Phishers impersonating DropBox

[SlapHappy]

"DropBox" <a_sartypei@gsi.ir>

* 41.138.190.105 Visafone Lagos Nigeria

Return-Path: <a_sartypei@gsi.ir>
Received: from gsi.ir ([92.50.28.211])
by mx.google.com with ESMTP id cq10si10459121wib.84.2014.12.21.04.31.11
for
Sun, 21 Dec 2014 04:31:12 -0800 (PST)
Received-SPF: pass (google.com: domain of a_sartypei@gsi.ir designates 92.50.28.211
as permitted sender) client-ip=92.50.28.211;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of a_sartypei@gsi.ir designates 92.50.28.211
as permitted sender) smtp.mail=a_sartypei@gsi.ir
Message-Id: <5496bd90.0a5db40a.1d32.ffffc638SMTPIN_ADDED_MISSING@mx.google.com>
Received: from [41.138.190.105] by gsi.ir (MDaemon PRO v13.0.5)
with ESMTP id md50001967772.msg
for ; Sun, 21 Dec 2014 15:53:39 +0330
X-Spam-Processed: gsi.ir, Sun, 21 Dec 2014 15:53:39 +0330
(not processed: message from trusted or authenticated source)
X-MDPtrLookup-Result: hardfail ip=41.138.190.105 (no PTR records found) (gsi.ir)
X-Authenticated-Sender: a_sartypei@gsi.ir
X-MDRemoteIP: 41.138.190.105
X-Return-Path: a_sartypei@gsi.ir
X-Envelope-From: a_sartypei@gsi.ir
X-MDaemon-Deliver-To:
Content-Type: multipart/alternative; boundary="===============0975454918=="
MIME-Version: 1.0
Subject: <XXXXX@xxxx>Re-view Your Files Via DropBox!!
To:
From: "DropBox" <a_sartypei@gsi.ir>
Date: Sun, 21 Dec 2014 13:29:46 -0800
X-Antivirus: avast! (VPS 141221-0, 12/20/2014), Outbound message
X-Antivirus-Status: Clean



Your stuff, anywhere.



Dear XXXX@XXX,


kindly Click to view all your files, sent via DropBox.



CLICK HERE TO VIEW



Dropbox INC.




This email is free from viruses and malware because avast! Antivirus protection is active.

[SlapHappy]

* 41.58.207.222 Swiftng Lagos Nigeria

Return-Path: <janna@dssconstruction.com>
Received: from server2.vorce.com (server2.vorce.com. [66.135.34.39])
by mx.google.com with ESMTPS id r56si7854527yhr.78.2014.12.21.17.04.42
for
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 21 Dec 2014 17:04:43 -0800 (PST)
Received-SPF: pass (google.com: domain of janna@dssconstruction.com designates
66.135.34.39 as permitted sender) client-ip=66.135.34.39;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of janna@dssconstruction.com designates
66.135.34.39 as permitted sender) smtp.mail=janna@dssconstruction.com;
dkim=pass header.i=@dssconstruction.com
Message-Id: <54976e2b.d015ec0a.3f89.fffff88bSMTPIN_ADDED_MISSING@mx.google.com>
DKIM-Signature:
Received: from [41.58.207.222] (port=49932 helo=[192.168.1.10])
by server2.vorce.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <janna@dssconstruction.com>)
id 1Y2rQK-000090-7N
for Sun, 21 Dec 2014 19:04:36 -0600
Content-Type: multipart/mixed; boundary="===============0176898721=="
MIME-Version: 1.0
Subject: YOUR FILE VIA DROPBOX (XXXXXX@gmail.com)
To:
From: "DROPBOX"<janna@dssconstruction.com>
Date: Mon, 22 Dec 2014 02:04:35 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server2.vorce.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - dssconstruction.com
X-Get-Message-Sender-Via: server2.vorce.com: authenticated_id: janna@dssconstruction.com



Your stuff, anywhere.

Dear XXX@xxxx,

kindly view your shared document, sent via DropBox.

Open the attached file to view your file.


Happy Dropboxing!

- The Dropbox Team

attachment; filename="Dropbox file.html"

[SlapHappy]

198.27.77.243 Ovh Hosting Montréal Canada

Return-Path: <jayjj213@sarltd.onmicrosoft.com>
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1hn0253.outbound.protection.outlook.com. [157.56.110.253])
by mx.google.com with ESMTPS id xk9si37793883pab.38.2016.01.10.22.20.06
for
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sun, 10 Jan 2016 22:20:06 -0800 (PST)
Received-SPF: pass (google.com: domain of jayjj213@sarltd.onmicrosoft.com
designates 157.56.110.253 as permitted sender) client-ip=157.56.110.253;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of jayjj213@sarltd.onmicrosoft.com designates
157.56.110.253 as permitted sender) smtp.mailfrom=jayjj213@sarltd.onmicrosoft.com;
dkim=pass header.i=@sarltd.onmicrosoft.com
DKIM-Signature
Authentication-Results: spf=none (sender IP is )
smtp.mailfrom=jayjj213@sarltd.onmicrosoft.com;
Received: from WIN-3CVLSY49X9J (198.27.77.243) by
DM3PR18MB0650.namprd18.prod.outlook.com (10.164.248.20) with Microsoft SMTP
Server (TLS) id 15.1.365.19; Mon, 11 Jan 2016 06:20:03 +0000
X-Subscribe-Email: no_reply@dropbox.com
X-Abuse-Reports-To: no_reply@dropbox.com
Errors-To: no_reply@dropbox.com
List-Owner: no_reply@dropbox.com
List-Unsubscribe: <mailto:no_reply@dropbox.com?subject=unsubscribe>
List-Help: <mailto:no_reply@dropbox.com(only enquiries only)
X-Organization: ykseekvkesskykk21318
X-Author: ykseekvkesskykk21319
Precedence: bulk
List-ID: ykseekvkesskykk of 21320
MIME-Version: 1.0
From: Dropbox <jayjj213@sarltd.onmicrosoft.com>
To:
Reply-To: Dropbox <no_reply@dropbox.com>
Date: Sun, 10 Jan 2016 22:20:20 -0800
Subject: Find Attached Documents For Your Attention
Content-Type: multipart/alternative;
boundary="--boundary_11136_920cfd92-3929-42c0-a7bf-8fdab3ce5a2c"
X-Originating-IP: [198.27.77.243]
X-ClientProxiedBy: SN1PR10CA0025.namprd10.prod.outlook.com (25.162.255.163) To
DM3PR18MB0650.namprd18.prod.outlook.com (25.164.248.20)
Return-Path: jayjj213@sarltd.onmicrosoft.com
Message-ID:
<DM3PR18MB06500BCBDE1676A7F16ED715B0C90@DM3PR18MB0650.namprd18.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:


I've shared with you an important document using Dropbox secure file transfer
Click here to view

Dropbox Pro also comes with
powerful sharing and security features:
scan.28373.pdf

Sign in to access shared file

If you prefer not to receive Dropbox newsletters, please go here.
Dropbox, Inc., PO Box 77767, San Francisco, CA 94107 © 2015 Dropbox

[SlapHappy]

* 88.51.212.130 Telecom Italia Lazise Italy

Return-Path: <dm3@customerserviceprovider.onmicrosoft.com>
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1bon0059.outbound.protection.outlook.com. [157.56.111.59])
by mx.google.com with ESMTPS id c1si18771198pas.37.2016.05.12.10.17.45
for <xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 12 May 2016 10:17:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of dm3@customerserviceprovider.onmicrosoft.com
designates 157.56.111.59 as permitted sender) client-ip=157.56.111.59;
Authentication-Results: mx.google.com;
dkim=pass header.i=@customerserviceprovider.onmicrosoft.com;
spf=pass (google.com: domain of dm3@customerserviceprovider.onmicrosoft.com
designates 157.56.111.59 as permitted sender)
smtp.mailfrom=dm3@customerserviceprovid ... rosoft.com
DKIM-Signature:
Authentication-Results: gmail.com; dkim=none (message not signed)
header.d=none;gmail.com; dmarc=none action=none
header.from=customerserviceprovider.onmicrosoft.com;
Received: from SERVER-2012 (88.51.212.130) by
CY1PR19MB0409.namprd19.prod.outlook.com (10.164.0.14) with Microsoft SMTP
Server (TLS) id 15.1.497.12; Thu, 12 May 2016 17:17:42 +0000
X-Subscribe-Email: antcear960@gmail.com
X-Abuse-Reports-To: antcear960@gmail.com
Errors-To: antcear960@gmail.com
List-Owner: antcear960@gmail.com
List-Unsubscribe: <mailto:antcear960@gmail.com?subject=unsubscribe>
List-Help: <mailto:antcear960@gmail.com(only enquiries only)
X-Organization: yksveyxrlxflxe51
X-Author: yksveyxrlxflxe52
Precedence: bulk
List-ID: yksveyxrlxflxe of 53
MIME-Version: 1.0
From: Dropbox <dm3@customerserviceprovider.onmicrosoft.com>
To: xxx
Reply-To: Dropbox <antcear960@gmail.com>
Date: Thu, 12 May 2016 19:17:42 +0200
Subject: Download your pending document via Dropbox 19-17-30
Content-Type: multipart/alternative;
boundary="--boundary_30_1244db5b-9729-4b1d-ab8e-58b5461eb54a"
X-Originating-IP: [88.51.212.130]
X-ClientProxiedBy: AM2PR03CA0071.eurprd03.prod.outlook.com (10.162.68.167) To
CY1PR19MB0409.namprd19.prod.outlook.com (10.164.0.14)
Return-Path: dm3@customerserviceprovider.onmicrosoft.com


Hello　xxx



You have a pending incoming document shared with you via Dropbox

Dropbox makes it easy to create, store and share online documents, spreadsheets and presentations.

lClick here to view shared docs.
　http: //bit.ly/1Y7zmlo


Thanks!
- The Dropbox Team

© 2016 Dropbox

[SlapHappy]

* 184.71.197.126 Shaw Communications Calgary Canada

Return-Path: <dm3@customerserviceprovider.onmicrosoft.com>
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1on0081.outbound.protection.outlook.com. [157.56.110.81])
by mx.google.com with ESMTPS id x8si14840798pfa.188.2016.05.11.22.31.17
for <xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Wed, 11 May 2016 22:31:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of
dm3@customerserviceprovider.onmicrosoft.com designates 157.56.110.81 as
permitted sender) client-ip=157.56.110.81;
Authentication-Results: mx.google.com;
dkim=pass header.i=@customerserviceprovider.onmicrosoft.com;
spf=pass (google.com: domain of dm3@customerserviceprovider.onmicrosoft.com
designates 157.56.110.81 as permitted sender)
smtp.mailfrom=dm3@customerserviceprovid ... rosoft.com
DKIM-Signature:
Authentication-Results: gmail.com; dkim=none (message not signed)
header.d=none;gmail.com; dmarc=none action=none
header.from=customerserviceprovider.onmicrosoft.com;
Received: from ECCEHP7 (184.71.197.126) by
SN1PR19MB0413.namprd19.prod.outlook.com (10.163.228.15) with Microsoft SMTP
Server (TLS) id 15.1.492.11; Thu, 12 May 2016 05:31:14 +0000
X-Subscribe-Email: no-reply@dropbox.com
X-Abuse-Reports-To: no-reply@dropbox.com
Errors-To: no-reply@dropbox.com
List-Owner: no-reply@dropbox.com
List-Unsubscribe: <mailto:no-reply@dropbox.com?subject=unsubscribe>
List-Help: <mailto:no-reply@dropbox.com(only enquiries only)
X-Organization: yksqsqsqxwsyyp51
X-Author: yksqsqsqxwsyyp52
Precedence: bulk
List-ID: yksqsqsqxwsyyp of 53
MIME-Version: 1.0
From: Dropbox <dm3@customerserviceprovider.onmicrosoft.com>
To: xxx
Reply-To: Dropbox <no-reply@dropbox.com>
Date: Thu, 4 Sep 2014 00:31:17 -0500
Subject: View your pending document via Dropbox 00-31-12
Content-Type: multipart/alternative;
boundary="--boundary_30_ce98a950-76ca-4655-bad6-ed9ff54e9f8a"
X-Originating-IP: [184.71.197.126]
X-ClientProxiedBy: DM3PR18CA0027.namprd18.prod.outlook.com (10.164.243.37) To
SN1PR19MB0413.namprd19.prod.outlook.com (10.163.228.15)
Return-Path: dm3@customerserviceprovider.onmicrosoft.com
Message-ID:
<SN1PR19MB04139C9A6F5E342580997D40AC730@SN1PR19MB0413.namprd19.prod.outlook.com>


Hello　xxx



You have a pending incoming document shared with you via Dropbox

Dropbox makes it easy to create, store and share online documents, spreadsheets and presentations.

lClick here to view shared docs.
　


Thanks!
- The Dropbox Team