Received: from cdpipgw01.twcable.com (10.136.163.120) by
 PRVPEXHUB02.corp.twcable.com (10.136.163.11) with Microsoft SMTP Server id
 8.3.298.1; Wed, 6 Nov 2013 19:56:56 -0500
Received: from hrndva-postmx01.mail.rr.com ([71.74.56.227])  by
 cdpipgw01.twcable.com with ESMTP; 06 Nov 2013 19:56:46 -0500
Received: from lafayette.linkedin.com (lafayette.linkedin.com [69.28.149.83])
	by hrndva-postmx01.mail.rr.com (8.14.2/8.14.2) with ESMTP id rA70utnU026219
	for <abuse@rr.com>; Thu, 7 Nov 2013 00:56:55 GMT
Received: from esv4-infra10.corp.linkedin.com (localhost.localdomain
 [127.0.0.1])	by lafayette.linkedin.com (Postfix) with ESMTP id 9E49D8153E	for
 <abuse@rr.com>; Wed,  6 Nov 2013 16:55:40 -0800 (PST)
From: "postmaster@linkedin.com" <postmaster@linkedin.com>
To: "abuse@rr.com" <abuse@rr.com>
Date: Wed, 6 Nov 2013 19:55:40 -0500
Subject: Abuse report for: Notice again
Thread-Topic: Abuse report for: Notice again
Thread-Index: Ac7bVEGbO14FGociRx6ION5b6iWofw==
Message-ID: <20131107005540.9E49D8153E@lafayette.linkedin.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: PRVPEXHUB02.corp.twcable.com
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-SCL: 0
X-MS-TNEF-Correlator:
x-sender-ip: 71.74.56.227
x-sender-reputation: 3.7
x-ironport-av: E=Sophos;i="4.93,647,1378872000";    e="0x80040212'e";
    d="eml'?zip'48?scan'48,208,48";a="158836841"
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linkedin.com;
	s=l20130501-1024-fGtk3S; t=1383785740;
	bh=nz1S6ptnSezN6FD99nh1Mn8+Si7dQaEdYeeg/Yuj4G8=;	h=To:From:Subject:Date;
	b=dmb55UHAZM4wCu3sTCbFjMCC7ncBMjVq1aia20JcHqW9m+gCst1efxITLzQgKRHm1
	 JMZHdEsIFnneIShm5LUEkGuQW0tI0GmemGw+eq4Lrau0gXLcGDOQNoZzAcqcNfY4f1
	 GnTVDQJlmlyUxV2oAzb9eXCs5kuwGeXWFycYJRTw=
x-trusted-list: Sender Domain or IP is on the TRUSTED_LIST
Content-Type: multipart/mixed;
	boundary="_004_201311070055409E49D8153Elafayettelinkedincom_"
MIME-Version: 1.0

--_004_201311070055409E49D8153Elafayettelinkedincom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

This is an email in the abuse report format (ARF) for an email message rece=
ived from=20
IP 24.227.92.137 rrcs-24-227-92-137.se.biz.rr.com on 2013-11-05 17:58:10 UT=
C.
This report likely indicates a compromised machine and may contain URLs to =
malware, treat with caution!

The attached email was selected amongst emails that failed DMARC,
therefore it indicates that the author tried to pass for someone else
indicating fraud and not spam. The faster you fix or isolate the compromise=
d machine,=20
the better you protect your customers or members and the Internet at large.

This ARF report contains all the information you will need to assess the pr=
oblem.
The zip attachment is the complete email encrypted with the password infect=
ed
For more information about this format please see http://tools.ietf.org/htm=
l/rfc5965.

--_004_201311070055409E49D8153Elafayettelinkedincom_
Content-Type: message/feedback-report; name="ATT00001"
Content-Description: ATT00001
Content-Disposition: attachment; filename="ATT00001"; size=224;
	creation-date="Thu, 07 Nov 2013 00:56:56 GMT";
	modification-date="Thu, 07 Nov 2013 00:56:56 GMT"
Content-Transfer-Encoding: base64

RmVlZGJhY2stVHlwZTogZnJhdWQNClVzZXItQWdlbnQ6IHB5Zm9yZW5zaWMvMS4xDQpWZXJzaW9u
OiAxLjANClNvdXJjZS1JUDogMjQuMjI3LjkyLjEzNw0KQXJyaXZhbC1EYXRlOiAyMDEzLTExLTA1
IDE3OjU4OjEwIFVUQw0KQXR0YWNobWVudC1QYXNzd29yZDogaW5mZWN0ZWQNCg==

--_004_201311070055409E49D8153Elafayettelinkedincom_
Content-Type: message/rfc822

Received: from [24.227.92.137] ([24.227.92.137:14654] helo=linkedin.com)	by
	mail37.prod (envelope-from <usmail@expediamail.com>)	(ecelerity
	3.4.2.33817 r(MessageSystems/Momo-dev:9fc2f41b555d)) with ESMTP	id
	01/CF-18378-1B139725; Tue, 05 Nov 2013 17:58:10 +0000
From: "usmail@expediamail.com" <usmail@expediamail.com>
To: "updates@linkedin.com" <updates@linkedin.com>
Date: Tue, 5 Nov 2013 12:58:10 -0500
Subject: Notice again
Thread-Topic: Notice again
Thread-Index: Ac7bVEGeoFJSWg+IQiaLUJo0UvXFJg==
Message-ID: <01.CF.18378.1B139725@mail37.prod>
Accept-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: mail37.prod.linkedin.com;	iprev=pass
 policy.iprev=24.227.92.137;	spf=fail smtp.mailfrom=usmail@expediamail.com
 smtp.helo=linkedin.com;	dkim=neutral (message not signed) header.d=none;
	dmarc=fail (p=reject;	dis=reject) d=expediamail.com
 header.from=expediamail.com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


====================
--_004_201311070055409E49D8153Elafayettelinkedincom_
Content-Type: application/zip; name="mailkszBle.zip"
Content-Description: mailkszBle.zip