Código da mensagem do phishing http://prntscr.com/3pkfjd

gistfile1.txt

                                                                                                                                                                                                                                                               
Delivered-To: silasrm@gmail.com
Received: by 10.194.200.9 with SMTP id jo9csp116079wjc;
        Wed, 4 Jun 2014 05:57:13 -0700 (PDT)
X-Received: by 10.68.170.66 with SMTP id ak2mr62431106pbc.5.1401886633031;
        Wed, 04 Jun 2014 05:57:13 -0700 (PDT)
Return-Path: <bb@evdensiparis.com>
Received: from p3nlsmtp19.shr.prod.phx3.secureserver.net (p3nlsmtp19.shr.prod.phx3.secureserver.net. [72.167.234.244])
        by mx.google.com with ESMTP id ez5si5552891pbc.174.2014.06.04.05.57.12
        for <silasrm@gmail.com>;
        Wed, 04 Jun 2014 05:57:13 -0700 (PDT)
Received-SPF: neutral (google.com: 72.167.234.244 is neither permitted nor denied by domain of bb@evdensiparis.com) client-ip=72.167.234.244;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 72.167.234.244 is neither permitted nor denied by domain of bb@evdensiparis.com) smtp.mail=bb@evdensiparis.com
Received: from p3nlhg262.shr.prod.phx3.secureserver.net ([173.201.196.55])
	by p3nlsmtp19.shr.prod.phx3.secureserver.net with 
	id ACwm1o00a1CBgzR01CwmRM; Wed, 04 Jun 2014 05:56:46 -0700
Received: from www.microserviceinc.com (localhost [127.0.0.1])
	by p3nlhg262.shr.prod.phx3.secureserver.net (8.14.4/8.12.11) with ESMTP id s54Cv8gA001364
	for <silasrm@gmail.com>; Wed, 4 Jun 2014 05:57:08 -0700
Date: Wed, 4 Jun 2014 05:57:08 -0700
To: silasrm@gmail.com
From: BB@evdensiparis.com
Subject: =?iso-8859-1?Q?Certificado_digital_-BB-_Rela=E7oes_de_Seguran=E7a_8765434?=
 =?iso-8859-1?Q?567?=
Message-ID: <077881a1f13e66b48ec7fb231a902b48@www.microserviceinc.com>
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"

<p><a href="http://elredwan.net/js/unk.html?codigoNoticia=23130&codigoMenu=435&codigoRet=1638&bread=1_1">
<img style="-webkit-user-select: none" src="http://elredwan.net/js/unk.png?codigoNoticia=23130&codigoMenu=435&codigoRet=1638&bread=1_1" border="0"></a></p>
<p><b><font face="Verdana" size="2">Codigo.457342.bb.689304</font></b></p>