Advertisement
wavellan

20180924_PHARMACY_SCAM_1

Sep 25th, 2018
147
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.07 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Mon, 24 Sep 2018 15:52:13 -0500
  4. Received: from MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Mon, 24 Sep 2018 15:52:12 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Mon, 24 Sep 2018 15:52:12 -0500
  10. Return-Path: <jamesd66@creditable.ca>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [212.1.100.9]
  18. Authentication-Results: smtp13.gate.ord1c.rsapps.net; iprev=pass policy.iprev="212.1.100.9"; spf=neutral smtp.mailfrom="jamesd66@creditable.ca" smtp.helo="creditable.ca"; dkim=fail (key not found in DNS) header.d=creditable.ca; dmarc=none (p=nil; dis=none) header.from=creditable.ca
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: b4fc08ec-c03b-11e8-a4b3-bc305bf03494-1-1
  21. Received: from [212.1.100.9] ([212.1.100.9:30025] helo=creditable.ca)
  22. by smtp13.gate.ord1c.rsapps.net (envelope-from <jamesd66@creditable.ca>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  24. id AF/B5-12642-B7E49AB5; Mon, 24 Sep 2018 16:52:12 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=creditable.ca
  26. ; s=dkim; h=Content-Type:MIME-Version:Date:Message-ID:Subject:From:To:Sender:
  27. Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
  28. Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
  29. In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
  30. List-Post:List-Owner:List-Archive;
  31. bh=YuM0CMXgrQSxK3QsmLhkAM2kG1AILzjdupQfwZlE+rE=; b=coXJOC49mexEhRD0K3dba8RDpS
  32. agQ7s4DhnH2K0LYVl3nnpuWbDqDGamL5tqnzIxWXFBrV97XJ5QTahGhIhYX6ZoeBf45YUqcZ0YQvt
  33. N9WH/McUvHtcLsxrtkL45IxghF66GvCjF/lpcyOlkf5xtKxlZ/gl9LFq95ggHzj29acc=;
  34. To: REMOVED
  35. From: "jamesd66@creditable.ca" <jamesd66@creditable.ca>
  36. Subject: hi
  37. Message-ID: <440b9daa-2036-d472-75fd-25b9ad6aa26f@creditable.ca>
  38. Date: Mon, 24 Sep 2018 23:52:11 +0400
  39. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101
  40. Thunderbird/52.6.0
  41. MIME-Version: 1.0
  42. Content-Language: en
  43. X-MS-Exchange-Organization-Network-Message-Id: 06ff9ab8-abb1-4696-4376-08d6225f9a5b
  44. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1452300;0;This mail has
  45. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  46. X-MS-Exchange-Organization-SCL: 5
  47. X-MS-Exchange-Organization-AuthSource: MBX01D-ORD1.mex08.mlsrvr.com
  48. X-MS-Exchange-Organization-AuthAs: Anonymous
  49. Content-type: multipart/mixed;
  50. boundary="B_3620730225_272202101"
  51.  
  52. > This message is in MIME format. Since your mail reader does not understand
  53. this format, some or all of this message may not be legible.
  54.  
  55. --B_3620730225_272202101
  56. Content-type: multipart/alternative;
  57. boundary="B_3620730225_1065415403"
  58.  
  59.  
  60. --B_3620730225_1065415403
  61. Content-type: text/plain;
  62. charset="UTF-8"
  63. Content-transfer-encoding: 7bit
  64.  
  65.  
  66.  
  67. We don't see things as they are, we see them as we are.
  68.  
  69. Thanks for dropping by. I hope you enjoyed this collection of Positive Thinking Quotes.
  70.  
  71. The only place where your dream becomes impossible is in your own thinking.
  72.  
  73. If we're growing, we're always going to be out of our comfort zone.
  74.  
  75.  
  76.  
  77. Best Regards
  78.  
  79.  
  80.  
  81.  
  82. --B_3620730225_1065415403
  83. Content-type: text/html;
  84. charset="UTF-8"
  85. Content-transfer-encoding: quoted-printable
  86.  
  87. <html>
  88. <head>
  89. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  90. </head>
  91. <body text=3D"#000000" bgcolor=3D"#FFFFFF">
  92. <p><a href=3D"http://betterwayworkshops.com/w/heas.php"><img src=3D"cid:part1.2=
  93. AB56F38.D9B2781B@creditable.ca" alt=3D"" moz-do-not-send=3D"false" height=3D"294" =
  94. width=3D"448" border=3D"0"></a></p>
  95. <p><br>
  96. </p>
  97. <p>We don't see things as they are, we see them as we are. </p>
  98. <p>Thanks for dropping by. I hope you enjoyed this collection of Positive T=
  99. hinking Quotes.</p>
  100. <p>The only place where your dream becomes impossible is in your own thinki=
  101. ng. </p>
  102. <p>If we're growing, we're always going to be out of our comfort zone. </p>
  103. <p><br>
  104. </p>
  105. <p><img src=3D"cid:part3.A2F0BAA7.74BD72DC@creditable.ca" alt=3D""></p>
  106. <p>Best Regards</p>
  107. <p><br>
  108. </p>
  109. </body>
  110. </html>
  111.  
  112.  
  113. --B_3620730225_1065415403--
  114.  
  115.  
  116. --B_3620730225_272202101
  117. Content-type: image/gif; name="hsayg.gif";
  118. x-mac-creator="4F50494D";
  119. x-mac-type="47494666"
  120. Content-ID: <part1.2AB56F38.D9B2781B@creditable.ca>
  121. Content-disposition: inline;
  122. filename="hsayg.gif"
  123. Content-transfer-encoding: base64
  124.  
  125. --B_3620730225_272202101
  126. Content-type: image/gif; name="odayi.gif";
  127. x-mac-creator="4F50494D";
  128. x-mac-type="47494666"
  129. Content-ID: <part3.A2F0BAA7.74BD72DC@creditable.ca>
  130. Content-disposition: inline;
  131. filename="odayi.gif"
  132. Content-transfer-encoding: base64
  133.  
  134.  
  135. R0lGODlhZAAEAIAAAABmzGb/mSH5BAAAAAAALAAAAABkAAQAAAIajI+py+0Po5y02uuA3rz7
  136. D4biSJbmiabqKhYAOw==
  137. --B_3620730225_272202101--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement