Advertisement
wavellan

201808016_PHISHING_SCAM_1

Aug 16th, 2018
420
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.71 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Thu, 16 Aug 2018 16:53:12 -0500
  4. Received: from MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Thu, 16 Aug 2018 16:53:11 -0500
  7. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  8. MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Thu, 16 Aug 2018 16:53:11 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. X-Spam-Flag: YES
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [185.22.233.97]
  17. Authentication-Results: smtp36.gate.iad3b.rsapps.net; iprev=pass policy.iprev="185.22.233.97"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="mail.bondorenko.co.ua"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=bondorenko.co.ua
  18. X-Suspicious-Flag: NO
  19. X-Classification-ID: c4327e42-a19e-11e8-ae3f-5254003a7283-1-1
  20. Received: from [185.22.233.97] ([185.22.233.97:57948] helo=mail.bondorenko.co.ua)
  21. by smtp36.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  22. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  23. id D7/20-29411-642F57B5; Thu, 16 Aug 2018 17:53:10 -0400
  24. Received: from bondorenko.co.ua (p498595.kvmvps [185.22.233.97])
  25. by mail.bondorenko.co.ua (Postfix) with ESMTPA id 5445843273;
  26. Fri, 17 Aug 2018 00:03:04 +0300 (EEST)
  27. Message-ID: <[email protected]>
  28. From: Isabelle <[email protected]>
  29. Subject: Perhaps you will come into rage, but it's better than to dwell in the dark
  30. Date: Fri, 17 Aug 2018 00:03:07 +0300
  31. MIME-Version: 1.0
  32. Precedence: bulk
  33. List-Id: b35370406v26742224
  34. X-Complaints-To: [email protected]
  35. List-Unsubscribe: <http://bondorenko.co.ua/ru/unsubscribe/do?hash=REMOVED>
  36. X-MS-Exchange-Organization-Network-Message-Id:
  37. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1444500;0;This mail has
  38. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  39. X-MS-Exchange-Organization-SCL: 5
  40. X-MS-Exchange-Organization-AuthSource: MBX04D-ORD1.mex08.mlsrvr.com
  41. X-MS-Exchange-Organization-AuthAs: Anonymous
  42. Content-type: multipart/mixed;
  43. boundary="B_3617285547_2151826259"
  44.  
  45. > This message is in MIME format. Since your mail reader does not understand
  46. this format, some or all of this message may not be legible.
  47.  
  48. --B_3617285547_2151826259
  49. Content-type: multipart/alternative;
  50. boundary="B_3617285547_125156989"
  51.  
  52.  
  53. --B_3617285547_125156989
  54. Content-type: text/plain;
  55. charset="UTF-8"
  56. Content-transfer-encoding: 7bit
  57.  
  58. How about to meet a hot girl? I am free for you now ;)
  59.  
  60.  
  61. Unsubscribe
  62.  
  63.  
  64. --B_3617285547_125156989
  65. Content-type: text/html;
  66. charset="UTF-8"
  67. Content-transfer-encoding: quoted-printable
  68.  
  69. <html>
  70. <head>
  71. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  72. </head>
  73. <body>
  74. <div>How about to meet a hot girl? I am free for you <a href=3D"http://worksh=
  75. ope.biz.ua/workshope15/">
  76. now</a> ;)</div>
  77. <div>&nbsp;</div>
  78. <div><a href=3D"http://workshope.biz.ua/workshope16/"><img border=3D"0" hspace=3D=
  79. "0" alt=3D"" src=3D"cid:" width=3D"200" heig=
  80. ht=3D"198"></a></div>
  81. <div>&nbsp;</div>
  82. <div><a href=3D"http://workshope.biz.ua/workshope17/">Unsubscribe</a></div>
  83. </body>
  84. </html>
  85.  
  86.  
  87. --B_3617285547_125156989--
  88.  
  89.  
  90. --B_3617285547_2151826259
  91. Content-type: image/jpeg; name="ovfiiexocesaoa.jpeg";
  92. x-mac-creator="4F50494D";
  93. x-mac-type="4A504547"
  94. Content-ID: <>
  95. Content-disposition: inline;
  96. filename="ovfiiexocesaoa.jpeg"
  97. Content-transfer-encoding: base64
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement