API tools faq
paste
wavellan

20200811_PHISHING_SCAM_1

wavellan
Aug 11th, 2020
480
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.02 KB | None | 0 0
raw download clone embed print report
  1. Greetings. Did you receive the email I sent you regarding a legacy?
  2.  
  3. Regards,
  4. George D. Jones Esq
  5. Attorney at Law
  6.  
  7.  
  8.  
  9.  
  10.  
  11. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  12. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  13. id 15.0.1497.2 via Mailbox Transport; Tue, 11 Aug 2020 16:37:54 -0500
  14. Received: from MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) by
  15. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  16. id 15.0.1497.2; Tue, 11 Aug 2020 16:37:53 -0500
  17. Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
  18. MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) with Microsoft SMTP Server (TLS)
  19. id 15.0.1497.2 via Frontend Transport; Tue, 11 Aug 2020 16:37:53 -0500
  20. Return-Path: <[email protected]>
  21. X-Spam-Threshold: 95
  22. X-Spam-Score: 0
  23. X-Spam-Flag: NO
  24. X-Virus-Scanned: OK
  25. X-Orig-To:
  26. X-Originating-Ip: [139.162.46.124]
  27. Authentication-Results: smtp33.gate.iad3b.rsapps.net; iprev=pass policy.iprev="139.162.46.124"; spf=fail smtp.mailfrom="[email protected]" smtp.helo="web05l.ehostingservices.net"; dkim=none (message not signed) header.d=none; dmarc=fail (p=none; dis=none) header.from=directbox.net
  28. X-Suspicious-Flag: NO
  29. X-Classification-ID: e870d73c-dc1a-11ea-af11-525400fb5834-1-1
  30. Received: from [139.162.46.124] ([139.162.46.124:49710] helo=web05l.ehostingservices.net)
  31. by smtp33.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
  32. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  33. id 94/FD-17151-1BF033F5; Tue, 11 Aug 2020 17:37:53 -0400
  34. Received: from agilecon by web05l.ehostingservices.net with local (Exim 4.93)
  35. (envelope-from <[email protected]>)
  36. id 1k5bxu-0001n3-W2
  37. for ; Wed, 12 Aug 2020 03:07:51 +0530
  38. To:
  39. Subject: From Jones Law firm LLP
  40. X-PHP-Script: www.agilecon.in/wp-content/setpvepjak.php for 41.58.192.23
  41. X-PHP-Originating-Script: 1061:setpvepjak.php
  42. Date: Wed, 12 Aug 2020 03:07:50 +0530
  43. From: "George D. Jones" <[email protected]>
  44. Reply-To: <[email protected]>
  45. Message-ID: <[email protected]>
  46. MIME-Version: 1.0
  47. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  48. X-AntiAbuse: Primary Hostname - web05l.ehostingservices.net
  49. X-AntiAbuse: Original Domain -
  50. X-AntiAbuse: Originator/Caller UID/GID - [1061 994] / [47 12]
  51. X-AntiAbuse: Sender Address Domain - directbox.net
  52. X-Get-Message-Sender-Via: web05l.ehostingservices.net: authenticated_id: agilecon/only user confirmed/virtual account not confirmed
  53. X-Authenticated-Sender: web05l.ehostingservices.net: agilecon
  54. X-Source:
  55. X-Source-Args: /opt/cpanel/ea-php70/root/usr/bin/php-cgi /home/agilecon/public_html/wp-content/setpvepjak.php
  56. X-Source-Dir: agilecon.in:/public_html/wp-content
  57. X-MS-Exchange-Organization-Network-Message-Id: 2a1ad691-970d-4ba3-662b-08d83e3ecde3
  58. X-MS-Exchange-Organization-AuthSource: MBX09D-ORD1.mex08.mlsrvr.com
  59. X-MS-Exchange-Organization-AuthAs: Anonymous
  60. Content-type: text/plain;
  61. charset="UTF-8"
  62. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!