20180824_PHISHING_SCAM_1

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Fri, 24 Aug 2018 16:19:08 -0500
Received: from MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Fri, 24 Aug 2018 16:19:08 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Fri, 24 Aug 2018 16:19:08 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 0
X-Spam-Flag: NO
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [206.221.190.66]
Authentication-Results: smtp3.gate.iad3b.rsapps.net; iprev=pass policy.iprev="206.221.190.66"; spf=softfail smtp.mailfrom="[email protected]" smtp.helo="dutchess.myrealserver.com"; dkim=pass header.d=advancedapplicationsdesign.com; dmarc=none (p=nil; dis=none) header.from=csc.com
X-Suspicious-Flag: NO
X-Classification-ID: 5609a08a-a7e3-11e8-9986-525400bb3479-1-1
Received: from [206.221.190.66] ([206.221.190.66:56048] helo=dutchess.myrealserver.com)
	by smtp3.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id C3/5A-03197-B46708B5; Fri, 24 Aug 2018 17:19:07 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=advancedapplicationsdesign.com; s=default; h=Content-Type:MIME-Version:
	Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-Transfer-Encoding:
	Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
	Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
	List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	 bh=hLWRBRKjSjonnJV0cAfHhUwOb7Hs5SX+3lPduU3oZro=; b=ZVvNsaxTu6SDXpmcir5JhRJ9W
	M1kdRMgRnQzXNt9kLZWKqhC590VsR+WaTZogvxAzLh3mhqanWr/OvJUTwuN4qOdLwzOLa53QCdlsz
	LUg/uSJ9KGXGvM12WdOMGwLAycgzrnct33SPDh/LVvYVQfOMKqcJd2Um/onhyuyuV+FRgbqEvhY6O
	EIXfRwAo3HZxKh1UdC0U+k0iwV1Tagiv+6x3Wz+5GoyS2XX+wuBUU6LmRJZ6SGEFU/ltJaVMdbFjO
	AqciKV3M/TxprY6ibbKspciH8hwByqDthQUbZwp/HADS4IVGgNUBXoU116eBoAtuXs3de1BCQVlqX
	AMYsiuYDQ==;
Received: from advance by dutchess.myrealserver.com with local (Exim 4.91)
	(envelope-from <[email protected]>)
	id 1ftJTB-009cdQ-1Q
	for REMOVED; Fri, 24 Aug 2018 17:18:13 -0400
To: REMOVED
Subject: Representative Offer
X-PHP-Script: advancedapplicationsdesign.com/functionality/Gmailsmtp.php for 129.205.114.21
Date: Fri, 24 Aug 2018 21:18:09 +0000
From: Sichuan Textiles Import And Export Ltd <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: PHPMailer 5.2.16 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
X-cPanel-MailScanner-Information: Please contact the ISP for more information
X-cPanel-MailScanner-ID: 1ftJTB-009cdQ-1Q
X-cPanel-MailScanner: Found to be clean
X-cPanel-MailScanner-SpamCheck:
X-cPanel-MailScanner-From: [email protected]
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dutchess.myrealserver.com
X-AntiAbuse: Original Domain - avellan.org
X-AntiAbuse: Originator/Caller UID/GID - [511 499] / [47 12]
X-AntiAbuse: Sender Address Domain - csc.com
X-Get-Message-Sender-Via: dutchess.myrealserver.com: authenticated_id: advance/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: dutchess.myrealserver.com: advance
X-Source:
X-Source-Args:
X-Source-Dir:
X-MS-Exchange-Organization-Network-Message-Id: 14c9e903-38d0-483c-e935-08d60a073a8a
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1446100;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 0
X-MS-Exchange-Organization-AuthSource: MBX09C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3618043850_1976723262"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3618043850_1976723262
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

Hello ,

I represent Sichuan Textiles Import & Export Ltd based in CHINA. We are state-run foreign trade enterprise specializing in the import & export of
textiles. We are looking for a representative in the U.S region.

We want you to be our representatives in U.S region to retrieve payment from debtors for a commission of 5% of every payment retrieved on our
behalf and a monthly salary $ 3000 to $5000, this Job will only take one hour of your time most likely two times a week.

For more info write back.

Mr.Richard Lee
Offshore Recruitment Manager
(SCTIE) Hong Kong


--B_3618043850_1976723262
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body>
<p>Hello ,</p>
<p>I represent Sichuan Textiles Import &amp; Export Ltd based in CHINA. We =
are state-run foreign trade enterprise specializing in the import &amp; expo=
rt of<br>
textiles. We are looking for a representative in the U.S region.</p>
<p>We want you to be our representatives in U.S region to retrieve payment =
from debtors for a commission of 5% of every payment retrieved on our<br>
behalf and a monthly salary $ 3000 to $5000, this Job will only take one ho=
ur of your time most likely two times a week.</p>
<p>For more info write back.</p>
<p>Mr.Richard Lee<br>
Offshore Recruitment Manager<br>
(SCTIE) Hong Kong</p>
</body>
</html>


--B_3618043850_1976723262--