wavellan

20200612_PHISHING_SCAM_1

Jun 12th, 2020
118
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.83 KB | None | 0 0
  1. https://clck.ru/NqEmu
  2.  
  3.  
  4.  
  5.  
  6. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  7. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  8. id 15.0.1497.2 via Mailbox Transport; Sat, 6 Jun 2020 22:38:40 -0500
  9. Received: from MBX07D-ORD1.mex08.mlsrvr.com (172.29.9.30) by
  10. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  11. id 15.0.1497.2; Sat, 6 Jun 2020 22:38:39 -0500
  12. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  13. MBX07D-ORD1.mex08.mlsrvr.com (172.29.9.30) with Microsoft SMTP Server (TLS)
  14. id 15.0.1497.2 via Frontend Transport; Sat, 6 Jun 2020 22:38:39 -0500
  15. Return-Path:
  16. X-Spam-Threshold: 95
  17. X-Spam-Score: 100
  18. Precedence: junk
  19. X-Spam-Flag: YES
  20. X-Virus-Scanned: OK
  21. X-Orig-To:
  22. X-Originating-Ip: [173.162.112.68]
  23. Authentication-Results: smtp29.gate.ord1d.rsapps.net; iprev=pass policy.iprev="173.162.112.68"; spf=pass smtp.mailfrom="@valuinsight.com" smtp.helo="server1.valuinsight.com"; dkim=pass header.d=valuinsight.com; dmarc=pass (p=reject; dis=none) header.from=valuinsight.com
  24. X-Suspicious-Flag: NO
  25. X-Classification-ID: 600e091a-a870-11ea-86f8-525400f257a9-1-1
  26. Received: from [173.162.112.68] ([173.162.112.68:27768] helo=server1.valuinsight.com)
  27. by smtp29.gate.ord1d.rsapps.net (envelope-from <@valuinsight.com>)
  28. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  29. id ED/38-30124-F316CDE5; Sat, 06 Jun 2020 23:38:39 -0400
  30. Received: from webmail.valuinsight.com (unknown [210.206.24.238])
  31. by server1.valuinsight.com (Postfix) with ESMTPA id 20963201C3B0
  32. for <>; Sun, 7 Jun 2020 03:38:29 +0000 (UTC)
  33. DKIM-Filter: OpenDKIM Filter v2.11.0 server1.valuinsight.com 20963201C3B0
  34. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valuinsight.com;
  35. s=default; t=1591501109;
  36. bh=GcO9z+pfl/zxrGigXbQVI30sYzUi7edg/5+gPeb1YnI=;
  37. h=Date:Subject:From:To:Reply-To:From;
  38. b=XwwMZQusC2maXrc94AeWHWztWmg2YCcfZvR2g3NfpmcdsLbiKTIz+1Vugm9CanCgn
  39. FOodT7IVm6GdDc6PuRxFCzXQqE0NE873r2SwZJ5tncH2uJKMOzU2KVaynp3QFtRjRI
  40. E6Tvwi8AdX/y11AxuGIfk87Eub2qDspD48YSy9EjS0u5Yyu7UQk+1KVwaPvFCG+yk+
  41. tWTjbvAhKMVFJ/rwiO/L0+YmNwXePcpWJEXcfQf7FnBMll2sc5MISVP135VXR7t40h
  42. SiN9JsiJb9Ux4t1jSr9iHm2lRsUcFH+sHwzTucP2Sez/TjeY8m3lKLdnBVwi2Egqcr
  43. wC5KULxUBW5ig==
  44. Date: Sun, 7 Jun 2020 05:33:15 +0200
  45. Subject:
  46. Message-ID: <[email protected]>
  47. From:
  48. To:
  49. Reply-To:
  50. MIME-Version: 1.0
  51. X-MS-Exchange-Organization-Network-Message-Id: 560870e8-1a34-46a9-02eb-08d80a9444c5
  52. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1591300;0;This mail has
  53. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  54. X-MS-Exchange-Organization-SCL: 5
  55. X-MS-Exchange-Organization-AuthSource: MBX07D-ORD1.mex08.mlsrvr.com
  56. X-MS-Exchange-Organization-AuthAs: Anonymous
  57. Content-type: text/plain;
  58. charset="UTF-8"
  59. Content-transfer-encoding: 7bit
Add Comment
Please, Sign In to add comment