Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

VA Loans <noreply@formstack.com>

DO NOT click on any links in these emails.

VA Loans <noreply@formstack.com>

Unread postby SlapHappy » Sat Nov 12, 2016 11:09 pm

* 52.71.30.102 Ashburn United States

Return-Path: <bounce-81388_KJCR-108331327-8546-12512-4093@mxi-rh-01.core.bpkpenaburjakarta.or.id>
Received: from pps4.ias.edu (queazy-unci.fluidblast.net.
[2a01:4f8:160:12c3:3fd7:6bd4:86e6:2d15])
by mx.google.com with ESMTPS id a7si12287812wjy.176.2016.11.11.12.57.19
for <xxx>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 11 Nov 2016 12:57:19 -0800 (PST)
Received-SPF: pass (google.com: domain of
bounce-81388_kjcr-108331327-8546-12512- ... arta.or.id
designates 2a01:4f8:160:12c3:3fd7:6bd4:86e6:2d15 as permitted sender) client-
ip=2a01:4f8:160:12c3:3fd7:6bd4:86e6:2d15;
Authentication-Results: mx.google.com;
dkim=neutral (bad version) header.i=@formstack.com;
dkim=pass header.i=@sendgrid.info;
spf=pass (google.com: domain of
bounce-81388_kjcr-108331327-8546-12512- ... arta.or.id
designates 2a01:4f8:160:12c3:3fd7:6bd4:86e6:2d15 as permitted sender)
smtp.mailfrom=bounce-81388_KJCR-1083313 ... arta.or.id;
dmarc=fail (p=NONE dis=NONE) header.from=formstack.com
Received: from o1.appmail.formstack.com (o1.appmail.formstack.com. [167.89.42.89])
by mx.google.com with ESMTPS id l65si11807422pge.112.2016.11.11.11.49.42
for <xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 11 Nov 2016 11:49:42 -0800 (PST)
Received-SPF: pass (google.com: domain of bounces+2446189-3387-zxxx appmail.formstack.com
designates 167.89.42.89 as permitted sender) client-ip=167.89.42.89;
DKIM-Signature:
Received: by filter0149p1las1.sendgrid.net with SMTP id filter0149p1las1-18913-582620D5-52
2016-11-11 19:49:41.579614201 +0000 UTC
Received: from localhost (ec2-52-71-30-102.compute-1.amazonaws.com [52.71.30.102]) by
ismtpd0004p1iad1.sendgrid.net (SG) with ESMTP id lYp_4auCQoikfIsnr0w1KA for
<xxx>; Fri, 11 Nov 2016 19:49:41.237 +0000 (UTC)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_191d30d7bbf705ca92afaa10668f198c"
From: VA Loans <noreply@formstack.com>
Return-Path: noreply@formstack.com
To: xxx
Subject: Celebrate Veterans! 0% Down - Veterans & Military Only
Subject: TEST - Celebrate Veterans! 0% Down - Veterans & Military Only
Reply-To: VALoans@stackoverflow.com
Message-ID: <lYp_4auCQoikfIsnr0w1KA@ismtpd0004p1iad1.sendgrid.net>
Date: Fri, 11 Nov 2016 19:49:41 +0000 (UTC)
X-SG-EID:
X-Feedback-ID:

--=_191d30d7bbf705ca92afaa10668f198cContent-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8



Thank you for your service ✌

Image
0% Down - Veterans & Military Only
Start your quote for a VA Home Loan - 0% down
Start Now
"http://bit.ly/ 2fJs2xD"
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 16 guests