Advertisement
wavellan

201803018_PHISHING_SCAM_3

Mar 18th, 2018
364
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.62 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1293.2 via Mailbox Transport; Sun, 18 Mar 2018 13:35:27 -0500
  4. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1293.2; Sun, 18 Mar 2018 13:35:26 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  9. id 15.0.1293.2 via Frontend Transport; Sun, 18 Mar 2018 13:35:26 -0500
  10. Return-Path: <garyharms@austinsiding.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To:
  17. X-Originating-Ip: [216.157.80.195]
  18. Authentication-Results: smtp11.gate.ord1d.rsapps.net; iprev=pass policy.iprev="216.157.80.195"; spf=neutral smtp.mailfrom="garyharms@austinsiding.com" smtp.helo="whm.listingbooster.com"; dkim=fail (key not found in DNS) header.d=austinsiding.com; dmarc=fail (p=none; dis=none) header.from=gmail.com
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: 200b6a5c-2adb-11e8-8caf-5254005f837b-1-1
  21. Received: from [216.157.80.195] ([216.157.80.195:38576] helo=whm.listingbooster.com)
  22. by smtp11.gate.ord1d.rsapps.net (envelope-from <garyharms@austinsiding.com>)
  23. (ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id D0/5F-28963-E61BEAA5; Sun, 18 Mar 2018 14:35:26 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  26. d=austinsiding.com; s=default; h=Content-Type:MIME-Version:Message-Id:Date:
  27. Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
  28. Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
  29. :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
  30. List-Subscribe:List-Post:List-Owner:List-Archive;
  31. bh=2yqIUtDx7mtE1sTp9NCBUPNATK+hw93Hk9pij5AMCgk=; b=Fj6SPSgV21qbbhcvzHvRt02RzK
  32. 9TZBZZzPjgkEx47635khM9jVheylqPLuSzc1P+8UUMbAvFSlVmiMNYbBBlG7ONz7SXqeEZ/4D7Yoz
  33. 9e2JCRW5R2/eaC1foC1ANPtnXtuZXeVwtM02SOhCzyeX+pEI1IbOlBCq/4AGWJXJ6tuw=;
  34. Received: from [14.231.246.195] (port=46968 helo=mail.austinsiding.com)
  35. by whm.listingbooster.com with esmtpa (Exim 4.89_1)
  36. (envelope-from <garyharms@austinsiding.com>)
  37. id 1exd9R-0007jX-GF
  38. for ; Sun, 18 Mar 2018 13:35:26 -0500
  39. From: "Gary Harms" <garyharms@gmail.com>
  40. To:
  41. Subject:
  42. Date: Sun, 18 Mar 2018 18:38:05 +0000
  43. Message-ID: <195681fzxwda$uf6dgx7u$aade5ufv$@austinsiding.com>
  44. MIME-Version: 1.0
  45. X-Mailer: Microsoft Outlook 15.0
  46. Thread-Index: ZChucXI3emtxMnU3ejJtcSszZjdtQA==
  47. Content-Language: en-us
  48. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  49. X-AntiAbuse: Primary Hostname - whm.listingbooster.com
  50. X-AntiAbuse: Original Domain - avellan.org
  51. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  52. X-AntiAbuse: Sender Address Domain - austinsiding.com
  53. X-Get-Message-Sender-Via: whm.listingbooster.com: authenticated_id: ralph@austinsiding.com
  54. X-Authenticated-Sender: whm.listingbooster.com: ralph@austinsiding.com
  55. X-Source:
  56. X-Source-Args:
  57. X-Source-Dir:
  58. X-MS-Exchange-Organization-Network-Message-Id: ee81f922-1844-4114-f337-08d58cff047d
  59. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1413500;0;This mail has
  60. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  61. X-MS-Exchange-Organization-SCL: 5
  62. X-MS-Exchange-Organization-AuthSource: MBX05C-ORD1.mex08.mlsrvr.com
  63. X-MS-Exchange-Organization-AuthAs: Anonymous
  64. Content-type: multipart/alternative;
  65. boundary="B_3604248969_487979794"
  66.  
  67. > This message is in MIME format. Since your mail reader does not understand
  68. this format, some or all of this message may not be legible.
  69.  
  70. --B_3604248969_487979794
  71. Content-type: text/plain;
  72. charset="UTF-8"
  73. Content-transfer-encoding: 7bit
  74.  
  75. Hi
  76.  
  77.  
  78.  
  79. https://goo.gl/6bTAku
  80.  
  81.  
  82.  
  83.  
  84.  
  85.  
  86.  
  87.  
  88. Gary Harms
  89.  
  90.  
  91.  
  92. --B_3604248969_487979794
  93. Content-type: text/html;
  94. charset="UTF-8"
  95. Content-transfer-encoding: quoted-printable
  96.  
  97. <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
  98. t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
  99. =3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
  100. /TR/REC-html40">
  101. <head>
  102. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  103. <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
  104. <style><!--
  105. /* Font Definitions */
  106. @font-face
  107. {font-family:"Cambria Math";
  108. panose-1:2 4 5 3 5 4 6 3 2 4;}
  109. @font-face
  110. {font-family:Calibri;
  111. panose-1:2 15 5 2 2 2 4 3 2 4;}
  112. /* Style Definitions */
  113. p.MsoNormal, li.MsoNormal, div.MsoNormal
  114. {margin:0cm;
  115. margin-bottom:.0001pt;
  116. font-size:11.0pt;
  117. font-family:"Calibri","sans-serif";}
  118. a:link, span.MsoHyperlink
  119. {mso-style-priority:99;
  120. color:#0563C1;
  121. text-decoration:underline;}
  122. a:visited, span.MsoHyperlinkFollowed
  123. {mso-style-priority:99;
  124. color:#954F72;
  125. text-decoration:underline;}
  126. span.EmailStyle17
  127. {mso-style-type:personal-compose;
  128. font-family:"Calibri","sans-serif";
  129. color:windowtext;}
  130. .MsoChpDefault
  131. {mso-style-type:export-only;
  132. font-family:"Calibri","sans-serif";}
  133. @page WordSection1
  134. {size:612.0pt 792.0pt;
  135. margin:2.0cm 42.5pt 2.0cm 3.0cm;}
  136. div.WordSection1
  137. {page:WordSection1;}
  138. --></style><!--[if gte mso 9]><xml>
  139. <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
  140. </xml><![endif]--><!--[if gte mso 9]><xml>
  141. <o:shapelayout v:ext=3D"edit">
  142. <o:idmap v:ext=3D"edit" data=3D"1" />
  143. </o:shapelayout></xml><![endif]-->
  144. </head>
  145. <body link=3D"#0563C1" vlink=3D"#954F72">
  146. <div class=3D"WordSection1">
  147. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma">Hi <=
  148. /p>
  149. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.2pt;font-family=
  150. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  151. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma"><a h=
  152. ref=3D"https://goo.gl/6bTAku">https://goo.gl/6bTAku</a><o:p></o:p></span></p>
  153. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.2pt;font-family=
  154. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  155. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.2pt;font-family=
  156. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  157. <p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.2pt;font-family=
  158. :Tahoma"><o:p>&nbsp;</o:p></span></p>
  159. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma"><o:p=
  160. >&nbsp;</o:p></span></p>
  161. Gary Harms<o:p></o:p></span>
  162. <p></p>
  163. <p class=3D"MsoNormal"><span style=3D"font-size:10.2pt;font-family:Tahoma"><o:p=
  164. ></o:p></span></p>
  165. </div>
  166. </body>
  167. </html>
  168.  
  169.  
  170. --B_3604248969_487979794--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement