Did everyone get this email back on Feb 5 from "Stephen <antwon.bechtelar at imperfecciones.inatural24.com>" It had an XLS file attached and the emailer asked me to sign it and email it back. Yeah, right.. Looks like someone's account has been hacked. Full headers, below. Original email below that. Mik Return-Path: <antwon.bechtelar at imperfecciones.inatural24.com> Received: from bulk.webworksserver.com (ns2.webworksserver.com [216.144.202.140]) by mail.montaguewebworks.com with SMTP; Fri, 5 Feb 2021 12:21:40 -0500 Received: from eastern.birch.relay.mailchannels.net (eastern.birch.relay.mailchannels.net [23.83.209.55]) by bulk.webworksserver.com with SMTP; Fri, 5 Feb 2021 12:21:11 -0500 X-Sender-Id: spamcontrol26|x-authuser|antwon.bechtelar at imperfecciones.inatural24.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 37E6E3626DE for <tech at montaguewebworks.com>; Fri, 5 Feb 2021 17:21:10 +0000 (UTC) Received: from single-4760.banahosting.com (100-96-17-21.trex.outbound.svc.cluster.local [100.96.17.21]) (Authenticated sender: spamcontrol26) by relay.mailchannels.net (Postfix) with ESMTPA id CBF54361B28 for <tech at montaguewebworks.com>; Fri, 5 Feb 2021 17:21:08 +0000 (UTC) X-Sender-Id: spamcontrol26|x-authuser|antwon.bechtelar at imperfecciones.inatural24.com Received: from single-4760.banahosting.com (single-4760.banahosting.com [216.246.112.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384) by 100.96.17.21 (trex/6.0.2); Fri, 05 Feb 2021 17:21:10 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: spamcontrol26|x-authuser|antwon.bechtelar at imperfecciones.inatural24.com X-MailChannels-Auth-Id: spamcontrol26 X-Broad-Glossy: 558c9eac2a044873_1612545670028_996257083 X-MC-Loop-Signature: 1612545670028:2745538572 X-MC-Ingress-Time: 1612545670028 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=imperfecciones.inatural24.com; s=default; h=To:From:sender:Content-Type: list-subscribe:list-help:list-post:list-archive:list-unsubscribe:list-id: Subject:Message-ID:Date:In-Reply-To:References:MIME-Version:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=8QbOk5X/DJC/JrDLwywE3Z5EcCTx9NewgTRN4ZM2KPc=; b=qyxDF5/F6K5WYoqMbTd3JAJ+1 +cdbjaUXg8Fv7oNponlrOuLhkkco47bBSRIEUu/het4QS+8Wyz/5DKXFH8hL2gcp9tHfah0xSOncv vtdHjy9dagsdFULI/f9FVZLxrIMqVANHiScOa4Dn0RuoqgxAPIg6IwRmwVBIT4F5Zbv31yu/h03wq hqil21krXCb338gnBDC3VSGJVuj5i1zEkZnWSzuaNi6brhPso35VlYSAaGFMlkwgZQgD/4Af6cBfS QHhvzpqqR4cSfy3qfAzs116ZazTzZyC/BomySaA3NgwBZIPZz65vVLTgzVGtD3tf+6sR0QOKzxwO4 Yiav0h2XA==; Received: from [103.142.121.6] (port=58726 helo=imperfecciones.inatural24.com) by single-4760.banahosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (Exim 4.93) (envelope-from <antwon.bechtelar at imperfecciones.inatural24.com>) id 1l84mw-0001Aa-7P for tech at montaguewebworks.com; Fri, 05 Feb 2021 12:21:03 -0500 delivered-to: rroth at tnrglobal.com delivered-to: rzroth at gmail.com arc-seal: i=1; a=rsa-sha256; t=1611268628; cv=none; d=google.com; s=arc-20160816; b=ScWOCfOmy7vRf4HLZOOV4HikbF7xmkvjtH4G4No/rtuf9M0M79j1TWD8Z2FcFT3/oI vWdSgV1J/wrIKkAK0jyLc1AmP7e66Ipf8hNZYoCfdqg+vZ1zdUXuf3X5tOHvVO05PyTm 7Etme5pS48wOeO4M2DTwmONMPr5IMkxMevrDi0NgampP0wKX71M7U/Uw/F1uUVxrbR7Y 8cxx8ZxVYWJXEjz+Cxe6KPGlWq6eR6gE1yjGjc2lSR/vnG1yQy2fEcidUrgwA+TItvxB EOXQk8SV0QHQEsTI/bhJr9BzpzvVi/4/ONSL3z4TjooYu704+oVRS2mlUgtL5gZEhhsT m11Q== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:cc:reply-to:from:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :to:message-id:date:in-reply-to:references:mime-version :dkim-signature:delivered-to; bh=rwZDk7lq3lrkvu+1S7/aTNv2X7BaX5FbTLyVpYlhSgk=; b=L5g4SopSwIyv/92of76t+91FnKJntKO+mLOExHeZqXtVPkVAS+5R5k5U/Ed2sT1MwF nmcwi5jgRFsNNCNRF0Xw2NkzG2U9tX1NemHAfSNEPP1MX5f0U5hUBLYEYwvnQmH1PpTl Li36w7izyF9fe/M6lPXl2AKG3ZgA+mffoBTbFqvnSjQ2YHygHh0NA+o1PwstTf2GNI0G mhCtB1796QJpeKZf1SPD6PQoLcxNE/YAz9BtVWzws56KQc6AIP6jE61ddsZ9JlbfWGap n51OHE2zbiwEjdAszl8EwNOlqU/tQWCsY9hABNxAaIlNorgBh7ZE9KGwS1cYNAwvoFZV Ze+g== arc-authentication-results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@justpeachy.io header.s=google header.b=VNjaU3CS; spf=pass (google.com: domain of hidden-discuss-bounces at lists.hidden-tech.net designates 3.17.96.37 as permitted sender) smtp.mailfrom=hidden-discuss-bounces at lists.hidden-tech.net; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=hidden-tech.net received-spf: pass (google.com: domain of hidden-discuss-bounces at lists.hidden-tech.net designates 3.17.96.37 as permitted sender) client-ip=3.17.96.37; authentication-results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@justpeachy.io header.s=google header.b=VNjaU3CS; spf=pass (google.com: domain of hidden-discuss-bounces at lists.hidden-tech.net designates 3.17.96.37 as permitted sender) smtp.mailfrom=hidden-discuss-bounces at lists.hidden-tech.net; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=hidden-tech.net authentication-results: dmoz.awboc.com; dkim=fail (verification failed) header.i=@justpeachy.io; x-dkim-adsp=none delivered-to: hidden-discuss at dmoz.awboc.com MIME-Version: 1.0 References: <CAKJ3DvqhtG601gKNCgQtUtF191JiRWryvcQ1pGxE+vz4-s86CA at mail.gmail.com> In-Reply-To: <CAKJ3DvqhtG601gKNCgQtUtF191JiRWryvcQ1pGxE+vz4-s86CA at mail.gmail.com> Date: Fri, 05 Feb 2021 17:20:59 -0600 Message-ID: <D74A3708C7EA2C3662E6C0CBD46EC1AA17A63A8F at unknown> Subject: [Michael Muller] Re: [Hidden-tech] Building a Gaming computer precedence: list list-id: <hidden-discuss.lists.hidden-tech.net> list-unsubscribe: <http://lists.hidden-tech.net/options/hidden-discuss>, <mailto:hidden-discuss-request at lists.hidden-tech.net?subject=unsubscribe> list-archive: <http://lists.hidden-tech.net/pipermail/hidden-discuss/> list-post: <mailto:hidden-discuss at lists.hidden-tech.net> list-help: <mailto:hidden-discuss-request at lists.hidden-tech.net?subject=help> list-subscribe: <http://lists.hidden-tech.net/listinfo/hidden-discuss>, <mailto:hidden-discuss-request at lists.hidden-tech.net?subject=subscribe> Content-Type: multipart/mixed; boundary="===============4690247477778557202==" sender: Hidden-discuss <hidden-discuss-bounces at lists.hidden-tech.net> X-Priority: 3 (Normal) From: Stephen <antwon.bechtelar at imperfecciones.inatural24.com> To: "Michael Muller" <tech at montaguewebworks.com> X-YourOrg-MailScanner-Information: Please contact the ISP for more information X-YourOrg-MailScanner-ID: 1l84mw-0001Aa-7P X-YourOrg-MailScanner: Found to be clean X-YourOrg-MailScanner-SpamCheck: X-YourOrg-MailScanner-From: antwon.bechtelar at imperfecciones.inatural24.com X-Spam-Status: No X-AuthUser: antwon.bechtelar at imperfecciones.inatural24.com X-Exim-Id: D74A3708C7EA2C3662E6C0CBD46EC1AA17A63A8F X-Declude-Sender: antwon.bechtelar at imperfecciones.inatural24.com [216.144.202.140] X-Declude-Spoolname: 93590942.eml X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.12.11 X-Declude-Scan: Incoming Score [0] at 12:21:50 on 05 Feb 2021 X-Declude-Tests: Whitelisted X-Country-Chain: UNITED STATES->destination X-Declude-Code: 2000010f X-HELO: bulk.webworksserver.com X-Identity: 216.144.202.140 | ns2.webworksserver.com | imperfecciones.inatural24.com X-SmarterMail-Spam: Declude: 0 X-SmarterMail-TotalSpamWeight: 0 (Authenticated) --- Mik Muller, president Montague WebWorks 239-R Main Street, Greenfield, MA 413-320-5336 http://MontagueWebWorks.com Powered by ROCKETFUSION On 2/5/2021 6:20 PM, Stephen wrote: > > Good aftenoon, > Please examine and sign the attached documentation. > > > > > >> Seconding Mik's recommendation! About Face is great. >> >> On Thu, Jan 21, 2021 at 2:03 PM Michael Muller via Hidden-discuss >> <hidden-discuss at lists.hidden-tech.net >> <mailto:hidden-discuss at lists.hidden-tech.net>> wrote: >> >> I always like working with About Face Computers in Turners. >> >> * https://about-facecomputers.com <https://about-facecomputers.com> >> >> Mik >> >> --- >> Mik Muller, president >> Montague WebWorks >> 239-R Main Street, Greenfield, MA >> 413-320-5336 >> http://MontagueWebWorks.com <http://MontagueWebWorks.com> >> Powered by ROCKETFUSION >> >> On 1/19/2021 9:54 PM, David Ruderman via Hidden-discuss wrote: >>> Hey friends, >>> >>> I do any of you have a recommendation for someone or a local business who can help my 19 year old stepson finish building his high end gaming computer ? He bought what he says are all the components but he is stuck with nothing powering up. He realizes this wouldn�t be free, of course. >>> >>> Thanks, >>> >>> -dave >>> _______________________________________________ >>> Hidden-discuss mailing list - home page:http://www.hidden-tech.net <http://www.hidden-tech.net> >>> Hidden-discuss at lists.hidden-tech.net <mailto:Hidden-discuss at lists.hidden-tech.net> >>> >>> You are receiving this because you are on the Hidden-Tech Discussion list. >>> If you would like to change your list preferences, Go to the Members >>> page on the Hidden Tech Web site. >>> http://www.hidden-tech.net/members <http://www.hidden-tech.net/members> >> _______________________________________________ >> Hidden-discuss mailing list - home page: >> http://www.hidden-tech.net <http://www.hidden-tech.net> >> Hidden-discuss at lists.hidden-tech.net >> <mailto:Hidden-discuss at lists.hidden-tech.net> >> >> You are receiving this because you are on the Hidden-Tech >> Discussion list. >> If you would like to change your list preferences, Go to the Members >> page on the Hidden Tech Web site. >> http://www.hidden-tech.net/members >> <http://www.hidden-tech.net/members> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20210218/14fe19fa/attachment-0001.html>