[email protected] Casey Thoreen.

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id wITYDxEAtVxWeQAAjbubUg
for <>; Mon, 15 Apr 2019 15:05:05 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Apr 2019 15:05:05 -0700
Received: from mail-oln040092064085.outbound.protection.outlook.com ([40.92.64.85]:60152 helo=EUR01-DB5-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hG9im-000844-9D
for ; Mon, 15 Apr 2019 15:05:05 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=c042bfSQhHoX4PHJzld8V9pvspJRJkYmJe6YiNTCH9s=;
b=u6uj+E/1EQK+wCuaczN6uPEebOwmNGw6+ldM7WpNnouDGvAeBGF+nOMwHyndF1GVERnqJ9Eujo6QQTcY5zqAMSZ6ad6BDJFp1t4e8bv5qIxp+js8ck9RqJurCkxDn+iDy/3tUsvaOSHqSxlaSGXqvGSC/sLVscIBmDCdOPKDphicRH5BY9WcYx3Zdht68hWc0qGVd2325WClZusWLmrDJNYJZTH8s/ABZasY4KiOEp6URL+oAvql6WZKwrqa5+JgOg6YhV8tVk+/SIDGEXm7u9slocHbgeruVZXXQT9umg0hHslKzXxYU5Dg/YYHWcS4J8Rqo/n38hFIxBCpG31Z/Q==
Received: from DB5EUR01FT037.eop-EUR01.prod.protection.outlook.com
(10.152.4.59) by DB5EUR01HT119.eop-EUR01.prod.protection.outlook.com
(10.152.4.188) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1771.16; Mon, 15 Apr
2019 22:04:15 +0000
Received: from DB6PR0101MB2199.eurprd01.prod.exchangelabs.com (10.152.4.56) by
DB5EUR01FT037.mail.protection.outlook.com (10.152.4.212) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1771.16 via Frontend Transport; Mon, 15 Apr 2019 22:04:15 +0000
Received: from DB6PR0101MB2199.eurprd01.prod.exchangelabs.com
([fe80::e4f4:b977:787b:3317]) by
DB6PR0101MB2199.eurprd01.prod.exchangelabs.com
([fe80::e4f4:b977:787b:3317%7]) with mapi id 15.20.1792.018; Mon, 15 Apr 2019
22:04:15 +0000
From: CASEY THOREEN <[email protected]>
Thread-Topic: ATTN: Please< This is a matter of urgency.>
Thread-Index: AQHU89cpn43Afg5DvEKjtd4phx2auQ==
Date: Mon, 15 Apr 2019 22:04:15 +0000
Message-ID: <DB6PR0101MB219935D252491DED4B002B4DDB2B0@DB6PR0101MB2199.eurprd01.prod.exchangelabs.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:1EA99371DC8C073AF2EEB9E3B74AE5A60022B42D2BC50344BADA31E4359CABFA;UpperCasedChecksum:AF5C1DB320EB1676A8FC8DD73299793A2A9542DB952390E58B9CAF68DBBD19E4;SizeAsReceived:11690;Count:39
x-tmn: [pNGbAzdr0dR/PtuiyqWn9Okbkm7ymZWu]
x-ms-publictraffictype: Email
x-incomingheadercount: 39
x-eopattributedmessage: 0
x-ms-exchange-slblob-mailprops: 2M8YL5ykv7a+FQsQHAIrCobja7e+9RMJ2E0ZqsAvJlRwG7UgO7ZkknamCkzlDf35ZRcVfggbrdiOPAJdsKdNMJzYe0RT722JuzU6nUB2Po4WL/wHckzY6O7MdQS6ixeBfVMq8WqrR7dvnvECK2wUaVTSu1yRBZrQP02EMDhB4DWFdOlblNC5flWauD1ZOLHOvz7jU7Ou8vcPAKOhvMX5g5MreXwXrwhYfAKbSbBtfNwnL6vlpzFH6k1Q0UmU+AVhm/+FNb5HZ/Vknzyos7lIalOqTUqb451ZYiOFTcB2ZQn4RMwT4wjoryLTFGhYp+04p1r0DOP828oRF0OGA2kuMcsvEfrw7neMZJvmuenyrNIz8aHSOkyhrjIQYWRsijBHnR6cU2Tj2rZXSxKlfMYSFp98SDX7wrM8DJMds4lcCl20K3injuhLGv0TYlVdNUPYiT6AGkY+R1g0xjhWewAgGzr4w5pfF9VHRgwzjl94N2ejvD4EC26QO9s6UHgxaR6kQMbksqhbIrWFtb1mXXDQxg5IQixIrjohwROX8y1O91+oOF7LCQgcyUQdEhdXiSBVkH751XjHNmHwyW4GWdw5tjA4ITaBAIt6mq+Gj9si7r80DZOc9yolJkjEFUgDBIcr13C4i+YWte4=
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(201702181274)(2017031323274)(2017031324274)(2017031322404)(1601125500)(1603101475)(1603102475)(1701031045);SRVR:DB5EUR01HT119;
x-ms-traffictypediagnostic: DB5EUR01HT119:
x-microsoft-antispam-message-info: IVRc67irFiDTVJ4o05310vYIZ6rA1NrufyHVGVQiMsBPWMo7I8kyVEK9lWwV84UBYKmUFM0spkL/+Yq/P8lY2jRGjlpG4i5sHF0bDQBOJ5O12vcRPxpg7HkPN82mQB5CQcxr0R83+DOavYoHTqiCCl87LUKy6///DVMB5JdinWLzLLeHIzh5k24pXHZjUpj5
Content-Type: multipart/alternative;
boundary="_000_DB6PR0101MB219935D252491DED4B002B4DDB2B0DB6PR0101MB2199_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 1a6b98a8-c5fc-44e7-9b35-08d6c1ee4cdf
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2019 22:04:15.4672
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR01HT119
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: IMPORTANT NOTICE. Latest Development Regarding the Irrevocable
release of your payment. ATTN: Beneficiary. [...]

Content analysis details: (8.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[40.92.64.85 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(casey2016thoreen[at]outlook.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: Please< This is a matter of urgency.>

IMPORTANT NOTICE.

Latest Development Regarding the Irrevocable release of your payment.



ATTN: Beneficiary.

This is to inform you that we are the authorized security agency ascribed by the
United Nations office of the oversight service whose Unit headquarters is in Toronto
Canada to deliver your consignment to you.



With this help from the UN office of the oversight service you are therefore
required to acknowledge receipt of this mail. You are further advised to reconfirm
your full names, your address, your cell phone number and copy of your ID.

This is to enable us cross check with the list given to us by the UN and FBI to make
sure we are corresponding with the rightful owner.

Kindly reply for further details.

Thank You.

Casey Thoreen.

From: CASEY THOREEN <[email protected]>
Date: Fri, 12 Mar 2021 11:42:00 +0000
Subject: ATTN: Please< This is a matter of urgency.>

IMPORTANT NOTICE.


Latest Development Regarding the Irrevocable release of your payment.

ATTN: Beneficiary.




This is to inform you that we are the authorized security agency ascribed by the United Nations office of the oversight service whose Unit headquarters is in Toronto Canada to deliver your consignment to you.

With this help from the UN office of the oversight service you are therefore required to acknowledge receipt of this mail. You are further advised to reconfirm your full names, your address, your cell phone number and copy of your ID.


This is to enable us cross check with the list given to us by the UN and FBI to make sure we are corresponding with the rightful owner.




Kindly reply for further details.
Thank You.
Casey Thoreen.