20180530_PHISHING_SCAM_4

Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Wed, 30 May 2018 08:39:43 -0500
Received: from MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Wed, 30 May 2018 08:39:42 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX10D-ORD1.mex08.mlsrvr.com (172.29.9.40) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Wed, 30 May 2018 08:39:42 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [139.223.200.187]
Authentication-Results: smtp11.gate.iad3b.rsapps.net; iprev=pass policy.iprev="139.223.200.187"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="ms123.tisnet.net.tw"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=ms9.tisnet.net.tw
X-Suspicious-Flag: NO
X-Classification-ID: e754b1a6-640e-11e8-b117-52540070b5bb-1-1
Received: from [139.223.200.187] ([139.223.200.187:43939] helo=ms123.tisnet.net.tw)
	by smtp11.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.1.56364 r(Core:4.2.1.14)) with ESMTP
	id BD/F9-06601-D99AE0B5; Wed, 30 May 2018 09:39:42 -0400
Received: from ms9.tisnet.net.tw (unknown [123.21.29.133])
	by ms123.tisnet.net.tw (Postfix) with ESMTPA id D96062AFF72
	for <REMOVED>; Wed, 30 May 2018 21:39:39 +0800 (CST)
Date: Wed, 30 May 2018 13:39:30 +0000
Subject:
Message-ID: <[email protected]>
From: DavidH <[email protected]>
To: REMOVED
MIME-Version: 1.0
X-MS-Exchange-Organization-Network-Message-Id: ee53d2a2-87ca-4943-8cd3-08d5c632ccd2
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1428300;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX10D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

hey REMOVED    https://goo.gl/RzDuSn     DavidH