20190405_PHISHING_SCAM_1

Dear Friend.

How are you today? Hope all is well with you and your family?, You may not understand why this mail came to you. But if you do not remember me, you might have receive an email from me in the past regarding a multi-million-dollar business proposal which we never concluded.

I am using this opportunity to inform you that this multi-million-dollar business has been concluded with the assistance of another partner from Sweden who financed the transaction to a logical conclusion. I thank you for your great effort to our unfinished transfer of fund into your account due to one reason or the other best known to you.

But I want to inform you that I have successfully transferred the funds out of my bank to my new partner's account in India that was capable of assisting me in this great venture. Due to your effort,sincerity,courage and trust worthiness You showed during the course of the transaction.I want to compensate you and show my gratitude to you with the sum of US$10,200,000.00. I have left a Bank Draft for you worth of US$10,200,000.00 cash able anywhere in the world.

My dear friend I will like you to contact my Account OfficerCONTACT Mr. Micheal Clarkon his direct email address at [micheal.clark87@yahoo.com] to facilitate the collection of your Bank Draft. I authorized him to release the Bank Draft to you whenever you contact him regarding for it. At the moment, I'm very busy here because of the investment projects, which I and the new partner are having at hand.

Please I will like you to accept this token in good faith as this is from the bottom of my heart,Also  please comply with Clark's directives so  that he will send the draft to you without any delay.

CONTACT:Mr. Micheal Clark
Account Officer, Cotonou,
Benin Republic,
His email address:micheal.clark87@yahoo.com

Thanks & Best Regards,
Mrs. Girotk Aurent
Have a nice day.

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus



Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Fri, 5 Apr 2019 20:24:02 -0500
Received: from MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Fri, 5 Apr 2019 20:24:01 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Fri, 5 Apr 2019 20:24:01 -0500
Return-Path: <girotkaurent@gmail.com>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: email@email.com
X-Originating-Ip: [87.238.194.246]
Authentication-Results: smtp13.gate.iad3b.rsapps.net; iprev=pass policy.iprev="87.238.194.246"; spf=softfail smtp.mailfrom="girotkaurent@gmail.com" smtp.helo="mout19.gn-server.de"; dkim=none (message not signed) header.d=none; dmarc=fail (p=none; dis=none) header.from=gmail.com
X-Suspicious-Flag: NO
X-Classification-ID: a83dfafe-580a-11e9-af28-5254001dfc40-1-1
Received: from [87.238.194.246] ([87.238.194.246:56024] helo=mout19.gn-server.de)
	by smtp13.gate.iad3b.rsapps.net (envelope-from <girotkaurent@gmail.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES128-GCM-SHA256)
	id 2F/5C-29313-1BFF7AC5; Fri, 05 Apr 2019 21:24:01 -0400
Received: from mout14.gn-server.de ([87.238.194.241])
	by mout19.gn-server.de with esmtp (Exim 4.84_2)
	(envelope-from <girotkaurent@gmail.com>)
	id 1hCa3n-0000Pu-Ez; Sat, 06 Apr 2019 03:23:56 +0200
Received: from lc27.greatnet-hosting.de ([178.254.50.27])
	by mout14.gn-server.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.88)
	(envelope-from <girotkaurent@gmail.com>)
	id 1hCa3l-0000el-1E; Sat, 06 Apr 2019 03:23:53 +0200
Received: from [192.168.8.101] (unknown [41.79.219.218])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	(Authenticated sender: grace@altheinebfsgmbh.de)
	by lc27.greatnet-hosting.de (Postfix) with ESMTPSA id 08B746C6CDB;
	Sat,  6 Apr 2019 03:22:27 +0200 (CEST)
MIME-Version: 1.0
Content-Description: Mail message body
Subject: CONTACT:Mr. Micheal Clark
To: Recipients <girotkaurent@gmail.com>
From: "Mrs. Girotk Aurent" <girotkaurent@gmail.com>
Date: Sat, 6 Apr 2019 02:21:56 +0100
Reply-To: <micheal.clark87@yahoo.com>
X-Antivirus: Avast (VPS 190405-4, 04/05/2019), Outbound message
X-Antivirus-Status: Clean
X-Virus-Status: Clean
Message-ID: <E1hCa3l-0000el-1E@mout14.gn-server.de>
X-Spam-Report: Action: add header
 Symbol: RCVD_NO_TLS_LAST(0.00)
 Symbol: ARC_NA(0.00)
 Symbol: TO_EQ_FROM(0.00)
 Symbol: R_DKIM_NA(0.00)
 Symbol: ASN(0.00)
 Symbol: TAGGED_RCPT(0.00)
 Symbol: HAS_REPLYTO(0.00)
 Symbol: RCVD_COUNT_TWO(0.00)
 Symbol: IP_SCORE(0.00)
 Symbol: DMARC_POLICY_SOFTFAIL(0.00)
 Symbol: TO_DN_RECIPIENTS(2.00)
 Symbol: RECEIVED_SPAMHAUS(0.00)
 Symbol: FROM_EQ_ENVFROM(0.00)
 Symbol: URIBL_BLOCKED(0.00)
 Symbol: RCPT_COUNT_ONE(0.00)
 Symbol: R_SPF_SOFTFAIL(0.00)
 Symbol: FROM_HAS_DN(0.00)
 Symbol: TO_DN_ALL(0.00)
 Symbol: RCVD_VIA_SMTP_AUTH(0.00)
 Symbol: GREYLIST(0.00)
 Symbol: FORGED_RECIPIENTS(0.00)
 Symbol: REPLYTO_DOM_NEQ_FROM_DOM(0.00)
 Symbol: RECEIVED_SPAMHAUS_XBL(3.00)
 Symbol: MIME_GOOD(0.00)
 Symbol: FROM_NAME_HAS_TITLE(1.00)
 Message: (SPF): spf softfail
 Message-ID: E1hCa3l-0000el-1E@mout14.gn-server.de
X-Spam-Score-INT: 60
X-MS-Exchange-Organization-Network-Message-Id: c2281026-64ed-48f2-4e4f-08d6ba2e8cff
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX06C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit