Advertisement
wavellan

20180901_PHISHING_SCAM_1

Sep 2nd, 2018
509
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.09 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Sat, 1 Sep 2018 20:25:48 -0500
  4. Received: from MBX08D-ORD1.mex08.mlsrvr.com (172.29.9.33) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Sat, 1 Sep 2018 20:25:49 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX08D-ORD1.mex08.mlsrvr.com (172.29.9.33) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Sat, 1 Sep 2018 20:25:49 -0500
  10. Return-Path: <chris.mei@clothingfashion.pk>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 0
  13. X-Spam-Flag: NO
  14. X-Virus-Scanned: OK
  15. X-Orig-To: REMOVED
  16. X-Originating-Ip: [198.15.105.18]
  17. Authentication-Results: smtp28.gate.ord1d.rsapps.net; iprev=pass policy.iprev="198.15.105.18"; spf=neutral smtp.mailfrom="chris.mei@clothingfashion.pk" smtp.helo="server.apniwebsites.com"; dkim=fail (signature verification failed) header.d=clothingfashion.pk; dmarc=none (p=nil; dis=none) header.from=clothingfashion.pk
  18. X-Suspicious-Flag: YES
  19. X-Classification-ID: 1f4a00b8-ae4f-11e8-84ce-525400ea129b-1-1
  20. Received: from [198.15.105.18] ([198.15.105.18:49449] helo=server.apniwebsites.com)
  21. by smtp28.gate.ord1d.rsapps.net (envelope-from <chris.mei@clothingfashion.pk>)
  22. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  23. id 6E/92-00447-D1C3B8B5; Sat, 01 Sep 2018 21:25:49 -0400
  24. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  25. d=clothingfashion.pk; s=default; h=Reply-To:Date:From:To:Subject:
  26. Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
  27. Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
  28. Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
  29. List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
  30. bh=aCJFk5b84h6m3jYZfRq0RxrerkeU+4MIx7S1OKACwdQ=; b=v1os0wyEN/ognnh0snxgcecfv
  31. Sba2DaEx3qDIP4Dy2/GOoe7G47BuJfStOr9D5mL/Wp3Ipu3JQ1R162gJFibPQQdvKiXjX1eyFzsxq
  32. UU1HI/5i6PPNKQjXYrncTl9s8raH2XtzkjQxAJ50RVsYh/V9j9gNb5RIVzkzrOPycb/tcO7g3fU51
  33. PI0BgbWI72cQDYeUTZAgXx97WIYws/ADu3OQE74Bo4/aTSjQMuKDiZLVk9PrkCdsGH/9khszpRclB
  34. eWZoXLoSDqbE1yw+TnOa0xYUVilLnZ0hnfQ+PElZb51VliqsHVowf5neNMCDGj6DFZQY7N7ETExFy
  35. 0cynZ7mqg==;
  36. Received: from [185.228.80.59] (port=16999)
  37. by server.apniwebsites.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
  38. (Exim 4.91)
  39. (envelope-from <chris.mei@clothingfashion.pk>)
  40. id 1fwH97-00022m-1A; Sun, 02 Sep 2018 06:25:45 +0500
  41. Message-ID: <6E.92.00447.D1C3B8B5@smtp28.gate.ord1d.rsapps.net>
  42. MIME-Version: 1.0
  43. Content-Description: Mail message body
  44. Subject: Shared Interest
  45. To: Recipients <chris.mei@clothingfashion.pk>
  46. From: "Mei" <chris.mei@clothingfashion.pk>
  47. Date: Sat, 01 Sep 2018 19:33:42 -0700
  48. Reply-To: cliffkbc@yandex.com
  49. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  50. X-AntiAbuse: Primary Hostname - server.apniwebsites.com
  51. X-AntiAbuse: Original Domain - avellan.org
  52. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  53. X-AntiAbuse: Sender Address Domain - clothingfashion.pk
  54. X-Get-Message-Sender-Via: server.apniwebsites.com: authenticated_id: chris.mei@clothingfashion.pk
  55. X-Authenticated-Sender: server.apniwebsites.com: chris.mei@clothingfashion.pk
  56. X-MS-Exchange-Organization-Network-Message-Id: fd5043cb-82a8-44f5-5210-08d6107303fa
  57. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1447700;0;This mail has
  58. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  59. X-MS-Exchange-Organization-SCL: 0
  60. X-MS-Exchange-Organization-AuthSource: MBX08D-ORD1.mex08.mlsrvr.com
  61. X-MS-Exchange-Organization-AuthAs: Anonymous
  62. Content-type: text/plain;
  63. charset="UTF-8"
  64. Content-transfer-encoding: 7bit
  65.  
  66. Nice to meet you,
  67.  
  68. I work with the United overseas Bank (Singapore) as a professional finance regional Head.
  69.  
  70. Due to our shared interest on linkedlin, it is my desire to know you because i will like to share a benefiting business opportunity with you.
  71.  
  72.  
  73. Let me know if you might be of interest.
  74.  
  75.  
  76. Regards
  77. Christine Mei Leng
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement