API tools faq
paste
Advertisement
wavellan

20190225_PHISHING_SCAM_1

wavellan
Feb 25th, 2019
554
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.78 KB | None | 0 0
raw download clone embed print report
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Mon, 25 Feb 2019 08:54:01 -0600
  4. Received: from MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Mon, 25 Feb 2019 08:54:01 -0600
  7. Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
  8. MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Mon, 25 Feb 2019 08:54:00 -0600
  10. Return-Path: <ronnetta.harris@spdatallc.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 0
  13. X-Spam-Flag: NO
  14. X-Virus-Scanned: OK
  15. X-Orig-To: email@email.com
  16. X-Originating-Ip: [173.203.187.123]
  17. Authentication-Results: smtp26.gate.iad3a.rsapps.net; iprev=pass policy.iprev="173.203.187.123"; spf=pass smtp.mailfrom="ronnetta.harris@spdatallc.com" smtp.helo="smtp123.iad3a.emailsrvr.com"; dkim=pass header.d=spdatallc.com; dmarc=pass (p=quarantine; dis=none) header.from=spdatallc.com
  18. X-Suspicious-Flag: NO
  19. X-Classification-ID: 2f3f1e38-390d-11e9-ab1e-52540063aac2-1-1
  20. Received: from [173.203.187.123] ([173.203.187.123:42107] helo=smtp123.iad3a.emailsrvr.com)
  21. by smtp26.gate.iad3a.rsapps.net (envelope-from <ronnetta.harris@spdatallc.com>)
  22. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  23. id 74/8C-07674-881047C5; Mon, 25 Feb 2019 09:54:00 -0500
  24. Received: from smtp32.relay.iad3a.emailsrvr.com (localhost [127.0.0.1])
  25. by smtp32.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id B43375932;
  26. Mon, 25 Feb 2019 09:53:59 -0500 (EST)
  27. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=spdatallc.com;
  28. s=20180820-kp9lc76j; t=1551106439;
  29. bh=LotMdXLswWmvnbJeUb0fqbGh3AFxLeTYHoR0B9ZRnmA=;
  30. h=Date:Subject:From:To:From;
  31. b=cWrFFDMZFGoLJbv8oJBFFahx+Lh4pdEjDYiB/P2mdXIT9cLU7UNBLCDR4NmYHkwv1
  32. uMxBrg7H7gIiaPcOlp50gQd0dZ1w7YLtcDnsiCa5DuzqV31QCJ6gKEKm1tzIJy4i/M
  33. W0UbFXeOinTQQg61FGDq+//zlmoNDNp1LBE8YsaM=
  34. Received: from app9.wa-webapps.iad3a (relay-webapps.rsapps.net [172.27.255.140])
  35. by smtp32.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 378175917;
  36. Mon, 25 Feb 2019 09:53:59 -0500 (EST)
  37. X-Sender-Id: ronnetta.harris@spdatallc.com
  38. Received: from app9.wa-webapps.iad3a (relay-webapps.rsapps.net [172.27.255.140])
  39. by 0.0.0.0:25 (trex/5.7.12);
  40. Mon, 25 Feb 2019 09:53:59 -0500
  41. Received: from spdatallc.com (localhost.localdomain [127.0.0.1])
  42. by app9.wa-webapps.iad3a (Postfix) with ESMTP id DD04FA0052;
  43. Mon, 25 Feb 2019 09:53:58 -0500 (EST)
  44. Received: by webmail.emailsrvr.com
  45. (Authenticated sender: ronnetta.harris@spdatallc.com, from: ronnetta.harris8134957587@spdatallc.com)
  46. with HTTP; Mon, 25 Feb 2019 09:53:58 -0500 (EST)
  47. X-Auth-ID: ronnetta.harris@spdatallc.com
  48. Date: Mon, 25 Feb 2019 09:53:58 -0500 (EST)
  49. Subject: =?utf-8?Q?Call_=2F_Vmessage_from_=F0=9F=93=9E_=2B18134957587_=280m_28s=29?=
  50. =?utf-8?Q?.?=
  51. From: "18134957587@voicemailsrvr.com - 8134957587@voicemailsrvr.com - 8134957587@voicemailsrvr.com - 8134957587@voicemailsrvr.com" <ronnetta.harris8134957587@spdatallc.com>
  52. To: me@voicemailsrvr.com
  53. MIME-Version: 1.0
  54. Importance: Normal
  55. X-Priority: 3 (Normal)
  56. X-Type: html
  57. Message-ID: <1551106438.901721661@webmail.emailsrvr.com>
  58. X-Mailer: webmail/16.2.0-RC
  59. X-MS-Exchange-Organization-Network-Message-Id: d252844b-982d-403f-bf9b-08d69b3113f7
  60. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1483500;0;This mail has
  61. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  62. X-MS-Exchange-Organization-SCL: 0
  63. X-MS-Exchange-Organization-AuthSource: MBX06D-ORD1.mex08.mlsrvr.com
  64. X-MS-Exchange-Organization-AuthAs: Anonymous
  65. Content-type: multipart/alternative;
  66. boundary="B_3633928605_280210951"
  67.  
  68. > This message is in MIME format. Since your mail reader does not understand
  69. this format, some or all of this message may not be legible.
  70.  
  71. --B_3633928605_280210951
  72. Content-type: text/plain;
  73. charset="UTF-8"
  74. Content-transfer-encoding: 7bit
  75.  
  76. Calls / VM Messages
  77.  
  78. CID: (813) 495-7587
  79. CLID: (originally dialed number)
  80. Call received Tuesday, February 25, 2018 07:17 a.m.
  81. Your message is attached
  82. ---------------------------------------------------------------------------
  83.  
  84.  
  85. --B_3633928605_280210951
  86. Content-type: text/html;
  87. charset="UTF-8"
  88. Content-transfer-encoding: quoted-printable
  89.  
  90. <html>
  91. <head>
  92. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  93. </head>
  94. <body>
  95. <font face=3D"arial" size=3D"2">
  96. <p style=3D"margin:0;padding:0;margin: 0px; padding: 0px; color: #222222; fon=
  97. t-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; =
  98. font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; tex=
  99. t-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-sp=
  100. acing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-=
  101. decoration-style: initial; text-decoration-color: initial; font-family: 'com=
  102. ic sans ms'; font-size: 14pt;">
  103. <span style=3D"font-family: arial; font-size: small;"><span style=3D"font-size:=
  104. large;"><strong><img style=3D"margin: 0px 0.2ex; vertical-align: middle; max-=
  105. height: 24px;" src=3D"https://ci4.googleusercontent.com/proxy/lbAzNNOrIthINs_5=
  106. UHZNLJTPyCIf_xRDfzJO0kuW3YBIZoG8psRPL3IdBDpkVQjl-9WcifjKqg=3Ds0-d-e1-ft#https:=
  107. //mail.google.com/mail/e/1f4de" alt=3D"=F0=9F=93=9E">&nbsp;Calls
  108. / VM Messages</strong></span></span></p>
  109. <div style=3D"font-style: normal; font-variant-ligatures: normal; font-varian=
  110. t-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-a=
  111. lign: start; text-indent: 0px; text-transform: none; white-space: normal; wi=
  112. dows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color=
  113. : #ffffff; text-decoration-style: initial; text-decoration-color: initial; f=
  114. ont-family: 'comic sans ms'; font-size: large; color: #000000;">
  115. <div>
  116. <div id=3D"gmail-m_3870557349238162798gmail-m_-8537611089713259650gmail-x_gma=
  117. il-m_-5848349195331387979x_Item.MessageNormalizedBody" class=3D"gmail-m_387055=
  118. 7349238162798gmail-m_-8537611089713259650gmail-x_gmail-m_-584834919533138797=
  119. 9x__rp_D5 gmail-m_3870557349238162798gmail-m_-8537611089713259650gmail-x_gma=
  120. il-m_-5848349195331387979x_ms-font-weight-regular gmail-m_387055734923816279=
  121. 8gmail-m_-8537611089713259650gmail-x_gmail-m_-5848349195331387979x_ms-font-c=
  122. olor-neutralDark" style=3D"font-family: wf_segoe-ui_normal, 'Segoe UI', 'Segoe=
  123. WP', Tahoma, Arial, sans-serif, serif, EmojiFont;">
  124. <div class=3D"gmail-m_3870557349238162798gmail-m_-8537611089713259650gmail-x_=
  125. gmail-m_-5848349195331387979x_rps_1b07">
  126. <div>
  127. <div id=3D"gmail-m_3870557349238162798gmail-m_-8537611089713259650gmail-x_gma=
  128. il-m_-5848349195331387979x_x_SafeStyles1550570682">
  129. <div dir=3D"ltr">
  130. <div>
  131. <div dir=3D"ltr">
  132. <div dir=3D"ltr">
  133. <div dir=3D"ltr">
  134. <div dir=3D"ltr">
  135. <div dir=3D"ltr">
  136. <div>
  137. <table style=3D"color: #212121; font-size: 15px;" border=3D"0">
  138. <tbody>
  139. <tr>
  140. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  141. margin: 0px;">
  142. CID:</td>
  143. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  144. margin: 0px;">
  145. (813) 495-7587</td>
  146. </tr>
  147. <tr>
  148. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  149. margin: 0px;">
  150. CLID:</td>
  151. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  152. margin: 0px;">
  153. (originally dialed number)</td>
  154. </tr>
  155. <tr>
  156. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  157. margin: 0px;">
  158. Call received</td>
  159. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  160. margin: 0px;">
  161. Tuesday, February 25, 2018&nbsp; 07:17 a.m.</td>
  162. </tr>
  163. </tbody>
  164. </table>
  165. </div>
  166. <div>
  167. <div style=3D"text-align: center;">
  168. <table style=3D"font-family: inherit; font-stretch: inherit;" border=3D"0" cell=
  169. spacing=3D"0" width=3D"275" height=3D"15">
  170. <tbody>
  171. <tr>
  172. <td style=3D"font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; =
  173. margin: 0px; min-width: 50px; padding: 5px 20px;" bgcolor=3D"#000080">
  174. <span style=3D"color: white; font-size: small;"><span style=3D"font-family: 'Se=
  175. goe UI', serif, EmojiFont; font-weight: bold;"><a style=3D"color: #1155cc;" hr=
  176. ef=3D"http://www.x.co/6ngyG">Your message is attached</a><br>
  177. </span></span></td>
  178. </tr>
  179. </tbody>
  180. </table>
  181. </div>
  182. </div>
  183. <div><strong>--------------------------------------------------------------=
  184. -------------</strong></div>
  185. </div>
  186. </div>
  187. </div>
  188. </div>
  189. </div>
  190. </div>
  191. </div>
  192. </div>
  193. </div>
  194. </div>
  195. </div>
  196. </div>
  197. </div>
  198. <p style=3D"margin:0;padding:0;font-family: arial; font-size: 10pt; overflow-=
  199. wrap: break-word;">
  200. <span style=3D"font-family: arial; font-size: small;"><!--WM_COMPOSE_SIGNATUR=
  201. E_START--><!--WM_COMPOSE_SIGNATURE_END--></span></p>
  202. </font>
  203. </body>
  204. </html>
  205.  
  206.  
  207. --B_3633928605_280210951--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!