20180401_PHISHING_SCAM_1

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1293.2 via Mailbox Transport; Sun, 1 Apr 2018 17:26:29 -0500
Received: from MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1293.2; Sun, 1 Apr 2018 17:26:28 -0500
Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
 MBX09D-ORD1.mex08.mlsrvr.com (172.29.9.39) with Microsoft SMTP Server (TLS)
 id 15.0.1293.2 via Frontend Transport; Sun, 1 Apr 2018 17:26:28 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [218.102.62.197]
Authentication-Results: smtp29.gate.ord1d.rsapps.net; iprev=pass policy.iprev="218.102.62.197"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="imscm02.netvigator.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=netvigator.com
X-Suspicious-Flag: NO
X-Classification-ID: b60529f0-35fb-11e8-89a0-525400f257a9-1-1
Received: from [218.102.62.197] ([218.102.62.197:51009] helo=imscm02.netvigator.com)
	by smtp29.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTPS (cipher=DHE-RSA-AES256-SHA)
	id 68/86-07570-29C51CA5; Sun, 01 Apr 2018 18:26:28 -0400
Received: from wironout2b.netvigator.com (wironout2b.netvigator.com [219.76.94.33])
	by imscm02.netvigator.com (8.13.8/8.14.5) with ESMTP id w31MQMod011222
	for REMOVED; Mon, 2 Apr 2018 06:26:23 +0800
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C5/gB8W8Fa/y5eTNtdHAEBARgEAQEFA?=
 =?us-ascii?q?QGDLyktAQpBLoQElQFLBQFhPhUyTIFlAYlAgkuGTBsFFoRfAiQPg3whORMBAgE?=
 =?us-ascii?q?BAQEBAQJrKIVEChEZYQIFEw4CBA08BgICCIJagi0BCwwGAZ89jl2CHBoCAYgeg?=
 =?us-ascii?q?iYFgQmGWIEMgQeHIQKEXIJUAoEjAQEBlhMBBgEBAoEoCTCDbohdgSIBhjCFGIN?=
 =?us-ascii?q?6hGeGaIElNCCBUnCBbHssHoFOAY5fgQcBjWkC?=
X-IPAS-Result: =?us-ascii?q?A0C5/gB8W8Fa/y5eTNtdHAEBARgEAQEFAQGDLyktAQpBLoQ?=
 =?us-ascii?q?ElQFLBQFhPhUyTIFlAYlAgkuGTBsFFoRfAiQPg3whORMBAgEBAQEBAQJrKIVEC?=
 =?us-ascii?q?hEZYQIFEw4CBA08BgICCIJagi0BCwwGAZ89jl2CHBoCAYgegiYFgQmGWIEMgQe?=
 =?us-ascii?q?HIQKEXIJUAoEjAQEBlhMBBgEBAoEoCTCDbohdgSIBhjCFGIN6hGeGaIElNCCBU?=
 =?us-ascii?q?nCBbHssHoFOAY5fgQcBjWkC?=
X-IronPort-AV: E=Sophos;i="5.48,392,1517846400";
   d="scan'208";a="140847729"
Received: from wironoah01.netvigator.com ([219.76.94.46])
  by wironout2.netvigator.com with ESMTP; 02 Apr 2018 06:26:23 +0800
Received: from unknown (HELO smtp.netvigator.com) ([60.12.215.85])
  by wironoah01.netvigator.com with ESMTP/TLS/DHE-RSA-AES128-SHA; 02 Apr 2018 06:26:21 +0800
Date: Sun, 1 Apr 2018 22:29:23 +0000
Subject:
Message-ID: <[email protected]>
From: Jennifer Palacios <[email protected]>
To: REMOVED
MIME-Version: 1.0
X-MS-Exchange-Organization-Network-Message-Id: c9476407-d468-4fb5-303d-08d5981f9cfb
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1416300;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX09D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

  hi REMOVED


https://bit.ly/2H18m5I




Jennifer Palacios