2/8/18 Shopify Phishing Campaign Headers

Received: by 10.55.101.209 with SMTP id z200msqkb;
        Wed, 7 Feb 2018 05:56:49 -0800 (PST)
X-Google-Smtp-Source: AH8x225Wh9r1XeBaLfPhg6HPzIvOmJq8jsDxHjLVQHsIvIWpyZkYzdqX7Xrl02ZIDmUNJrj9Bote
X-Received: by 10.223.151.158 with SMTP id s30mr5580201wrb.70.1518011809216;
        Wed, 07 Feb 2018 05:56:49 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1518011809; cv=none;
        d=google.com; s=arc-20160816;
        b=CU1lfa4M35yfs0pM1v7GjX7H7zSLUWR0YK40j7ekRrGUwYk2DtFM6I7HQMFe43Kknw
         nqnMN0ceFZ36I5ErX+HdVn4KqwNwM3pKK84F85nUJ6uF8QqhMM0Z3/AUfNY38v017WLK
         ejuMwYbrrLmCvv62u6dH+1O0PLufPBbaR2y8laXSziXkN0+ploCmzaONTw0yb1Uxi4lV
         M2JiAArF8YG8uBgM9ZY38lKCailNrkWYlKfN+Xk5Guo5b3BrWPRLjDXZ2tF45VVwvC//
         WJUBEYJ8gdeAaToLl5vhHrLQFKRRTI60zTH2GffiSO9It7FDVC12DoqA2B+r3+QBzw5H
         8Rpw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=content-transfer-encoding:mime-version:message-id:from:date:subject
         :to:arc-authentication-results;
        bh=x9ZkrkTXsEWXUw0M3Bd4G62Yfn4y3QnCknE4jb3kqhQ=;
        b=PA1uFuDntrQ6pAvzYnq3ypju62nfTyhChioB4WPYCKNcMKG0H9RMecVPR7MBnZfcjm
         EWfHmT6XU5nMVmTCw7/afVhBW8goJrRrALyqdFa+PchaxGf7l1qk6c1SfqY/D/4DAJVy
         aN8tJMnH7faU4tYwscsBjhIaif96869ROVP4Bxu0pJhHzkL2y/2oA5D7kObMPDqJ4rVt
         x/1I+KUtNzPff/zpKflQkAK25r+QVdt4oy92F4mXhbnl7dPMhCgTKoHbxpiXklJ6czWA
         DqiE6rSTyRLvBAM9iEszQfNGGt/8q12a+8QrdQEQubDwzn6BW77KOiJRjRLxB4RT+gVK
         yNRA==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Return-Path: <[email protected]>
Received: from webgo.de ([139.59.149.98])
        by mx.google.com with ESMTP id 142si99536wmx.37.2018.02.07.05.56.49
        for <[email protected]>;
        Wed, 07 Feb 2018 05:56:49 -0800 (PST)
Received-SPF: neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=139.59.149.98;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 139.59.149.98 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by webgo.de (Postfix, from userid 33)
	id 12CAF222DA; Wed,  7 Feb 2018 13:02:00 +0000 (UTC)
To: [email protected]
Subject: Important: We need your help resolving an issue with your store,
X-PHP-Originating-Script: 0:ta.php
Date: Wed, 7 Feb 2018 13:02:00 +0000
From: Shopify Team <[email protected]>
Message-ID: <[email protected]>
X-Mailer: Leaf PHPMailer 2.7 (leafmailer.pw)
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="b1_0dadcf205cc6b93b91e5536af0079c19"
Content-Transfer-Encoding: 8bit