Google

World Wide Web anti-scam

Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema <baggage5050@gmail.com> <banintergrup@outlook.com> (Gelesen: 116 mal)
 
seiko
Themenstarter Themenstarter
Contributor
*****
Offline


I Love Anti-Scam!

Beiträge: 24067
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Sternzeichen: Widder
<baggage5050@gmail.com> <banintergrup@outlook.com>
05. Januar 2020 um 16:17
 
-- 

Dear Sir,
This is to inform you that we are holding a parcel in your name, we work
in collaboration with top firms and Governments of various countries as
delivering agency that deliver valuable packages and baggage in trust.

We have received instruction as the transport broker attached to the
firm to deliver directly to your doorstep a parcel ( $750,000.00 cash in
US Dollars ) that has been shipped in your favor.

Be informed that some of your details provided here have futile on our
scale control, so therefore we request that you reconfirm to this email
banintergrup@outlook.com

Your full name................
Postcode..............
City ………………………..
And state...................
Telephone.................
The best time to deliver……………….
And date to deliver………………………

also it is mandated that you will pay 168 euro to complete the entire
registration and costs associated with delivery subject to international
CASH DELIVERY regulations and full financial responsibility that the
cash delivery are from legal source .

I further acknowledge that no other fee will be required from you as
soon a you pay this fee and no delay .we shall give you the information
so that you can send the fee to enable us process and deliver it to you
.

I will not persuade you to adhere to our ethics but it will be good if
you follow my advice avoiding delays .

Thanks,
Martin.
CargoExchange Services.
The customer currency Courier preferred choice.

Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp20707580ltm;
        Sat, 4 Jan 2020 12:59:32 -0800 (PST)
X-Google-Smtp-Source: APXvYqxDbqwymeJF6vKtITCRH6DEtcjP+8GPndoPIFfm8U9d3qIr7hSBxG1ClxAsGsFPiNwO6/44
X-Received: by 2002:a1c:4d03:: with SMTP id o3mr26552156wmh.164.1578171572862;
        Sat, 04 Jan 2020 12:59:32 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1578171572; cv=none;
        d=google.com; s=arc-20160816;
        b=x4ZayTZnDKRtEXRkFbrcZEcS/eVqKzG0OfpRe5VwfZuAxdGj45NFM+Q+ZEXQv8xlsy
         0i3U7u5ie1UlEM8rQ8sLHUEpJ45KPjxCSl1n+7Ck1OuMNYfrc+sNCRpe1CqYJeCXCfUm
         9Fyv9Q6hAIukIZErXRN3XsOUWjn3P/pAdMb7Cus9zn+RvwcnxovSsT4yoaVPLOQJnYHy
         p0x9yW6p5Rb4L7p1SG0iHrWIE2XzaUwsgK91bT1aJQ09yUtPURbfcJ8oj9XJ4r3px6HC
         DlHCnfOVPx+o+rwQEFbfVZ8Sel2F/CgBnj4aJXVirTK5a0NBj1OFfoCQWWofbfUHl/aG
         HXKQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=user-agent:message-id:mail-reply-to:reply-to:subject:to:from:date
         :content-transfer-encoding:mime-version;
        bh=BF/COTaW3fnFy9Q3mze3NEXbRgldgKJNwqp4QItwGQw=;
        b=M4Euy7prHQexuWrPOm7Zu0p6tSqz0ifCNMZt7KdIDpIKzopql4MDDmPQVZNvuMgRzn
         nmnC7/kJRyjW9LSMO2mzwvgOP4hZXsqPlNM4WjPrgaKunAak6cjKFrCqLXxxQMhFfHqF
         ps1WDep+QmnKnptfb5eCPZFHsTLAboBgvEqRZShYIk3og3lmLcOQ7K7eYr5yLfvmkBdk
         hlGUXU73/Ej4mbOcaosWj3eBxFglltN/8q3oUELMGw3efQTU7miFjQQpX9b3UFHXXYQ+
         7qnkwWADJAtDUrrptieayTpUh8BY+qYaywp0gMwUpudKMtIcpScQmDtYAh1BbHaWJ3tS
         WG+g==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=softfail (google.com: domain of transitioning alice203040@gmail.com does not designate 91.224.60.62 as permitted sender) smtp.mailfrom=alice203040@gmail.com;
       dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <alice203040@gmail.com>
Received: from smtp.fr.pl (smtp.fr.pl. [91.224.60.62])
        by mx.google.com with ESMTPS id o133si15421239wme.165.2020.01.04.12.59.32
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Sat, 04 Jan 2020 12:59:32 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning alice203040@gmail.com does not designate 91.224.60.62 as permitted sender) client-ip=91.224.60.62;
Authentication-Results: mx.google.com;
       spf=softfail (google.com: domain of transitioning alice203040@gmail.com does not designate 91.224.60.62 as permitted sender) smtp.mailfrom=alice203040@gmail.com;
       dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Received: from poczta.ecenter.pl (unknown [91.224.60.27]) (Authenticated sender: officeoj1@smtp.fr.pl) by smtp.fr.pl (Postfix) with ESMTPA id 81B14DC5C60; Sat,
  4 Jan 2020 21:59:31 +0100 (CET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 04 Jan 2020 21:59:12 +0100
From: officeoj1 <alice203040@gmail.com>
To: undisclosed-recipients:;
Subject: Lost Money Belong to You?
Reply-To: baggage5050@gmail.com
Mail-Reply-To: baggage5050@gmail.com
Message-ID: <56cf0079f1ad1cc837c1ca83bf4b5f0a@fr.pl>
X-Sender: alice203040@gmail.com
User-Agent: Roundcube Webmail/1.0-rc
« Zuletzt geändert: 05. Januar 2020 um 16:18 von seiko »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
x5dr
Global Moderator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4941
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Stimmung: verliebt
Sternzeichen: Krebs
Re: <baggage5050@gmail.com> <banintergrup@outlook.com>
Antwort #1 - 05. Januar 2020 um 17:05
 
Über Polen!

Code
IP:	91.224.60.27
Decimal:	1541422107
Hostname:	91.224.60.27
ASN:	50599
ISP:	Data Invest sp. z o.o. S.K.A
Organization:	Data Invest sp. z o.o. S.K.A
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	Europe
Country:	Poland  



Zitat:
Received: from poczta.ecenter.pl (unknown [91.224.60.27]) (Authenticated sender: officeoj1@smtp.fr.pl) by smtp.fr.pl (Postfix) with ESMTPA id 81B14DC5C60; Sat, 4 Jan 2020 21:59:31 +0100 (CET)
Date: Sat, 04 Jan 2020 21:59:12 +0100
From: officeoj1 <alice203040@gmail.com>


Adresse bei joewein.net gefunden!
« Zuletzt geändert: 05. Januar 2020 um 17:07 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
Contributor
*****
Offline


I Love Anti-Scam!

Beiträge: 24067
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Sternzeichen: Widder
Re: <baggage5050@gmail.com> <banintergrup@outlook.com>
Antwort #2 - 12. Januar 2020 um 16:16
 
Lieber Herr ,

 
Vielen Dank für Ihre E-Mail und Informationen hier in.
In Bezug auf die ausstehende Lieferung Ihres Bargeldes,


Als Ihr zuständiger Zusteller möchte ich Sie über den endgültigen Ablauf des Vorgangs informieren und Sie darüber informieren, dass Ihre Sendung (PARCEL CASH FUND) im Wert von $ 750.00.00 verfügbar ist und wie geplant an Ihren Standort mit zugestellt werden kann Keine Beschränkungen, keine Zugangsbeschränkungen, keine Verzögerung und keine Grenzen. Wir bieten Ihnen die beste Gelegenheit, diesen Bargeldfonds in gutem Zustand zu erhalten. Die Lieferung an Ihre Adresse muss innerhalb von (5) Werktagen nach Zahlungseingang abgeschlossen sein Im Verladerhafenland Benin werden 300 Euro berechnet, und für nichts anderes als diese 300 Euro fallen zusätzliche Kosten an, seien es Zollgebühren, Zölle und Steuern.

Wir werden sofort mit der Lieferung fortfahren, sobald Sie die Gebühr bezahlt haben, die eine rasche Auslieferung Ihres Bargeldes an Sie bewirkt. Dies unterliegt den internationalen BARZAHLUNGSBESTIMMUNGEN und der Verantwortung, dass die Barzahlung aus einer legalen Quelle stammt und frei von jeglichen Pfandrechten oder Belastungen ist , klar keine kriminelle Herkunft.


Beachten Sie, dass die Gebühr aufgrund der Versicherungspolice nicht vom Gesamtbetrag abgezogen werden kann und die Sendung sich auf dem Transport befindet und Sie in weniger als 48 Stunden erreicht.

Diese Gebühr kann an das CARRIER-Büro in Benin per Western Union oder Geld-Gramm mit folgenden Informationen gezahlt werden:
Betrag ................. 300 Euro.
Vorname ............................ APRIL
Familienname ........................... Anthony
Land ………………………. BENIN
Stadt …………………………… COTONOU.
Adresse ................................ C / 551 COTONOU.

   Sobald Sie es senden, senden Sie bitte die Zahlungsinformationen an diese E-Mail und bestätigen Sie es erneut
Ihren vollständigen Namen ...............
Adresse und Telefonnummer ......................
Ihre Wohnstadt ..........................
und ggf. eine Kopie Ihres Personalausweises .....................


Die Lieferung ist garantiert 100% Sie können mich unter dieser Nummer +32460216464 anrufen. oder füge mich zu whatsapp hinzu, um mit mir zu chatten, wenn du irgendwelche Fragen hast.
 

Vielen Dank für Ihre Kooperation,
 
Frederic Adams
ID 5121 Deutschland München

Upon agree that you have understood and accepted the new changes  we will  activate the delivery    
                                                                                               Log in      

 
 
  Dear Sir ,

 
Thanks for your email and information here in .
Regard  to the outstanding  delivery of your cash fund ,


As your assigned delivery agent  i  wish to inform you of the final procedure of the operations and wish to also inform you that your (PARCEL CASH FUND) consignment valued $750.00.00  is available and  ready to be deliver to you as scheduled  to your location  with no limits, no access restrictions ,no delay and no boundaries , we are   providing you the best Opportunity for you to receive this  cash fund in good condition and the delivery to your address must be complete within (5) working days upon your paying the required charges  300 euro at the shipper port  country Benin  and there will be  no other additional cost for anything other than this 300 euro be it customs fees,  duties, and taxes  .

We will proceed immediately with the delivery as soon as you pay the fee  which will  effect quickly delivery of your cash funds to you subject to the international CASH PAYMENT  regulations and  responsibility  that the cash payment   are from legal source and free from  any liens or encumbrances clean, clear no  criminal origin.


Note that the fee cannot be deducted from the total funds because of the insurance policy and also the consignment is on transit  and will  reach you in less than 48 hours ..

This fee can be paid to  the CARRIER office in Benin   by western union or money gram with this information:
Amount .................300 Euros.
given name ............................APRIL
family name ...........................   Anthony
Country ………………………. BENIN
City ……………………………COTONOU.
Address ................................C/551 COTONOU .

   as soon as you send it kindly send the payment information to this email    and also reconfirm   
Your full name  ...............
address and telephone number ......................
Your city of resident ..........................
and a copy of your identification if any .....................


the delivery is guarantee 100% you can call  me on this number +32460216464. or add me to whatsapp to chat with me for more clarification  if  you have any question     .
 

Many thanks for your cooperation,
 
Frederic Adams
ID 5121 Deutschland  München
.
Customer Fulfillment Center Belgium
Tel:  +32 460216464
The Customer currency Courier preferred choice 
UPSD VAULT SECURITY AND COURIER SERVICES.
HEAD OFFICE N*10 OVER RANKEILOUR HOUSE CUPAR F
UNITED KINGDOM
TEL:44131510 4287
Tel-Fax: +441989 320048





Pick-up information

    Pick-up reference:                    Not yet generated
    Cash Pick-up amount :             $750.000.00 only   
    Pick up address:          At your provided  address *-* Date, time and address not yet validated
    Receiver :                                 Recipient's name  must match the name on your  passport or ID
    Charges to pay                          Yes....... Amount  300Euro

  Payments Systems Ltd is authorized by the Financial Conduct Authority under the Electronic Money Regulations 2011 (register reference 500440) for the issuing of electronic money. 
iOS Android Facebook VK Twitter 

Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp86716ltm;
        Tue, 7 Jan 2020 08:19:12 -0800 (PST)
X-Google-Smtp-Source: APXvYqyhQv9UIXiQ78bHfzqqxwvVIqviHdTnEtATFYuIVBv3VoHGiiIH8R/n38c/9Hr28YIQ1mlo
X-Received: by 2002:a05:6830:1481:: with SMTP id s1mr585917otq.66.1578413952022;
        Tue, 07 Jan 2020 08:19:12 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1578413952; cv=pass;
        d=google.com; s=arc-20160816;
        b=SrZI1CWnjvk6fyiYJJqhjFzzA2OxoYGQ4QgAMg7Sn41Ap40WJst3wNeqdd8H2VnXq/
         RozV9ypraVKJ4sOZOkalUoFMdv4w6Wu3ryXtUYAbFUdiTyCXKvVTk5AxGUFBrmeqDVh3
         adkx3MUIF5GA+I+WH+A76v1dCdAcL8E+Zvm6fa49ERx80vONdEL5wMnP1eACtCTiQ1MX
         dx2p0X8XDEseIWW9jOKvy4VsKrMcLds75XeVXAnpoR/uGMy694r72ebPb6e5PpHgJbB7
         J4SHnirh61DmrvhqjCmUPPE9DT5lZHTgYrgIG0nhH+UBUFVUqYDv1ryZ2LYwVLuSjRYN
         knpw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=wBNAZkFt6bOXKDYFbvhJIfm0mvri86iNnCSQtaoS8W8=;
        b=Zxyk1WOofLfc+wA6gMKMLpHWe0Um/MQh+OxaPRS2H99MRkJCgiPNAHyOOQRm8ylo8U
         r195diqQBplwiPd5nqDKGI1okbcSpTyfZYGIjceRD7LfkaZOkz1hU5IluZZL2l943CC8
         h5mWj1br11rtRToMt5fJp8fbkDMjzUlY+0tKSOcrIkWUFZ+dC6PD6SGZvl9hQ8XPSOay
         AU4XIxN+eJIwc8goL7B5YWfjzGWoQT0jCrnhmE61/DYaMKTOkKumEiTSjTlOFaB/D98U
         GVmQg+v1cOv5gBITVxI7Wmx66yZJWcZ8aZkVlG7/z5rfM7AUywctzNbYXmkATNoaAc42
         CATg==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=mUzKhSYj;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.45 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-oln040092074045.outbound.protection.outlook.com. [40.92.74.45])
        by mx.google.com with ESMTPS id g4si189459oia.179.2020.01.07.08.19.11
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 07 Jan 2020 08:19:11 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.45 as permitted sender) client-ip=40.92.74.45;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=mUzKhSYj;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.45 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; xQKldJsC1uwagkcSjtGZcU/Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=wBNAZkFt6bOXKDYFbvhJIfm0mvri86iNnCSQtaoS8W8=; mEtFAJYPIU4U4xCWbtKL5u/Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=wBNAZkFt6bOXKDYFbvhJIfm0mvri86iNnCSQtaoS8W8=; byhkfCQuP/oEBmgPtJeJeXEw==
Received: from VI1EUR04FT013.eop-eur04.prod.protection.outlook.com (10.152.28.52) by VI1EUR04HT024.eop-eur04.prod.protection.outlook.com (10.152.28.209) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11; Tue, 7 Jan 2020 16:19:09 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.152.28.52) by VI1EUR04FT013.mail.protection.outlook.com (10.152.28.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11 via Frontend Transport; Tue, 7 Jan 2020 16:19:09 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2623.008; Tue, 7 Jan 2020 16:19:09 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffY9YZ
Date: Tue, 7 Jan 2020 16:19:09 +0000
Message-ID: <CWXP265MB163879B68FB71E8A72E2079DC53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: EvwkxA+pzEEeg@mail.gmail.com>
In-Reply-To: <CAA_5ChBp_cG0jCSgnkh6WazQSVvPjuVi_osRjEvwkxA+pzEEeg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: 3A72C;SizeAsReceived:6876;Count:44
x-tmn: [TfVbTLP8qoU0LqqCquQ7gGhbEuO53wf19OniPbcxOM8=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: d53156ff-43c0-4c90-49f1-08d7938d5356
x-ms-traffictypediagnostic: VI1EUR04HT024:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: zs22Y1piXOeABI7kyDJDck5Klphy0wd/J8p6+LjFnjfS0g8NRZ8vfZ2cPwWLgh76S4JkHtQHi1Q=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWXP265MB163879B68FB71E8A72E2079DC53F0CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: d53156ff-43c0-4c90-49f1-08d7938d5356
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2020 16:19:09.3660 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR04HT024

--_000_CWXP265MB163879B68FB71E8A72E2079DC53F0CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp86845ltm;
        Tue, 7 Jan 2020 08:19:20 -0800 (PST)
X-Google-Smtp-Source: APXvYqwvsRTiCNVCEMeRjhb1vDMZTNMJZ611AdGZO0l2pZOglP1Rev4Kv7+Df2Fz9MCoZM6SRdAe
X-Received: by 2002:a05:6402:1771:: with SMTP id da17mr683888edb.68.1578413959875;
        Tue, 07 Jan 2020 08:19:19 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1578413959; cv=pass;
        d=google.com; s=arc-20160816;
        b=vy3RFzRfwll9uaXXqQ6BkFpb3jsl3kyAdR5nFuqQI4dV/z5r8VbvRh39BshVOKvUGS
         UYoAV0YNm7HnRXYPxrypdm1tV52Lkv4Fbg5EVfl+qi/RFRdpE5N0tYrW2xsc9Q5SZOg2
         42eCJuun5YWaZWqicQlSDA3ynFkg4biNIZ000JqcEfVO5SxU33qBHEUb8zw0Xyj0C6X+
         FtyOrx6oTahblQ5RlprgDnEpGVTBVFUbiMVuETgkQTe3Zezbb46AieF+wBrFI4WkWPvC
         lkmjcldmFh2EAEIT9bZ/K3UjOB0mXFOkw1qA0OPuR1p7JTZ2smuX2DEsv4Q+2ofgBWcT
         f0VQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=2pp022ei2iSg9VLUg2AchTQ3hXiAdzlStj0MSUlHVBU=;
        b=NmS4+pq9WUEhktZzFkiCEA96+9IgcfknVMO17CmsmSUSeOeqotIXmHiUS/730VkVC3
         0EGxWSRqKkmJXjdXG4avKXI5Dz1qeYbA+udf0vaXi3mjcN2ASsgeDbO8LjJQQKaOXpg6
         NrF4CDh17c4MldbZY0wlTTu5rZxuH9Lh6UrJ8ntq98B3AzKAkdtY0ZYNf9G5EU+7X+mL
         QQ2JjMkus9iv7r+CICY2xYIPtIzuV+WAa4s8b4Dwx2YeScy/8Ri7kcDg9HB8Y7pSyBOz
         OTDGFi499kv2UDdRkH3B9mdDH07AdBo2H439RFJ/VaOYjCLt3otl9x0xu81/txCapaSD
         OLQA==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=QJzLRDOe;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.55 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-oln040092075055.outbound.protection.outlook.com. [40.92.75.55])
        by mx.google.com with ESMTPS id lu19si192533ejb.80.2020.01.07.08.19.19
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 07 Jan 2020 08:19:19 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.55 as permitted sender) client-ip=40.92.75.55;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=QJzLRDOe;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.55 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; PwcB8R0AGm98wkQ6IYnHERuQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=2pp022ei2iSg9VLUg2AchTQ3hXiAdzlStj0MSUlHVBU=; VagjZBA94g5uIahFBXYIjSUg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=2pp022ei2iSg9VLUg2AchTQ3hXiAdzlStj0MSUlHVBU=; slQ6fjRe7JVROs1eg02Y4qrA==
Received: from VI1EUR04FT013.eop-eur04.prod.protection.outlook.com (10.152.28.57) by VI1EUR04HT220.eop-eur04.prod.protection.outlook.com (10.152.28.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11; Tue, 7 Jan 2020 16:19:18 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.152.28.52) by VI1EUR04FT013.mail.protection.outlook.com (10.152.28.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11 via Frontend Transport; Tue, 7 Jan 2020 16:19:18 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2623.008; Tue, 7 Jan 2020 16:19:18 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>, "baggage5050@gmail.com" <baggage5050@gmail.com>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffZK0Y
Date: Tue, 7 Jan 2020 16:19:17 +0000
Message-ID: <CWXP265MB1638D4289087F391BFEC8A97C53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: EvwkxA+pzEEeg@mail.gmail.com>
In-Reply-To: <CAA_5ChBp_cG0jCSgnkh6WazQSVvPjuVi_osRjEvwkxA+pzEEeg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: 70706;SizeAsReceived:6934;Count:44
x-tmn: [oAM64dxQTgg8PFcXa1PUOUzMdy2mqNoeRDi6rmA+0MI=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 7a8451fb-e369-4dce-b558-08d7938d587f
x-ms-traffictypediagnostic: VI1EUR04HT220:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 1a6B7VN5GN74oXpytrX77bporpA76g+Q6qFPq6kQ24X9hX/imAexy6r3TQMlz0Nn2Rn0Hyiu9Ys=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWXP265MB1638D4289087F391BFEC8A97C53F0CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 7a8451fb-e369-4dce-b558-08d7938d587f
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2020 16:19:17.9491 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR04HT220

--_000_CWXP265MB1638D4289087F391BFEC8A97C53F0CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp87234ltm;
        Tue, 7 Jan 2020 08:19:46 -0800 (PST)
X-Google-Smtp-Source: APXvYqy6HHqgDnx+W8RmIYJVxLEg+zng/WatL4LpEcpQqv913OleQ2uI0pMPXdIlPuop7A5lJvc3
X-Received: by 2002:a5d:4dc9:: with SMTP id f9mr103396865wru.297.1578413986463;
        Tue, 07 Jan 2020 08:19:46 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1578413986; cv=pass;
        d=google.com; s=arc-20160816;
        b=boE6mOwT3LmYopfqQ3ozTkw/5nfgNTTtH5DJl3e6MZtBD7WjvCA8jjotPWjbRWhVTY
         jElMzVgGYWqGv0TaPWOMPUa/fLwuDvEsytGQLqm9rycu1XAV5h6Uam8nqAqcaNRHm4at
         IIynUqHsENJh+0AaZwQdJ9Err6i2uqz5rGRskHMZqHdyzBySNDdTqoMBdBAe+GTiNncP
         1/Peq884mMfhnRx3EqFb8byT3INrKwYDASlw+8ppmB5nKkP57L8egkfMMtVw7Gi/tNnH
         e8ZDtVq6U2MduDHn3Ad8cOw8f/T63/VjwZsQUHPsVLAX0DEvLvLZeN34/H7ZEyLsWzHU
         ydSg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=Z8sTWDTrxOcfhxlN+xZdK0h9Es61W53h7fflLi0ALMs=;
        b=hzTYVLEa2d3uOaG8fJiKDnk0kz5iDMVAHckx3coMYDqg10Xs4HrB/I21zIq/zB3NVG
         LJ4vq2NVXHlxXipX90xoOfu+pgIDhmnTeVhGtqeSvKu11F/dU1C8H4T4SDD6jUgwk7uS
         Bi/GxivgkedePmTdN83p+/2mG4ZQ2jLEMBp6dLxhjB2N6mO78BlCgGS2xvyDY8MA1XJu
         Xv46XFqBIZd11CSmtgKeSlhjEYNoica2YRd1R4kDtC+ZoZ39mspTAFKNMiOhVju2QTOk
         IQoFO8/KBCnRKVr66TsL+SlwGOebeLH2/MYH+PqE/4c2Vgyy3W4qwSnAuZU9WtMgosjh
         WaTw==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b="TVtyW/B6";
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.98 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-oln040092074098.outbound.protection.outlook.com. [40.92.74.98])
        by mx.google.com with ESMTPS id q13si62379368wrn.204.2020.01.07.08.19.46
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 07 Jan 2020 08:19:46 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.98 as permitted sender) client-ip=40.92.74.98;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b="TVtyW/B6";
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.74.98 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; /tbi9Rs7yQiTJyy5OIgcq0ug==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=Z8sTWDTrxOcfhxlN+xZdK0h9Es61W53h7fflLi0ALMs=; 7Kk6qUG2UL7tQ/jlEBDHKU4A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=Z8sTWDTrxOcfhxlN+xZdK0h9Es61W53h7fflLi0ALMs=; FiHXsMe9VF6j7CPUHw2qh6tg==
Received: from VI1EUR04FT013.eop-eur04.prod.protection.outlook.com (10.152.28.52) by VI1EUR04HT074.eop-eur04.prod.protection.outlook.com (10.152.28.174) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11; Tue, 7 Jan 2020 16:19:45 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.152.28.52) by VI1EUR04FT013.mail.protection.outlook.com (10.152.28.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2602.11 via Frontend Transport; Tue, 7 Jan 2020 16:19:45 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2623.008; Tue, 7 Jan 2020 16:19:45 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffZMEp
Date: Tue, 7 Jan 2020 16:19:45 +0000
Message-ID: <CWXP265MB1638A3F2CF46F46EB72EDFB6C53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: EvwkxA+pzEEeg@mail.gmail.com>
In-Reply-To: <CAA_5ChBp_cG0jCSgnkh6WazQSVvPjuVi_osRjEvwkxA+pzEEeg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: D8C46;SizeAsReceived:6885;Count:44
x-tmn: [MdbNyaSbMxWZdoaFKgGw+B8mKdVDk0MFA4vfTTEx6wQ=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 60032b35-3244-4737-9760-08d7938d6900
x-ms-traffictypediagnostic: VI1EUR04HT074:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: wgkJ3CN6n6FGgFl+U9UbHODRYEVgN4sFMoTRee/n8W7WDjhqeMhXJnYkoQYGmbtcHXBg1F6fBwU=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWXP265MB1638A3F2CF46F46EB72EDFB6C53F0CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 60032b35-3244-4737-9760-08d7938d6900
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2020 16:19:45.6453 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR04HT074

--_000_CWXP265MB1638A3F2CF46F46EB72EDFB6C53F0CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp741595ltm;
        Fri, 10 Jan 2020 06:24:11 -0800 (PST)
X-Google-Smtp-Source: APXvYqyo+bAnmyBJr6wImeUsGlT5+JEC5/crMNbGFMoW6AzcVk0hrhz4b/tETBW3YdATzhskSJYt
X-Received: by 2002:adf:e40f:: with SMTP id g15mr4047990wrm.223.1578666251173;
        Fri, 10 Jan 2020 06:24:11 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1578666251; cv=pass;
        d=google.com; s=arc-20160816;
        b=CBo5XPUaN5EOMeTditwHXd95bEOLhRWIQ8DFSoLJVnrJEoem47hlYqUh+5VmpNqBT+
         kb/GcWFyCcfm9OFHENRBez1x2YlJlJ7bmBHFv+J5FoeX+smbkzbhqGUTtZcux0ZnFmds
         tf5HSZCnpqqzc9vjAnGMabKI/Es67ZY6koY0dcoTWd56x12CvV0lStXRrXTgo8PzWQaK
         4KUZ6z9fOkuFB+gp4+27aSXDf8tGhyim8o+6ND8KZnbztXsv379ObdE1353wjqfeszUl
         03lzOj/6JNTArNmnkL6XCCdhy2zPORIAxkh0CR0Hy7cCfoLGsI97YmniZusjg8WrtCkL
         uwKQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=irRRvlAYi/xriSfA0h3+JbQv4bc1y9gOR0e3FL/+nFU=;
        b=ZFlD7nGdd+Y9X1xu4YsECfnjekwuMIsf5TCrIdQRScBuALyI1IS8O4XzsrHxQbAUCY
         GdAMqepQPKcm6+mtkY79gnWBdi5PNbmK83UJ7V0rhMUbflIdyjU7B4SYJiEPwR/sHMag
         Oe1l8XdMzOnqpmH/rWRZ7Fha8Cy+TtSKmJmMAiQSk3cBF2Sna+8DdZ8tJQswPt7sRtYq
         JulWqruua5JD8r7RWIwZj7KKIA87W6U8tsuybR2AVm/iJYUzIod5+7P/NRNDqgFTx3jy
         UMp2yXjQBZtWbhvuuErqkGI4xJu9cqwZbUa8MCCN2IWriqgmpMYiiSqaVpk2U5jP6SpC
         fIDg==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=SIgEL+sT;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.89.13 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05olkn2013.outbound.protection.outlook.com. [40.92.89.13])
        by mx.google.com with ESMTPS id x133si2183807wmb.201.2020.01.10.06.24.10
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 10 Jan 2020 06:24:11 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.89.13 as permitted sender) client-ip=40.92.89.13;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=SIgEL+sT;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.89.13 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; OcXERGkdSeKS5hzRZeCmhiXw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=irRRvlAYi/xriSfA0h3+JbQv4bc1y9gOR0e3FL/+nFU=; dkRG/pXNCZwhQwBYY5dQb4Sw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=irRRvlAYi/xriSfA0h3+JbQv4bc1y9gOR0e3FL/+nFU=; Wf2UQi086m0lfaDDbA1HxHyA==
Received: from AM6EUR05FT055.eop-eur05.prod.protection.outlook.com (10.233.240.51) by AM6EUR05HT231.eop-eur05.prod.protection.outlook.com (10.233.241.82) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.9; Fri, 10 Jan 2020 14:24:10 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.233.240.60) by AM6EUR05FT055.mail.protection.outlook.com (10.233.240.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.9 via Frontend Transport; Fri, 10 Jan 2020 14:24:10 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2623.011; Fri, 10 Jan 2020 14:24:10 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffZK0YgASWyl4=
Date: Fri, 10 Jan 2020 14:24:10 +0000
Message-ID: <CWXP265MB16383506BB22FCA2BDA622B9C5380@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: 638.GBRP265.PROD.OUTLOOK.COM>
In-Reply-To: <CWXP265MB1638D4289087F391BFEC8A97C53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: EBE63;SizeAsReceived:7003;Count:44
x-tmn: [uq0eT+2LLMo6Je70znAPrZaXBPmA84e7L8r4ErWrh2g=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 3b5de946-f2f3-499d-79d6-08d795d8c25d
x-ms-traffictypediagnostic: AM6EUR05HT231:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: kJdVMNfIYHMIlMAS7onCVJOcHWcjGcUWs9t7aLkbNvJOM6eKNktLnib/doCx+MRTMj33Sc8Ux48=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWXP265MB16383506BB22FCA2BDA622B9C5380CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 3b5de946-f2f3-499d-79d6-08d795d8c25d
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jan 2020 14:24:10.1545 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6EUR05HT231

--_000_CWXP265MB16383506BB22FCA2BDA622B9C5380CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
Contributor
*****
Offline


I Love Anti-Scam!

Beiträge: 24067
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Sternzeichen: Widder
Re: <baggage5050@gmail.com> <banintergrup@outlook.com>
Antwort #3 - 13. Januar 2020 um 19:35
 
ohne Kommentar geschickt.

Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp3913875ltm;
        Mon, 13 Jan 2020 04:08:48 -0800 (PST)
X-Google-Smtp-Source: APXvYqwCaHGYVtye4a66gKN0ZRc2kO/N8NkgOCA+IDa5oFCobEoPCzrpViMDkKzW+uj5wukdTvHS
X-Received: by 2002:a17:906:31c6:: with SMTP id f6mr16102178ejf.17.1578917325997;
        Mon, 13 Jan 2020 04:08:45 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1578917325; cv=pass;
        d=google.com; s=arc-20160816;
        b=tqxc7kGeae2hYPCxr2nX65srY+48KlVrRS+/uRCLxSPqp8JUea6sM78qafOPqocR8q
         VCApm7im6Y/wrc1ymvs8itHpwosYvwlDw9z9UCl1rKbX20wuVW6BHg2ikZShbbUCdK0b
         8k2g0rbbXTmxR9IleLkTc8GYJfogMgjwyjl8XElAyP/EWg7iaQWXL4CWlCHby6KdEhmX
         5ZSCUZrIxQxUvIOmkGQcjog9s0PVwNMQ2zeGEBY0nwl+w4TTR9CxOsar3oJdMsLiT2qI
         RtJz5CVCYduUFDznIz1jLWJE21oMUVcxnfMNDbCBBV/cWkrR9+laN7ft+FPJFIEnI9i8
         tDpw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=BFk0Z7itA0B6Rak/49ihZWkGGmgSmXElybTrK/sOvso=;
        b=BfwUNyBrCTGDWzTSUa4UqeCyJx9ecLSffKrtAzvnKTtoiuobCxIEcUIQXJv0TiilF0
         n1xTXbWKVfDDURWI4Iqn07QQBYyyvlWH6Mc2RJy1lDFiOgZSSPVsl8jPNB+3GW56LjVj
         86tUD+uY75doNJGnZAyiHGD9XD43xdRg3obaMBF2PRjXvvR36aVekNNWVOClJwdFOefU
         8l0g8lORM1wuOQH4AgeHP0nYOrWfxobVPVWjKj3fTn9oX9+V35h4N4N0iJ5u22HEsFhL
         fhquBaQROs6/Gn+3Otu0lIhNUSxUAb5MugwG38DLA3EBXkO4gX6jhoSYjbdJlpTUUYr7
         nn9A==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=aSoTP7bm;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.85 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-oln040092075085.outbound.protection.outlook.com. [40.92.75.85])
        by mx.google.com with ESMTPS id m3si6745230eja.137.2020.01.13.04.08.45
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 13 Jan 2020 04:08:45 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.85 as permitted sender) client-ip=40.92.75.85;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b=aSoTP7bm;
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.75.85 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; kTaBFzIJk3SPIuKRuZCQ+X2Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=BFk0Z7itA0B6Rak/49ihZWkGGmgSmXElybTrK/sOvso=; wCOEt2aeEkz08iMXtpGLqIcQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=BFk0Z7itA0B6Rak/49ihZWkGGmgSmXElybTrK/sOvso=; NVbTcDnP0zVCBxwOUVhqZFfw==
Received: from HE1EUR04FT051.eop-eur04.prod.protection.outlook.com (10.152.26.59) by HE1EUR04HT096.eop-eur04.prod.protection.outlook.com (10.152.27.94) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.9; Mon, 13 Jan 2020 12:08:44 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.152.26.51) by HE1EUR04FT051.mail.protection.outlook.com (10.152.27.40) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.9 via Frontend Transport; Mon, 13 Jan 2020 12:08:44 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2623.015; Mon, 13 Jan 2020 12:08:44 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffZK0YgASWyl6AAzPKAIABXUNJ
Date: Mon, 13 Jan 2020 12:08:44 +0000
Message-ID: <CWXP265MB1638B638F954BE6BC9572F24C5350@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: <56cf0079f1ad1cc837c1ca83bf4b5f0a@fr.pl> <CAA_5ChBp_cG0jCSgnkh6WazQSVvPjuVi_osRjEvwkxA+pzEEeg@mail.gmail.com> <CWXP265MB1638D4289087F391BFEC8A97C53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM> <CAA_5ChDd1s4nmXpUOuJumaots267PH0SzH0oGL1KV0Xj-s7pcg@mail.gmail.com>
In-Reply-To: <CAA_5ChDd1s4nmXpUOuJumaots267PH0SzH0oGL1KV0Xj-s7pcg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: 1CF5E;SizeAsReceived:7150;Count:44
x-tmn: [R1TZy0xhUQb1WajGPPRGviqiBiIqU0FnQyyNRtdMdrk=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 3cef1b4a-15a3-4483-bef9-08d798215629
x-ms-traffictypediagnostic: HE1EUR04HT096:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: cCfgghCICw9LiT4dk0Tl/2enp2+bgwOhM46BlL9SDzjHA8C/evzNsxQEE6sJen2ITPV/C9Lenmk=
x-ms-exchange-transport-forked: True
Content-Type: multipart/mixed; boundary="_005_CWXP265MB1638B638F954BE6BC9572F24C5350CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 3cef1b4a-15a3-4483-bef9-08d798215629
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2020 12:08:44.2583 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR04HT096

--_005_CWXP265MB1638B638F954BE6BC9572F24C5350CWXP265MB1638GBRP_
Content-Type: multipart/alternative; boundary="_000_CWXP265MB1638B638F954BE6BC9572F24C5350CWXP265MB1638GBRP_"

--_000_CWXP265MB1638B638F954BE6BC9572F24C5350CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
Contributor
*****
Offline


I Love Anti-Scam!

Beiträge: 24067
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Sternzeichen: Widder
Re: <baggage5050@gmail.com> <banintergrup@outlook.com>
Antwort #4 - gestern um 13:10
 
i have wait your mail but no receive please use the name of mr adams to send it as he is now in africa to supervise a transaction i have sent you this passport already

Sent from Outlook

Spoiler:
Delivered-To: xxx
Received: by 2002:ab3:7d0f:0:0:0:0:0 with SMTP id b15csp3516241ltm;
        Tue, 21 Jan 2020 01:55:46 -0800 (PST)
X-Google-Smtp-Source: APXvYqyM7f06EuDWo2H/EZ5kBn2sb3tVl9oDdxaX9QFWq4XdcGnSAuTPdBtizRYnVqChMtF49kIc
X-Received: by 2002:a17:906:3786:: with SMTP id n6mr3507478ejc.124.1579600546464;
        Tue, 21 Jan 2020 01:55:46 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1579600546; cv=pass;
        d=google.com; s=arc-20160816;
        b=iDhzswG3pAnmVheAik2KHvMF2j+2kyuZKPbODz+8JCtFPS0eqY3l4tFebHEcuBSegT
         4T8yKiLqoHvjAZBOAzOlZZt0PWNqopnrxaZHQ9wLrP3pf3hzuSkckBLZiarpxNlh3wgL
         Z4EKWelvJI64PO0V6rqOq746POnM8q0KCDC0KuXFPOpunxOEpXahy2dhpxQa5c3ZixT0
         4GE/kw/5ddkmNEhVPSOcCnp1NLNt/sXt9P7luwvwrQi1Ud7UOrz19iKqsDNdSXOubDc7
         5gvpJsBSxIPv34La0P1TCgdfunq1e7huWcVYhE98vc7PyQikLNCTWcIdg491Tj+Xjrye
         BMBQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:content-language:accept-language:in-reply-to
         :references:message-id:date:thread-index:thread-topic:subject:to
         :from:dkim-signature;
        bh=wIkHYym6YmEQXHeey81wwuXaYgjQRDrnQBwjHiTGrV0=;
        b=La4r6/f3b2yulxafaqgP9RmP3znJb358h+1sBZYWT0dcwXLFREET1NvQL4Lu+SnP6s
         /QG+b+fTpB3M0BU4VcSiDROQCtomMebQBQy2v6CJzh2LVpPhiTb5Zg5E2HcTYjWsG8CX
         kylZWceuuJtAecLBeXGGYVVsgVf8cR/EXgS2qyuqITmzCblBwj4zObkXBUFxWRwMNq7n
         S8yur5+F/HxMnMogOQ4gFX3/xtsPKDnAp9BD/ztL3bYx6vBPYytCa248ScPc9bbtR8sQ
         8dxTEFLPoVntz86HaoDjBkL1uXctcsSkRks6V3MqRNnsgLswkcKhCw8Vilg4yuTEpacZ
         oriQ==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b="h/cYTJL1";
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.72.63 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
Return-Path: <banintergrup@outlook.com>
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-oln040092072063.outbound.protection.outlook.com. [40.92.72.63])
        by mx.google.com with ESMTPS id u25si21907089edy.468.2020.01.21.01.55.46
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 21 Jan 2020 01:55:46 -0800 (PST)
Received-SPF: pass (google.com: domain of banintergrup@outlook.com designates 40.92.72.63 as permitted sender) client-ip=40.92.72.63;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@outlook.com header.s=selector1 header.b="h/cYTJL1";
       arc=pass (i=1);
       spf=pass (google.com: domain of banintergrup@outlook.com designates 40.92.72.63 as permitted sender) smtp.mailfrom=banintergrup@outlook.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=outlook.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; 28eufde7XHW6SR/jnwb3e2bg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; heck; bh=wIkHYym6YmEQXHeey81wwuXaYgjQRDrnQBwjHiTGrV0=; KkE2i5LnpNcAr4P9XcDukx9Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; heck; bh=wIkHYym6YmEQXHeey81wwuXaYgjQRDrnQBwjHiTGrV0=; HaGj3PqgzOxsqsI3orP9zNeQ==
Received: from VE1EUR03FT057.eop-EUR03.prod.protection.outlook.com (10.152.18.57) by VE1EUR03HT121.eop-EUR03.prod.protection.outlook.com (10.152.19.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2644.23; Tue, 21 Jan 2020 09:55:45 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM (10.152.18.59) by VE1EUR03FT057.mail.protection.outlook.com (10.152.19.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2644.23 via Frontend Transport; Tue, 21 Jan 2020 09:55:45 +0000
Received: from CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0]) by CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM ([fe80::7996:36af:fd78:d1d0%6]) with mapi id 15.20.2644.027; Tue, 21 Jan 2020 09:55:44 +0000
From: International Banking Group <banintergrup@outlook.com>
To: xxx <xxx>
Subject: Re: Lost Money Belong to You?
Thread-Topic: Lost Money Belong to You?
Thread-Index: AQHVw9uqrbD+G3Ipf06AAxwkAYR53KffZK0YgASWyl6AAzPKAIABXUNJgABsp4CADADzwg==
Date: Tue, 21 Jan 2020 09:55:44 +0000
Message-ID: <CWXP265MB163850A7C4AA8624B93F3F29C50D0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM>
References: <56cf0079f1ad1cc837c1ca83bf4b5f0a@fr.pl> <CAA_5ChBp_cG0jCSgnkh6WazQSVvPjuVi_osRjEvwkxA+pzEEeg@mail.gmail.com> <CWXP265MB1638D4289087F391BFEC8A97C53F0@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM> <CWXP265MB16383506BB22FCA2BDA622B9C5380@CWXP265MB1638.GBRP265.PROD.OUTLOOK.COM> <CAA_5ChDd1s4nmXpUOuJumaots267PH0SzH0oGL1KV0Xj-s7pcg@mail.gmail.com> <CAA_5ChBfvaUQ9fNdwv5SY1q5ATjMUPK=TN241hgCZvD_tRm6ng@mail.gmail.com>
In-Reply-To: <CAA_5ChBfvaUQ9fNdwv5SY1q5ATjMUPK=TN241hgCZvD_tRm6ng@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-incomingtopheadermarker: 83640;SizeAsReceived:7328;Count:44
x-tmn: [bVAgd5hhUhokt8U2WNqjDj4gwjDVF2lml2p+tQoWNGM=]
x-ms-publictraffictype: Email
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: b9cbcf75-816c-4734-e2cd-08d79e581566
x-ms-traffictypediagnostic: VE1EUR03HT121:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 5wOijdd9WyiD0kb/j2ZcT9Iek+lH8qSiKfhQX1Rr7y+ESa2Qr15QxJ50XdBUzRuFt0yBkklVwDg=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWXP265MB163850A7C4AA8624B93F3F29C50D0CWXP265MB1638GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: b9cbcf75-816c-4734-e2cd-08d79e581566
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2020 09:55:44.8420 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR03HT121

--_000_CWXP265MB163850A7C4AA8624B93F3F29C50D0CWXP265MB1638GBRP_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema