API tools faq
paste
Guest User

freescore360 ILLEGAL SPAM! [a=351]

a guest
Sep 4th, 2018
129
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.89 KB | None | 0 0
raw download clone embed print report
  1. 9/4/2018 11:21:10 AM
  2.  
  3. freescore360.com
  4.  
  5. Spammed url:
  6. http://click.maaxmarket.com/wf/click?upn=-2B-2BcX8n0mjp49UJHr6TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQIAhTwo60Ahr3ativDPt-2FQI4yoaBhfEVFXYn6KEmWYivUf-2Fudaf6fd7twaQUehUDP-2Fkk-2FeZzmIq4-2FGOzaskKKmfOOBs6vBzU-3D
  7.  
  8. wget "http://click.maaxmarket.com/wf/click?upn=-2B-2BcX8n0mjp49UJHr6TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQIAhTwo60Ahr3ativDPt-2FQI4yoaBhfEVFXYn6KEmWYivUf-2Fudaf6fd7twaQUehUDP-2Fkk-2FeZzmIq4-2FGOzaskKKmfOOBs6vBzU-3D"
  9. The name is too long, 343 chars total.
  10. Trying to shorten...
  11. New name is click?upn=-2B-2BcX8n0mjp49UJHr6TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQI.
  12. --2018-09-04 11:21:07-- http://click.maaxmarket.com/wf/click?upn=-2B-2BcX8n0mjp49UJHr6TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQIAhTwo60Ahr3ativDPt-2FQI4yoaBhfEVFXYn6KEmWYivUf-2Fudaf6fd7twaQUehUDP-2Fkk-2FeZzmIq4-2FGOzaskKKmfOOBs6vBzU-3D
  13. Resolving click.maaxmarket.com (click.maaxmarket.com)... 167.89.118.52, 167.89.123.54
  14. Connecting to click.maaxmarket.com (click.maaxmarket.com)|167.89.118.52|:80... connected.
  15. HTTP request sent, awaiting response... 302 Found
  16. Location: http://burinator.com/19948597db3526a800/ [following]
  17. The name is too long, 343 chars total.
  18. Trying to shorten...
  19. New name is click?upn=-2B-2BcX8n0mjp49UJHr6TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQI.
  20. --2018-09-04 11:21:08-- http://burinator.com/19948597db3526a800/
  21. Resolving burinator.com (burinator.com)... 199.212.87.136
  22. Connecting to burinator.com (burinator.com)|199.212.87.136|:80... connected.
  23. HTTP request sent, awaiting response... 200 OK
  24. Length: 135 [text/html]
  25.  
  26. http://burinator.com/19948597db3526a800/
  27. meta-refresh
  28. https://savecustomershopping.com/creditscore/?s1=471870&s2=779005258&s3=
  29. Links to:
  30. https://trkot.cake.aclz.net/?a=351&oc=1074&c=206&s1=471870&s2=779005258
  31.  
  32. Affiliate parameter:
  33.  
  34. a=351
  35.  
  36. wget "https://trkot.cake.aclz.net/?a=351&oc=1074&c=206&s1=471870&s2=779005258"
  37. --2018-09-04 11:23:45-- https://trkot.cake.aclz.net/?a=351&oc=1074&c=206&s1=471870&s2=779005258
  38. Resolving trkot.cake.aclz.net (trkot.cake.aclz.net)... 52.87.61.210, 54.175.169.90, 34.193.67.225
  39. Connecting to trkot.cake.aclz.net (trkot.cake.aclz.net)|52.87.61.210|:443... connected.
  40. HTTP request sent, awaiting response... 302 Found
  41. Location: https://www.freescore360.com/EnterCampaign.aspx?id=3931&ord=1&append=1&edata=471870&edata2=779005258&edata3=&edata4=&edata5=&edata6=50330510&transid=50330510&ckmreqid=50330510&ckmat=1 [following]
  42. --2018-09-04 11:23:46-- https://www.freescore360.com/EnterCampaign.aspx?id=3931&ord=1&append=1&edata=471870&edata2=779005258&edata3=&edata4=&edata5=&edata6=50330510&transid=50330510&ckmreqid=50330510&ckmat=1
  43. Resolving www.freescore360.com (www.freescore360.com)... 184.86.68.64
  44. Connecting to www.freescore360.com (www.freescore360.com)|184.86.68.64|:443... connected.
  45.  
  46.  
  47. That domain on its own redirects to
  48.  
  49. https://www.freescore360.com/
  50.  
  51.  
  52. https://www.freescore360.com/EnterCampaign.aspx?id=3931&ord=1&append=1&edata=471870&edata2=779005258&edata3=&edata4=&edata5=&edata6=50330510&transid=50330510&ckmreqid=50330510&ckmat=1
  53.  
  54. Human-readable:
  55.  
  56. https://www.freescore360.com/EnterCampaign.aspx?
  57. id=3931
  58. &ord=1
  59. &append=1
  60. &edata=471870
  61. &edata2=779005258
  62. &edata3=
  63. &edata4=
  64. &edata5=
  65. &edata6=50330510
  66. &transid=50330510
  67. &ckmreqid=50330510
  68. &ckmat=1
  69.  
  70.  
  71. Complete spam message including full message headers:
  72.  
  73. https://www.freescore360.com/us/6019/373f031/legal/contactus.aspx
  74.  
  75. Delivered-To: mikobaby@gmail.com
  76. Received: by 2002:a1c:884b:0:0:0:0:0 with SMTP id k72-v6csp2799909wmd;
  77. Mon, 3 Sep 2018 10:15:37 -0700 (PDT)
  78. X-Google-Smtp-Source: ANB0VdZjHik5ldDSGr7r2qgXon2s3MTWJFgptObEYVEulvFMgJ2oJsd91eXSO+KXVUngv5/D8sBs
  79. X-Received: by 2002:adf:eb0d:: with SMTP id s13-v6mr19521793wrn.174.1535994937428;
  80. Mon, 03 Sep 2018 10:15:37 -0700 (PDT)
  81. ARC-Seal: i=1; a=rsa-sha256; t=1535994937; cv=none;
  82. d=google.com; s=arc-20160816;
  83. b=Fye3RRdlWLyeqEbUmd63jd+a+ZpHQ78VXEidJ7mwe2ayU/TLZLWJNIDYsOHKdlZnsR
  84. mevr5isULXTgmSCSDvkFcjyIHLxhgNkUqTho+om6QQZE6t5ERIx97UZREotWEB4s3pnn
  85. RSKuIu90vtRuaMJqZ6FV8kgvM0oibmHDBXteLCBERCLSayk0ha0aCfO7WnN5dFZQX2wN
  86. Sjc8j2Nwejvgjx5IxGwq6UjixsaxXSqYUMgX74hojE1eQBY/jwsvJvScplJZ6M6BgR1l
  87. /atofrVha2WoE/vbxMRfUZN4b+36oO7dbeFCYfjmzJhXnUNIIFid8YHQpG5YZuX8p6DY
  88. Gvhg==
  89. ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
  90. h=content-transfer-encoding:mime-version:reply-to:message-id:to
  91. :subject:date:from:list-unsubscribe;
  92. bh=Ao9IuBq6e+TuaFb/KofM2FdWCVSGe6lIBCEQkqUVMEo=;
  93. b=VHmHY4xS1h8N6H7YRKlqL0Gx4szoRRzNEakVQlabmIQyt2Z9rxC2VOKFbVY3ZouRZG
  94. 2Gi6SNZxBYSJSN/h0crDKWm5R5ejpTyafgSph77rl6SDp5TikH8O1Ey3Sltuw3ds3Sxw
  95. /YIq1A/UZl2S4NW/OhEDIFt5cxniyXcUvbyNxDUV7vSfJt+CDiYol+cCYbxZrLuSUbP0
  96. sdDZcCgk5nRqlb9IhSqKlBSVDWX9FW6E8UW9Zb+5G8H0diaCMtZNoxm8ZoQ5tRo2Wbbv
  97. BfKfyCXV88D6zOfX9QZdP+xO/dUFYVb2TSaEmwjKK4YY+VfqwZIoDTEWvQQCPp7g7nV+
  98. ZLaw==
  99. ARC-Authentication-Results: i=1; mx.google.com;
  100. spf=pass (google.com: domain of pz16klgajf3ungxmsdvo@spitouuut.thebones.onmicrosoft.com designates 93.113.206.62 as permitted sender) smtp.mailfrom=PZ16KLGAJF3UNGXMSDVO@spitouuut.thebones.onmicrosoft.com
  101. Return-Path: <PZ16KLGAJF3UNGXMSDVO@spitouuut.thebones.onmicrosoft.com>
  102. Received: from quadro-inde.com (vps-37483.fhnet.fr. [93.113.206.62])
  103. by mx.google.com with ESMTP id l3-v6si8757525wme.150.2018.09.03.10.15.37
  104. for <mikobaby@gmail.com>;
  105. Mon, 03 Sep 2018 10:15:37 -0700 (PDT)
  106. Received-SPF: pass (google.com: domain of pz16klgajf3ungxmsdvo@spitouuut.thebones.onmicrosoft.com designates 93.113.206.62 as permitted sender) client-ip=93.113.206.62;
  107. Authentication-Results: mx.google.com;
  108. spf=pass (google.com: domain of pz16klgajf3ungxmsdvo@spitouuut.thebones.onmicrosoft.com designates 93.113.206.62 as permitted sender) smtp.mailfrom=PZ16KLGAJF3UNGXMSDVO@spitouuut.thebones.onmicrosoft.com
  109. Received: from s.okazik.pl (s.okazik.pl. 216.244.76.116)
  110. List-Unsubscribe: <-.@cisco.com.cisco.com.uk>
  111. From: 3 Bureau Credit Scores <QSZPYKNLFEYYVDL@qszpyknlfeyyvdl.cisco.com.uk>
  112. Date: Sun, 02 Sep 2018 22:07:45 +0200
  113. Subject: RE : Your 2018 transunion equifax and experian credit scores 09/02/2018
  114. To: <me@cisco.com.uk>
  115. Message-Id: <-QSZPYKNLFEYYVDL.inverse.bluejaylife.com@cisco.com>
  116. X-EMMAIL: matthewwpowers0@inverse.bluejaylife.com
  117. Reply-To: <lopitigylopez@engineer.com>, <contact@zapier.com>, <ertty@excitingsoftwareupdates.com>, <fdfg@cedura.net>, <hdfgfg@californiaalmondbutter.com>, <vcbgfh@promosyonelit.com>, <tjr@pokesoku.net>, <ertcxvfgty@wordpressformation.com>, <ghfdg@guidacasavenezia.it>
  118. MIME-Version: 1.0
  119. Content-Transfer-Encoding: quoted-printable
  120. Content-Type: text/html; charset=UTF-8
  121.  
  122. <center>
  123. <a href=3D"http://click.maaxmarket.com/wf/click?upn=3D-2B-2BcX8n0mjp49UJHr6=
  124. TChcvqr4njvNDNTYyjw3oflhxqBLFit7-2B8nV51d2uSdggbG_pfOhtRq9huXtjwyFyc-2B-2BZ=
  125. CuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUE-2B1euO8rt6wvIwPMe3ZJZEzhh-=
  126. 2BMEWNU106ji8-2FCWwLAEDF5awkHeBuC2Qz2BAt7BuFK4TphQe7LQIAhTwo60Ahr3ativDPt-2=
  127. FQI4yoaBhfEVFXYn6KEmWYivUf-2Fudaf6fd7twaQUehUDP-2Fkk-2FeZzmIq4-2FGOzaskKKmf=
  128. OOBs6vBzU-3D"><img src=3D"https://lh3.googleusercontent.com/nw0MkMzUQSjossB=
  129. WukigOrGck2Ud4r0-4dH6ku9bnwmWJfGRbsaeeUiI0Rq33aPtect3OVwBnmjzwvD3K7B8yOz-bQ=
  130. IogoV0MGulBZF8vPtScQEVAXHMsYOjxSG9o_KlEAtllfA6q2Rw855aRwfi3rLnM_ndaSYkjGx6f=
  131. rMr98kZ8-dAP5Ic0mAVSdALJ0DHynFgpzJ8TX53GYWG8k3iRl7i89Y5c4ZchBEPxhDMpI-5eo1c=
  132. KqWEv6jr-d7Tk05AZ6ttxnFKt7AZCrnsC2VMpnOcRTUC3rUznfvceNxEq9_vO62iMGMolkCsyz6=
  133. uKBkE2FZIatvhR0ZWOA1_j90zXMf0adBCngj1cKjcr1EkY9Ri1Ee1y4EIz8qtIAvJwx_F6D04nz=
  134. zye8KxY3gJycqjZKJxHu7GtKo-tF5cU1pXs8FVD4SefMVlTr5tOx-LXWZ21wfdnl7l_AgB0cTJU=
  135. 4tNKw0nacwRl7kd9292rFGPKhmMUuGfUFsZPGM7LG-V9ISwEVUaqpOIkNnxzw6S8mJ8vJWt_cxI=
  136. AGdykMkTtdGCHlUSD9fg9phj7sHeUzmGypV476-jLPa6RZLS770FEjNNz_TMvlMXwYst_Tg1IkO=
  137. kFY8m0_JSmZaPhU_7M6iy8w=3Dw719-h507-no" alt=3D"See Your Score"></a>=20
  138. <br>
  139. <a href=3D"http://click.maaxmarket.com/wf/click?upn=3D-2B-2BcX8n0mjp49UJHr6=
  140. TChcjnWcsXEe1tXc-2BUfrtIdtEErPYOE2BeJ3fJNVb-2BsMByDCxr-2BQ94Qk0is6zugfGAKmg=
  141. -3D-3D_pfOhtRq9huXtjwyFyc-2B-2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3=
  142. JZtUE-2B1euO8rt6wvIwPMe3ZJZLBCM-2BQMjdNEhX7fFcZah-2BdVr-2BEXrFvEauD3SiRXQ9C=
  143. KNSDj9BvP3l4iMl7RsalEWudCpkMtkEHjnZkMuDysnQdT-2FQZBDcKZzOWZ8hQoSGQbLYbsFo-2=
  144. BAqdak3OfHdAWv1kLl5KHQN0nw4J2czV4L2Yg-3D"><img src=3D"https://lh3.googleuse=
  145. rcontent.com/nVWrLKht2haJn7OfPfDIb32-rvYrrQul7vvp8UlNLJbo6DizEsy97N2HePv6CI=
  146. TxgwdrolEiS7X9dbRkfKcsBEwgq1Q6q7RBbkl69DRxl_zv-GKOQAgsarezvBYm8Hwsl9S6WjxiI=
  147. lmJwh-_qBNwc5pFEkAZjl-Y3jqN-zviAIcs9Yu8GYlyM0NWNDdGbRVnLVSweJWlBa4gl-F30WIB=
  148. CPGcVHNND5T5FLfoNyvFHIMR9mJTPcYdssMbIshsBxyKyroljn46JyGfnPaLwY532omRG362oLE=
  149. I0JZmtJgFZGVjPF3xXI-QwzJxaiAAEVIW6LSE3_OLMDFn9mUoY_2kyRHWF1JB7ClWPa-B5soLFk=
  150. VmganFN9iz4lnwS9mtwqtETSjvc_Cl5Mw3kEDQ8z8MfuDeP3pfV1aF8v7S632BCJ72nYS6iR-Me=
  151. 5C4sxU-Adw9LSfNQe87cjwq7yP2E3j83TePADHAHRcEiMrla5jGOANmUf5-meqhziqwmQNmAg14=
  152. aZg3mjdMyId9Pz9G51D3foDUG3S6y8QHtaj02aHF0VyfMeZme_FOK4yBcBEI9NIpOb7PIvvAmNY=
  153. NTyDl3neUJsVihZHpkPRC2Ee3ysxEgFwHT5lkYUI7JKNrzWu11A=3Dw641-h254-no" alt=3D"=
  154. unsub link"></a>=20
  155. <br>
  156. </center>
  157.  
  158. <p>If you&#39;d like to unsubscribe and stop receiving these emails <a href=
  159. =3D"http://click.maaxmarket.com/wf/unsubscribe?upn=3DpfOhtRq9huXtjwyFyc-2B-=
  160. 2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtUTzD3GB7Xhf5M80K3YCG-2B3-2=
  161. F9wzWn3bku-2F95S7pPoX1JLvAepxYDFayVapUFKHsolgm9Vtk4BwPg4xerSq1i9Zq6vwQe0veP=
  162. Rfz99dOlOExXG8RxC2kXyI8UNDgko4RHwFgo9WYI6ZM-2FFDEQ7bK7JwFSjapi0ygRUClCi0TMY=
  163. stLk-3D">click here</a>.</p>
  164.  
  165. <img src=3D"http://click.maaxmarket.com/wf/open?upn=3DpfOhtRq9huXtjwyFyc-2B=
  166. -2BZCuPpPjrCLzUweoH9BrPOa04599I-2FM9-2FVruFlLT3JZtU3R533-2BCR-2F-2FNhpfTkxW=
  167. Adn40OcJbbl7rUBkOeEKKFsYNQhSHZ6I-2B3Vb-2Ftfb-2FjQ41tIPlK3pv2HvLFNMhCxbgPlmr=
  168. POyCTwIst9DRbDgLtHQAEK-2FxwSl1YT5ycdWPdjTr6jsTFohtFrPZBDzbI-2FEqpakX9FpY1Me=
  169. ELQO1GhQ6r7tU-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"h=
  170. eight:1px !important;width:1px !important;border-width:0 !important;margin-=
  171. top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margi=
  172. n-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;pa=
  173. dding-right:0 !important;padding-left:0 !important;"/>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!