20240915_PHISHING_SCAM_1

Attention :::::

This is from the home land security over here in the Texas Airport your fund of $15.5 million dollars has been brought here to the office by one of Diplomatic agent Name Mr Frank Edward  , he said is because of your inability to pay all this fee that is why he brought the package consignment Box of $15.5 million dollars over here on the country we notice to the office here that you have paid a lot of money in other to gets this fund but all in vain we here to let you know that every is all settle now and if only you can trust and go with the instructions of the home land security over here your fund will be get to you with any further delay get be to the office with you reconfirmation of your home address.

HOME ADDRESS:::::::::::::::
NEAREST AIRPORT:::::::::::::::
FULL NAME::::::::::::.
YOUR ID CARD:::::::::::::::
EMAIL ADDRESS::::::::::::

THANK YOU.

Mr chad wolf phone number +19176197363
Director of home lands security contact our office through this email [email protected]





Received: from SA0PR05MB7385.namprd05.prod.outlook.com (::1) by
 SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Sun, 15 Sep 2024 00:20:02
 +0000
Received: from DM6PR02CA0063.namprd02.prod.outlook.com (2603:10b6:5:177::40)
 by SA0PR05MB7385.namprd05.prod.outlook.com (2603:10b6:806:c2::5) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.22; Sun, 15 Sep
 2024 00:19:59 +0000
Received: from DS3PEPF0000C37B.namprd04.prod.outlook.com
 (2603:10b6:5:177:cafe::a4) by DM6PR02CA0063.outlook.office365.com
 (2603:10b6:5:177::40) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.29 via Frontend
 Transport; Sun, 15 Sep 2024 00:19:59 +0000
Authentication-Results: spf=pass (sender IP is 60.36.166.36)
 smtp.mailfrom=sky.plala.or.jp; dkim=pass (signature was verified)
 header.d=plala.or.jp;dmarc=pass action=none
 header.from=sky.plala.or.jp;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of sky.plala.or.jp
 designates 60.36.166.36 as permitted sender) receiver=protection.outlook.com;
 client-ip=60.36.166.36; helo=msc114.plala.or.jp; pr=C
Received: from msc114.plala.or.jp (60.36.166.36) by
 DS3PEPF0000C37B.mail.protection.outlook.com (10.167.23.5) with Microsoft SMTP
 Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7918.13 via
 Frontend Transport; Sun, 15 Sep 2024 00:19:58 +0000
Received: from mdkim-o06.ake-mailbk.plala.or.jp ([172.23.12.55])
          by msc114.plala.or.jp with ESMTP
          id <20240915001956.BUXW6975.msc114.plala.or.jp@mdkim-o06.ake-mailbk.plala.or.jp>;
          Sun, 15 Sep 2024 09:19:56 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  d=plala.or.jp; q=dns/txt; s=p20240201; t=1726359597;
  x=1757895597;
  h=date:from:reply-to:message-id:subject:mime-version:
   content-transfer-encoding;
  bh=OPtj5GADMO4NX9xMQcfzblc7fVxt2/OEibH3XyZ6Wkw=;
  b=odXcKAsTGqpniyRPsJozvpI+jjlsj62oMnAhIb+DDziI6Cju3JvF9D5v
   tG8ArSiQb140VaAbb+gm/ebgNP8qVevHdwA2kiS2F4IZp+FRsXZXtRJoo
   IkiYHdlb3K9wfALox4NUNEfq0tG3lGUP4rTj0RUF5h+XLjxlZxZgOr2ZS
   4Jk1HUgUWtMFjeycf4D5D1vPJWPW/y8cDKbYSshhmPs9CJ3RPxcHRP2kM
   ITksWG43u2I1odlGLVaSilIHbR1qAS4dUCO1VBEhw0WvIVTUS0XyDzd3C
   r/imII/PXHN3FmCSkE6CK2P643t6FQ5UcR7dbw0t8jOTxh+uKq4GW2zbz
   g==;
X-CSE-ConnectionGUID: q2wpmbfrReCX862WlCciYg==
X-CSE-MsgGUID: jGX4+wZCQpCv9freM8RoRA==
Received: from msa14.ake-mailbk.plala.or.jp (HELO msa14.plala.or.jp) ([172.23.12.94])
  by mdkim-o.ake-mailbk.plala.or.jp with ESMTP; 15 Sep 2024 09:19:57 +0900
Received: from mweb11 ([172.23.13.121]) by msa14.plala.or.jp with ESMTP
          id <20240915001956.WDYW10053.msa14.plala.or.jp@mweb11>;
          Sun, 15 Sep 2024 09:19:56 +0900
Date: Sun, 15 Sep 2024 09:19:56 +0900
From: Mr chad wolf <[email protected]>
Reply-To: [email protected]
Message-ID: <20240915091956.L9WK1.12102.root@mweb11>
Subject: Attention :::::
MIME-Version: 1.0
X-Priority: 3 (Normal)
Sensitivity: Normal
X-VirusScan: Outbound; mvir-ac14; Sun, 15 Sep 2024 09:19:56 +0900
To: Undisclosed recipients:;
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 15 Sep 2024 00:19:58.8626
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 86dc12df-fa64-4d10-2e37-08dcd51c2228
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 DS3PEPF0000C37B:EE_|SA0PR05MB7385:EE_|SJ0PR05MB8678:EE_
X-MS-Exchange-Organization-AuthSource:
 DS3PEPF0000C37B.namprd04.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: 86dc12df-fa64-4d10-2e37-08dcd51c2228
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:60.36.166.36;CTRY:JP;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:msc114.plala.or.jp;PTR:msc114.plala.or.jp;CAT:PHISH;SFS:(13230040)(2063399012);DIR:INB;
X-Microsoft-Antispam: BCL:0;ARA:13230040|2063399012;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Sep 2024 00:19:58.1751
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 86dc12df-fa64-4d10-2e37-08dcd51c2228
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 DS3PEPF0000C37B.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR05MB7385
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.7557478
X-MS-Exchange-Processed-By-BccFoldering: 15.20.7962.017
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:

Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit