API tools faq
paste
Advertisement
benkow_

phishing

benkow_
Sep 6th, 2017
965
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.28 KB | None | 0 0
raw download clone embed print report
  1. Received: from HE1EUR01HT154.eop-EUR01.prod.protection.outlook.com
  2. (10.173.77.11) by VI1P195MB0221.EURP195.PROD.OUTLOOK.COM with HTTPS via
  3. VI1PR0701CA0025.EURPRD07.PROD.OUTLOOK.COM; Sat, 27 May 2017 14:17:22 +0000
  4. Received: from HE1EUR01FT045.eop-EUR01.prod.protection.outlook.com
  5. (10.152.0.59) by HE1EUR01HT154.eop-EUR01.prod.protection.outlook.com
  6. (10.152.1.44) with Microsoft SMTP Server (version=TLS1_2,
  7. cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1075.5; Sat, 27
  8. May 2017 14:17:22 +0000
  9. Authentication-Results: spf=softfail (sender IP is 172.104.33.181)
  10. smtp.mailfrom=australiancleaningforce.com; outlook.fr; dkim=none (message not
  11. signed) header.d=none;outlook.fr; dmarc=none action=none
  12. header.from=australiancleaningforce.com;
  13. Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
  14. australiancleaningforce.com discourages use of 172.104.33.181 as permitted
  15. sender)
  16. Received: from SNT004-MC5F17.hotmail.com (10.152.0.58) by
  17. HE1EUR01FT045.mail.protection.outlook.com (10.152.0.239) with Microsoft SMTP
  18. Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
  19. 15.1.1075.5 via Frontend Transport; Sat, 27 May 2017 14:17:21 +0000
  20. X-IncomingTopHeaderMarker: OriginalChecksum:015116F5CAF1ED9197671896D61BFA03C09676893D87444A874D5B991E48EEBD;UpperCasedChecksum:AB10FA9953DC9A5D0D1FEDE936DB45C04B00240EF97F389CC5CC43750C9550D4;SizeAsReceived:1044;Count:17
  21. Received: from australiancleaningforce.com ([172.104.33.181]) by SNT004-MC5F17.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
  22. Sat, 27 May 2017 07:17:19 -0700
  23. Received: from [200.94.17.168] (helo=User)
  24. by australiancleaningforce.com with smtp (Exim 4.82)
  25. (envelope-from <test@australiancleaningforce.com>)
  26. id 1dEcWl-0006VJ-12; Sat, 27 May 2017 22:17:11 +0800
  27. Reply-To: <bbarclays32@yahoo.com>
  28. From: Barclays Bank Plc <test@australiancleaningforce.com>
  29. Subject: Re: Foreign Payment Settlement.!!!z
  30. Date: Sat, 27 May 2017 09:16:45 -0500
  31. Content-Type: text/html; charset="Windows-1251"
  32. Content-Transfer-Encoding: 7bit
  33. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  34. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
  35. BCC:
  36. Return-Path: test@australiancleaningforce.com
  37. Message-ID: <SNT004-MC5F17Y9ZNMj004ab8ed@SNT004-MC5F17.hotmail.com>
  38. X-OriginalArrivalTime: 27 May 2017 14:17:20.0164 (UTC) FILETIME=[F3BA5E40:01D2D6F3]
  39. X-IncomingHeaderCount: 17
  40. X-MS-Exchange-Organization-Network-Message-Id: 75ce8961-dd5d-4479-57dd-08d4a50b1757
  41. X-EOPAttributedMessage: 0
  42. X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
  43. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  44. CMM-sender-ip: 172.104.33.181
  45. CMM-sending-ip: 172.104.33.181
  46. CMM-Authentication-Results: hotmail.com; spf=softfail (sender IP is
  47. 172.104.33.181) smtp.mailfrom=test@australiancleaningforce.com; dkim=none
  48. header.d=australiancleaningforce.com; x-hmca=fail
  49. header.id=test@australiancleaningforce.com
  50. CMM-X-SID-PRA: test@australiancleaningforce.com
  51. CMM-X-AUTH-Result: FAIL
  52. CMM-X-SID-Result: FAIL
  53. CMM-X-Message-Status: n:n
  54. CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
  55. CMM-X-Message-Info: OR3oMfwJnYFQpOsP+BCYjlZPszLZL9OTtDfV/4lzXYz9sXEcLxGdfWdHteZPja2UIy2DmFfoBybVCacjaHCW0GxFC/aHo8ObtiZ3mUBSUFl5RPZS5zjZkhbNK5xkj82v94peh0KUtG1GcFXIQmbz8MydU/ebnHY0VLs2lMYWLLWt36UjHf+DL8JILy+qW+4CCqsZ/gZ13cufo+AVCVm0dEkEEnlI9AG00x1k+cD45yOlnKvx4v1YilaA41FxhMI7
  56. X-MS-Exchange-Organization-SCL: 5
  57. X-MS-Exchange-Organization-PCL: 2
  58. X-MS-UserLastLogonTime: Sat, 27 May 2017 14:14:44 +0000
  59. X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01FT045;1:vmMWBuI5xO7PYwpRS99OA7kbrS2eVWvzR7p9mGYumEJHFY5peiXvAUf81sB/KA8tQ9xZRXh+j14mE3wyXCitCvTtghWTQwVqNkiKWb7zoclrKVnvPyZ7+N66vgERMsCNUqDDmHuGmAtuyjeiLfF+NA+fPjOjH49BzAD64dAm43m2bo6Do+nEuTKH3tfAhEgF
  60. X-Forefront-Antispam-Report: EFV:NLI;SFV:SPM;SFS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:HE1EUR01HT154;H:SNT004-MC5F17.hotmail.com;FPR:;SPF:None;LANG:en;
  61. X-MS-Exchange-Organization-AuthSource: HE1EUR01FT045.eop-EUR01.prod.protection.outlook.com
  62. X-MS-Exchange-Organization-AuthAs: Anonymous
  63. X-MS-PublicTrafficType: Email
  64. X-MS-Office365-Filtering-Correlation-Id: 75ce8961-dd5d-4479-57dd-08d4a50b1757
  65. X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:HE1EUR01HT154;
  66. X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01HT154;3:2yYZj7FKXg+ToPR1wCzIN/WMBbGthVL3g7rDfMmKZwWbnAVJY5wfU9bHqV9IRS0j0Q6PI8U9lqgkE6pyQy2/1dPsakWjH8SwASBFJnGzLLGTUMziMJOoDro7SyImAejyVw8MikEwykfVRvmX9rsRJd5yS61/j5N8q2cr9SZbJc+zUPMfUXzB1TGOVepPGUnCC2T6vYMhqUguWnn811C935TGd1454qE1Tz7QxrUdsd+mtodmLCw+Y4gViAyXOqccolBmeNkkHe52CNtQNQ4qJuoaSv4v9/piH67fg2Nb6OCLy1fJ2rvfE5jhI2neZcsxd2G41t64DGYK2RczMw1LL3TXn0YkgXyD1SwP7UtOEVdflzlOxhyrBiQrI7Q2JtSnggdNMZJKe+VTPcTQqRbrTA==;25:xLIWXMUbV/gR6Ed5HQGF3trfHrn7cUyB2WZ+V39c3ICgo+cwqCfi36nlgM9AXebAu3h17+UnT4kfXlQ1OgttM6pe+YLne/LSSVPnyHC/D5u8RQpbEsrihQ23rpzs33lfF2z3AMCEKmKFqWshTLl2Pws+IPg1V7MXDgvXQd1LtSW/CevVXgBispt7qSS0fCE/Qhcg+MxDhx7eYNQyjU8np/ZmHpoJj1NvmB/sOuJrNaRxxaVkinWZgwhYXMugE0rCsPYhT0n1TS7UMP+l7vsgZq1daVIt+HBlxSpMkVKXUT5/NN5NCQOyV6SSNU2VNYCbQzax+jzwNUBvtheFS4FiDBj7B6NFSHDyIr2f7Extj6R8xudBWR4+0PNTvz41Sbc6BwTEsjU9ukWSpyn4didrgia1woZdDYIikkOl6L7jfeBZNP614bOvdtmFMAUDwdTF8ZzvtguEtnwENgA+uR+RB2RYj+1MTz2ogUlv96Cbrnw=
  67. X-MS-Exchange-Organization-AVStamp-Service: 1.0
  68. X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01HT154;31:hYv9YELGdu06O00ThZuTusZuHwK7DlAZasK5xntXmBhYRgkqxmew6Dx/HPbXGJxkWAATdmq62UC4/dvHLbsUJub7YAo9Q1mWLj5pvJlC8FhmOxOFDT0eW5xV2D8NOj7l5dz8RgvQOWE2CKBJq4qBopSObCcWJLMcy073JJHbIG8jaz1/HDxi3pJS3Q6z8qCaEJ9w/An1JEKzjlKEv0UrN7YfZG7voJBAQ4o1D0Uri6P2JMfEcAIBJwlBFTAMLflRaZBezIBGlNq3WrHf8tI75V958/n6gX9S6umVNuQYMHitMc+bIkWo8jc8EupI+F9M;4:Fd862CMuSJMd+B4PBkwwO34vRiJWzoJbmaCD6y3kexTXErAX0PcOAvqCwlco5cHVLNE5sPVaygwAo2wxlINpQfV5vYHGD5yfCfrJj9NoWf9gU74E4Sz4RXrQaZpzhNQhemAFcQTfqhFxcB9yPpiTTs+SA2NOQ7PMmwjTUnwtuK9e9uPBjgPQpG2ngQ61HvoEuH4xlWTxc92G0BFcdmCzhf5dUxq59bRaKXMT7xWBER3MFC9G0hJwJqVNDt5VBEgQVkYvVKXp2lxCucyPELfO5y6mg4elk7lzIkmon3I3SMw=;23:HXlTwbyp0eaFpXmDzowHBz/TIsQ0+F4UEp7x5s9Vq5VOiRO/f0BYR1br0TBF+Q4sNIIpuQ/TRDw3EysgzFfioE8t14MDWCNHBvB4fv4FlVHAsSrngZCoz1Z5ZBmRbkGn4iMqNAUv+ftjw2ZTmny5tlrpxmoO3M6Kb+fOu7OMIr1XeYxaDLkFY/n5fcJXRKkiuLa3D/WFc1IMgeislj3gzA==
  69. X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(444000031);SRVR:HE1EUR01HT154;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR01HT154;
  70. X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01HT154;6:Yr+rO4uBB3PJ7/ry2GnUvEtvps3GlU/hIbnhupxmOigYJWAjpfsZXjwRSIo0ygpYozF3oG/hpyaVHEQ7AzZoq/iJvv0qY8KFyBQLpfrKEkdZU+xtXNaqnx75xPAdsG8Cdntbk0ihX2EFVYviJvEtCWt+D9pFHrmsZOU9GKNrMc32K3D3lSp8M4QtNKErbDXfdxAR4JA5rX8GMXusie4KUen5LZoEACSoAKk6G0+r0A09udm0SrZmchncajLzUeaQAAViQIIYcx4Mb7jLnzjlGd6zXd/VRznGrnjBm3WAwRQvKD6pzpaCzUWytMNQu8D7570uFgIucK/tVIFMxONsqx7zBnk5X3Bjno1m2sbEe+H4Tx9dHFvdjxdbj1ip4uFoUrcppmW1SPUdzrJ+jTyJ6Q==;5:XHAiTAW2D1ZsEzykfE86UpywDGiIGWxxQSAgYnhUvJdHONez5uYYx4f48on4rw9mmQpam4no5FCYWBv4Azyx0R1jdRjMzh/iTetY9jFOIt3wtjqyp6LE+UxBrzR/cBlD3k9ACwjtxTTJZF2oMlHmlo1h9BA0iwhMaqFgzHgluAk=;24:FhUWUXBSiZUO50VzdIwsE7ebMzkwkLbMnXjR2sC9UFm9FNZ8NOKo7dRJ15DsTiuIkO5hKK0FxJPu77xFBKdORg==
  71. SpamDiagnosticOutput: 1:22
  72. SpamDiagnosticMetadata: Default
  73. X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01HT154;7:OJk2wCb2gntaC7MPTVKw0UcpDypNTUpypLfsRIVHuHks83PyKrxKCkYClI/2euIhBOgOeZM30F5zsszD/kOX/kxqlG0PPVk1qxLxm9h9E/Na/lw7iFUtIV9wjd1rRrzq5/mTJYN1WQ6WLqhtzWhf/YMPTjQ21E8i3X7WhsyMnJu2meP/DK6tuMC9wfX7R+ZKHc9JvB3i8V9YhBVR8JYczGmrx4AYiH3paOCPQBZGr0Jd60mPQMGN9hJ732lMZSFwENR6vYiEfct2+OXMAJHIJZFj62FTkp8LV7AyMIophFVfNRNxDuNxwciqLy9r04bKzomrj0gzaPXdP+xnjIgfPQ==
  74. X-OriginatorOrg: outlook.com
  75. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 May 2017 14:17:21.3874
  76. (UTC)
  77. X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
  78. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  79. X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT154
  80. X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.5231152
  81. X-Microsoft-Exchange-Diagnostics:
  82. 1;VI1P195MB0221;27:dewva2UNXn+TcZcmZbAN/qA3hPFldE0EVlZ133PWCCCJbEpQbasVzNP8WlFVOJfJJcj4c3CSJRdLOe0XFynFuNthkxxwsJhQqP3hCutbV+gp06pfrg4UxdA5Tk0CezbRgTtJ0sjipO5W8INpM6bDnw==
  83. X-Microsoft-Antispam-Mailbox-Delivery:
  84. abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;psp:0;auth:0;dest:J;WIMS-SenderIP:172.104.33.181;WIMS-SPF:australiancleaningforce%2ecom;WIMS-DKIM:australiancleaningforce%2ecom;WIMS-822:test%40australiancleaningforce%2ecom;WIMS-PRA:test%40australiancleaningforce%2ecom;WIMS-AUTH:FAIL;ENG:(5062000095)(5061607181)(5061608081)(102400140)(102420017);RF:JunkEmail;OFR:SpamFilterAuthJ;
  85. MIME-Version: 1.0
  86.  
  87. <html><head>
  88. <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><title></title>
  89. </head>
  90. <body bgcolor="#FFFFFF" leftmargin="5" topmargin="5" rightmargin="5" bottommargin="5">
  91. <font size="2" color="#000000" face="Arial">
  92. <div>
  93. &nbsp;</div>
  94. <div>
  95. BARCLAY,S BANK PLC,UK</div>
  96. <div>
  97. 1 Churchill Place,</div>
  98. <div>
  99. London, E14 5HP</div>
  100. <div>
  101. From The Desk Of:</div>
  102. <div>
  103. Mr. Arnold Auckland</div>
  104. <div>
  105. (Foreign Operation Manager)</div>
  106. <div>
  107. &nbsp;</div>
  108. <div>
  109. Attention:</div>
  110. <div>
  111. &nbsp;</div>
  112. <div>
  113. I am Mr. Arnold Auckland from Barclays Bank PLC,UK. we had just formed a new forum which is the newly inaugurated World Debt Recovery committee (WDRC). My committee has a mandate to recover unpaid debts associated with NNPC contracts, Lottery fund, inheritance fund, loans and grants etc ranging from $1M-$95.5M owed to various beneficiaries and companies across the globe (Asia, Europe, USA, Africa, and Australia) and submit the list of the unpaid beneficiaries/companies to the 2 appointed official paying Banks for immediate payment of the fund.</div>
  114. <div>
  115. &nbsp;</div>
  116. <div>
  117. In the course of our investigation, your email address/particulars were shortlisted among the first fifteen individuals yet to be paid hence this email. However, we received a petition today from one Mrs.Christina Morgan that you are dead. According to her, you died in a plane crash as such your fund should be paid to her as the apparent heir. She has also submitted her Bank account with Bank of America for the transfer of the fund to her.</div>
  118. <div>
  119. &nbsp;</div>
  120. <div>
  121. To avoid undue delay or paying the fund to wrong individual/beneficiary, we have decided to contact you for confirmation. If we fail to hear from you after 72 hours, it will be assumed that the petition of Mrs.Morgan is true and the fund will be paid to her without further delay.</div>
  122. <div>
  123. &nbsp;</div>
  124. <div>
  125. Therefore, We would like you to choose below your choice of fund release:</div>
  126. <div>
  127. &nbsp;</div>
  128. <div>
  129. (A) Bank Transfer/Online Banking</div>
  130. <div>
  131. (B) Certified Bank Draft/Cheque</div>
  132. <div>
  133. (C) ATM Card</div>
  134. <div>
  135. (D) Consignment</div>
  136. <div>
  137. &nbsp;</div>
  138. <div>
  139. Your full personal information is also required as below which will be needed for the transfer of your fund.</div>
  140. <div>
  141. &nbsp;</div>
  142. <div>
  143. (A) Full name and residential address</div>
  144. <div>
  145. (B) Next of kin</div>
  146. <div>
  147. (C) Occupation</div>
  148. <div>
  149. (D) Nationality</div>
  150. <div>
  151. (E) Bank Account Information</div>
  152. <div>
  153. (F) Telephone numbers</div>
  154. <div>
  155. (G) Scan the first page of your international passport or drivers license, recent passport photograph, send all via email attachment.</div>
  156. <div>
  157. &nbsp;</div>
  158. <div>
  159. Your urgent response is always required because you have a limited time to execute this fund.</div>
  160. <div>
  161. &nbsp;</div>
  162. <div>
  163. Sincerely Yours</div>
  164. <div>
  165. Mr. Arnold Auckland</div>
  166. <div>
  167. &nbsp;</div>
  168. </font>
  169. </body></html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!