Advertisement
wavellan

20201212_PHISHING_SCAM_1

Dec 12th, 2020 (edited)
162
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.00 KB | None | 0 0
  1. Google Forms
  2. Dear Sir/Madam/Mr./Mrs.,
  3.  
  4. To whom it may concern, The International Monetary Fund (IMF) through our department, Financial Recovery Division (FRD) team. has approved all scam victim/ victim of circumstance. all participants were selected randomly through computer draw system and entitle to receive compensation in excess of ($2,500,000.00) each.
  5.  
  6. The fund was approved to be deliver to you within 2 days by cash through diplomatic courier services. PLEASE NOTE: ( $5000.00) was removed from your entitlement fund for all logistics expenses. Therefore, what you should be expecting to receive is a cash of ($2,495,000.00).Kindly reply back to Greg Dexter the head of Financial recovery division at ([email protected]) for guideline and claim.
  7. Untitled form
  8. FILL OUT FORM
  9. Create your own Google Form
  10.  
  11.  
  12.  
  13.  
  14. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  15. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  16. id 15.0.1497.2 via Mailbox Transport; Sat, 12 Dec 2020 17:25:42 -0600
  17. Received: from MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) by
  18. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  19. id 15.0.1497.2; Sat, 12 Dec 2020 17:25:42 -0600
  20. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  21. MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) with Microsoft SMTP Server (TLS)
  22. id 15.0.1497.2 via Frontend Transport; Sat, 12 Dec 2020 17:25:41 -0600
  23. Return-Path: <3dVHVXwkJBHIcQdedQysyWcQYb.SecRYbbQlUbbQd.ehW@trix.bounces.google.com>
  24. X-Spam-Threshold: 95
  25. X-Spam-Score: 100
  26. Precedence: junk
  27. X-Spam-Flag: YES
  28. Authentication-Results: smtp13.gate.iad3b.rsapps.net x-tls.subject="/C=US/ST=California/L=Mountain View/O=Google LLC/CN=smtp.gmail.com"; auth=pass (cipher=AES128-GCM-SHA256)
  29. X-Virus-Scanned: OK
  30. X-Orig-To:
  31. X-Originating-Ip: [209.85.222.200]
  32. Authentication-Results: smtp13.gate.iad3b.rsapps.net; iprev=pass policy.iprev="209.85.222.200"; spf=pass smtp.mailfrom="3dVHVXwkJBHIcQdedQysyWcQYb.SecRYbbQlUbbQd.ehW@trix.bounces.google.com" smtp.helo="mail-qk1-f200.google.com"; dkim=pass header.d=gmail.com; dmarc=pass (p=none; dis=none) header.from=gmail.com
  33. X-Suspicious-Flag: NO
  34. X-Classification-ID: 59b5bac2-3cd1-11eb-a18c-5254001dfc40-1-1
  35. Received: from [209.85.222.200] ([209.85.222.200:55664] helo=mail-qk1-f200.google.com)
  36. by smtp13.gate.iad3b.rsapps.net (envelope-from <3dVHVXwkJBHIcQdedQysyWcQYb.SecRYbbQlUbbQd.ehW@trix.bounces.google.com>)
  37. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES128-GCM-SHA256
  38. subject="/C=US/ST=California/L=Mountain View/O=Google LLC/CN=smtp.gmail.com")
  39. id 30/60-17419-57155DF5; Sat, 12 Dec 2020 18:25:41 -0500
  40. Received: by mail-qk1-f200.google.com with SMTP id g5so9249698qke.22
  41. for <>; Sat, 12 Dec 2020 15:25:41 -0800 (PST)
  42. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  43. d=gmail.com; s=20161025;
  44. h=mime-version:reply-to:message-id:date:subject:from:to;
  45. bh=b8XHb2aZqbP/XyJyZZlyaBLcASZCJZFwkvPr7U/r5p0=;
  46. b=S991v0RYZfoyAqfMXk9HulRZ/UtZ/4eqRc4HUL/KoelYPQs+bNNq9BeMWSTuBt8I7E
  47. T5l2qvhFP/ir1k5P3Gu/9pNWloD1c+3ZZC/7bvPJtZrcIui+cMoE7+F3IvZeSSPGZTj7
  48. HiwOrn05lU796AYAZsV9RQv8X4WbnXn7PDEzB4mtPLyKx4tV8FLPFWhmDMCzK/cc+0rG
  49. VZQblFKpMnB771/qmqtB35iMT4d0/7Owz0dAYU4V0gaC0b19fQmfpHXgV2F4/6blw9sr
  50. VOROz2bWaWSDgzXbCA+4S4R3ZQ/x1qAVuUO7HK7D47JXcM9sc1ahvNwU/peni9bsb3Ba
  51. 6NRA==
  52. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  53. d=1e100.net; s=20161025;
  54. h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
  55. :from:to;
  56. bh=b8XHb2aZqbP/XyJyZZlyaBLcASZCJZFwkvPr7U/r5p0=;
  57. b=ZzIG3PMQB6Lv7qH5vqJOA0w8AyUvi8fXXierI4S56AZElEFZtcUqLPUExwH6/9kEt2
  58. kYTCVrU5sFsfMGRzAUigvJXGPdePWeDNGoft88Amq9UYQxchCs1cL+VRP09OxDYLokgH
  59. o263Ppv0RjEDcVET45VBvCxLmYt7HNXk1yBDmBGNKsl7Tm/LnW965cHMzTruNUIzoEOm
  60. g95buCtxKwcfiOJvFo4hvUb2VDFjRE1hb5VTQHKOrpQS9OhJKPhfs+neTVQrZjzWiW7l
  61. 9KJo1BAaWPMrWBKYZz1dr1LU88jJpP7hTUw7wWI6Y3SiKhoULjg1s95rR+58fs3PiXVm
  62. BM6Q==
  63. X-Gm-Message-State: AOAM531AsBXb3QXJAfBfi1aluPuilUbrlMvg2146olhgu0G5nc3E5b5S
  64. hSQpUPTLO934WpQzldlMCjCjZ2VqWN39sk1RhxgK
  65. MIME-Version: 1.0
  66. X-Received: by 2002:a05:6214:14ae:: with SMTP id bo14mt24807183qvb.16.1607815541124;
  67. Sat, 12 Dec 2020 15:25:41 -0800 (PST)
  68. X-No-Auto-Attachment: 1
  69. Message-ID: <[email protected]>
  70. Date: Sat, 12 Dec 2020 23:25:41 +0000
  71. Subject: Read Carefully
  72. To:
  73. X-MS-Exchange-Organization-Network-Message-Id: bdb2a404-fd05-4b1f-b5e5-08d89ef53e3d
  74. X-MS-Exchange-Organization-SCL: 5
  75. X-MS-Exchange-Organization-AuthSource: MBX11D-ORD1.mex08.mlsrvr.com
  76. X-MS-Exchange-Organization-AuthAs: Anonymous
  77. Content-type: multipart/alternative;
  78. boundary="B_3690652344_1042386500"
  79.  
  80. > This message is in MIME format. Since your mail reader does not understand
  81. this format, some or all of this message may not be legible.
  82.  
  83. --B_3690652344_1042386500
  84. Content-type: text/plain;
  85. charset="UTF-8"
  86. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement