20200808_PHISHING_SCAM_1

Your email address was picked via email balloting TOPAZ which made you a benefactor of €650,000.00 from the Guinness Brewery kindly contact [email protected] with your name age phone number occupation and address





Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Mailbox Transport; Sat, 8 Aug 2020 05:31:22 -0500
Received: from MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2; Sat, 8 Aug 2020 05:31:22 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Frontend Transport; Sat, 8 Aug 2020 05:31:22 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [176.221.93.136]
Authentication-Results: smtp24.gate.iad3b.rsapps.net; iprev=pass policy.iprev="176.221.93.136"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="smtp02-n13.telecomputing.no"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=franzefoss.no
X-Suspicious-Flag: NO
X-Classification-ID: 4d170aa0-d962-11ea-9e2b-525400892b35-1-1
Received: from [176.221.93.136] ([176.221.93.136:25663] helo=smtp02-n13.telecomputing.no)
	by smtp24.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTP
	id EE/4A-15486-9FE7E2F5; Sat, 08 Aug 2020 06:31:21 -0400
IronPort-SDR: rv20e4GBuJd5tfDuDN4H66ZwIaAQlRuGE/3rBDtefcmzZnCmE86oBRv/LAv6jChmH3t2b23iOO
 fmqcTQt3P0qgkHh28+39KRZs3ZMm62vT73bmgPuUWUWg6xT6WhU5qjTKn4/a9BJ0sixgij8lWN
 JeXH+dHlC1iFBN1kOVdyNUNzTra1aOIBJOWNy+afwdhdam6lVMSGPbHyxdM9hZDK3xgxp8DhHh
 JSjORx+ki+5X7xUznlVi8Zjid3+QbjizLZPCEdWORRMo1bbZucnKb3hbyKiPCLWRE/DenTRtiv
 tb8=
X-IronPort-AV: E=Sophos;i="5.75,449,1589234400";
   d="scan'208,217";a="54592255"
Received: from n13os2ce5cn2.n13.tconet.net ([10.66.201.58])
  by no-ironport05.telecomputing.no with ESMTP/TLS/ECDHE-RSA-AES256-SHA384; 08 Aug 2020 12:31:20 +0200
Received: from N13OS2CE7CN2.N13.TCONET.NET (10.66.201.137) by
 N13OS2CE5CN2.N13.TCONET.NET (10.66.201.58) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2; Sat, 8 Aug 2020 12:31:17 +0200
Received: from N13OS2CE9CN2.N13.TCONET.NET (10.66.201.200) by
 N13OS2CE7CN2.N13.TCONET.NET (10.66.201.137) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2; Sat, 8 Aug 2020 12:31:15 +0200
Received: from N13OS2CE9CN2.N13.TCONET.NET ([10.66.201.200]) by
 N13OS2CE9CN2.N13.TCONET.NET ([10.66.201.200]) with mapi id 15.00.1497.006;
 Sat, 8 Aug 2020 12:31:15 +0200
From: Hege Reinemo <[email protected]>
To: Hege Reinemo <[email protected]>
Subject: =?utf-8?B?UkU6IENhc2ggT3V0LeKCrDY1MCwwMDAuMDA=?=
Thread-Topic: =?utf-8?B?Q2FzaCBPdXQt4oKsNjUwLDAwMC4wMA==?=
Thread-Index: AdZtbwsoCNELzy8mtkOCvTcMuHQmRA==
Date: Sat, 8 Aug 2020 10:31:14 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: nb-NO, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
MIME-Version: 1.0
X-MS-Exchange-Organization-Network-Message-Id: e9a1e505-a943-472e-b514-08d83b8631e0
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX04C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3679725375_601007975"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3679725375_601007975
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable