20190527_PHISHING_SCAM_1

Dear Friend,

My names are Prince Egobia, I work as the Regional Manager of Union
Bank of Nigeria Plc. With operational office at Falomo. I have
packaged a transaction that will be of mutual benefit to both of us. I
want you to help my family received and invest the sum of
USD$10.5Million dollars my late father deposited in a bank here before
his sudden death. My mother and I want this funds to be transferred
and invested in your country through your assistance and directive, 30%
of this funds is your percentage for assisting us.

This funds transaction is 100% genuine and free risk. There is nothing
to be afraid of.

Please get back to me through this email address ; [email protected]
For more details

Regards,
Prince Egobia,





Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Mon, 27 May 2019 06:30:32 -0500
Received: from MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Mon, 27 May 2019 06:30:31 -0500
Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
 MBX03D-ORD1.mex08.mlsrvr.com (172.29.9.18) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Mon, 27 May 2019 06:30:31 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp33.gate.ord1c.rsapps.net x-tls.subject="/C=US/ST=California/L=San Bruno/O=Cisco Systems, Inc./OU=Security Technology Business Unit/CN=*.hc49497.c3s2.iphmx.com/[email protected]"; auth=fail (cipher=DHE-RSA-AES256-SHA256)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [68.232.159.228]
Authentication-Results: smtp33.gate.ord1c.rsapps.net; iprev=pass policy.iprev="68.232.159.228"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="esa8.hc49497.c3s2.iphmx.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=walla.co.il
X-Suspicious-Flag: NO
X-Classification-ID: d505b9c4-8072-11e9-953b-54520067fec4-1-1
Received: from [68.232.159.228] ([68.232.159.228:9012] helo=esa8.hc49497.c3s2.iphmx.com)
	by smtp33.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-SHA256
	subject="/C=US/ST=California/L=San Bruno/O=Cisco Systems, Inc./OU=Security Technology Business Unit/CN=*.hc49497.c3s2.iphmx.com/[email protected]")
	id 54/31-18355-75ACBEC5; Mon, 27 May 2019 07:30:31 -0400
X-IronPort-AV: E=Sophos;i="5.60,519,1549958400";
   d="scan'208,217";a="273888083"
Received: from ec2-34-240-168-86.eu-west-1.compute.amazonaws.com (HELO f0ab3f11266a.walla.co.il) ([34.240.168.86])
  by ob1.hc49497.c3s2.iphmx.com with ESMTP; 27 May 2019 03:30:25 -0800
Received: by f0ab3f11266a.walla.co.il (Postfix, from userid 33)
	id AF7CE83D5F; Mon, 27 May 2019 14:30:24 +0300 (IDT)
To:
Subject: =?UTF-8?B?UGxlYXNlIGdldCBiYWNrIHRvIG1l?=
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
X-Provider: walla.mail/v
From: =?UTF-8?B?TWljaGVsZSBKYW1lcw==?= <[email protected]>
Date: Mon, 27 May 2019 14:30:24 +0300
Reply-To: <[email protected]>
Message-ID: <^[email protected]>
X-MS-Exchange-Organization-Network-Message-Id: 9c9d78de-21bd-45ce-8e75-08d6e296ba44
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1513500;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX03D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3641796502_1369632473"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3641796502_1369632473
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit