Advertisement
wavellan

20180923_PHISHING_SCAM_1

Sep 25th, 2018
274
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.58 KB | None | 0 0
  1. Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
  2. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  3. id 15.0.1367.3 via Mailbox Transport; Sun, 23 Sep 2018 12:03:55 -0500
  4. Received: from MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) by
  5. MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
  6. id 15.0.1367.3; Sun, 23 Sep 2018 12:03:55 -0500
  7. Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
  8. MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) with Microsoft SMTP Server (TLS)
  9. id 15.0.1367.3 via Frontend Transport; Sun, 23 Sep 2018 12:03:55 -0500
  10. Return-Path: <lrgorby@mypbrand.com>
  11. X-Spam-Threshold: 95
  12. X-Spam-Score: 100
  13. Precedence: junk
  14. X-Spam-Flag: YES
  15. X-Virus-Scanned: OK
  16. X-Orig-To: REMOVED
  17. X-Originating-Ip: [198.154.234.213]
  18. Authentication-Results: smtp36.gate.ord1d.rsapps.net; iprev=pass policy.iprev="198.154.234.213"; spf=pass smtp.mailfrom="lrgorby@mypbrand.com" smtp.helo="server.mypbrand.com"; dkim=fail (signing key too small) header.d=mypbrand.com; dmarc=none (p=nil; dis=none) header.from=mypbrand.com
  19. X-Suspicious-Flag: YES
  20. X-Classification-ID: a72ac6de-bf52-11e8-9009-525400c11307-1-1
  21. Received: from [198.154.234.213] ([198.154.234.213:47008] helo=server.mypbrand.com)
  22. by smtp36.gate.ord1d.rsapps.net (envelope-from <lrgorby@mypbrand.com>)
  23. (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
  24. id C9/64-01542-B77C7AB5; Sun, 23 Sep 2018 13:03:55 -0400
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  26. d=mypbrand.com; s=default; h=Reply-To:To:Date:Message-Id:Subject:Mime-Version
  27. :Content-Transfer-Encoding:Content-Type:From:Sender:Cc:Content-ID:
  28. Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
  29. :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
  30. List-Subscribe:List-Post:List-Owner:List-Archive;
  31. bh=wXH0DXUqFl3eAZTtGyIz+T2B31VqP7Kt789jjrnJBek=; b=v23t+LGbN0p9EJNOrC29tSiLMa
  32. S6920dz6xLyoqkjy0XPNgMZaVSBmfCHlIRiZIBv8Xl6kuJBZKvfMoZ/57iWsLK54uN6q26taS/qzL
  33. IzA2inaXDRgzLysKnZHcR3ncW;
  34. Received: from [14.162.89.33] (port=40753 helo=mail.mypbrand.com)
  35. by server.mypbrand.com with esmtpa (Exim 4.91)
  36. (envelope-from <lrgorby@mypbrand.com>)
  37. id 1g47nT-0005ZK-Dx
  38. for REMOVED; Sun, 23 Sep 2018 17:03:52 +0000
  39. From: "Lonnie G." <lrgorby@mypbrand.com>
  40. charset=us-ascii
  41. MIME-Version: 1.0 (1.0)
  42. Subject:
  43. Message-ID: <48BD8E38-8644-4A04-C52D-32E91CB6F551@mypbrand.com>
  44. Date: Sun, 23 Sep 2018 17:06:42 +0000
  45. To: REMOVED
  46. Reply-To: "Lonnie G." <lrgorbyr@yahoo.com>
  47. X-Mailer: iPhone Mail (14D27)
  48. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  49. X-AntiAbuse: Primary Hostname - server.mypbrand.com
  50. X-AntiAbuse: Original Domain - REMOVED
  51. X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
  52. X-AntiAbuse: Sender Address Domain - mypbrand.com
  53. X-Get-Message-Sender-Via: server.mypbrand.com: authenticated_id: christopher@mypbrand.com
  54. X-Authenticated-Sender: server.mypbrand.com: christopher@mypbrand.com
  55. X-Source:
  56. X-Source-Args:
  57. X-Source-Dir:
  58. X-MS-Exchange-Organization-Network-Message-Id: e8fa919c-bbbc-4828-a7f0-08d621768b99
  59. X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1452100;0;This mail has
  60. been scanned by Trend Micro ScanMail for Microsoft Exchange;
  61. X-MS-Exchange-Organization-SCL: 5
  62. X-MS-Exchange-Organization-AuthSource: MBX03D-ORD1.mex08.mlsrvr.com
  63. X-MS-Exchange-Organization-AuthAs: Anonymous
  64. Content-type: text/plain;
  65. charset="UTF-8"
  66. Content-transfer-encoding: 7bit
  67.  
  68. good morning REMOVED
  69.  
  70. https://goo.gl/3QLCV5
  71. https://goo.gl/xD6TYv
  72.  
  73.  
  74.  
  75.  
  76.  
  77. Lonnie G.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement