201806126_PHISHING_SCAM_2

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Tue, 26 Jun 2018 07:36:15 -0500
Received: from MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Tue, 26 Jun 2018 07:36:14 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Tue, 26 Jun 2018 07:36:08 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [192.185.146.195]
Authentication-Results: smtp12.gate.iad3b.rsapps.net; iprev=pass policy.iprev="192.185.146.195"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="gateway33.websitewelcome.com"; dkim=pass header.d=avmix.com.br; dmarc=fail (p=none; dis=none) header.from=gmail.com
X-Suspicious-Flag: NO
X-Classification-ID: 7fcce5a0-793d-11e8-9ca9-525400ae1f9d-1-1
Received: from [192.185.146.195] ([192.185.146.195:28840] helo=gateway33.websitewelcome.com)
	by smtp12.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 37/ED-26788-833323B5; Tue, 26 Jun 2018 08:36:08 -0400
Received: from cm10.websitewelcome.com (cm10.websitewelcome.com [100.42.49.4])
	by gateway33.websitewelcome.com (Postfix) with ESMTP id 99A0E8E290
	for <REMOVED>; Tue, 26 Jun 2018 07:36:07 -0500 (CDT)
Received: from srv192.prodns.com.br ([108.179.193.115])
	by cmsmtp with SMTP
	id XnBwfOOfSBcCXXnCIf9v8k; Tue, 26 Jun 2018 07:36:07 -0500
X-Authority-Reason: nr=8
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=avmix.com.br; s=default; h=Reply-To:To:Date:Message-Id:Subject:Mime-Version
	:Content-Transfer-Encoding:Content-Type:From:Sender:Cc:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=7U/Wiu7FrtnSGXAOkbEIEUKLz1ihgFVW4PzgC3OifrI=; b=phKj+/qIiE4I5vlkcygPoheoNg
	6RLcUNkVCWkh78+DZ693pXZmY3tJb31v+/EVKj4wduRTQXoP+OkiOFJQPz2xPL//htT53ZlGukzef
	A6sU2mGdT5BBEW5o2yQrNLvtbJ0L/OuXNXJPdkYN47WIYNwEdjC+i8/0VPLGyzUnAXWqHZc9UhLoM
	riOI5fDrYym5iTUjhT5/2kHhcEdT/Pe12oNKiO5vuuDcurF4hIsFqqfdQjzp4BpJS+lvpqJcYcWDz
	MMhiKMmiHmXZJMCEzVp80CAZerlfNufjoJP8ZB5WRlkI6Kumaq9m0prt9UbKyqXlGQ6tWi4nT6IsN
	eGmLpjfQ==;
Received: from 83-233-27-110.cust.bredband2.com ([83.233.27.110]:60540 helo=mail.avmix.com.br)
	by srv192.prodns.com.br with esmtpsa (TLSv1:ECDHE-RSA-AES128-SHA:128)
	(Exim 4.89_1)
	(envelope-from <[email protected]>)
	id 1fXnBv-002RBw-Rk
	for REMOVED; Tue, 26 Jun 2018 09:35:28 -0300
From: "Gary Harms" <[email protected]>
	charset=us-ascii
MIME-Version: 1.0 (1.0)
Subject:
Message-ID: <[email protected]>
Date: Tue, 26 Jun 2018 12:35:58 +0000
To: "REMOVED" <REMOVED>
Reply-To: "Gary Harms" <[email protected]>
X-Mailer: iPhone Mail (15A372)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv192.prodns.com.br
X-AntiAbuse: Original Domain - REMOVED
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - avmix.com.br
X-BWhitelist: no
X-Source-IP: 83.233.27.110
X-Source-L: No
X-Exim-ID: 1fXnBv-002RBw-Rk
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: 83-233-27-110.cust.bredband2.com (mail.avmix.com.br) [83.233.27.110]:60540
X-Source-Auth: [email protected]
X-Email-Count: 227
X-Source-Cap: YXZtaXg7c3BlaWMxODQ7c3J2MTkyLnByb2Rucy5jb20uYnI=
X-Local-Domain: yes
X-MS-Exchange-Organization-Network-Message-Id: 492908f4-07ee-4f63-a87f-08d5db616806
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1434100;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX01C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

 good afternoon   https://bit.ly/2yIDO8i  Gary