Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#423831 by buried under 419s Tue Feb 23, 2021 9:33 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id O8h4BvDXNGAvPQAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 23 Feb 2021 10:24:48 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 23 Feb 2021 10:24:48 +0000
Received: from mail-oln040092069075.outbound.protection.outlook.com ([40.92.69.75]:38007 helo=EUR02-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1lEUs3-00044H-3m
for ; Tue, 23 Feb 2021 10:24:48 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=PoXj6dZcOKZh4xfBGOkUSky36jhI2dIoqDdt0bpwe+dBDCR1gKMh26WITbd7QMh/cDnj0olSIDcNUtRcvr/Mv82eXkg0lGQ4Ta68snmxX4gwxCGdi/FKBfgsq3bi0jvziHeyeZhHqCjJnsdD04RwB/2WOqoNzzx7r0A7jXz/Qkf1GDT8kGVgPIA5gMxjXSkjgSBTeJZur/gwiS/3tOMa3oY4VXjUdTMbNcH7CUZsU93kNCV2TWUwHOK1RRnXptTsxVSzVnSu31MSSSTRm86HTjxSHEznvlEcV095bSWF0q/nEixioQmakZ6p5JIP1NsKmHPuyrB/CRAKI4axNIdpJg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=B84bAj5W3t72Tl6fY9yRUTLMNppr9PNfRndYWdOwIRU=;
b=WecBs2wt0xc4hRxFQ0tbPyPY1O+sS13qvLZPNLuxKyLggJYmUKC9B4GQK1cx6cgMbtJWDr9suNbRw4tu9ptUZ4Q01Lz5h2xeQQY1Dv1QZWO84Li/iJiNLoBW+f9XYbIrdhJz27WXqKSwOI/FBCAEIlrwXSWdlbUJi/WIgUbMA7cw5H8MeacyaCXjZznm1KyAf76aTg56m++cdqksWhnq2u8hDupO0DcM9MmXXTrl3JpSviAMsQfX/SDhajZCdxkzzeQqlcLLIfXheDdNSc7AgPpqxLNdj8pL++uzE3RIAOB27DXnZ9YoBxrQot74HSJ8W+A0PAR7kbAqN3S8iCMtsQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=B84bAj5W3t72Tl6fY9yRUTLMNppr9PNfRndYWdOwIRU=;
b=is5cd24iPvOPjBKpSQYHa9dfTmxbMfj/JpEK7PMFTrCFJNv+yFEUH2wo8/umb2ik6j4q+TFGPl6qP+36HlaTeBXEQBqCE/Jts8CPUbVgCmAaJBC0a4DIE9T+uzpdUINThoGSgxNfcRvsW1dFZI2Q68TocuIK1rMX48GjN3sW6llBhX6Ky5zKdkLuWbbB8q/skmGIBVROlkTwEBGmtNMk5EkEgS8aum58+hfl3e9KF0AEJuu9OAGVxlHV32iJ1b5gAszy7Q3jMiVi1iXu7z6OZCebKxhYFUulIWb5zCduE9XAEw2rnmRjg3prhvipBHbBMjR4Ll2wjgrZZSs7JZgw8Q==
Received: from HE1EUR02FT062.eop-EUR02.prod.protection.outlook.com
(2a01:111:e400:7e1d::43) by
HE1EUR02HT148.eop-EUR02.prod.protection.outlook.com (2a01:111:e400:7e1d::434)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.27; Tue, 23 Feb
2021 10:23:56 +0000
Received: from DBBP194MB0969.EURP194.PROD.OUTLOOK.COM (2a01:111:e400:7e1d::4f)
by HE1EUR02FT062.mail.protection.outlook.com (2a01:111:e400:7e1d::352) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.27 via Frontend
Transport; Tue, 23 Feb 2021 10:23:56 +0000
Received: from DBBP194MB0969.EURP194.PROD.OUTLOOK.COM
([fe80::bd89:d50d:1338:a897]) by DBBP194MB0969.EURP194.PROD.OUTLOOK.COM
([fe80::bd89:d50d:1338:a897%4]) with mapi id 15.20.3868.033; Tue, 23 Feb 2021
10:23:56 +0000
From: Lottery Promo Department <[email protected]>
Subject: REF: FIFA/QA22/9150063
Thread-Topic: REF: FIFA/QA22/9150063
Thread-Index: AQHXCc3GKJmg/kXgJ06UR0bMqeBSWQ==
Date: Tue, 23 Feb 2021 10:23:55 +0000
Message-ID:
<[email protected]D.OUTLOOK.COM>
Accept-Language: en-ZA, en-US
Content-Language: en-ZA
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:8410C18382BBE2FFF1C915B10B2A9CDD27FCA784F987864046FFAE7D77DA5055;UpperCasedChecksum:C0C6B2219FC847EAB1E8A4B787EF32294F8F908DBD82D54891C7A50473FE39AB;SizeAsReceived:19148;Count:40
x-tmn: [uY9nw4ZnT7xDqdfOY/8R/PFXTDbk/fJk]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 10b40172-9a55-4cb6-14d8-08d8d7e52045
x-ms-exchange-slblob-mailprops:
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
x-ms-traffictypediagnostic: HE1EUR02HT148:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
z70+tXjUj/S8Asgs1OV++KsSTAAaywAN0cnn4QeEs0NfpaoEVbH7rS8sRAsm6sZE8t7A6Ox4+M/l+GSrWv9gGL/IIj++V71nQWzWonafQzfJQKHflLZth1DGNTjmM8PMulGXlsomTUf6m8ZNByxp0kovNAjBCU8/tT4ONFqQuVeMRtBY1YPt4GRHz3SoBBIxroWrwcMkHN37b33itH43jy+FpryJoVje/tzo6d8juk+Q6WNQzBWZ0g+MR84xu0/+CbLcHFVkgFA8Ctx2ZUSFkWPOBOKrf5S6CNUDYNoVTSIlIxn3j3gCbggw2exs5Nz9Sv9xIsG9sjLP4KP/TxdtOyfJTPbL1sWqkv/xVhIBMiAHyxf/cYTHTZGQQXO3tMz1r7PfKbPdtLJgFRuEWxw3Tg==
x-ms-exchange-antispam-messagedata:
C/PRZW4K5WBxH4PgmIwq7nRGG8jr0ZEZ5B+vSLoVEJjkffpNy8BW0qJ00jqP8ARAPLN2o2TjSaSzRLMKQOKzgatB2cuE6Miqp+344Db3rydTBhslYmhQvGApHHRR6wUh3x98rSs+6wxeVqY7WqByHA==
x-ms-exchange-transport-forked: True
Content-Type: multipart/mixed;
boundary="_004_DBBP194MB09692441B4AE403B8FF58717F8809DBBP194MB0969EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: HE1EUR02FT062.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 10b40172-9a55-4cb6-14d8-08d8d7e52045
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2021 10:23:55.9765
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT148

--_004_DBBP194MB09692441B4AE403B8FF58717F8809DBBP194MB0969EURP_
Content-Type: multipart/alternative;
boundary="_000_DBBP194MB09692441B4AE403B8FF58717F8809DBBP194MB0969EURP_"

Dear Email Ticket holder,
Find attached copy of your winning notification letter and contact our agent.

Thank you for being part of our Promotional Lottery program.

Congratulations!

Yours Sincerely,
Dr. Emily Cromwell

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google Adsense [Bot] and 49 guests