API tools faq
paste
Advertisement
wavellan

20240414_PHISHING_SCAM_1

wavellan
Apr 16th, 2024
77
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.86 KB | None | 0 0
raw download clone embed print report
  1. Attention,
  2.  
  3. I am Anthony Bucci, Head Officer-in-Charge, Administrative Service Inspection Unit United Nations Inspection Agency in Hartsfield-Jackson International Airport Atlanta, Georgia. During our investigation, I discovered an abandoned shipment through a Diplomat from the United Kingdom which was transferred from JF Kennedy Airport to our facility h e r e in Atlanta. When scanned it revealed an u n d I s closed sum of M O N E Y in 2 Metal Trunk Boxes weighing approximately 130kg.
  4. The consignment was abandoned because the Content was not properly declared by the consignee as m0ney rather it was declared as a personal effect/classified document to either A V O I D diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non-Inspection fees among other things is the reason why the consignment is delayed and abandoned.
  5. By my assessment, each of the boxes contains $ 5M which is a total of $ 10 mi1lion USD. They have still left in the airport storage facility T O D A Y. The consignments are two metal trunk boxes weighing about 65kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your n a m e and email on the official document from the United Nations office in London where the shipment was tagged as personal effects/classified document is still available with us. As it stands n o w, you have to reconfirm your full n a m e, P h o n e Number, and full address so I can cross-c h e ck and see if it corresponds with the one on the official documents. It is n o w left to you to decide if you still need the consignment or allow us to repatriate it back to the UK
  6. (place of origin) as we were instructed.
  7.  
  8. As I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non-inspection document(s), etc. I am ready to assist you in any way I can f o r you to g e t back these packages provided you will also give me something out of it (fiinancial gratification). You can either come in person or engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the package to your doorstep or the destination of your choice. I need a l l the guarantees that I can g e t from you before I can g e t involved in this project.
  9.  
  10. Best Regards,
  11.  
  12. Anthony Bucci
  13.  
  14.  
  15.  
  16.  
  17.  
  18. Received: from BY3PR05MB8548.namprd05.prod.outlook.com (2603:10b6:a03:3cf::7)
  19. by SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Mon, 15 Apr 2024
  20. 03:10:07 +0000
  21. Received: from MN2PR20CA0033.namprd20.prod.outlook.com (2603:10b6:208:e8::46)
  22. by BY3PR05MB8548.namprd05.prod.outlook.com (2603:10b6:a03:3cf::7) with
  23. Microsoft SMTP Server (version=TLS1_2,
  24. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7452.50; Mon, 15 Apr
  25. 2024 03:10:06 +0000
  26. Received: from BL02EPF0001A0FD.namprd03.prod.outlook.com
  27. (2603:10b6:208:e8:cafe::f7) by MN2PR20CA0033.outlook.office365.com
  28. (2603:10b6:208:e8::46) with Microsoft SMTP Server (version=TLS1_2,
  29. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7472.32 via Frontend
  30. Transport; Mon, 15 Apr 2024 03:10:05 +0000
  31. Authentication-Results: spf=pass (sender IP is 213.162.246.177)
  32. smtp.mailfrom=tonerweb.no; dkim=pass (signature was verified)
  33. header.d=tonerweb.no;dmarc=pass action=none
  34. header.from=tonerweb.no;compauth=pass reason=100
  35. Received-SPF: Pass (protection.outlook.com: domain of tonerweb.no designates
  36. 213.162.246.177 as permitted sender) receiver=protection.outlook.com;
  37. client-ip=213.162.246.177; helo=mail.tonerweb.no; pr=C
  38. Received: from mail.tonerweb.no (213.162.246.177) by
  39. BL02EPF0001A0FD.mail.protection.outlook.com (10.167.242.104) with Microsoft
  40. SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7452.22
  41. via Frontend Transport; Mon, 15 Apr 2024 03:10:04 +0000
  42. dkim-signature: v=1; a=rsa-sha256; d=tonerweb.no; s=dkim;
  43. c=relaxed/relaxed; q=dns/txt; h=From:Reply-To:Subject:Date:Message-ID:To:MIME-Version:Content-Type;
  44. bh=0IjXxn5oaAaf99wNfHg/zxv20GeZ3S44K9IIiWdshpY=;
  45. b=QMije+yOJaqLI/kU+H78joDXkUzYSdQKvIdhrgRBATyealgMexd4Dkf2Y6dAohdfTMp2LpZx0Pzv1+fy4jvtkyzMCWJSdBq3xoX7jmXtZ5uB+qBdGoq7f+dlYR4cIOZ2HV/HX90lJz5hXY2F6f3yq++HWXB9LCQeZZo2klSr9VQ=
  46. Received: from 91.202.180.2 (Unknown [159.223.129.9])
  47. by mail.tonerweb.no with ESMTP
  48. ; Sat, 13 Apr 2024 05:11:59 +0200
  49. Message-ID: <[email protected]>
  50. From: "Anthony Bucci" <[email protected]>
  51. Subject: Shipment Update
  52. To:
  53. MIME-Version: 1.0
  54. Reply-To: "[email protected]" <[email protected]>
  55. Organization: Anthony Bucci
  56. Date: Fri, 12 Apr 2024 20:11:58 -0700
  57. Return-Path: [email protected]
  58. X-MS-Exchange-Organization-ExpirationStartTime: 15 Apr 2024 03:10:04.8513
  59. (UTC)
  60. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  61. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  62. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  63. X-MS-Exchange-Organization-Network-Message-Id:
  64. dafba6ab-ed63-4ab0-b508-08dc5cf98c32
  65. X-EOPAttributedMessage: 0
  66. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  67. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  68. X-MS-PublicTrafficType: Email
  69. X-MS-TrafficTypeDiagnostic:
  70. BL02EPF0001A0FD:EE_|BY3PR05MB8548:EE_|SJ0PR05MB8678:EE_
  71. X-MS-Exchange-Organization-AuthSource:
  72. BL02EPF0001A0FD.namprd03.prod.outlook.com
  73. X-MS-Exchange-Organization-AuthAs: Anonymous
  74. X-MS-Office365-Filtering-Correlation-Id: dafba6ab-ed63-4ab0-b508-08dc5cf98c32
  75. X-MS-Exchange-Organization-SCL: 8
  76. X-Forefront-Antispam-Report:
  77. CIP:213.162.246.177;CTRY:NO;LANG:en;SCL:8;SRV:;IPV:NLI;SFV:SPM;H:mail.tonerweb.no;PTR:mail.tonerweb.no;CAT:HSPM;SFS:(13230031)(43540500003);DIR:INB;
  78. X-Microsoft-Antispam: BCL:0;
  79. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Apr 2024 03:10:04.0232
  80. (UTC)
  81. X-MS-Exchange-CrossTenant-Network-Message-Id: dafba6ab-ed63-4ab0-b508-08dc5cf98c32
  82. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  83. X-MS-Exchange-CrossTenant-AuthSource:
  84. BL02EPF0001A0FD.namprd03.prod.outlook.com
  85. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  86. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  87. X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR05MB8548
  88. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.7209969
  89. X-MS-Exchange-Processed-By-BccFoldering: 15.20.7452.029
  90. X-Microsoft-Antispam-Mailbox-Delivery:
  91. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
  92.  
  93. Content-type: multipart/alternative;
  94. boundary="B_3796123137_1918550289"
  95.  
  96. > This message is in MIME format. Since your mail reader does not understand
  97. this format, some or all of this message may not be legible.
  98.  
  99. --B_3796123137_1918550289
  100. Content-type: text/plain;
  101. charset="UTF-8"
  102. Content-transfer-encoding: 7bit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!