20220706_PHISHING_SCAM_1

Attention:

I am Mrs. Sarah Morris; I am a US citizen, 57 years Old. I reside here in California. My residential address is as follows, 2807 W Warner Ave Apto D Santa Ana California 92704 United States, am thinking of relocating since I am now rich. I am one of those that took part in the compensation in West Africa many years ago and they refused to pay me, I had paid over $63,700 while trying to get my payment all to no avail.

So I decided to travel to Washington D.C with all my compensation documents, And I was directed by the Federal Bureau of Investigation Director to contact Mr. Patrick Moore, who is a representative of the INTERNATIONAL MONETARY FUND (IMF) and a member of the Compensation Award Committee, currently in Washington D.C (USA) and I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake.

He took me to the paying bank for the claim of my compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds of $5.8 Million US Dollars. Moreover, Mr. Patrick Moore showed me the full information of those that are yet to receive their payments and I saw your email as one of the beneficiaries on the list he showed me, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Patrick Moore. Kindly send your personal details to him to prove your identification.

Full Name:
Home Address:
Occupation:
Phone Number:
Age:
Gender:
Country:

You have to contact him directly on this information below.

Compensation Award Office.
Name: Mr. Patrick Moore
Email: [email protected]

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met Mr. Patrick Moore was just $725USD for the paper works, take note of that.

Once again stop contacting those people, I will advise you to contact Mr. Patrick Moore so that he can help you to deliver your fund instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction.

Thank you and be blessed.

Mrs. Sarah Morris
2807 W Warner Ave Apto D
Santa Ana California 92704
United States




Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.28 via Mailbox Transport; Wed, 6 Jul 2022 03:29:30 -0500
Received: from MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.28; Wed, 6 Jul 2022 03:29:30 -0500
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX11D-ORD1.mex08.mlsrvr.com (172.29.8.36) with Microsoft SMTP Server (TLS)
 id 15.0.1497.28 via Frontend Transport; Wed, 6 Jul 2022 03:29:30 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp21.gate.iad3a.rsapps.net x-tls.subject="/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=mail.protection.outlook.com"; auth=pass (cipher=AES256-GCM-SHA384)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [40.95.45.145]
Authentication-Results: smtp21.gate.iad3a.rsapps.net; iprev=pass policy.iprev="40.95.45.145"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="nam12-mw2-obe.outbound.protection.outlook.com"; dkim=pass header.d=bennercombr.onmicrosoft.com; dmarc=none (p=nil; dis=none) header.from=msam.org
X-Suspicious-Flag: NO
X-Classification-ID: c0c5b280-fd05-11ec-99ff-525400e75841-1-1
Received: from [40.95.45.145] ([40.95.45.145:15840] helo=NAM12-MW2-obe.outbound.protection.outlook.com)
	by smtp21.gate.iad3a.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES256-GCM-SHA384
	subject="/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=mail.protection.outlook.com")
	id 6C/35-06289-9E745C26; Wed, 06 Jul 2022 04:29:30 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=Cv/UR0eAzKJ1taqb7WbTHR8dn7JtRcOUzN+30z2Jpj6h9lTcSmK35a6O82wkguB0Y5lQglLu9TF7D5gl9slkRKufcfUDYvkxTju07acpuuYyKYyUs2/3xI41GriUU+ztKiBQ6DlAOPQgwSLCoFdYSmx3kokTIqEEF0tw9DiDTWshYD7AlNELSnAK0Fei32YsEv06UcyaryTC9NMO3cJcRmQQXf/oar4ttnqUDSgW/LOFiGjAD2Jh3UZ040g8INzIhcDOAZiJem+mBa45O15N1doICBwt1o17FXadyBKHwdZA5gPK2SzZzTKlGaiHnCDGL5pCJi9ufYffKcXcgBJvcQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=NKAXRhDjHVXt6iOpMzJcR/kXbcKS+1H1AbcvI70//Cg=;
 b=TnXue6p5119liM0wXQsBojW0rg5zwPptcySVe5lgDlh/RCfxsA731kVOWYSjOL4IJyqi8SvYNcL6MJCpqBvI+K8F1/xhUUXV6oQVQNK4z0q2U6g1mMqNfS1CnBb0SF7cJTc+XAl1zwHk1MCQNiZUW7nNgwfcdjhlqPQr1mxbxg8yNqTWEE2HA5qGmwa+oiQ3fUlpa2wqCNGN2THeT+jKJtw0MkxpYSeKYIIsvvEvuq63yFPK6PnVByUVDLhf1ZS26QiULUv+S6ln9tYYW0AiJ7jtBDWpJ04LNXrKflUwFGdL8wdz3C+4vgNarM0oxCtJjELQQF+RLO1ZxH1B/nRtiw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 152.70.213.238) smtp.rcpttodomain=b8splace.com smtp.mailfrom=msam.org;
 dmarc=none action=none header.from=msam.org; dkim=none (message not signed);
 arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=bennercombr.onmicrosoft.com; s=selector1-bennercombr-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=NKAXRhDjHVXt6iOpMzJcR/kXbcKS+1H1AbcvI70//Cg=;
 b=hSfyy0b9T3jApd3yn8VGYRwpSEpvWAAWk+GUGHd25yPQyrHK/QJx+ueBlg3k2nZe6BJdMSSYNp+aB/y33Znr+WpB0hsGYF2/VEWXfWuVwp7ZL9TtJIuvZidE3Pf+5MqzVTU6egAQmUDO9r07HzNIsQkEryuGJslUeLVvJ2wtqUg=
Received: from BN9PR03CA0137.namprd03.prod.outlook.com (2603:10b6:408:fe::22)
 by FR1P152MB0934.LAMP152.PROD.OUTLOOK.COM (2603:10d6:200:2a::10) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5395.19; Wed, 6 Jul
 2022 07:56:31 +0000
Received: from BN1NAM02FT006.eop-nam02.prod.protection.outlook.com
 (2603:10b6:408:fe:cafe::cb) by BN9PR03CA0137.outlook.office365.com
 (2603:10b6:408:fe::22) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5417.15 via Frontend
 Transport; Wed, 6 Jul 2022 07:56:31 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 152.70.213.238)
 smtp.mailfrom=msam.org; dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=msam.org;
Received-SPF: None (protection.outlook.com: msam.org does not designate
 permitted sender hosts)
Received: from webmail.benner.com.br (152.70.213.238) by
 BN1NAM02FT006.mail.protection.outlook.com (10.13.2.125) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
 15.20.5417.15 via Frontend Transport; Wed, 6 Jul 2022 07:56:30 +0000
Received: from bnr-exch101.benner.com.br (10.185.30.38) by
 bnr-exch101.benner.com.br (10.185.30.38) with Microsoft SMTP Server (TLS) id
 15.0.1497.24; Wed, 6 Jul 2022 04:52:30 -0300
Received: from [192.168.1.200] (131.108.88.225) by bnr-exch101.benner.com.br
 (10.185.30.38) with Microsoft SMTP Server id 15.0.1497.24 via Frontend
 Transport; Wed, 6 Jul 2022 04:52:30 -0300
MIME-Version: 1.0
Content-Description: Mail message body
Subject: I HAVE SUCCESSFULLY RECEIVED MY PAYMENT.
To: Recipients <[email protected]>
From: "Mrs. Sarah Morris" <[email protected]>
Date: Wed, 6 Jul 2022 04:52:31 -0300
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: e8b0d905-fda1-4376-07eb-08da5f2509d2
X-MS-TrafficTypeDiagnostic: FR1P152MB0934:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: =?iso-8859-1?Q?xvI0brjv6Yh9ZVe8Ttlaug9lSfaGP5izUzooJnrCZFgz9Hx7i3n8qQti2i?=
 =?iso-8859-1?Q?dQ4MfghTZDYC9XSX20Z2Y66oaVhi42wCTY/z/rXbg905Dj//hHhSxSUVkw?=
 =?iso-8859-1?Q?MgtOQM76UwchTHSYKHmcSG2ZXqa7ul7gZcZ2NJotSMoAjIWONxkXyPIFYT?=
 =?iso-8859-1?Q?g5PoOBUbZS1B9CFI19bDVqUTBduFQ3b6vb/Q5as9PIdRhS8fBaSw/kKIl1?=
 =?iso-8859-1?Q?Z/mdYFC7SHAFx/IEFhfY1XZ7htH4CsEzSWuhL6cynou4Rv12yT6UraBhMH?=
 =?iso-8859-1?Q?ZnHTEXRoXyDMAOr/+XgdhgwydccUY21t+2wD5PiVXNjRkcbnYTpVi50gee?=
 =?iso-8859-1?Q?UCXZfzkL4QYUHhKl5LarkhioWTGrpe8PWURMJUmhpWwz5MsBMK1PywC1BP?=
 =?iso-8859-1?Q?XmrbrR/VbrdUMykvoYS5Jz2aUPSIijHnxWE+kOjLBXY4ItVgTQBemJywEb?=
 =?iso-8859-1?Q?R4hdVpAiz+NWUvaVxHWycnrXlsFAV+Nlx4vPmMkUhT2Ntinalnn7sZ3xF1?=
 =?iso-8859-1?Q?3wgn/6v0Z1dJ+Lg8Qoxb6nwY+kgiAzpVldUiyMWLAXIYAmlCqw7lCqudgr?=
 =?iso-8859-1?Q?cJXErenhXN2dbA3ONcZVHjnSJpZ0HcNj9LyDBNvgaFz3fFN9lXSVJQwpfB?=
 =?iso-8859-1?Q?LCxQhvJzRZHebierEWkane/4CZQS1IQwXVlCJomd+XXxbYPZdSl19FektM?=
 =?iso-8859-1?Q?TRz4Hai35kEw+qGE2lKJYdIh+T+WkeEI776N1EAJinvF+EacRrPWIudv8n?=
 =?iso-8859-1?Q?0KYUpg1UPdf++PABAbihC0YUpTpbnODL+1UyfFTb/mu7fT0Qsxr1P2tcTn?=
 =?iso-8859-1?Q?2nAuhvZIAwgTgAUoNaYxPl1X44TMOC//ft9HV9uu+rxfV2xtqKNdK8qlOR?=
 =?iso-8859-1?Q?uaiTkV0i2/Bq/wv/1k+X4tvVn2u0MGFE+BBwDs1wC3JQ4xgGn7Hx+2ki0h?=
 =?iso-8859-1?Q?dVkeUuDEhNHa1HtjZ7YbVFGHBbCPdZKNi8IlFjBndBRuLSlKblgjEhGE5E?=
 =?iso-8859-1?Q?m72Kgochy4TAv5lm630UET0JvLwwvPAAis31cPA8XqWmLCeOKsY+dwIKec?=
 =?iso-8859-1?Q?eiYqllHDEaNhaibnbarDzPblZ/J68TYU6Jyv/yUzF6xWiDYCkFGgvEmxP9?=
 =?iso-8859-1?Q?DLVTbG4U66aVDHFhWO8+ayyri8X9S5fidl/jxy3/KoP5eEMK7/4ZRRc6pL?=
 =?iso-8859-1?Q?T2h6E3nykHz+1Q=3D=3D?=
X-Forefront-Antispam-Report: CIP:152.70.213.238;CTRY:BR;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:webmail.benner.com.br;PTR:mx.benner.com.br;CAT:OSPM;SFS:(13230016)(39860400002)(136003)(396003)(376002)(346002)(40470700004)(46966006)(956004)(40480700001)(82310400005)(336012)(47076005)(316002)(8676002)(16576012)(35950700001)(83380400001)(70206006)(70586007)(24736004)(5660300002)(8936002)(6862004)(108616005)(86362001)(40460700003)(9686003)(7416002)(498600001)(26005)(7636003)(82740400003)(356005)(15650500001)(6200100001)(41300700001)(2906002)(62346012);DIR:OUT;SFP:1023;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Jul 2022 07:56:30.6566
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e8b0d905-fda1-4376-07eb-08da5f2509d2
X-MS-Exchange-CrossTenant-Id: 87c87d15-14f3-4d96-8703-d512a34432b5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=87c87d15-14f3-4d96-8703-d512a34432b5;Ip=[152.70.213.238];Helo=[webmail.benner.com.br]
X-MS-Exchange-CrossTenant-AuthSource: BN1NAM02FT006.eop-nam02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR1P152MB0934
X-MS-Exchange-Organization-Network-Message-Id: f53989d5-95ea-4b1a-1dd7-08da5f29a5b1
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX11D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit