhhfrhhomhepphgrthhlohhksehtqdgvmhgrihhlrdhhuhdpnhgspghrtghpthhtohepfedtpdhrtghpthhtohepsghilhhlsegrvhgrthgrrhhlrggsshdrtghomhdprhgtphhtthhopegsihhllhesrghvrgiirghprdgtohhmpdhrtghpthhtohepsghilhhlsegrvhgvlhhlrghnrdhorhhgpdhrtghpthhtohepsghilhhlsegrvhgvnhhtvghllhgtrdgtohhmpdhrtghpthhtohepsghilhhlsegrvhgvnhhtihhgrhhouhhprdgtohhm
  91. X-VadeSecure-Verdict: Legit
  92. Return-Path: [email protected]
  93. X-MS-Exchange-Organization-ExpirationStartTime: 29 Oct 2023 07:27:06.4916
  94. (UTC)
  95. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  96. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  97. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  98. X-MS-Exchange-Organization-Network-Message-Id:
  99. 931efcdd-543e-4ff1-849d-08dbd8507466
  100. X-EOPAttributedMessage: 0
  101. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  102. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  103. X-MS-PublicTrafficType: Email
  104. X-MS-TrafficTypeDiagnostic:
  105. MW2NAM12FT067:EE_|PH7PR05MB9129:EE_|MWHPR0501MB3899:EE_
  106. X-MS-Exchange-Organization-AuthSource:
  107. MW2NAM12FT067.eop-nam12.prod.protection.outlook.com
  108. X-MS-Exchange-Organization-AuthAs: Anonymous
  109. X-MS-Office365-Filtering-Correlation-Id: 931efcdd-543e-4ff1-849d-08dbd8507466
  110. X-MS-Exchange-Organization-SCL: 5
  111. X-Forefront-Antispam-Report:
  112. CIP:195.228.240.62;CTRY:HU;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-outd.mail.t-online.hu;PTR:mail-outd.mail.t-online.hu;CAT:SPM;SFS:(13230031)(230922051799003)(109986022)(451199024)(33964004)(9686003)(44144004)(26005)(58800400005)(956004)(5660300002)(22186003)(1096003)(2860700004)(8676002)(1076003)(7636003)(7596003)(356005)(86362001)(336012)(4001660100023);DIR:INB;
  113. X-Microsoft-Antispam: BCL:0;
  114. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Oct 2023 07:27:06.0853
  115. (UTC)
  116. X-MS-Exchange-CrossTenant-Network-Message-Id: 931efcdd-543e-4ff1-849d-08dbd8507466
  117. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  118. X-MS-Exchange-CrossTenant-AuthSource:
  119. MW2NAM12FT067.eop-nam12.prod.protection.outlook.com
  120. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  121. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  122. X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR05MB9129
  123. X-MS-Exchange-Transport-EndToEndLatency: 00:00:05.1683103
  124. X-MS-Exchange-Processed-By-BccFoldering: 15.20.6907.032
  125. X-Microsoft-Antispam-Mailbox-Delivery:
  126. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  127.  
  128.  
  129. Content-type: multipart/alternative;
  130. boundary="B_3781537473_2054754802"
  131.  
  132. > This message is in MIME format. Since your mail reader does not understand
  133. this format, some or all of this message may not be legible.
  134.  
  135. --B_3781537473_2054754802
  136. Content-type: text/plain;
  137. charset="UTF-8"
  138. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!