20190416_PHISHING_SCAM_1

Anti-Terrorist And Monetary Crimes Division
FBI Headquarters, Washington, D.C.
Federal Bureau Of Investigation
J.Edgar Hoover Building
935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001
www.fbi.gov
ATTENTION: BENEFICIARY
This e-mail has been issued to you in order to Officially inform you that we have completed an investigation on an International Payment in which was issued to you by an International Lottery Company. With the help of our newly developed technology (International  Monitoring Network System) we discovered that your e-mail address was automatically selected by an Online Balloting System, this has legally won you the sum of $7.4 million USD from a Lottery Company outside the United States of America. During our investigation  we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.
Normally, it will take up to 5 business days for an INTERNATIONAL CERTIFIED BANK DRAFT by your local bank. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the world Wide,so as to enable  you cash the check instantly without any delay, henceforth the stated amount of $7.4 million USD has been deposited with IMF .We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction  to be Safe and 100% risk free, due to the fact that the funds have been deposited with IMF you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in Portonovo,Benin Republic. According  to our discoveries, you were required to pay for the following,
(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )
(2) Shipping Fee's ( This is the charge for shipping the Cashier's Check to your home address)
The total amount for everything is $250.00 We have tried our possible best to indicate that this $250.00 should be deducted from your winning prize but we found out that the funds have already been deposited to IMF and cannot be accessed by anyone apart  from you the winner, therefore you will be required to pay the required fee's to the Agent in-charge of this transaction In order to proceed with this transaction, you will be required to contact the agent in-charge ( Mr, Mark Edward) via e-mail. Kindly look  below to find appropriate contact information:
CONTACT AGENT NAME: Mr, Mark Edward
E-MAIL== edward.mark83@aol.com
Telephone == +23480-5750-2722

You will be required to e-mail him with the following information:
FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
OCCUPATION:
You will also be required to request Western Union or Money Gram details on how to send the required $250.00 in order to immediately ship your prize of $7.4 million USD via INTERNATIONAL CERTIFIED BANK DRAFT from IMF, also include the following transaction  code in order for him to immediately identify this transaction : EA2948-710.
This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $250.00 ONLY to Mr, Mark Edward via information in which he shall send to you,
Christopher A Wray
Federal Bureau of Investigation F B I
Yours in Service,Photograph of Director
Christopher Wray,vii1 Director Office of Public
Affairs Welcome once more to FBI



Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Tue, 16 Apr 2019 06:30:12 -0500
Received: from MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Tue, 16 Apr 2019 06:30:12 -0500
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Tue, 16 Apr 2019 06:30:11 -0500
Return-Path: <info@organo.ru>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: bill@tsteeleconstruction.com
X-Originating-Ip: [62.173.145.206]
Authentication-Results: smtp33.gate.iad3a.rsapps.net; iprev=pass policy.iprev="62.173.145.206"; spf=pass smtp.mailfrom="info@organo.ru" smtp.helo="organo.ru"; dkim=pass header.d=organo.ru; dmarc=pass (p=reject; dis=none) header.from=organo.ru
X-Suspicious-Flag: NO
X-Classification-ID: fdb431e6-603a-11e9-bed6-525400201c3f-1-1
Received: from [62.173.145.206] ([62.173.145.206:34092] helo=organo.ru)
	by smtp33.gate.iad3a.rsapps.net (envelope-from <info@organo.ru>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 64/18-15223-2CCB5BC5; Tue, 16 Apr 2019 07:30:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=organo.ru;
	 s=mail; h=Message-Id:Content-Transfer-Encoding:Content-Type:MIME-Version:
	Date:Subject:From:Reply-To:Sender:To:Cc:Content-ID:Content-Description:
	Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
	In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=mspx656pCQY+xFLP5P0yAwiDFCyQ6VcR1Cm5QHQozZQ=; b=B0YRSJvUWOXHd1uFODR5Cb8pFk
	f4MXdWgddDXboglVdGEq5jdaJ+uwgXduCK72kxJhMJ4ofGX21dGpz3YoJALcWM5uscr4Jgl2wmny2
	MlX1nZsHXl92gWIAmfs20jYyKdlF+z/ehglzzDf5yg5LM6HkEVy5+G7dwsbe7/tn9Go8=;
Received: from [37.49.224.158] (helo=User)
	by organo.ru with esmtpa (Exim 4.91)
	(envelope-from <info@organo.ru>)
	id 1hGMHp-00053l-PL; Tue, 16 Apr 2019 07:30:01 -0400
Reply-To: <edward.mark83@aol.com>
From: "Christopher A Wray"<info@organo.ru>
Subject: Federal Bureau of Investigation F B I
Date: Tue, 16 Apr 2019 04:30:01 -0700
MIME-Version: 1.0
	charset="Windows-1251"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <E1hGMHp-00053l-PL@organo.ru>
To: Undisclosed recipients:;
X-MS-Exchange-Organization-Network-Message-Id: d3350920-c977-4281-e7a6-08d6c25ee39d
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX09C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3638248356_1541054778"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3638248356_1541054778
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit