Advertisement
wavellan

20190418_PHISHING_SCAM_1

Apr 18th, 2019
540
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.78 KB | None | 0 0
  1. Saudi Aramco Crude Oil Company.
  2. P.O. Box 5000. Dhahran 31311,
  3. Dhahran-Saudi Arabia.
  4.  
  5. Dear Friend,
  6.  
  7. I have a legit and genuine lucrative business deal to discuss with you.Can i trust you to be a sincere partner to handle the business? For more information reply back.
  8.  
  9. Mrs. Reem Nasser,
  10. Sales/Marketing Manager
  11. Saudi Aramco Crude Oil Company.
  12.  
  13.  
  14.  
  15.  
  16. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  17. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  18. id 15.0.1473.3 via Mailbox Transport; Thu, 18 Apr 2019 17:52:23 -0500
  19. Received: from MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) by
  20. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  21. id 15.0.1473.3; Thu, 18 Apr 2019 17:52:22 -0500
  22. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  23. MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) with Microsoft SMTP Server (TLS)
  24. id 15.0.1473.3 via Frontend Transport; Thu, 18 Apr 2019 17:52:23 -0500
  25. Return-Path: <[email protected]>
  26. X-Spam-Threshold: 95
  27. X-Spam-Score: 100
  28. Precedence: junk
  29. X-Spam-Flag: YES
  30. X-Virus-Scanned: OK
  31. X-Orig-To: [email protected]
  32. X-Originating-Ip: [200.17.203.40]
  33. Authentication-Results: smtp36.gate.ord1d.rsapps.net; iprev=pass policy.iprev="200.17.203.40"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="sarandi.ufpr.br"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=ufpr.br
  34. X-Suspicious-Flag: NO
  35. X-Classification-ID: 9ff16a44-622c-11e9-92c4-525400c11307-1-1
  36. Received: from [200.17.203.40] ([200.17.203.40:52226] helo=sarandi.ufpr.br)
  37. by smtp36.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
  38. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  39. id 8D/AE-17434-6AFF8BC5; Thu, 18 Apr 2019 18:52:22 -0400
  40. Received: from localhost (localhost [127.0.0.1])
  41. by sarandi.ufpr.br (Postfix) with ESMTP id 8186A4E4B8;
  42. Thu, 18 Apr 2019 19:52:20 -0300 (-03)
  43. X-Spam-Level: *********
  44. X-Spam-Status: Yes, score=9.993 tagged_above=-10 required=6.6
  45. tests=[ALL_TRUSTED=-1, BAYES_50=0.8, DEAR_FRIEND=2.577,
  46. DNS_FROM_AHBL_RHSBL=1.699, FREEMAIL_FORGED_REPLYTO=2.095,
  47. FREEMAIL_REPLYTO_END_DIGIT=0.25, HK_SCAM_S7=1, MISSING_HEADERS=1.021,
  48. REPLYTO_WITHOUT_TO_CC=1.552, RP_MATCHES_RCVD=-0.001]
  49. autolearn=no autolearn_force=no
  50. Received: from sarandi.ufpr.br ([127.0.0.1])
  51. by localhost (sarandi.ufpr.br [127.0.0.1]) (amavisd-new, port 10032)
  52. with ESMTP id t92CPHKUJNwf; Thu, 18 Apr 2019 19:52:20 -0300 (-03)
  53. Received: from localhost (localhost [127.0.0.1])
  54. by sarandi.ufpr.br (Postfix) with ESMTP id 16DAA4E4DD;
  55. Thu, 18 Apr 2019 19:52:20 -0300 (-03)
  56. Received: from sarandi.ufpr.br ([127.0.0.1])
  57. by localhost (sarandi.ufpr.br [127.0.0.1]) (amavisd-new, port 10026)
  58. with ESMTP id n0C9y8yOWxQa; Thu, 18 Apr 2019 19:52:19 -0300 (-03)
  59. Received: from guapore.ufpr.br (guapore.ufpr.br [10.10.5.245])
  60. by sarandi.ufpr.br (Postfix) with ESMTP id C78474E4DB;
  61. Thu, 18 Apr 2019 19:52:19 -0300 (-03)
  62. Date: Thu, 18 Apr 2019 19:52:19 -0300
  63. From: Saudi Aramco Crude Oil Company. <[email protected]>
  64. Reply-To: Saudi Aramco Crude Oil Company. <[email protected]>
  65. Message-ID: <[email protected]>
  66. Subject: partnership
  67. MIME-Version: 1.0
  68. X-Mailer: Zimbra 8.0.7_GA_6021 (zclient/8.0.7_GA_6021)
  69. Thread-Topic: partnership
  70. Thread-Index: NIWZvr7PYst8NCYckdORvVFbajWbCQ==
  71. To: Undisclosed recipients:;
  72. X-MS-Exchange-Organization-Network-Message-Id: 0dbb93df-55c7-4ac5-00a5-08d6c4508516
  73. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1494500;0;This mail has
  74. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  75. X-MS-Exchange-Organization-SCL: 5
  76. X-MS-Exchange-Organization-AuthSource: MBX01C-ORD1.mex08.mlsrvr.com
  77. X-MS-Exchange-Organization-AuthAs: Anonymous
  78. Content-type: text/plain;
  79. charset="UTF-8"
  80. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement