Occurred: 2018-06-08; Posted: 2018-06-09
Mailbox Closure Phishing
This Abbas-Makkah is trying to look holy and sending phishing emails by scaring us that our mailboxes with Microsoft will be closed unless we provide some information by following the link.
GRIEVANCES
Fraudulent Representation Marketing Lies Spam Messaging
RESPONSE
FROM Abbas Makkah
Security Info Update
Your Mailbox will expire on june 11, 2018
This is to notify you that we are currently updating the windows services agreement and privacy statement.
Please keep your security information updated.
Do not ignore!
upgrADE NOW <https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ft.co%2FYMv0tne83V&data=02%7C01%7C%7C715d24164041451f39aa08d5ccf30028%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636640266411257613&sdata=G9VcgnAYcHzMs3Lf4FkwbDVkOqoWwb864b5foISZj1s%3D&reserved=0>
NOTE: YOUR EMAIL ADDRESS WILL BE DISABLED IF NOT UPDATED. (UPDATE IS FREE)
Thank you for using our services.
EMAIL HEADERS
Received: from CO1NAM05HT050.eop-nam05.prod.protection.outlook.com
(2a01:111:e400:5244::26) by BLUPR18MB0387.namprd18.prod.outlook.com with
HTTPS via BLUPR18CA0016.NAMPRD18.PROD.OUTLOOK.COM; Fri, 8 Jun 2018 03:50:41
+0000
Received: from CO1NAM05FT026.eop-nam05.prod.protection.outlook.com
(10.152.96.58) by CO1NAM05HT050.eop-nam05.prod.protection.outlook.com
(10.152.96.243) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.841.6; Fri, 8 Jun
2018 03:50:39 +0000
Authentication-Results: spf=pass (sender IP is 40.92.65.41)
smtp.mailfrom=hotmail.com; hotmail.com; dkim=pass (signature was verified)
header.d=hotmail.com;hotmail.com; dmarc=pass action=none
header.from=hotmail.com;
Received-SPF: Pass (protection.outlook.com: domain of hotmail.com designates
40.92.65.41 as permitted sender) receiver=protection.outlook.com;
client-ip=40.92.65.41; helo=EUR01-HE1-obe.outbound.protection.outlook.com;
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (40.92.65.41) by
CO1NAM05FT026.mail.protection.outlook.com (10.152.96.135) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.20.841.6 via Frontend Transport; Fri, 8 Jun 2018 03:50:37 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:3993A5521247D0E9C9466D8221E790F4D3C7A69B008381827E5266D81093477B;UpperCasedChecksum:9F35F302D937CC2339AF841BB73057F5ABD71C3C7CC9E3CA44D21A33E259A68C;SizeAsReceived:5776;Count:41
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=k5BZ+8AN7hxDGKIusVBjeepJh5cmSN10ILXNOGeWuws=;
b=CLXLLH1uDh7LmrdM1G8LYskIjscxylFawzYGrm+eyqsByqo0d9DKjgcEoEKn57dxfkK9QwDWBb8T86Rxny1Lg3KB9wM8Hp5hcP4nK25vPK/1cZScT/bLUc8IWwyxyJ/N9D3b1T9q8f21APi4Y3vxoQZK7LT1nZC7/sbzEA3ciX4W+dM/jhjCWsOeR30eiLocxwJPQCppF2S3rUjzSK0BU8qpVT4Nyk1/h+fpz/wKbnMz1rtmqhawqne6e8f30kazeLzu/mw1+dRegH1lC0iIQgMQVZILkkduFvCLF3Bkoy6sndbF6H286ibwHlUfj7mN8YS/z/3t6fszn7DsKa09/g==
Received: from VE1EUR01FT025.eop-EUR01.prod.protection.outlook.com
(10.152.2.58) by VE1EUR01HT033.eop-EUR01.prod.protection.outlook.com
(10.152.3.106) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.841.10; Fri, 8
Jun 2018 03:40:04 +0000
Received: from HE1PR0102MB3275.eurprd01.prod.exchangelabs.com (10.152.2.58) by
VE1EUR01FT025.mail.protection.outlook.com (10.152.2.232) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.841.10 via Frontend Transport; Fri, 8 Jun 2018 03:40:04 +0000
Received: from HE1PR0102MB3275.eurprd01.prod.exchangelabs.com
([fe80::ac3c:af64:331f:bd0f]) by
HE1PR0102MB3275.eurprd01.prod.exchangelabs.com
([fe80::ac3c:af64:331f:bd0f%2]) with mapi id 15.20.0841.015; Fri, 8 Jun 2018
03:40:04 +0000
From: Microsoft.com Team <ABBAS-MAKKAH@hotmail.com>
To: "MicrosoftOffice365@email.office.com"
<MicrosoftOffice365@email.office.com>
Subject: LAST WARNING - Mailbox Closure Request Is In Progress
Thread-Topic: LAST WARNING - Mailbox Closure Request Is In Progress
Thread-Index: AQHT/tki8nFcwM6wIkqADX51zObAyw==
Date: Fri, 8 Jun 2018 03:40:04 +0000
Message-ID: <HE1PR0102MB3275A0C763F3DB23A1A6477B947B0@HE1PR0102MB3275.eurprd01.prod.exchangelabs.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:66E04E8D3EA1FA5FB4AB38D0440F1E09790F77F69F9D964E24F62CEC0AC1D1D5;UpperCasedChecksum:072CD09237E80596C83EB62C86EA370D0C35EAD5AE02B42D44874D18212EF93D;SizeAsReceived:19772;Count:43
x-tmn: [V1P9sKd3tXpBm8eYdCbeLzQplh6J1K+D]
x-ms-publictraffictype: Email
X-Microsoft-Exchange-Diagnostics-untrusted: 1;VE1EUR01HT033;7:p3asjt4nZsOzyPZNyMeSUIEs0V29WO0D28uqnTHUwtgDuRAHWTQJIS6szQ9eoPiGqZIM7LyfgfMPBTF0XMCA/E1MBuG1Cayg6S6bbexuahYD5X5bVVqh/vX0JwpFJPh9qTowlCuBrAXXM8Cg5XH/7r7M3cOkqcMJDtbNmMZ8Fbhs71hy3TIXT4dbHYg6AIevJxOkIZu8E5mpithjN7zsnuUwDkp8Rn7EFfktwZ/dVseKV7hQXFAcD5j4a28K+5Yv
x-incomingheadercount: 43
x-eopattributedmessage: 1
X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125500)(1701031045);SRVR:VE1EUR01HT033;
x-ms-exchange-slblob-mailprops: 1RMHprAXUHiTyFFlwJzumlrnkF+ZpJtj2pxt4g+Bm4Gyp5LVorTpZZjmGbWUY+WUXdsKjAve8WnbR6Ktnp6Fyd6gnEbsEUqrKUjhciuui1AkDW9MkNeJR7tr763AxeC7JtWmSKIRSQ3YcQwrao3nn9Z9KVZkUubmkGQv20SzGO7iwAhpEN/yO/UHQbNb5bqni64NfGhoQ/NL3O3DiKz/tDOzZY1SfRilLfnpyoK6/VRf/JhXPnFKHc0PsWS0WhTSnebsR26VIBtF3AxoCOkR5xfNA9HnAGwgYGrfTHTuMm5hF6LArVkV6ECKbw1HH8MJCKJ/M2RUTpYO0VtObKH8woJZknPsLxKpZLC2ZsZqRHoUJfMCqjFM1RPbH7jTPqBLs8DeDv8J4JNr/vDVGTfII21tRFb/hc5w2HB/fClkc8aDNk7wACxxEBvozZzlr0spPyY9KCXxEwqTVIoi26GkQN652QeBUE1dRiuFcBM5tuIqn9SMlV7fbHBHFYmuvlKZQ0bbl8WibCFN3xpQBa8NFGfIn51Tugc65gvxA2XN+1JUSRBk9VbHDiSbroBoPVRXCvmjdmVMRhs4Wr6D39edIVWHvTZzASPC
X-MS-TrafficTypeDiagnostic: VE1EUR01HT033:|CO1NAM05HT050:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:VE1EUR01HT033;BCL:0;PCL:0;RULEID:;SRVR:VE1EUR01HT033;BCL:0;PCL:0;RULEID:(444111676)(1160499008)(52104123)(52401190)(52601095)(52606095)(52505095)(52504095)(52406095)(52402095)(82015058);SRVR:CO1NAM05HT050;BCL:0;PCL:0;RULEID:;SRVR:CO1NAM05HT050;
x-forefront-prvs: 06973FFAD3
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM;SFS:(7070007)(1496009)(47530400004)(189003)(199004)(7406005)(10290500003)(86362001)(105586002)(97736004)(6346003)(7366002)(7416002)(7696005)(33656002)(6916009)(2900100001)(6506007)(6606003)(5660300001)(59450400001)(2501003)(81156014)(8676002)(39060400002)(82202002)(8936002)(68736007)(5250100002)(20460500001)(6306002)(54896002)(236005)(5640700003)(7336002)(102836004)(7276002)(6436002)(104016004)(55016002)(74316002)(9686003)(2351001)(19627405001)(25786009)(345774005)(5180700001)(606006)(15650500001)(476003)(83332001)(72206003)(486006)(5070765005)(99286004)(14454004)(3280700002)(3660700001)(73972006)(87572001)(22452003)(76576003)(106356001)(26005)(15852004)(217873001);DIR:OUT;SFP:1901;SCL:1;SRVR:VE1EUR01HT033;H:HE1PR0102MB3275.eurprd01.prod.exchangelabs.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
Authentication-Results-Original: spf=none (sender IP is )
smtp.mailfrom=ABBAS-MAKKAH@hotmail.com;
X-Microsoft-Antispam-Message-Info-Original: WFfX8UIX3W2vHyiyz3DYC2hcKNeRAed6HkhPbnVktLsXgCrh0PHBPq6Jj+C45OKEkpIoX2D48Ul5CWWdaMu/6oWRtIx+lhuYB/mRYorykKfteZdm+8mq19+RhSjvxGU7x55J+1VS5KIvxSlAvBc13+ys0gEkX8+7NnqpR1ZuYCKsAdn1PIOnCqWiKdAyI6Qw
Content-Type: multipart/alternative;
boundary="_000_HE1PR0102MB3275A0C763F3DB23A1A6477B947B0HE1PR0102MB3275_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 715d2416-4041-451f-39aa-08d5ccf30028
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT033
X-IncomingHeaderCount: 41
Return-Path: ABBAS-MAKKAH@hotmail.com
X-MS-Exchange-Organization-ExpirationStartTime: 08 Jun 2018 03:50:39.4548
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: 715d2416-4041-451f-39aa-08d5ccf30028
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped: CO1NAM05FT026.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted: CO1NAM05FT026.eop-nam05.prod.protection.outlook.com
X-Microsoft-Exchange-Diagnostics: 1;CO1NAM05FT026;1:5F4tiu70G8Py7PUK66fO4ZrRG/BET8SmL4pHanUV/jMUcq+puq5JbbWdc1NEMabOlobVtrqcblpHHNIQNrNabTOMp2Tr3j4/S46wMUd3hAltjmyGoZEycqP2CbG5L4XI
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource: CO1NAM05FT026.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(5000109)(4605076)(610169)(650170)(651021)(8291501071);SRVR:CO1NAM05HT050;
X-Microsoft-Exchange-Diagnostics: 1;CO1NAM05HT050;3:ICLFt396UbNQtUs8iyFhG6cw4ZXoHNgNJu1dyEcalHeHUv7ehbiTiwzLdVvvOkEE6SnWmJMc0pmuetXyjb5rD3OmzNnLIxXhOygaALrcTISgnlO18zFFXe1I7UeKPufRcGant/JE5zW4YqF7NcEPDPjmXM4guKPQNBUfPI4jVFZRK7fkqMZXZONTOzsmUmXGvGvj6MFXlOVtPhwpqoZ1NJyN5PLJxsy9amKHSbQcoRKAKT+Pwg3mroXjFnVYA1teMUMiCGRb2dxt6iyLy1QEdpKdZQcsuXnoVeYVj8UnhlA60FsEG4oqyG3zuM
MORE INFO ABOUT THE SOURCE
http://email.office.com ABBAS-MAKKAH@hotmail.com
MESSAGE
FROM Anonymous
No one will close your account unless you do it yourself
|