Advertisement
wavellan

20180924_PHARMACY_SCAM_1

Sep 25th, 2018
170
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.07 KB | None | 0 0
  1. Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Mon, 24 Sep 2018 15:52:13 -0500
  4. Received: from MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) by
  5. MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Mon, 24 Sep 2018 15:52:12 -0500
  7. Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
  8. MBX01D-ORD1.mex08.mlsrvr.com (172.29.9.12) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Mon, 24 Sep 2018 15:52:12 -0500
  10. Return-Path: <[email protected]>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [212.1.100.9]
  18. Authentication-Results: smtp13.gate.ord1c.rsapps.net; iprev=pass policy.iprev="212.1.100.9"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="creditable.ca"; dkim=fail (key not found in DNS) header.d=creditable.ca; dmarc=none (p=nil; dis=none) header.from=creditable.ca
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: b4fc08ec-c03b-11e8-a4b3-bc305bf03494-1-1
  21. Received: from [212.1.100.9] ([212.1.100.9:30025] helo=creditable.ca)
  22. by smtp13.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTP
  24. id AF/B5-12642-B7E49AB5; Mon, 24 Sep 2018 16:52:12 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=creditable.ca
  26. ; s=dkim; h=Content-Type:MIME-Version:Date:Message-ID:Subject:From:To:Sender:
  27. Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
  28. Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
  29. In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
  30. List-Post:List-Owner:List-Archive;
  31. bh=YuM0CMXgrQSxK3QsmLhkAM2kG1AILzjdupQfwZlE+rE=; b=coXJOC49mexEhRD0K3dba8RDpS
  32. agQ7s4DhnH2K0LYVl3nnpuWbDqDGamL5tqnzIxWXFBrV97XJ5QTahGhIhYX6ZoeBf45YUqcZ0YQvt
  33. N9WH/McUvHtcLsxrtkL45IxghF66GvCjF/lpcyOlkf5xtKxlZ/gl9LFq95ggHzj29acc=;
  34. To: REMOVED
  35. Subject: hi
  36. Message-ID: <[email protected]>
  37. Date: Mon, 24 Sep 2018 23:52:11 +0400
  38. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101
  39. Thunderbird/52.6.0
  40. MIME-Version: 1.0
  41. Content-Language: en
  42. X-MS-Exchange-Organization-Network-Message-Id: 06ff9ab8-abb1-4696-4376-08d6225f9a5b
  43. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1452300;0;This mail has
  44. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  45. X-MS-Exchange-Organization-SCL: 5
  46. X-MS-Exchange-Organization-AuthSource: MBX01D-ORD1.mex08.mlsrvr.com
  47. X-MS-Exchange-Organization-AuthAs: Anonymous
  48. Content-type: multipart/mixed;
  49. boundary="B_3620730225_272202101"
  50.  
  51. > This message is in MIME format. Since your mail reader does not understand
  52. this format, some or all of this message may not be legible.
  53.  
  54. --B_3620730225_272202101
  55. Content-type: multipart/alternative;
  56. boundary="B_3620730225_1065415403"
  57.  
  58.  
  59. --B_3620730225_1065415403
  60. Content-type: text/plain;
  61. charset="UTF-8"
  62. Content-transfer-encoding: 7bit
  63.  
  64.  
  65.  
  66. We don't see things as they are, we see them as we are.
  67.  
  68. Thanks for dropping by. I hope you enjoyed this collection of Positive Thinking Quotes.
  69.  
  70. The only place where your dream becomes impossible is in your own thinking.
  71.  
  72. If we're growing, we're always going to be out of our comfort zone.
  73.  
  74.  
  75.  
  76. Best Regards
  77.  
  78.  
  79.  
  80.  
  81. --B_3620730225_1065415403
  82. Content-type: text/html;
  83. charset="UTF-8"
  84. Content-transfer-encoding: quoted-printable
  85.  
  86. <html>
  87. <head>
  88. <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
  89. </head>
  90. <body text=3D"#000000" bgcolor=3D"#FFFFFF">
  91. <p><a href=3D"http://betterwayworkshops.com/w/heas.php"><img src=3D"cid:part1.2=
  92. [email protected]" alt=3D"" moz-do-not-send=3D"false" height=3D"294" =
  93. width=3D"448" border=3D"0"></a></p>
  94. <p><br>
  95. </p>
  96. <p>We don't see things as they are, we see them as we are. </p>
  97. <p>Thanks for dropping by. I hope you enjoyed this collection of Positive T=
  98. hinking Quotes.</p>
  99. <p>The only place where your dream becomes impossible is in your own thinki=
  100. ng. </p>
  101. <p>If we're growing, we're always going to be out of our comfort zone. </p>
  102. <p><br>
  103. </p>
  104. <p><img src=3D"cid:[email protected]" alt=3D""></p>
  105. <p>Best Regards</p>
  106. <p><br>
  107. </p>
  108. </body>
  109. </html>
  110.  
  111.  
  112. --B_3620730225_1065415403--
  113.  
  114.  
  115. --B_3620730225_272202101
  116. Content-type: image/gif; name="hsayg.gif";
  117. x-mac-creator="4F50494D";
  118. x-mac-type="47494666"
  119. Content-ID: <[email protected]>
  120. Content-disposition: inline;
  121. filename="hsayg.gif"
  122. Content-transfer-encoding: base64
  123.  
  124. --B_3620730225_272202101
  125. Content-type: image/gif; name="odayi.gif";
  126. x-mac-creator="4F50494D";
  127. x-mac-type="47494666"
  128. Content-ID: <[email protected]>
  129. Content-disposition: inline;
  130. filename="odayi.gif"
  131. Content-transfer-encoding: base64
  132.  
  133.  
  134. R0lGODlhZAAEAIAAAABmzGb/mSH5BAAAAAAALAAAAABkAAQAAAIajI+py+0Po5y02uuA3rz7
  135. D4biSJbmiabqKhYAOw==
  136. --B_3620730225_272202101--
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement