20241014_PHISHING_SCAM_1

Attention: Sir/Madam,

I am writing to notify you of a payment file containing funds US$1,000,000.00(One Million Dollars) which is to be delivered to you by the United Nation/International Monetary Fund (IMF) and United State Government, Please, Can you kindly tell me the reason of your delay concerning this delivery?

Note: You are to contact me back with your file code No: PND6532024 and the below is the information you are requested to provide so the delivery of your compensations can be process and made delivered to you.

Full Name:
Home/Office Address:
Occupation:
Cell/Mobile Phone Numbers:
Nearest Air Port:

Yours Sincerely,
Kristalina Georgieva
Managing Director
International Monetary Fund
Refund Payment Committee
Federal Executive Council Washington DC USA




Received: from SA0PR05MB7290.namprd05.prod.outlook.com (::1) by
 SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Mon, 14 Oct 2024 14:35:18
 +0000
ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;
 b=dtJ2En5CmsWNCLf4Lr1L228FOJGVly6fh2TpfkJH1DXjA6ar6f0BymQeoTlTHlo1ByjbS4dtx31E+bxiSIeEQuo4252AKfkqrUubbM+BxeE3cgag28oxuYyXd403AgMn0Xb8BkVVDMS4nUwSZXmpNZwrl1Gmv2IONh3kIfYl4Fm5DkI4hujm4ZiNfM2qCbBhF8lrozer8+bC/gbWZM5xV8+nCs2H/hVs5PROT7X6FRv0Vw0ZtxswId/94ggIa3I1RccA2FbJMWV8daCT3SQCtgrf+OUq31MBsY9/mFm30x5UJ78O4aK5Es11lo4QbgvvzLvLGxET2BkjoEg80IQKHQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=isLsTJJBFlTnAjUVfM2nRKbK92n+YXcoR3bvXXCk0X0=;
 b=wlWgB7EsztZo+6oKJDT5LsLHpscte1JTUItGWb8FlrwUuSRycoVDkct5PEK42KXTPJ3Xak9ZYAqt4EYP8FFayr09oyPKcZO2n7wVQ+rx+1FKGXvD2pgIRsL5rB40YfGlc0irAGh3wei5LrEfxreLih58JpjGyrurJtWdR6F93BRypAloGYY21/Qz5D4inhleCtMzNl6J0uMtyKCAKqEC9ibUWHdY+oxxJLesiSp3b2dYxbq6+pgZbVGxvZMPSiNyp2/iuP009L8KywoTYCXd1KfoMeMlwJH2saZ2FzEVJqLIFLzRcCL9kF3qQ3WBrUvhQUSqeidXQpsIHvoqbT8t5g==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=none (sender ip is
 122.17.147.157) smtp.rcpttodomain= smtp.helo=c1595zt8.mwprem.net;
 dmarc=none; dkim=none (message not signed); arc=pass (0 oda=0 ltdi=-1 97)
Received: from BLAPR03CA0022.namprd03.prod.outlook.com (2603:10b6:208:32b::27)
 by SA0PR05MB7290.namprd05.prod.outlook.com (2603:10b6:806:b4::16) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27; Mon, 14 Oct
 2024 14:35:16 +0000
Received: from MN1PEPF0000ECD4.namprd02.prod.outlook.com
 (2603:10b6:208:32b:cafe::ed) by BLAPR03CA0022.outlook.office365.com
 (2603:10b6:208:32b::27) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27 via Frontend
 Transport; Mon, 14 Oct 2024 14:35:14 +0000
Authentication-Results: spf=none (sender IP is 122.17.147.157)
 smtp.helo=c1595zt8.mwprem.net; dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=;
Received-SPF: None (protection.outlook.com: c1595zt8.mwprem.net does not
 designate permitted sender hosts)
Received: from c1595zt8.mwprem.net (122.17.147.157) by
 MN1PEPF0000ECD4.mail.protection.outlook.com (10.167.242.132) with Microsoft
 SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8069.17
 via Frontend Transport; Mon, 14 Oct 2024 14:35:13 +0000
Received: from User (unknown [94.141.120.26])
	by c1595zt8.mwprem.net (Postfix) with ESMTPA id 7196F46F28DD;
	Mon, 14 Oct 2024 23:35:07 +0900 (JST)
Authentication-Results-Original: c1595zt8.mwprem.net; arc=none
 smtp.remote-ip=94.141.120.26
ARC-Seal: i=1; a=rsa-sha256; d=mwprem.net; s=default; t=1728916510; cv=none;
	b=BX5AhVhhEqcHynMxFdtNXcSa1S8arspSF4GV/R13MYdIaOOm/gostiJOt8lHXw4RlAtUU7Uox585zS9DZkJa14DWKR7bFfgCqDmdHNmuQKsw0n4JiuCbjfYuSM/rz7wu2OkyWx2plppWexAM2Xq8pvDuruLciec9P+h2akhYQ7s=
ARC-Message-Signature: i=1; a=rsa-sha256; d=mwprem.net; s=default;
	t=1728916510; c=relaxed/relaxed;
	bh=isLsTJJBFlTnAjUVfM2nRKbK92n+YXcoR3bvXXCk0X0=;
	h=From:Subject:Date:MIME-Version:Message-Id; b=Wxy7IwEtsvZ26zcFfACozEHo0Ky9KnWHEhGD1zB5CVroCHLBkWlZP9npwrpaWqca7OHwV4wuSCZ9A6bki3v0uq14oflbR5pI5vpjlpol+c0skYc61GsKI4SSlqOKtaRukVfTB5OGEBcAVOFGcM73oeoIJdtl0ldkkkLUXht/2+0=
ARC-Authentication-Results: i=1; c1595zt8.mwprem.net; dkim=permerror (bad message/signature format)
Authentication-Results-Original: c1595zt8.mwprem.net; dkim=permerror (bad
 message/signature format)
Reply-To: <[email protected]>
From: "USA Secretary Refund Committee"<<>>
Subject: Confidential Message,
Date: Mon, 14 Oct 2024 16:35:08 -0700
MIME-Version: 1.0
	charset="Windows-1251"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: Undisclosed recipients:;
Return-Path: <>
X-MS-Exchange-Organization-ExpirationStartTime: 14 Oct 2024 14:35:14.0731
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 68f3be92-6493-4d8b-a725-08dcec5d6a62
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 MN1PEPF0000ECD4:EE_|SA0PR05MB7290:EE_|SJ0PR05MB8678:EE_
X-MS-Exchange-Organization-AuthSource:
 MN1PEPF0000ECD4.namprd02.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: 68f3be92-6493-4d8b-a725-08dcec5d6a62
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:122.17.147.157;CTRY:JP;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:c1595zt8.mwprem.net;PTR:c1595zt8.mwprem.net;CAT:SPM;SFS:(13230040)(1557600094);DIR:INB;
X-Microsoft-Antispam: BCL:0;ARA:13230040|1557600094;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Oct 2024 14:35:13.5263
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 68f3be92-6493-4d8b-a725-08dcec5d6a62
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 MN1PEPF0000ECD4.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR05MB7290
X-MS-Exchange-Transport-EndToEndLatency: 00:00:05.2077088
X-MS-Exchange-Processed-By-BccFoldering: 15.20.8048.020
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944611166)(920097)(930097)(3100021)(140003);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:

Content-type: multipart/alternative;
	boundary="B_3811752430_2077212975"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3811752430_2077212975
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit