* 50.117.72.241 Anchorfree n/a
Anonymous ProxyReturn-Path: <MahmoudAlabi@exchange2.com>
Received: from rs201303.rs.hosteurope.de ([2a01:488:67:1000:b01c:3475:0:1])
by mx.google.com with ESMTPS id fk7si43416499bkc.30.2012.11.09.14.25.52
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 09 Nov 2012 14:26:22 -0800 (PST)
Received-SPF: fail (google.com: domain of
MahmoudAlabi@exchange2.com does not designate 2a01:488:67:1000:b01c:3475:0:1 as permitted sender) client-ip=2a01:488:67:1000:b01c:3475:0:1;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of
MahmoudAlabi@exchange2.com does not designate 2a01:488:67:1000:b01c:3475:0:1 as permitted sender)
smtp.mail=MahmoudAlabi@exchange2.comReceived: by rs201303.rs.hosteurope.de (Postfix, from userid 48)
id 39B4663692; Fri, 9 Nov 2012 23:25:51 +0100 (CET)
Received: from 50.117.72.241 ([50.117.72.241]) by webmail.domyopieki.pl
(Horde Framework) with HTTP; Fri, 09 Nov 2012 23:25:50 +0100
Message-ID: <20121109232550.47124kw3kv7v463y@webmail.domyopieki.pl>
Date: Fri, 09 Nov 2012 23:25:50 +0100
From: AL AZHAR MONEY EXCHANGE <MahmoudAlabi@exchange2.com>
Reply-to:
syzyzsales@126.comTo: undisclosed-recipients:;
Subject: Payment
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_4dl5dmu9yy4"
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.9)
This message is in MIME format.
--=_4dl5dmu9yy4
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Find attached TT copy of payment made to your account today
Regards
AL AZHAR MONEY EXCHANGE
3 attachments —
All Phishing documents.
TT 35,000 usd.html
64K
TT 35,000 usd.html
64K
TT 35,000 usd.html
64K