---------- Forwarded message ----------
From: Patricia Gary <patgary1@msn.com>
Date: Monday, April 6, 2020
Subject: FBI (FLAGED W/HIGH IMPORTANCE) INVESTIGATE, PROSECUTE & "HARD" JAIL, THIS "REPEATED" Bogus IMPOSTER Sender Using Undisclosed& Multiple Deceptive Email Domains/ is a Danger to Consumers/& IMMEDIATELY REPORT THEM to the IC3 Fw: Rep
To: "rmrawashdeh13@eng.just.edu.jo" <rmrawashdeh13@eng.just.edu.jo>, "qoqazeh103@eng.just.edu.jo" <qoqazeh103@eng.just.edu.jo>, "AM0PR02MB521811B3C50CB99B21A23FEFBBC20@AM0PR02MB5218.eurprd02.prod.outlook.com" <AM0PR02MB521811B3C50CB99B21A23FEFBBC20@am0pr02mb5218.eurprd02.prod.outlook.com>, "emailscamalerts@gmail.com" <emailscamalerts@gmail.com>, "reportphishing@apwg.org" <reportphishing@apwg.org>, "reportphishing@antiphishing.org" <reportphishing@antiphishing.org>, "phishing-report@us-cert.gov" <phishing-report@us-cert.gov>, "tophishing-report@us-cert.gov" <tophishing-report@us-cert.gov>
INCLUDED SOME HEADERS & FORWARDED FULL EMAIL FOR INVESTIGATION!
Received: from CO1NAM11HT224.eop-nam11.prod.
(2603:10b6:208:235::32) by BL0PR11MB3411.namprd11.prod.
via MN2PR20CA0063.NAMPRD20.PROD.
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-
bh=
b=FV5zgs3TEI7IwQt0ZencU+
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
40.107.0.81) smtp.rcpttodomain=msn.com smtp.mailfrom=eng.just.edu.jo;
dmarc=bestguesspass action=none header.from=eng.just.edu.jo; dkim=pass
(signature was verified) header.d=engjustedu.
oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=eng.
dkim=[1,1,header.d=eng.just.
Received: from CO1NAM11FT060.eop-nam11.prod.
(2a01:111:e400:3861::49) by
CO1NAM11HT224.eop-nam11.prod.
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_
2020 03:58:37 +0000
Authentication-Results: spf=pass (sender IP is 40.107.0.81)
smtp.mailfrom=eng.just.edu.jo
header.d=engjustedu.
header.from=eng.just.edu.jo;
Received-SPF: Pass (protection.outlook.com: domain of eng.just.edu.jo
designates 40.107.0.81 as permitted sender) receiver=protection.outlook.
client-ip=40.107.0.81; helo=EUR02-AM5-obe.outbound.
Received: from EUR02-AM5-obe.outbound.
CO1NAM11FT060.mail.
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_
15.20.2878.15 via Frontend Transport; Mon, 6 Apr 2020 03:58:36 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-
bh=
b=ffoBDcZ/
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=eng.just.edu.jo
header.from=eng.just.edu.jo; dkim=pass header.d=eng.just.edu.jo; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=engjustedu.onmicrosoft.com; s=selector2-engjustedu-
h=From:Date:Subject:Message-
bh=
b=lJZDfYuqSF9CIVWLn+
Received: from AM0PR02MB5218.eurprd02.prod.
by AM0PR02MB4580.eurprd02.prod.
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_
2020 03:58:34 +0000
Received: from AM0PR02MB5218.eurprd02.prod.
([fe80::717a:5f86:a3bc:127c]) by AM0PR02MB5218.eurprd02.prod.
([fe80::717a:5f86:a3bc:127c%
03:58:34 +0000
From: REHAM <rmrawashdeh13@eng.just.edu.jo
To: ".Ala'a" <qoqazeh103@eng.just.edu.jo>
Subject: Rep
Thread-Topic: Rep
Thread-Index:
AdYLuvp38X/
Date: Mon, 6 Apr 2020 03:58:33 +0000
Message-ID:
<AM0PR02MB521811B3C50CB99B21A
Accept-Language: ar-AE, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Authentication-Results-
smtp.mailfrom=rmrawashdeh13@
x-originating-ip: [178.62.108.172]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-
x-ms-traffictypediagnostic: AM0PR02MB4580:|CO1NAM11HT224:
x-ms-exchange-transport-
x-microsoft-antispam-prvs:
<AM0PR02MB45804321F6705100D0C
x-ms-oob-tlc-oobclassifiers: OLM:1728;
x-forefront-prvs: 0365C0E14B
X-Forefront-Antispam-Report-
CIP:255.255.255.255;CTRY:;
received-spf: None (protection.outlook.com: eng.just.edu.jo does not designate
permitted sender hosts)
x-ms-exchange-senderadcheck: 1
X-Microsoft-Antispam-
X-Microsoft-Antispam-Message-
qDCgH4ZHZhM7JVrfA47rg6b4Hi4fF
x-ms-exchange-antispam-
C+
Content-Type: multipart/related;
boundary="_004_
type="multipart/alternative"
X-MS-Exchange-Transport-
X-IncomingHeaderCount: 42
Return-Path: rmrawashdeh13@eng.just.edu.jo
X-MS-Exchange-Organization-
(UTC)
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
X-MS-Exchange-Organization-
2e6c6fc9-db64-42a5-bf3f-
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-Organization-
X-MS-Exchange-Transport-
CO1NAM11FT060.eop-nam11.prod.
X-MS-Exchange-Transport-
CO1NAM11FT060.eop-nam11.prod.
X-Forefront-Antispam-Report:
CIP:40.107.0.81;CTRY:NL;LANG:
X-MS-Exchange-Organization-
CO1NAM11FT060.eop-nam11.prod.
X-MS-Exchange-Organization-
X-MS-Office365-Filtering-
bccd67ab-e4d5-47a4-f4b9-
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 40.107.0.81
X-SID-PRA: RMRAWASHDEH13@ENG.JUST.EDU.JO
X-SID-Result: PASS
X-MS-Exchange-Organization-
X-MS-Exchange-
X-MS-Exchange-Organization-
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-ATPSafeLinks-
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-
(UTC)
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-
X-MS-Exchange-CrossTenant-
X-MS-Exchange-CrossTenant-RMS-
00000000-0000-0000-0000-
X-MS-Exchange-Transport-
X-MS-Exchange-Transport-
X-MS-Exchange-Processed-By-
X-Microsoft-Antispam-Mailbox-
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;
X-Message-Info:
5vMbyqxGkdf4bfAMBJS49dIyePfv8E
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MT
X-Microsoft-Antispam-Message-
dp5BWYwLLoMLRItjoWtaG3vXnXu2Kh
MIME-Version: 1.0
--_004_
Content-Type: multipart/alternative;
boundary="_000_
--_000_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
[cid:image001.png@01D60B80.
--_000_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-
osoft-com:office:office" xmlns:w=3D"urn:schemas-
xmlns:m=3D"http://schemas.
//www.w3.org/TR/REC-html40"><
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!-
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-
span.EmailStyle18
{mso-style-type:personal-
font-family:"Calibri",sans-
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><
No comments:
Post a Comment