Advertisement
wavellan

20180708_PHISHING_SCAM_1

Jul 8th, 2018
253
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.13 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Sun, 8 Jul 2018 10:18:52 -0500
  4. Received: from MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Sun, 8 Jul 2018 10:18:52 -0500
  7. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  8. MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Sun, 8 Jul 2018 10:18:52 -0500
  10. Return-Path: <zarinamm@anzrbnk.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [103.86.9.20]
  18. Authentication-Results: smtp5.gate.iad3b.rsapps.net; iprev=pass policy.iprev="103.86.9.20"; spf=neutral smtp.mailfrom="zarinamm@anzrbnk.com" smtp.helo="host.anzrbnk.com"; dkim=fail (key not found in DNS) header.d=anzrbnk.com; dmarc=none (p=nil; dis=none) header.from=anzrbnk.com
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: 36c9dc12-82c2-11e8-a8b2-525400155d63-1-1
  21. Received: from [103.86.9.20] ([103.86.9.20:56432] helo=host.anzrbnk.com)
  22. by smtp5.gate.iad3b.rsapps.net (envelope-from <zarinamm@anzrbnk.com>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id A5/38-14705-B5B224B5; Sun, 08 Jul 2018 11:18:51 -0400
  25. Received: from DELL-PC.www.huaweimobilewifi.com (unknown [115.164.187.110])
  26. by host.anzrbnk.com (Postfix) with ESMTPSA id 313CF1A21AD9;
  27. Sun, 8 Jul 2018 10:53:54 -0400 (EDT)
  28. Message-ID: <A5.38.14705.B5B224B5@smtp5.gate.iad3b.rsapps.net>
  29. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=anzrbnk.com;
  30. s=default; t=1531061638;
  31. bh=R0S7R/zPHklAKXmLG5FGZVNpmVaBAn7UVmx8MP5MmHs=; l=438;
  32. h=Subject:To:From;
  33. b=sHjQr2yfyVgT/V9lw7FnX4rOFQlOfK9VB7fEqun7d1kjfdet9EE9vmXvZi1rgybtF
  34. PcE6japV9FSfOfq5ykAx4T4etq754tEXNyfXKEl6er5KSipoLTAmTcIAHActPHEXpR
  35. B/yFi99NdNdT8tRoYmQlsUL7FKH5Ktb0VzjXUr5Y=
  36. MIME-Version: 1.0
  37. Content-Description: Mail message body
  38. Subject: HELLO THERE:
  39. To: Recipients <zarinamm@anzrbnk.com>
  40. From: "Mrs Zarina"<zarinamm@anzrbnk.com>
  41. Date: Sun, 8 Jul 2018 22:53:57 +0800
  42. Reply-To: <info.zarinabintimohamad@gmail.com>
  43. X-MS-Exchange-Organization-Network-Message-Id: 002bfd71-9ff5-4e60-8e29-08d5e4e61d16
  44. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1436500;0;This mail has
  45. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  46. X-MS-Exchange-Organization-SCL: 5
  47. X-MS-Exchange-Organization-AuthSource: MBX06D-ORD1.mex08.mlsrvr.com
  48. X-MS-Exchange-Organization-AuthAs: Anonymous
  49. Content-type: text/plain;
  50. charset="UTF-8"
  51. Content-transfer-encoding: 7bit
  52.  
  53. Good Day.....
  54.  
  55. My name is Zarina Mohamad,I am working with SC Bank. Can you be a trustee to receive fund of (10.500M usd)
  56. from our bank? the fund belong to one of our customer, I want to invest his funds in your country under your name
  57. we will share the fund together as a deal, If you are interested please get in touch with me as quickly as possible for
  58. more details thank you...
  59.  
  60. Best regards,
  61.  
  62. Mrs: Zarina.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement