spamreports

paypal scam phishing

Sep 22nd, 2019
252
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 6.29 KB | None | 0 0
  1. From - Sun Sep 22 20:40:08 2019
  2. X-Account-Key: account3
  3. X-UIDL: 1042748947.53478
  4. X-Mozilla-Status: 0001
  5. X-Mozilla-Status2: 00000000
  6. X-Mozilla-Keys:                                                                                
  7. Return-Path: <albiladp@bilad-vmweb01.inetuhosted.net>
  8. Received: from mx5.mail.bg ([unix socket])
  9.      by stor3 (Cyrus 2.5.10-Debian-2.5.10-3) with LMTPA;
  10.      Sun, 22 Sep 2019 16:09:01 +0300
  11. X-Sieve: CMU Sieve 2.4
  12. X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on stor3.stor3
  13. X-Spam-Level: *
  14. X-Spam-Status: No, score=1.9 required=5.0 tests=BAYES_50,DKIM_SIGNED,
  15.     HTML_MESSAGE,HTML_OBFUSCATE_05_10,MIME_HTML_ONLY,T_DKIM_INVALID
  16.     shortcircuit=no autolearn=no autolearn_force=no version=3.4.2
  17. Received-SPF: none (bilad-vmweb01.inetuhosted.net: No applicable sender policy available) receiver=mx5.mail.bg; identity=mailfrom; envelope-from="albiladp@bilad-vmweb01.inetuhosted.net"; helo=bilad-vmweb01.inetuhosted.net; client-ip=209.235.200.52
  18. Authentication-Results: mx5.mail.bg; dkim=neutral
  19.     header.i=@albiladpress.com; dkim-adsp=none
  20. Received: from bilad-vmweb01.inetuhosted.net (bilad-vmweb01.inetuhosted.net [209.235.200.52])
  21.     (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
  22.     (No client certificate requested)
  23.     by mx5.mail.bg (Postfix) with ESMTPS id EC5758093A29
  24.     for <@mail.bg>; Sun, 22 Sep 2019 16:09:00 +0300 (EEST)
  25. DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
  26.     d=albiladpress.com; s=default; h=Date:Message-Id:Content-Type:MIME-Version:
  27.     From:Subject:To:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
  28.     Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
  29.     :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
  30.     List-Subscribe:List-Post:List-Owner:List-Archive;
  31.     bh=891VJ+/zGXRrIJcYDW29QWJ4RariYim9dhD0DeKMSps=; b=X+Lh2hcFYiiJ+73Y8N/9a2kCf+
  32.     lo7WyzhwVpK7fgoieaRGCKbAY6mm4ZpUtEhpWKRNC+1VE5EKDEKakov9wto69IL1UGzqgbpou69js
  33.     M55zXmDjmk4ulThB36G033lxJtPK/9YoqHqlVkt42gM5o3+LJ2jlzT7WNv+okW16+jHwiRPXkKBs/
  34.     PIMFXk4+kspGxOrLvu9aOKS1mr03Iu2SkKnbeokt6MSIIG4GdJNieXzJH3ytnuRTcaGZKI6bHVfyP
  35.     Mt8xbu9yxRwah0xRBEIVPwqcORp0Qjm0EI5adPiSznNpomiczn3sVXJo7q+pxqk3Qyysq5iGlFBnt
  36.     4ZiO8MqQ==;
  37. Received: from albiladp by bilad-vmweb01.inetuhosted.net with local (Exim 4.91)
  38.     (envelope-from <albiladp@bilad-vmweb01.inetuhosted.net>)
  39.     id 1iC1bn-0000UD-DD
  40.     for @mail.bg; Sun, 22 Sep 2019 09:08:59 -0400
  41. To: @mail.bg
  42. Subject: Account status on hold !
  43. From: Support <service@notification.com>
  44. MIME-Version: 1.0
  45. Content-Type: text/html
  46. Message-Id: <E1iC1bn-0000UD-DD@bilad-vmweb01.inetuhosted.net>
  47. Date: Sun, 22 Sep 2019 09:08:59 -0400
  48. X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
  49. X-AntiAbuse: Primary Hostname - bilad-vmweb01.inetuhosted.net
  50. X-AntiAbuse: Original Domain - mail.bg
  51. X-AntiAbuse: Originator/Caller UID/GID - [504 498] / [47 12]
  52. X-AntiAbuse: Sender Address Domain - bilad-vmweb01.inetuhosted.net
  53. X-Get-Message-Sender-Via: bilad-vmweb01.inetuhosted.net: authenticated_id: albiladp/only user confirmed/virtual account not confirmed
  54. X-Authenticated-Sender: bilad-vmweb01.inetuhosted.net: albiladp
  55. X-Source: /usr/bin/php
  56. X-Source-Args: /usr/bin/php /home/albiladp/public_html/assets/cd/dev/nexx..php
  57. X-Source-Dir: albiladpress.com:/public_html/assets/cd/dev
  58.  
  59. <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"></head><body style="padding:0px;overflow:hidden;box-sizing:border-box;"><div id="wrapper" style="width: 434px;background-color:#FFF;padding: 7px 13px;margin:20px auto;border-radius: 10px;border:1.25px solid grey;">
  60.     <p style="font-size: 9px;font-family:arial;float:right;margin-top: 33px;">ID: #R56L6D9R406MH</p><div id="logo" style="height: 39px;border-bottom: 1px solid #ccc;padding-bottom: 7px;"><h3><span style="color:#003087;font-size:26px;font-family:verdana,arial;font-style:italic;"><font>P</font><font>a</font>y</span><span style="color:#0FA1DF;font-size:26px;font-family:verdana,arial;font-style:italic;"><font>P</font><font>a</font>l</span></h3></div><br><p style=" margin-top: 30px; margin: 33px; font-size: large; font-family: Gotham, 'Helvetica Neue', Helvetica, Arial, 'sans-serif';text-align: center;color: #625D5D;margin-left:0"><b>Your account is under review.</b></p> <h1 style="margin-left:0;margin-bottom:10px;margin-right:0;margin-top:0;letter-spacing:normal;line-height:100%;font-weight:normal;font-size:16px;font-family:'Gill Sans', 'Gill Sans MT', 'Myriad Pro', 'DejaVu Sans Condensed', Helvetica, Arial, 'sans-serif';display:block;color:grey!important;text-decoration: underline;text-dec
  61. oration-color: grey;text-align: left"><b>Dear customer,</b></h1> <h1 style="margin-left:0;margin-bottom:10px;margin-right:0;margin-top:0;letter-spacing:0.5px;line-height:100%;font-weight:normal;font-style:normal;font-size:17px;font-family:'Gill Sans', 'Gill Sans MT', 'Myriad Pro', 'DejaVu Sans Condensed', Helvetica, Arial, 'sans-serif';display:block;color:grey!important;margin-left: 3%;text-align:left">We've limited your account access because of the last <br>login attempt for security reasons .</h1> <p style="color:#6B6B6B;margin-left:0;margin-bottom:10px;margin-right:0;margin-top:0;letter-spacing:normal;line-height:100%;font-weight:normal;font-style:normal;font-size:17px;font-family:'Gill Sans', 'Gill Sans MT', 'Myriad Pro', 'DejaVu Sans Condensed', Helvetica, Arial, 'sans-serif';display:block;margin-left: 3%;text-align: left;letter-spacing: 0.5px">To fix this problem you have to login and update your personal information by following this link .</p> <div id="solu" style="border-b
  62. ottom: 1px solid #ccc;padding-bottom: 18px;margin-bottom: 5px;"><a href="http://xyz.zebronet.com/wp1/csrf/"_blank" style="color:#FFF;text-decoration:none"><div style="width: 185px;color:#FFF;font-size:12px;font-weight:bold;font-family: arial;text-decoration:none;background-color: rgb(0,108,181);border:1px solid rgb(0,108,181);margin: 20px;padding: 9px;text-align:center;margin-left: 108px;margin-top: 35px;border-radius: 6px;">Update</div> </a></div><div id="footer" style="text-align:center"><div id="droits" style="margin: 1px auto;margin-right: 9px;text-align: left;margin-bottom: 2%"><span style="font-size:11px;color:gray;font-family:arial;letter-spacing: 1px">Copyrights Reserved 1999 - 2019</span></div></div></div></body></html>
Add Comment
Please, Sign In to add comment