recon-scout

2/8/18 Shopify Phishing Campaign Headers

Feb 8th, 2018
135
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.85 KB | None | 0 0
  1. Received: by 10.55.101.209 with SMTP id z200msqkb;
  2. Wed, 7 Feb 2018 05:56:49 -0800 (PST)
  3. X-Google-Smtp-Source: AH8x225Wh9r1XeBaLfPhg6HPzIvOmJq8jsDxHjLVQHsIvIWpyZkYzdqX7Xrl02ZIDmUNJrj9Bote
  4. X-Received: by 10.223.151.158 with SMTP id s30mr5580201wrb.70.1518011809216;
  5. Wed, 07 Feb 2018 05:56:49 -0800 (PST)
  6. ARC-Seal: i=1; a=rsa-sha256; t=1518011809; cv=none;
  7. d=google.com; s=arc-20160816;
  8. b=CU1lfa4M35yfs0pM1v7GjX7H7zSLUWR0YK40j7ekRrGUwYk2DtFM6I7HQMFe43Kknw
  9. nqnMN0ceFZ36I5ErX+HdVn4KqwNwM3pKK84F85nUJ6uF8QqhMM0Z3/AUfNY38v017WLK
  10. ejuMwYbrrLmCvv62u6dH+1O0PLufPBbaR2y8laXSziXkN0+ploCmzaONTw0yb1Uxi4lV
  11. M2JiAArF8YG8uBgM9ZY38lKCailNrkWYlKfN+Xk5Guo5b3BrWPRLjDXZ2tF45VVwvC//
  12. WJUBEYJ8gdeAaToLl5vhHrLQFKRRTI60zTH2GffiSO9It7FDVC12DoqA2B+r3+QBzw5H
  13. 8Rpw==
  14. ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
  15. h=content-transfer-encoding:mime-version:message-id:from:date:subject
  16. :to:arc-authentication-results;
  17. bh=x9ZkrkTXsEWXUw0M3Bd4G62Yfn4y3QnCknE4jb3kqhQ=;
  18. b=PA1uFuDntrQ6pAvzYnq3ypju62nfTyhChioB4WPYCKNcMKG0H9RMecVPR7MBnZfcjm
  19. EWfHmT6XU5nMVmTCw7/afVhBW8goJrRrALyqdFa+PchaxGf7l1qk6c1SfqY/D/4DAJVy
  20. aN8tJMnH7faU4tYwscsBjhIaif96869ROVP4Bxu0pJhHzkL2y/2oA5D7kObMPDqJ4rVt
  21. x/1I+KUtNzPff/zpKflQkAK25r+QVdt4oy92F4mXhbnl7dPMhCgTKoHbxpiXklJ6czWA
  22. DqiE6rSTyRLvBAM9iEszQfNGGt/8q12a+8QrdQEQubDwzn6BW77KOiJRjRLxB4RT+gVK
  23. yNRA==
  24. ARC-Authentication-Results: i=1; mx.google.com;
  25. spf=neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of email@team-shopify.com) smtp.mailfrom=email@team-shopify.com
  26. Return-Path: <email@team-shopify.com>
  27. Received: from webgo.de ([139.59.149.98])
  28. by mx.google.com with ESMTP id 142si99536wmx.37.2018.02.07.05.56.49
  29. for <sales@REDACTED.com>;
  30. Wed, 07 Feb 2018 05:56:49 -0800 (PST)
  31. Received-SPF: neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of email@team-shopify.com) client-ip=139.59.149.98;
  32. Authentication-Results: mx.google.com;
  33. spf=neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of email@team-shopify.com) smtp.mailfrom=email@team-shopify.com
  34. Received: by webgo.de (Postfix, from userid 33)
  35. id 12CAF222DA; Wed, 7 Feb 2018 13:02:00 +0000 (UTC)
  36. To: sales@REDACTED.com
  37. Subject: Important: We need your help resolving an issue with your store,
  38. X-PHP-Originating-Script: 0:ta.php
  39. Date: Wed, 7 Feb 2018 13:02:00 +0000
  40. From: Shopify Team <email@team-shopify.com>
  41. Message-ID: <0dadcf205cc6b93b91e5536af0079c19@139.59.149.98>
  42. X-Mailer: Leaf PHPMailer 2.7 (leafmailer.pw)
  43. MIME-Version: 1.0
  44. Content-Type: multipart/mixed;
  45. boundary="b1_0dadcf205cc6b93b91e5536af0079c19"
  46. Content-Transfer-Encoding: 8bit
Add Comment
Please, Sign In to add comment