* 114.199.125.186 Pt Solusi Aksesindo Pratama Jakarta Indonesia
Return-Path: <admin@alexaryacorp.com>
Received: from rightmx.dnsracks.net (h20.e2enetworks.net.in. [182.18.164.20])
by mx.google.com with ESMTP id n8si10597176pax.218.2014.01.11.08.30.06
for <multiple recipients>;
Sat, 11 Jan 2014 08:30:17 -0800 (PST)
Received-SPF: pass (google.com: domain of
admin@alexaryacorp.com designates
182.18.164.20 as permitted sender) client-ip=182.18.164.20;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
admin@alexaryacorp.com designates 182.18.164.20
as permitted sender)
smtp.mail=admin@alexaryacorp.com;
dkim=pass
header.i=@alexaryacorp.comMessage-Id: <52d17199.0850420a.39da.2255SMTPIN_ADDED_MISSING@mx.google.com>
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;
d=alexaryacorp.com; s=alexaryacorp.com;
h=received:from:subject:date:mime-version:content-type
:content-transfer-encoding:x-priority:x-msmail-priority:x-mailer
-mimeole;
b=Qa0o9l9ytfFBBqrqmHD6NPYkT8RlpcIc/PeiPg2TPbPUhZWNNcebcMt0rLOm9n3F3
Enn3FmAkNKGtPYy+SgKFPJpLf6DbDUp0vhGh7w75nAVFZYvrNrozBfW7bbef43e8r
y5rO4frLuh2OhFUqMwN08nQ+aZs/jPQOMO7VDV47k=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=alexaryacorp.com; s=alexaryacorp.com;
h=x-mimeole:x-mailer:x-msmail-priority:x-priority
:content-transfer-encoding:content-type:mime-version:date:subject
:from;
bh=/jRSorSZr6qhVLlpjq91Y7ImNnCb8a4EstGHvYffDWE=;
b=ZB7RVtMJyV38pE4M755vWscVPjNt3/G1HLIaUxkHJsFA+Mwde7zTBbEZTWBKZeqMv
S5XDiXVBUs+VyjJsNNN64Bmc6XoJizOFxCyjHLFBJO0pEqdiXkb3UUzw/sSHWbpvO
zJDFbt2R88sJxjL6t9LwqaxlzM734rLMBbEBWoMtg=
Received: from User (UnknownHost [114.199.125.186]) by rightmx.dnsracks.net with SMTP;
Sat, 11 Jan 2014 21:55:45 +0530
From: "Luxumborj Elect. Trading"<admin@alexaryacorp.com>
Subject: Re : Invoice Payment Confirmation
Date: Sat, 11 Jan 2014 23:25:44 +0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
"http:/ /www.junweivt.com.tw/swf/OnlineTTcopy.htm" << phishing document link.Dear Sir,
Thanks for your mail and sorry for our late response to your message.
The payment has been made, please find swift copy of pament
Regards,
Hassan Youzbachi
Luxumborj Elect. Trading
Tel: +971 6 5347536
1 attachments (total 53.9 KB)
"View slide show (1)
Download all as zip redirects to:
"http:/ /www.junweivt.com.tw/swf/OnlineTTcopy.htm" << phishing document link.