Advertisement
wavellan

20190422_PHISHING_SCAM_1

Apr 29th, 2019
368
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.12 KB | None | 0 0
  1. We are please to inform you that you have been selected for Monetary Compensation of Four Million Five Hundred Thousand Euros from The EUROPEAN UNION COMPENSATION SCHEME (EU), Through the European Union Economic and Financial Directorate (Mr.Marco Buti).
  2. Reply for more details to file your compensation, Kindly provide us with any useful info.
  3. Contact Person: (Mr.Marco Buti).
  4. E-mail:
  5. Contact Number:
  6.  
  7.  
  8.  
  9.  
  10. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  11. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  12. id 15.0.1473.3 via Mailbox Transport; Mon, 22 Apr 2019 16:54:12 -0500
  13. Received: from MBX07C-ORD1.mex08.mlsrvr.com (172.29.9.29) by
  14. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  15. id 15.0.1473.3; Mon, 22 Apr 2019 16:54:12 -0500
  16. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  17. MBX07C-ORD1.mex08.mlsrvr.com (172.29.9.29) with Microsoft SMTP Server (TLS)
  18. id 15.0.1473.3 via Frontend Transport; Mon, 22 Apr 2019 16:54:12 -0500
  19. Return-Path: <szakallas.lajos@vaciegyhazmegye.hu>
  20. X-Spam-Threshold: 95
  21. X-Spam-Score: 100
  22. Precedence: junk
  23. X-Spam-Flag: YES
  24. X-Virus-Scanned: OK
  25. X-Orig-To:
  26. X-Originating-Ip: [62.77.254.6]
  27. Authentication-Results: smtp21.gate.ord1d.rsapps.net; iprev=pass policy.iprev="62.77.254.6"; spf=softfail smtp.mailfrom="szakallas.lajos@vaciegyhazmegye.hu" smtp.helo="dunakanyar.hu"; dkim=pass header.d=vaciegyhazmegye.hu; dmarc=none (p=nil; dis=none) header.from=vaciegyhazmegye.hu
  28. X-Suspicious-Flag: NO
  29. X-Classification-ID: 290fc798-6549-11e9-a641-525400a98691-1-1
  30. Received: from [62.77.254.6] ([62.77.254.6:35753] helo=dunakanyar.hu)
  31. by smtp21.gate.ord1d.rsapps.net (envelope-from <szakallas.lajos@vaciegyhazmegye.hu>)
  32. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES256-SHA)
  33. id 15/3D-26676-3083EBC5; Mon, 22 Apr 2019 17:54:12 -0400
  34. Received: from webmail.vaciegyhazmegye.hu ([37.220.137.81])
  35. by dunakanyar.hu with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
  36. (Exim 4.69)
  37. (envelope-from <szakallas.lajos@vaciegyhazmegye.hu>)
  38. id 1hIgsD-0003Gf-CT; Mon, 22 Apr 2019 23:53:17 +0200
  39. Received: from localhost (localhost.localdomain [127.0.0.1])
  40. by webmail.vaciegyhazmegye.hu (Postfix) with ESMTP id 01A34C1DFD;
  41. Mon, 22 Apr 2019 23:54:00 +0200 (CEST)
  42. Received: from webmail.vaciegyhazmegye.hu ([127.0.0.1])
  43. by localhost (webmail.vaciegyhazmegye.hu [127.0.0.1]) (amavisd-new, port 10032)
  44. with ESMTP id vDrko1l1EgWY; Mon, 22 Apr 2019 23:53:59 +0200 (CEST)
  45. Received: from localhost (localhost.localdomain [127.0.0.1])
  46. by webmail.vaciegyhazmegye.hu (Postfix) with ESMTP id 71215C1D4E;
  47. Mon, 22 Apr 2019 23:53:48 +0200 (CEST)
  48. DKIM-Filter: OpenDKIM Filter v2.10.3 webmail.vaciegyhazmegye.hu 71215C1D4E
  49. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vaciegyhazmegye.hu;
  50. s=dkim; t=1555970028;
  51. bh=8Z6+3avLL5sKr9Ydr9aitDhvvDr5cxoMlxKp+tf5Viw=;
  52. h=Date:From:Message-ID:MIME-Version;
  53. b=bPscz70wNQUY9whFOPjbWIy9LmB17EtVA11f9j7HBmbfvaTwJIaHNyEbJKlfVHB4a
  54. cgEh1upA8nWWLJF6941Ca7XLruIDEgmh+T4RmmcRU07DG6CmheVvCpm0zQKM5OZtJw
  55. +eb4Jd5xLJH3vJTy3ak3lguKrVYZuP5EXyyuKb16qYYkFQ2+iWNjwnrG4ktoauBaIf
  56. MM6JtxAWypy2AjVH1neVKARevwxMwA0GI/pbDOCs48PcvGWW4/S5m45ENnoVCmK9td
  57. D+3hS68q8hkOb9JBwiLyrREDY3pnKOD8meZaE9qDwD0UiB0QkFJxrdI2IsCYFr97yW
  58. w5JNY+bfJfjrw==
  59. Received: from webmail.vaciegyhazmegye.hu ([127.0.0.1])
  60. by localhost (webmail.vaciegyhazmegye.hu [127.0.0.1]) (amavisd-new, port 10026)
  61. with ESMTP id yVZjN9clGzLS; Mon, 22 Apr 2019 23:53:48 +0200 (CEST)
  62. Received: from webmail.vaciegyhazmegye.hu (webmail.vaciegyhazmegye.hu [37.220.137.81])
  63. by webmail.vaciegyhazmegye.hu (Postfix) with ESMTP id 205DEC1D8C;
  64. Mon, 22 Apr 2019 23:53:19 +0200 (CEST)
  65. Date: Mon, 22 Apr 2019 23:53:18 +0200 (CEST)
  66. From: =?utf-8?Q?Szak=C3=A1llas?= Lajos <szakallas.lajos@vaciegyhazmegye.hu>
  67. Reply-To: Ann traverson <mr3741138@gmail.com>
  68. Message-ID: <186091491.58653.1555969997875.JavaMail.zimbra@vaciegyhazmegye.hu>
  69. Subject: Dear Beneficiary
  70. MIME-Version: 1.0
  71. X-Mailer: Zimbra 8.7.10_GA_1829 (zclient/8.7.10_GA_1829)
  72. Thread-Index: aE3x4+MzXP8zvnOvy4bTfciQqbVV0Q==
  73. Thread-Topic: Dear Beneficiary
  74. X-Spam-Score-Int: 32
  75. X-Spam-Bar: +++
  76. X-Spam-Report: Spam detection software, running on the system "dunakanyar.net-belso", has
  77. identified this incoming email as possible spam. The original message
  78. has been attached to this so you can view it (if it isn't spam) or label
  79. similar future email. If you have any questions, see
  80. the administrator of that system for details.
  81. Content preview: -- We are please to inform you that you have been selected
  82. for Monetary Compensation of Four Million Five Hundred Thousand Euros from
  83. The EUROPEAN UNION COMPENSATION SCHEME (EU), Through the European Union Economic
  84. and Financial Directorate (Mr.Marco Buti).Reply for more details to file
  85. your compensation, Kindly provide us with any useful info.Contact Person:
  86. (Mr.Marco Buti). E-mail: Contact Number: [...]
  87. Content analysis details: (3.2 points, 5.0 required)
  88. pts rule name description
  89. ---- ---------------------- --------------------------------------------------
  90. -0.0 SPF_PASS SPF: sender matches SPF record
  91. 1.2 MISSING_HEADERS Missing To: header
  92. 0.0 HK_SCAM_N8 BODY: HK_SCAM_N8
  93. 0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
  94. 0.0 HTML_MESSAGE BODY: HTML included in message
  95. 0.0 LOTS_OF_MONEY Huge... sums of money
  96. 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
  97. X-Sender-IP: 37.220.137.81:39900
  98. X-Message-Linecount: 130
  99. X-Body-Linecount: 90
  100. X-Message-Size: 8492
  101. X-Body-Size: 6319
  102. X-Received-Count: 6
  103. To: Undisclosed recipients:;
  104. X-MS-Exchange-Organization-Network-Message-Id: d8ca5f95-7b94-44a2-bd82-08d6c76d0e37
  105. X-MS-Exchange-Organization-SCL: 5
  106. X-MS-Exchange-Organization-AuthSource: MBX07C-ORD1.mex08.mlsrvr.com
  107. X-MS-Exchange-Organization-AuthAs: Anonymous
  108. Content-type: multipart/alternative;
  109. boundary="B_3639393890_1039975667"
  110.  
  111. > This message is in MIME format. Since your mail reader does not understand
  112. this format, some or all of this message may not be legible.
  113.  
  114. --B_3639393890_1039975667
  115. Content-type: text/plain;
  116. charset="UTF-8"
  117. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement