20190407_PHISHING_SCAM_1

NOTE: IF YOU RECEIVED THIS MESSAGE IN YOUR SPAM / BULK FOLDER, THAT IS
BECAUSE OF THE RESTRICTIONS IMPLEMENTED BY YOUR INTERNET SERVICE
PROVIDER, WE URGE YOU TO TREAT IT GENUINELY.

Your ATM Card of $4.5 million USD has been approved and was deposited
with DHL delivery company this morning for registration,and we agreed up
that the delivery of Your $4.5Million USD ATM Package will take off
tomorrow morning .So contact with your full info where your ATM card
will be delivered to,

Your full Name:_________
Your home Address: __
Your Age & Sex: ____________
Your Cell Phone: _________
Your Country:______________
Your Scan Copy of Identity___

Urgent get back to us today with your full address where your ATM card
will be delivered to because i will not be in the office next week:

The amount in your Card is US$4.5Million and your Pin code is: (1988).

Regards,

Mr.BENSON DONALD
my [email protected]
Tell Phone: +229 918 229 28
 From DHL courier delivery company Benin republic.


Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Sun, 7 Apr 2019 04:13:40 -0500
Received: from MBX02D-ORD1.mex08.mlsrvr.com (172.29.9.15) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Sun, 7 Apr 2019 04:13:39 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX02D-ORD1.mex08.mlsrvr.com (172.29.9.15) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Sun, 7 Apr 2019 04:13:39 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [173.237.190.12]
Authentication-Results: smtp17.gate.iad3b.rsapps.net; iprev=pass policy.iprev="173.237.190.12"; spf=temperror smtp.mailfrom="[email protected]" smtp.helo="lord.vivawebhost.com"; dkim=fail (key not found in DNS) header.d=icc.co.ke
X-Suspicious-Flag: YES
X-Classification-ID: 6e105c26-5915-11e9-9bd1-52540094e46f-1-1
Received: from [173.237.190.12] ([173.237.190.12:55314] helo=lord.vivawebhost.com)
	by smtp17.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 32/41-26463-34FB9AC5; Sun, 07 Apr 2019 05:13:39 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=icc.co.ke;
	 s=default; h=Message-ID:Reply-To:Subject:To:From:Date:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=5ErsM5ZvmOz16rjvejJgSz1zx4Zsj36CEckv6JdHwoU=; b=nmlV9SyCz61+aEF6Ldd4saJIEY
	lvYgu4GMzGjqTgHMyfqgd9Feq3+Kg5ePsjstUWrb+LdJdC+VmYWwFDHYSwERmqktWl4Pz61v8R5xt
	sISmP9/F1FDlqqOat/vOD7FCOUVdAbUodSDvSZ6dwpeKTF3NpgJsTO0hov5ivY/f9n0iVZAsIjhXA
	/rKgYRQoSaCkLJqUjzXcLXfL5vhaP4M5tOMSIHwdWGkBvTwYvRAJKxr5wREtgEHBM+wDWgErKqYgn
	RDIRPxyDb41jUR9M3jfyxS9u52eBmypm/JtxYAEzyu+Su8NmUZHdGs7OwsVlPGT3h8j/jqnc7sLLo
	aZ6r9fsA==;
Received: from [::1] (port=52430 helo=lord.vivawebhost.com)
	by lord.vivawebhost.com with esmtpa (Exim 4.91)
	(envelope-from <[email protected]>)
	id 1hD3rb-00043k-Kb; Sun, 07 Apr 2019 05:13:19 -0400
MIME-Version: 1.0
Date: Sun, 07 Apr 2019 05:13:19 -0400
From: UN Secretary General <[email protected]>
To: undisclosed-recipients:;
Subject: DHL Delivery NOTIFICATION
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.7
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - lord.vivawebhost.com
X-AntiAbuse: Original Domain - avellan.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - icc.co.ke
X-Get-Message-Sender-Via: lord.vivawebhost.com: authenticated_id: [email protected]
X-Authenticated-Sender: lord.vivawebhost.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-MS-Exchange-Organization-Network-Message-Id: 4a8e1ae6-9c2f-4162-2db0-08d6bb3952cc
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX02D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit