20180507_PHISHING_SCAM_1

Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Mon, 7 May 2018 13:09:48 -0500
Received: from MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Mon, 7 May 2018 13:09:48 -0500
Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
 MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Mon, 7 May 2018 13:09:48 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp3.gate.ord1c.rsapps.net x-tls.subject="/C=US/O=Sample, Inc./OU=IT Team/CN=Client"; auth=fail (cipher=DHE-RSA-AES256-GCM-SHA384)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [195.186.120.131]
Authentication-Results: smtp3.gate.ord1c.rsapps.net; iprev=pass policy.iprev="195.186.120.131"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="vimdzmsp-sfwd01.bluewin.ch"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=bluewin.ch
X-Suspicious-Flag: NO
X-Classification-ID: d31e1816-5221-11e8-9368-842b2b47481a-1-1
Received: from [195.186.120.131] ([195.186.120.131:57276] helo=vimdzmsp-sfwd01.bluewin.ch)
	by smtp3.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384
	subject="/C=US/O=Sample, Inc./OU=IT Team/CN=Client")
	id 2E/81-25908-B6690FA5; Mon, 07 May 2018 14:09:48 -0400
Received: from smtpauths.bluewin.ch ([179.52.199.85])
	by vimdzmsp-sfwd01.bluewin.ch Swisscom AG with SMTP
	id FkZqfEvwzjnEfFka1fLNUB; Mon, 07 May 2018 20:09:46 +0200
X-Bluewin-Spam-Analysis: v=2.1 cv=fKf0pcue c=1 sm=1 tr=0
 a=Q518K43xNDyUpbgk59N/Kw==:117 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10
 a=s5jvgZ67dGcA:10 a=IkcTkHD0fZMA:10 a=h8uWkAr0AAAA:20
 a=SooHGMNXnuc7GldUvh8A:9 a=QEXdDO2ut3YA:10 a=eaoSG83EXucA:10
 a=tvyhx5VokjsA:10 a=IawXvI9lP1MA:10 a=wvaPaJjb6Q0A:10 a=GP4F2jWAfToA:10
X-Bluewin-Spam-Score: 0.00
X-FXIT-IP: IPv4[179.52.199.85] Epoch[1525716586]
X-Bluewin-AuthAs: [email protected]
Date: Mon, 7 May 2018 18:09:01 +0000
Subject:
Message-ID: <[email protected]>
From: yvonne rodriguez <[email protected]>
To:
MIME-Version: 1.0
X-CMAE-Envelope: MS4wfFLtOnvlseKdR+mhL8UeEuWzRfHArfnIesI5xSLqgRLzyBLq5SASoYUTSqGVDDwnglSDAIIZYEVVYNvI16loZ7Gidaj5FCUBSOl1WXKNTrtq/50NVmxA
 AYTMVSOhBkf6WXI1SYHB8c5usF3WpEIfPXQcuLb740Ba82VvWy386ImJUqWWnBws/zNhGqnNiWorqA==
X-MS-Exchange-Organization-Network-Message-Id: 3ba54db9-4b42-4c72-b1cc-08d5b445b84c
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1423500;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX08C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

   hi REMOVED     https://bit.ly/2rr5VTa     Yvonne