---------- Forwarded message ----------
From: Patricia Gary <patgary1@msn.com>
Date: Tuesday, February 11, 2020
Subject: FBI INVESTIGATE THESE Bogus "Repeated" Abusive Sender Using Undisclosed & Multiple Deceptive Email Domains is a Danger to Consumers/& AND IMMEDIATELY REPORT THEM to the IC3 Fw: patgary1 , Claim Your FREE Bottle Today!
To: "from@telegram.org" <from@telegram.org>, "da12dac9-41d8-4b22-a172-0eef66aa5880@BN8NAM12FT056.eop-nam12.prod.protection.outlook.com" <da12dac9-41d8-4b22-a172-0eef66aa5880@bn8nam12ft056.eop-nam12.prod.protection.outlook.com>, "return@telegram.org" <return@telegram.org>, "emailscamalerts@gmail.com" <emailscamalerts@gmail.com>, "reportphishing@apwg.org" <reportphishing@apwg.org>, "reportphishing@antiphishing.org" <reportphishing@antiphishing.org>, "phishing-report@us-cert.gov" <phishing-report@us-cert.gov>, "tophishing-report@us-cert.gov" <tophishing-report@us-cert.gov>
FOWARDED FULL EMAIL W/ALL HEADERS FOR INVESTIGATION!
See Below! Same is true from all emails with these email domains: BOGUS EMAIL DOMAINS
<from@telegram.org>: host mx1.telegram.org[private/
5.1.1 <from@telegram.org> User doesn't exist: from@telegram.org (in reply
to RCPT TO command)
< reply@telegram.org>: host mx1.telegram.org[private/
5.1.1 <reply@telegram.org> User doesn't exist: reply@telegram.org (in reply
to RCPT TO command)
< return@telegram.org>: host mx1.telegram.org[private/
5.1.1 <return@telegram.org> User doesn't exist: return@telegram.org (in
reply to RCPT TO command)
Received: from BN8NAM12HT044.eop-nam12.prod.
(2603:10b6:208:1b4::43) by BL0PR11MB3411.namprd11.prod.
via MN2PR15CA0030.NAMPRD15.PROD.
Received: from BN8NAM12FT056.eop-nam12.prod.
(2a01:111:e400:fc66::34) by
BN8NAM12HT044.eop-nam12.prod.
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_
2020 20:48:04 +0000
Authentication-Results: spf=fail (sender IP is 52.1.194.155)
smtp.mailfrom=telegram.org; msn.com; dkim=none (message not signed)
header.d=none;msn.com; dmarc=fail action=oreject
header.from=telegram.org;
Received-SPF: Fail (protection.outlook.com: domain of telegram.org does not
designate 52.1.194.155 as permitted sender) receiver=protection.outlook.
client-ip=52.1.194.155; helo=telegram.org;
Received: from telegram.org (52.1.194.155) by
BN8NAM12FT056.mail.
Server id 15.20.2729.10 via Frontend Transport; Mon, 10 Feb 2020 20:48:04
+0000
X-IncomingTopHeaderMarker:
OriginalChecksum:
From: Limited Offer <from@telegram.org>
Subject: patgary1 , Claim Your FREE Bottle Today!
Reply-To: reply@telegram.org
Received: from telegram.org (172.31.38.31) by telegram.org id izKuSLlH4ViL for <patgary1@msn.com>; Mon, 10 Feb 2020 19:44:50 +0000 (envelope-from <return@telegram.org>
To: patgary1@msn.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Mon, 10 Feb 2020 19:44:50 +0000
drop_meta: 9806|6208
X-IncomingHeaderCount: 12
Message-ID:
<da12dac9-41d8-4b22-a172-
Return-Path: return@telegram.org
X-MS-Exchange-Organization-
(UTC)
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
3d36119b-53f6-48d3-b732-
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-Organization-
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-
BN8NAM12FT056.eop-nam12.prod.
X-MS-Exchange-Organization-
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/10/2020 8:42:03 PM
X-MS-Office365-Filtering-
X-MS-TrafficTypeDiagnostic: BN8NAM12HT044:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 52.1.194.155
X-SID-PRA: FROM@TELEGRAM.ORG
X-SID-Result: FAIL
X-MS-Exchange-Organization-
X-MS-Exchange-
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-
(UTC)
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-RMS-
00000000-0000-0000-0000-
X-MS-Exchange-Transport-
X-MS-Exchange-Transport-
X-MS-Exchange-Processed-By-
Importance: high
X-Priority: 1
X-Microsoft-Antispam-Mailbox-
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;
X-Message-Info:
qoGN4b5S4yrmAeNVLAMFDslnOcoUsF
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9Mj
X-Microsoft-Antispam-Message-
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?B?
=?utf-8?Q?2YHnQF6FaneAg/W/
MIME-Version: 1.0
<!-- IMPORTANT NOTES:
fill the TARGET URL
upload images on your server and replace the local links
--><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/
</o:OfficeDocumentSettings></
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width">
<title>Claim you FREE CBD Bottle</title>
<!--[if !mso]><!-->
<link href="https://fonts.
<!--<!-->
<!--[if (mso)|(mso 16)]>
<style type="text/css">
a {text-decoration: none;}
</style>
<!-->
<style>
img{max-width:100%}body{-
</style>
</head>
<body style="font-family:sans-serif;
<!-- CONTENT -->
<table class="body-wrap" style="width:100%;background-
<tr>
<td class="container" width="600" style="display: block !important; max-width: 600px !important; clear: both !important; margin: 0 auto;" valign="top" align="center">
<div class="content" style="max-width: 600px; display: block; margin: 0 auto;padding: 0">
<!--[if gte mso 9]>
<table width="600" cellspacing="0" cellpadding="0" border="0" align="center" style="text-align:center;"><
<!-->
<table class="main" width="100%" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="font-family: sans-serif; box-sizing: border-box; margin: 0; background-color: #FFFFFF;">
<tr style="font-family: sans-serif; box-sizing: border-box; margin: 0;">
<td class="content-wrap" style="font-family: sans-serif; box-sizing: border-box; vertical-align: top; margin: 0; padding: 0;" valign="top">
<table cellspacing="0" cellpadding="0" border="0" style="text-align:center;" width="100%">
No comments:
Post a Comment