Advertisement
wavellan

201808016_PHISHING_SCAM_1

Aug 16th, 2018
405
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.71 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Thu, 16 Aug 2018 16:53:12 -0500
  4. Received: from MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Thu, 16 Aug 2018 16:53:11 -0500
  7. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  8. MBX04D-ORD1.mex08.mlsrvr.com (172.29.9.21) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Thu, 16 Aug 2018 16:53:11 -0500
  10. Return-Path: <eqpirqm@bondorenko.co.ua>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. X-Spam-Flag: YES
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [185.22.233.97]
  17. Authentication-Results: smtp36.gate.iad3b.rsapps.net; iprev=pass policy.iprev="185.22.233.97"; spf=pass smtp.mailfrom="eqpirqm@bondorenko.co.ua" smtp.helo="mail.bondorenko.co.ua"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=bondorenko.co.ua
  18. X-Suspicious-Flag: NO
  19. X-Classification-ID: c4327e42-a19e-11e8-ae3f-5254003a7283-1-1
  20. Received: from [185.22.233.97] ([185.22.233.97:57948] helo=mail.bondorenko.co.ua)
  21. by smtp36.gate.iad3b.rsapps.net (envelope-from <eqpirqm@bondorenko.co.ua>)
  22. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  23. id D7/20-29411-642F57B5; Thu, 16 Aug 2018 17:53:10 -0400
  24. Received: from bondorenko.co.ua (p498595.kvmvps [185.22.233.97])
  25. by mail.bondorenko.co.ua (Postfix) with ESMTPA id 5445843273;
  26. Fri, 17 Aug 2018 00:03:04 +0300 (EEST)
  27. Message-ID: <eqpirqm32250482.31807278@mail.bondorenko.co.ua>
  28. From: Isabelle <eqpirqm@bondorenko.co.ua>
  29. To: <michelle@jcfs.org>
  30. Subject: Perhaps you will come into rage, but it's better than to dwell in the dark
  31. Date: Fri, 17 Aug 2018 00:03:07 +0300
  32. MIME-Version: 1.0
  33. Precedence: bulk
  34. List-Id: b35370406v26742224
  35. X-Complaints-To: abuse@bondorenko.co.ua
  36. List-Unsubscribe: <http://bondorenko.co.ua/ru/unsubscribe/do?hash=REMOVED>
  37. X-MS-Exchange-Organization-Network-Message-Id:
  38. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1444500;0;This mail has
  39. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  40. X-MS-Exchange-Organization-SCL: 5
  41. X-MS-Exchange-Organization-AuthSource: MBX04D-ORD1.mex08.mlsrvr.com
  42. X-MS-Exchange-Organization-AuthAs: Anonymous
  43. Content-type: multipart/mixed;
  44. boundary="B_3617285547_2151826259"
  45.  
  46. > This message is in MIME format. Since your mail reader does not understand
  47. this format, some or all of this message may not be legible.
  48.  
  49. --B_3617285547_2151826259
  50. Content-type: multipart/alternative;
  51. boundary="B_3617285547_125156989"
  52.  
  53.  
  54. --B_3617285547_125156989
  55. Content-type: text/plain;
  56. charset="UTF-8"
  57. Content-transfer-encoding: 7bit
  58.  
  59. How about to meet a hot girl? I am free for you now ;)
  60.  
  61.  
  62. Unsubscribe
  63.  
  64.  
  65. --B_3617285547_125156989
  66. Content-type: text/html;
  67. charset="UTF-8"
  68. Content-transfer-encoding: quoted-printable
  69.  
  70. <html>
  71. <head>
  72. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  73. </head>
  74. <body>
  75. <div>How about to meet a hot girl? I am free for you <a href=3D"http://worksh=
  76. ope.biz.ua/workshope15/">
  77. now</a> ;)</div>
  78. <div>&nbsp;</div>
  79. <div><a href=3D"http://workshope.biz.ua/workshope16/"><img border=3D"0" hspace=3D=
  80. "0" alt=3D"" src=3D"cid:" width=3D"200" heig=
  81. ht=3D"198"></a></div>
  82. <div>&nbsp;</div>
  83. <div><a href=3D"http://workshope.biz.ua/workshope17/">Unsubscribe</a></div>
  84. </body>
  85. </html>
  86.  
  87.  
  88. --B_3617285547_125156989--
  89.  
  90.  
  91. --B_3617285547_2151826259
  92. Content-type: image/jpeg; name="ovfiiexocesaoa.jpeg";
  93. x-mac-creator="4F50494D";
  94. x-mac-type="4A504547"
  95. Content-ID: <>
  96. Content-disposition: inline;
  97. filename="ovfiiexocesaoa.jpeg"
  98. Content-transfer-encoding: base64
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement