Advertisement
Guest User

2018-01-18 - Reed Expo-themed spam or malspam

a guest
Jan 18th, 2018
405
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.39 KB | None | 0 0
  1. NOTE:
  2.  
  3. I ran across these messages, but I was unable to retrieve a copy of the attachments. Seems like malspam, but I don't know what is involved with the attachments.
  4.  
  5. SOME OF THE EMAIL DATA I RAN ACROSS:
  6.  
  7. Read: Date/Time Received: from Sending address Subject Attachment name
  8.  
  9. 2018-01-18 23:35 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 205200008809 5052054885_CREDIT_NOTE_5052054889.pdf
  10. 2018-01-18 22:51 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039600 5052054877.pdf
  11. 2018-01-18 22:51 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 205200008807 5052054856_CREDIT_NOTE_5052054878.pdf
  12. 2018-01-18 22:51 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039599 5052054869.pdf
  13. 2018-01-18 22:37 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039590 5052054866.pdf
  14. 2018-01-18 22:37 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039582 5052054857.pdf
  15. 2018-01-18 22:37 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039592 5052054854.pdf
  16. 2018-01-18 22:37 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039586 5052054861.pdf
  17. 2018-01-18 22:37 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039578 5052054853.pdf
  18. 2018-01-18 22:21 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039569 5052054852.pdf
  19. 2018-01-18 22:21 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039570 5052054851.pdf
  20. 2018-01-18 22:21 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039578 5052054849.pdf
  21. 2018-01-18 22:21 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039572 5052054846.pdf
  22. 2018-01-18 22:07 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039559 5052054841.pdf
  23. 2018-01-18 22:07 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039565 5052054838.pdf
  24. 2018-01-18 22:07 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039560 5052054836.pdf
  25. 2018-01-18 22:07 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039561 5052054835.pdf
  26. 2018-01-18 21:52 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039556 5052054827.pdf
  27. 2018-01-18 21:51 UTC lodgwe01.oracle.com ([143.47.149.171]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039557 5052054829.pdf
  28. 2018-01-18 21:51 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 105200039553 5052054823.pdf
  29. 2018-01-18 21:37 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 205200008799 5052054792_CREDIT_NOTE_5052054816.pdf
  30. 2018-01-18 21:37 UTC lodgwe02.oracle.com ([143.47.149.172]) donotreply.invoicestest@reedexpo.co.uk Reed Exhibitions Ltd-Important Documents Enclosed 205200008801 5052054801_CREDIT_NOTE_5052054819.pdf
  31.  
  32. EXAMPLE FROM ONE OF THE MESSAGES:
  33.  
  34. Received: from lodgwe02.oracle.com ([143.47.149.172]) by [removed] for [removed];
  35. Thu, 18 Jan 2018 23:35:47 +0000 (UTC)
  36. Received: from vmohsrxea009.oracleoutsourcing.com (vmohsrxea009.oracleoutsourcing.com [141.143.108.230]) by lodgwe02.oracle.com with smtp
  37. (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-GCM-SHA384)
  38. id 2fb8_4d6a_4fb5820b_c449_45e0_b43f_1295b85e5bc9;
  39. Thu, 18 Jan 2018 23:35:36 +0000
  40. Received: from vmohsrxea009.oracleoutsourcing.com (localhost [127.0.0.1])
  41. by vmohsrxea009.oracleoutsourcing.com (8.14.4/8.14.4) with ESMTP id w0INZbF1103809;
  42. Thu, 18 Jan 2018 23:35:37 GMT
  43. Date: Thu, 18 Jan 2018 23:35:37 +0000 (GMT)
  44. MIME-Version: 1.0
  45. Subject: Reed Exhibitions Ltd-Important Documents Enclosed 205200008809
  46. Message-ID: <6999516.3.1516318537017.JavaMail.apurxeai@localhost>
  47. From: donotreply.invoicestest@reedexpo.co.uk
  48. Content-Type: multipart/mixed;
  49. boundary="----=_part_2_18588258.1516318537005"
  50. To: [removed]
  51.  
  52. ------=_part_2_18588258.1516318537005
  53. Content-Transfer-Encoding: 7bit
  54. Content-Disposition: inline
  55. Content-Type: text/plain;charset=utf-8
  56.  
  57. Dear Customer,
  58.  
  59. Please find attached your Credit Memo 5052054889.
  60.  
  61. Please pass this Credit Note on to your Finance Department for them to apply to your account and arrange immediate payment of any remaining balance.
  62.  
  63. If you have any enquiries regarding your account, please call Credit Control on +44 121 746 4629, or Customer Support on +44 208 271 2134.
  64.  
  65. If you have any questions regarding the Event, please email exhibitor.helpline@reedexpo.co.uk.
  66.  
  67. In order for us to reply promptly to any queries you may have regarding this document, please be prepared with the following information when contacting us:
  68. 1. The Credit Note number
  69. 2. The name of the Event this document number relates to.
  70.  
  71. ***** This message was sent from an unmonitored e-mail address. Please do not reply to this e-mail. *****
  72.  
  73. Kind Regards,
  74.  
  75. Reed Exhibitions Ltd
  76.  
  77. +44 (0)121 7464629
  78.  
  79. ------=_part_2_18588258.1516318537005
  80. Content-Transfer-Encoding: base64
  81. Content-Disposition: inline; filename=5052054885_CREDIT_NOTE_5052054889.pdf
  82. Content-Type: application/pdf; name=5052054885_credit_note_5052054889.pdf
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement