20191214_PHISHING_SCAM_1

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Mon, 14 Jan 2019 08:44:52 -0600
Received: from MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Mon, 14 Jan 2019 08:44:52 -0600
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX08C-ORD1.mex08.mlsrvr.com (172.29.9.32) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Mon, 14 Jan 2019 08:44:52 -0600
Return-Path: <roddrick.stowe@spectrum.spdatallc.com>
X-Spam-Threshold: 95
X-Spam-Score: 0
X-Spam-Flag: NO
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [173.203.187.83]
Authentication-Results: smtp27.gate.iad3a.rsapps.net; iprev=pass policy.iprev="173.203.187.83"; spf=pass smtp.mailfrom="roddrick.stowe@spectrum.spdatallc.com" smtp.helo="smtp83.iad3a.emailsrvr.com"; dkim=pass header.d=spectrum.spdatallc.com; dmarc=pass (p=quarantine; dis=none) header.from=spectrum.spdatallc.com
X-Suspicious-Flag: NO
X-Classification-ID: f297ed3e-180a-11e9-afbf-525400358560-1-1
Received: from [173.203.187.83] ([173.203.187.83:34234] helo=smtp83.iad3a.emailsrvr.com)
	by smtp27.gate.iad3a.rsapps.net (envelope-from <roddrick.stowe@spectrum.spdatallc.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 63/F4-14302-360AC3C5; Mon, 14 Jan 2019 09:44:51 -0500
Received: from smtp3.relay.iad3a.emailsrvr.com (localhost [127.0.0.1])
	by smtp3.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 65BEC24BFE;
	Mon, 14 Jan 2019 09:44:50 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=spectrum.spdatallc.com; s=20181101-o5dmxwfb; t=1547477090;
	bh=fBUoNVpLukPHzPfuNBkXrclnUCCwiNSs7ajKDWGBWoQ=;
	h=Date:Subject:From:To:From;
	b=pQhKr4bUQJ1yLK89Tdy0o+N0WKblGXPS35VAlxSpjj0g7/A6Q++FoSvG/jFZcq/ex
	 MI70SoOPU9MQA11Z87+bEK9LxU5H9sXpNUngJE2ioMzOpow39tPnPg64vRr/MYB0wS
	 o25yJDXtx0vlA9PxoPuxx6IdArMjS1pKUQGtAF/U=
Received: from app11.wa-webapps.iad3a (relay-webapps.rsapps.net [172.27.255.140])
	by smtp3.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id C4DDC24BD7;
	Mon, 14 Jan 2019 09:44:49 -0500 (EST)
X-Sender-Id: roddrick.stowe@spectrum.spdatallc.com
Received: from app11.wa-webapps.iad3a (relay-webapps.rsapps.net [172.27.255.140])
	by 0.0.0.0:25 (trex/5.7.12);
	Mon, 14 Jan 2019 09:44:50 -0500
Received: from spectrum.spdatallc.com (localhost.localdomain [127.0.0.1])
	by app11.wa-webapps.iad3a (Postfix) with ESMTP id 9192CC0459;
	Mon, 14 Jan 2019 09:44:49 -0500 (EST)
Received: by webmail.emailsrvr.com
    (Authenticated sender: roddrick.stowe@spectrum.spdatallc.com, from: roddrick.stowe@spectrum.spdatallc.com)
    with HTTP; Mon, 14 Jan 2019 09:44:49 -0500 (EST)
X-Auth-ID: roddrick.stowe@spectrum.spdatallc.com
Date: Mon, 14 Jan 2019 09:44:49 -0500 (EST)
Subject: Voice message From IRS Number 1800-829-1040.
From: "IRS VOICE MESSAGE" <roddrick.stowe@spectrum.spdatallc.com>
MIME-Version: 1.0
Importance: Normal
X-Priority: 3 (Normal)
X-Type: html
Message-ID: <1547477089.594210611@webmail.emailsrvr.com>
X-Mailer: webmail/15.4.8-RC
To: undisclosed-recipients:;
X-MS-Exchange-Organization-Network-Message-Id: 6e8fb8bc-acf1-41a5-7764-08d67a2ed795
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1474900;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 0
X-MS-Exchange-Organization-AuthSource: MBX08C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3630302898_1130146895"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3630302898_1130146895
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

Attn:

Missed a voice message from IRS.GOV 1-800-829-1040.

Mailbox: 105

Length: 0:25


VoiceMessage.wav


Thanks and Regards,
Office (C) 2019 Secured Service.


--B_3630302898_1130146895
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body>
<font face=3D"arial" size=3D"4">
<div>
<p style=3D"margin:0;padding:0;margin: 0; padding: 0; font-family: arial; fon=
t-size: 14pt; overflow-wrap: break-word;">
Attn: <br>
<br>
Missed a voice message from <a href=3D"http://IRS.GOV" target=3D"_blank" data-s=
aferedirecturl=3D"https://www.google.com/url?q=3Dhttp://IRS.GOV&amp;source=3Dgmail=
&amp;ust=3D1547561798665000&amp;usg=3DAFQjCNGL5KqMXVeb00bStZ3rGvkuiarxbQ">
IRS.GOV</a> 1-800-829-1040.<br>
<br>
Mailbox: 105<br>
<br>
Length: 0:25<br>
&nbsp;</p>
<table border=3D"0" cellspacing=3D"0" width=3D"109">
<tbody>
<tr>
<td style=3D"text-decoration: none; white-space: normal; min-width: 50px; pad=
ding: 5px 20px;" bgcolor=3D"#000080">
<a rel=3D"noopener noreferrer" href=3D"http://www.x.co/e3ailsr3" target=3D"_blank=
" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://inner.in.net/G5=
?POP%2521%3Dbillhardy@equitashealth.com&amp;source=3Dgmail&amp;ust=3D15475617986=
66000&amp;usg=3DAFQjCNFAkGkur-k779OHmnvbPvdzcrk6DA"><span><span style=3D"color: =
white; font-size: small;"><span style=3D"text-decoration: none; font-family: '=
Segoe UI',serif,'EmojiFont'; font-weight: bold;">VoiceMessage.wav</span></sp=
an></span></a></td>
</tr>
</tbody>
</table>
<p style=3D"margin:0;padding:0;margin: 0; padding: 0; font-family: arial; fon=
t-size: 14pt; overflow-wrap: break-word;">
<br>
Thanks and Regards,<br>
Office (C) 2019 Secured Service.</p>
</div>
</font>
</body>
</html>


--B_3630302898_1130146895--