db8outboundpool.messaging.microsoft.com
What concerns me is the automatic reply message:
from: Riordan, Steven <steve.riordan@experis.com> via db8outboundpool.messaging.microsoft.com
to: John Palardy <johnfrisco13@gmail.com>
date: Tue, Aug 20, 2013 at 2:38 PM
subject: Automatic reply: American Express
mailed-by: db8outboundpool.messaging.microsoft.com
: Important mainly because of the people in the conversation.
This is what concerns me. "db8outboundpool.messaging.microsoft.com"
I Googled that and a lot of people are saying it is a scam. See below for the actual headers.
Delivered-To: johnfrisco13@gmail.com
Received: by 10.76.98.135 with SMTP id ei7csp177653oab;
Tue, 20 Aug 2013 11:39:40 -0700 (PDT)
X-Received: by 10.66.189.98 with SMTP id gh2mr5471274pac.60.1377023979990;
Tue, 20 Aug 2013 11:39:39 -0700 (PDT)
Return-Path: <>
Received: from db8outboundpool.messaging.microsoft.com (mail-db8lp0187.outbound.messaging.microsoft.com. [213.199.154.187])
by mx.google.com with ESMTPS id yd4si2496593pbc.206.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 20 Aug 2013 11:39:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of db8outboundpool.messaging.microsoft.com designates 213.199.154.187 as permitted sender) client-ip=213.199.154.187;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of db8outboundpool.messaging.microsoft.com designates 213.199.154.187 as permitted sender) smtp.mail=
Received: from mail52-db8-R.bigfish.com (10.174.8.246) by
DB8EHSOBE015.bigfish.com (10.174.4.78) with Microsoft SMTP Server id
14.1.225.22; Tue, 20 Aug 2013 18:38:40 +0000
Received: from mail52-db8 (localhost [127.0.0.1]) by mail52-db8-R.bigfish.com
(Postfix) with ESMTP id 4AB4B9E0043 for <johnfrisco13@gmail.com>; Tue, 20 Aug
2013 18:38:40 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:70.37.188.198;KIP
null);UIP
null);IPV:NLI;H:SMTP.MGD.MANPOWER.COM;RD:manpower.com;EFVD:NLI
X-SpamScore: -30
X-BigFish: VS-30(zzbb2dIc85fhc53eIV4015Izz1f42h208ch1ee6h1de0h1fdah2073h108eh1202h1e76h1d1ah1d2ah1e9bh1fc6hz8dhz18c673hz2dh87h2a8h839h8e3hd24hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1bceh1d0ch1d2eh1d3fh1dfeh1dffh1fe8h1ff5h9a9j1151h1155h)
X-FB-DOMAIN-IP-MATCH: fail
Received: from mail52-db8 (localhost.localdomain [127.0.0.1]) by mail52-db8
(MessageSwitch) id 1377023916620949_8061; Tue, 20 Aug 2013 18:38:36 +0000
(UTC)
Received: from DB8EHSMHS002.bigfish.com (unknown [10.174.8.228]) by
mail52-db8.bigfish.com (Postfix) with ESMTP id 9353E580035 for
<johnfrisco13@gmail.com>; Tue, 20 Aug 2013 18:38:36 +0000 (UTC)
Received: from SMTP.MGD.MANPOWER.COM (70.37.188.198) by
DB8EHSMHS002.bigfish.com (10.174.4.12) with Microsoft SMTP Server (TLS) id
14.16.227.3; Tue, 20 Aug 2013 18:38:36 +0000
Received: from 018-TK5MMR1-003.018D.MGD.MSFT.NET (10.112.2.76) by
018D-TK5MMLT-01.018D.MGD.MSFT.NET (10.112.2.102) with Microsoft SMTP Server
(TLS) id 8.3.106.1; Tue, 20 Aug 2013 18:38:18 +0000
Received: from 018-TK5MMR1-003.018D.MGD.MSFT.NET ([10.112.2.76]) by
018-TK5MMR1-003.018D.MGD.MSFT.NET ([10.112.2.76]) with Microsoft SMTP Server
id 14.03.0146.002; Tue, 20 Aug 2013 18:38:18 +0000
From: "Riordan, Steven" <steve.riordan@experis.com>
To: John Palardy <johnfrisco13@gmail.com>
Subject: Automatic reply: American Express
Thread-Topic: American Express
Thread-Index: AQHOndRwPqWiNX/oZUWpTHodcXvANg==
Date: Tue, 20 Aug 2013 18:38:18 +0000
Message-ID: <24bdb3dc59104f46bcc6e91616b6a7b1@018-TK5MMR1-003.018D.MGD.MSFT.NET>
References: <7FD4A5D74F27F24788086B0A2BF3427E1101C4FF@018-TK5MPN2-062.018D.MGD.MSFT.NET>
<CAF_yy0F20WMtDN7OH4V-F9kNe0SVXohVBNUPDptUKZ-GJsb7aQ@mail.gmail.com>,<CAF_yy0GYzNXvfj5G0sFtKZ4XWdvqUy-EYKp3fqC4OpChN+YHNw@mail.gmail.com>
In-Reply-To: <CAF_yy0GYzNXvfj5G0sFtKZ4XWdvqUy-EYKp3fqC4OpChN+YHNw@mail.gmail.com>
X-MS-Has-Attach:
X-Auto-Response-Suppress: All
X-MS-Exchange-Inbox-Rules-Loop: steve.riordan@experis.com
X-MS-TNEF-Correlator:
Content-Type: multipart/alternative;
boundary="_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_"
MIME-Version: 1.0
Return-Path: <>
X-OriginatorOrg: manpower.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
I will be out of the office on Tuesday, 8/20/13 through Wednesday 8/21/13. =
I will have limited or no access. I'll be checking my email and VM when po=
ssible. Cell phone # is, 347-602-1298. Thanks, Steve
This e-mail and its attachments may contain ManpowerGroup proprietary infor=
mation, which is PRIVILEGED, CONFIDENTIAL, or subject to COPYRIGHT belongin=
g to ManpowerGroup. This e-mail is intended solely for the use of the indiv=
idual or entity to which it is addressed. If you are not the intended recip=
ient of this e-mail, or the employee or agent responsible for delivering th=
is e-mail to the intended recipient, you are hereby notified that any disse=
mination, distribution, copying, or action taken in relation to the content=
s of and attachments to this e-mail is STRICTLY PROHIBITED and may be UNLAW=
FUL. If you have received this e-mail in error, please notify the sender im=
mediately and permanently delete the original and any copy of this e-mail a=
nd any printout. Thank you.
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<style>
<!--
@font-face
{font-family:"Plantagenet Cherokee"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color
urple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif"}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal" style=3D"text-autospace:none">I will be out of the o=
ffice on Tuesday, 8/20/13 through Wednesday 8/21/13. I will have limi=
ted or no access. I'll be checking my email and VM when possible. Cel=
l phone # is, 347-602-1298. Thanks, Steve</p>
</div>
This e-mail and its attachments may contain ManpowerGroup proprietary infor=
mation, which is PRIVILEGED, CONFIDENTIAL, or subject to COPYRIGHT belongin=
g to ManpowerGroup. This e-mail is intended solely for the use of the indiv=
idual or entity to which it is addressed.
If you are not the intended recipient of this e-mail, or the employee or a=
gent responsible for delivering this e-mail to the intended recipient, you =
are hereby notified that any dissemination, distribution, copying, or actio=
n taken in relation to the contents
of and attachments to this e-mail is STRICTLY PROHIBITED and may be UNLAWF=
UL. If you have received this e-mail in error, please notify the sender imm=
ediately and permanently delete the original and any copy of this e-mail an=
d any printout. Thank you.
</body>
</html>
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_--
What concerns me is the automatic reply message:
from: Riordan, Steven <steve.riordan@experis.com> via db8outboundpool.messaging.microsoft.com
to: John Palardy <johnfrisco13@gmail.com>
date: Tue, Aug 20, 2013 at 2:38 PM
subject: Automatic reply: American Express
mailed-by: db8outboundpool.messaging.microsoft.com
: Important mainly because of the people in the conversation.
This is what concerns me. "db8outboundpool.messaging.microsoft.com"
I Googled that and a lot of people are saying it is a scam. See below for the actual headers.
Delivered-To: johnfrisco13@gmail.com
Received: by 10.76.98.135 with SMTP id ei7csp177653oab;
Tue, 20 Aug 2013 11:39:40 -0700 (PDT)
X-Received: by 10.66.189.98 with SMTP id gh2mr5471274pac.60.1377023979990;
Tue, 20 Aug 2013 11:39:39 -0700 (PDT)
Return-Path: <>
Received: from db8outboundpool.messaging.microsoft.com (mail-db8lp0187.outbound.messaging.microsoft.com. [213.199.154.187])
by mx.google.com with ESMTPS id yd4si2496593pbc.206.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 20 Aug 2013 11:39:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of db8outboundpool.messaging.microsoft.com designates 213.199.154.187 as permitted sender) client-ip=213.199.154.187;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of db8outboundpool.messaging.microsoft.com designates 213.199.154.187 as permitted sender) smtp.mail=
Received: from mail52-db8-R.bigfish.com (10.174.8.246) by
DB8EHSOBE015.bigfish.com (10.174.4.78) with Microsoft SMTP Server id
14.1.225.22; Tue, 20 Aug 2013 18:38:40 +0000
Received: from mail52-db8 (localhost [127.0.0.1]) by mail52-db8-R.bigfish.com
(Postfix) with ESMTP id 4AB4B9E0043 for <johnfrisco13@gmail.com>; Tue, 20 Aug
2013 18:38:40 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:70.37.188.198;KIP
X-SpamScore: -30
X-BigFish: VS-30(zzbb2dIc85fhc53eIV4015Izz1f42h208ch1ee6h1de0h1fdah2073h108eh1202h1e76h1d1ah1d2ah1e9bh1fc6hz8dhz18c673hz2dh87h2a8h839h8e3hd24hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1bceh1d0ch1d2eh1d3fh1dfeh1dffh1fe8h1ff5h9a9j1151h1155h)
X-FB-DOMAIN-IP-MATCH: fail
Received: from mail52-db8 (localhost.localdomain [127.0.0.1]) by mail52-db8
(MessageSwitch) id 1377023916620949_8061; Tue, 20 Aug 2013 18:38:36 +0000
(UTC)
Received: from DB8EHSMHS002.bigfish.com (unknown [10.174.8.228]) by
mail52-db8.bigfish.com (Postfix) with ESMTP id 9353E580035 for
<johnfrisco13@gmail.com>; Tue, 20 Aug 2013 18:38:36 +0000 (UTC)
Received: from SMTP.MGD.MANPOWER.COM (70.37.188.198) by
DB8EHSMHS002.bigfish.com (10.174.4.12) with Microsoft SMTP Server (TLS) id
14.16.227.3; Tue, 20 Aug 2013 18:38:36 +0000
Received: from 018-TK5MMR1-003.018D.MGD.MSFT.NET (10.112.2.76) by
018D-TK5MMLT-01.018D.MGD.MSFT.NET (10.112.2.102) with Microsoft SMTP Server
(TLS) id 8.3.106.1; Tue, 20 Aug 2013 18:38:18 +0000
Received: from 018-TK5MMR1-003.018D.MGD.MSFT.NET ([10.112.2.76]) by
018-TK5MMR1-003.018D.MGD.MSFT.NET ([10.112.2.76]) with Microsoft SMTP Server
id 14.03.0146.002; Tue, 20 Aug 2013 18:38:18 +0000
From: "Riordan, Steven" <steve.riordan@experis.com>
To: John Palardy <johnfrisco13@gmail.com>
Subject: Automatic reply: American Express
Thread-Topic: American Express
Thread-Index: AQHOndRwPqWiNX/oZUWpTHodcXvANg==
Date: Tue, 20 Aug 2013 18:38:18 +0000
Message-ID: <24bdb3dc59104f46bcc6e91616b6a7b1@018-TK5MMR1-003.018D.MGD.MSFT.NET>
References: <7FD4A5D74F27F24788086B0A2BF3427E1101C4FF@018-TK5MPN2-062.018D.MGD.MSFT.NET>
<CAF_yy0F20WMtDN7OH4V-F9kNe0SVXohVBNUPDptUKZ-GJsb7aQ@mail.gmail.com>,<CAF_yy0GYzNXvfj5G0sFtKZ4XWdvqUy-EYKp3fqC4OpChN+YHNw@mail.gmail.com>
In-Reply-To: <CAF_yy0GYzNXvfj5G0sFtKZ4XWdvqUy-EYKp3fqC4OpChN+YHNw@mail.gmail.com>
X-MS-Has-Attach:
X-Auto-Response-Suppress: All
X-MS-Exchange-Inbox-Rules-Loop: steve.riordan@experis.com
X-MS-TNEF-Correlator:
Content-Type: multipart/alternative;
boundary="_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_"
MIME-Version: 1.0
Return-Path: <>
X-OriginatorOrg: manpower.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
I will be out of the office on Tuesday, 8/20/13 through Wednesday 8/21/13. =
I will have limited or no access. I'll be checking my email and VM when po=
ssible. Cell phone # is, 347-602-1298. Thanks, Steve
This e-mail and its attachments may contain ManpowerGroup proprietary infor=
mation, which is PRIVILEGED, CONFIDENTIAL, or subject to COPYRIGHT belongin=
g to ManpowerGroup. This e-mail is intended solely for the use of the indiv=
idual or entity to which it is addressed. If you are not the intended recip=
ient of this e-mail, or the employee or agent responsible for delivering th=
is e-mail to the intended recipient, you are hereby notified that any disse=
mination, distribution, copying, or action taken in relation to the content=
s of and attachments to this e-mail is STRICTLY PROHIBITED and may be UNLAW=
FUL. If you have received this e-mail in error, please notify the sender im=
mediately and permanently delete the original and any copy of this e-mail a=
nd any printout. Thank you.
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<style>
<!--
@font-face
{font-family:"Plantagenet Cherokee"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif"}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal" style=3D"text-autospace:none">I will be out of the o=
ffice on Tuesday, 8/20/13 through Wednesday 8/21/13. I will have limi=
ted or no access. I'll be checking my email and VM when possible. Cel=
l phone # is, 347-602-1298. Thanks, Steve</p>
</div>
This e-mail and its attachments may contain ManpowerGroup proprietary infor=
mation, which is PRIVILEGED, CONFIDENTIAL, or subject to COPYRIGHT belongin=
g to ManpowerGroup. This e-mail is intended solely for the use of the indiv=
idual or entity to which it is addressed.
If you are not the intended recipient of this e-mail, or the employee or a=
gent responsible for delivering this e-mail to the intended recipient, you =
are hereby notified that any dissemination, distribution, copying, or actio=
n taken in relation to the contents
of and attachments to this e-mail is STRICTLY PROHIBITED and may be UNLAWF=
UL. If you have received this e-mail in error, please notify the sender imm=
ediately and permanently delete the original and any copy of this e-mail an=
d any printout. Thank you.
</body>
</html>
--_000_24bdb3dc59104f46bcc6e91616b6a7b1018TK5MMR1003018DMGDMSF_--