20181113_PHISHING_SCAM_2

Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Mon, 12 Nov 2018 16:45:21 -0600
Received: from MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Mon, 12 Nov 2018 16:45:20 -0600
Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
 MBX01C-ORD1.mex08.mlsrvr.com (172.29.9.11) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Mon, 12 Nov 2018 16:45:20 -0600
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp40.gate.ord1d.rsapps.net x-tls.subject="/C=DE/ST=Hessen/L=Frankfurt am Main/O=Johann Wolfgang Goethe-Universitaet Frankfurt am Main/OU=Institut fuer Informatik/OU=RBI/CN=helios.rbi.informatik.uni-frankfurt.de"; auth=pass (cipher=DHE-RSA-AES128-SHA)
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [141.2.1.4]
Authentication-Results: smtp40.gate.ord1d.rsapps.net; iprev=pass policy.iprev="141.2.1.4"; spf=softfail smtp.mailfrom="[email protected]" smtp.helo="helios.rbi.informatik.uni-frankfurt.de"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=dodo.com.au
X-Suspicious-Flag: NO
X-Classification-ID: a1122700-e6cc-11e8-bd12-525400f204c2-1-1
Received: from [141.2.1.4] ([141.2.1.4:53864] helo=helios.rbi.informatik.uni-frankfurt.de)
	by smtp40.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES128-SHA
	subject="/C=DE/ST=Hessen/L=Frankfurt am Main/O=Johann Wolfgang Goethe-Universitaet Frankfurt am Main/OU=Institut fuer Informatik/OU=RBI/CN=helios.rbi.informatik.uni-frankfurt.de")
	id D5/A4-11659-F720AEB5; Mon, 12 Nov 2018 17:45:20 -0500
Received: from brodziatyPC.uni-frankfurt.de (vpn-ssl-30-52.rz.uni-frankfurt.de [141.2.30.52])
	by helios.rbi.informatik.uni-frankfurt.de (8.15.2/8.13.8) with ESMTPS id wACMcd39024230
	(version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO);
	Mon, 12 Nov 2018 23:38:47 +0100
Message-ID: <201811122238.wACMcd39024230@helios.rbi.informatik.uni-frankfurt.de>
MIME-Version: 1.0
Content-Description: Mail message body
Subject: Charity Donation
To: You <[email protected]>
From: Andrew Forrest <[email protected]>
Date: Tue, 13 Nov 2018 09:38:40 +1100
Reply-To: <[email protected]>
X-Priority: 1 (High)
Sensitivity: Company-Confidential
X-Spam-Status: Yes, score=5.6 required=5.0 version=3.3.1
X-Spam-Level: *****
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	helios.rbi.informatik.uni-frankfurt.de
X-MS-Exchange-Organization-Network-Message-Id: 084ba159-cb86-44c3-b47d-08d648f08684
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1462100;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX01C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

Hi,
  My name is Andrew Forrest. I'm a philanthropist from Australia. I always =
had the idea that wealth should be used to help each other.

I'm on a yearly mission to aid reputable individuals worldwide, as I believ=
e in =E2=80=98giving while living.=E2=80=99 My wife and I have selected you to receive t=
his year's donation sum.

Kindly acknowledge this message and I will get back to you with more detail=
s.

Read more about my philanthropy:
http://www.news.com.au/finance/work/leaders/billionaire-andrew-twiggy-forre=
st-is-giving-away-hundreds-of-millions-of-dollars/news-story/d0c2437d67bec01=
4c71d70e7d831a1b6

Regards,
Andrew Forrest.