[email protected] ARQUIZAN CAROLINE

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 04 Aug 2017 14:46:02 -0700
Received: from dns1.chu-montpellier.fr ([195.83.99.4]:32676 helo=dmzmssx.chu-montpellier.fr)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1ddkPt-0002vA-AP
for ; Fri, 04 Aug 2017 14:46:01 -0700
Received: from dmzmssx1 (localhost [127.0.0.1])
by dmzmssx.chu-montpellier.fr (CPSureProxy) with ESMTP id B3E9720AF;
Fri, 4 Aug 2017 23:45:15 +0200 (CEST)
Received: from localhost ([127.0.0.1])
by cpsure-proxydmzmssx.chu-montpellier.fr (CpsureProxy SMTP Server ) with SMTP ID 911;
Fri, 4 Aug 2017 23:45:05 +0200 (CEST)
Received: from CHUXHBV1.chu-montpellier.priv (unknown [192.168.0.12])
by dmzmssx.chu-montpellier.fr (CPSureProxy) with ESMTP id DCD2620B0;
Fri, 4 Aug 2017 23:45:04 +0200 (CEST)
Received: from CHUXCHV0.chu-montpellier.priv ([169.254.9.77]) by
CHUXHBV1.chu-montpellier.priv ([fe80::a8bdc45b:4772%12]) with mapi id
14.03.0319.002; Fri, 4 Aug 2017 23:45:04 +0200
From: ARQUIZAN CAROLINE <[email protected]>
Thread-Index: AdMNWuPLiT0IDq34TU25IT4d9C5HUAAAAcLQAAACKkAAAAF2QAABWczwAABfVTAAAAAOwAAAAA2AAAAADUAAAAAOcAABRjaAAAAADmAAAAAPgAAAAA9QAAAADkAAAAAPQAAAABAAAAAAEGAAAAAPkAAAcn+QAAAAENAAAAAMIAAAAAxQAAAADFAAAAANgAAAAA3gAAAADUAAAAAOoAAAAA8AAAAADjAAAAAP8AAAAA7wAAAADrAAAAAOQAAAAA8QAAAADzAAAAAQMAAAABSQAAAAEFAAAAAQsAAAAA/gAAAADxAAAAARQAAAABHQAAAAD2AAAAARwAAAABJQAAAAElAAAAAQEAAAABCgAAAAEgAAAAASMAAAABMgAAAAEoAAAAASEAAAABPgAAAAFjAAAAAUkAAAABLwAAAAE/AAAAATsAAAABKgAAAAFAAAAAAUkAAAABMgAAAAE/AAAAAXEAAAABkQAAAAGTAAAAAaIAAAABywAAAAGLA=
Date: Fri, 4 Aug 2017 21:45:03 +0000
Message-ID: <BC6118DC1BF4BC47AA0073F455B96818548FA695@CHUXCHV0.chu-montpellier.priv>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [172.20.10.152]
Content-Type: multipart/alternative;
boundary="_000_BC6118DC1BF4BC47AA0073F455B96818548FA695CHUXCHV0chumont_"
MIME-Version: 1.0
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=7.4
X-Spam-Score: 74
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: From: ARQUIZAN CAROLINE Sent: 05 August 2017 01:20 Subject:
FW: Can We Talk? From: ARQUIZAN CAROLINE Sent: 05 August 2017 01:20 Subject:
FW: [...]

Content analysis details: (7.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9967]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[195.83.99.4 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mbrownz123[at]outlook.com)
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** FW:

From: ARQUIZAN CAROLINE
Sent: 05 August 2017 01:20
Subject: FW:

Can We Talk?

[buried under 419s]

X-Apparently-To: ; Wed, 09 Aug 2017 21:31:27 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 40.92.254.16
Received-SPF: pass (domain of outlook.com designates 40.92.254.16 as permitted sender)
X-YMailISG: aGyOB2wWLDt_Wrv43cMYXoj7I9g1bWNdsLtuXYrO.Dycv.ih
3NTDpm5XRinRDJjttXX2g4FzgZfgoH_k4pDx2t26L8RkrM38OSB8DRGgcpjk
wTEGyMS30gFRXPiD9rDywwqawQOZNZapUWR9AA0YCGMX7drkIpR8HaESNBcr
fHosdgdn2WB9h3Ivf_v9hSn2jhnky9h7JaCi0YJ.DiERCH8Zm4A8BbRanPgR
wLoVt0C3_kpCbM_nWqDcv2eM53_K6YKsk1.cSnwo9TO0UE3ml2NAFH2HU4ef
hsh96U0LBx2P07jH6ECi1Mm2MGAv.iLskF59b7b.n9w.vAo2X.ajkQTgAUvA
Ew4qlWFoLGKqD.3m0uC8KtuK353ReDwtPTg57WN2L48lx7snHNR1Ezoklcve
hhDz9bP90UORcgN.2cECL42Asb9lCLa5i9HS7.tka3qt4bWhWMdVibBUGzfX
tOceXMCuRauj4IyYe.7xsYzm0pbJC9cK_gzW.d7HZDUNRwxYBN7LAvjxQoFj
vHTOo0q6qGsGLQxzfCpnir.MdLe.WR35t_JHodUo1kvBXdJ8El9LurfxBU_x
58eQqYpf997UYkEE99p3T_.v7r_s2thcBgQuAfGFwCjn0Kx.Ybtjm0v_GQmU
ldKK8uCD.EvEeHCHLUuqPVjxgpeSxovcAcuSOafvjA7x92gHaurN4JRYUd2F
v2LjjJ1sBscdhoGmrGoo0hVXoRvmI_N3kdXIJYhEHO2Y9O9x34Pz0LVO5dyA
kGZSvTxkwgv0lMR5ON3PFFleavgZut47TAVRUXhjmH6q30gGGv4kRfYcSNS7
y5uxnvzUw.PfhYWMMIuB_FdIk6F8YNy75ZGrDS5RrHUzFLReohLxhGAE47gj
3Kljt0AqXXWEsRzRjcW7HSvJYZVR4ex7hGxSu3rgFEAonAxV9WR0dfhKQLoD
_eSxkGS3ngZt8PAiWEG72g0d45xm4_jn7qWnUyHQU_hlFi2g9JftOZeD9828
oteiPzbldr1u3J4NnGhYU0WqJTnrnTkASlRRUifqhnv2SunYYBnqvDnQlt54
NROyd_c1XpVC.RL6Sh34zYYGXrDcnvPYUeWQPrXrnqCsWRwo2PR8CEtyUJOQ
53ZEn6ol.KxrFu3EESTejB95WMiALIOx4PR498SrSWQzF5vw73Ol6No5FFy0
5.OlGzEoKb2XXJuD86NVMMPKp_.AmHdrdlb19TxtNaCMDULF3Q--
X-Originating-IP: [40.92.254.16]
Authentication-Results: mta1345.mail.gq1.yahoo.com from=outlook.com; domainkeys=neutral (no sig); from=outlook.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO APC01-PU1-obe.outbound.protection.outlook.com) (40.92.254.16)
by mta1345.mail.gq1.yahoo.com with SMTPS; Wed, 09 Aug 2017 21:31:27 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=J7k72UHyq6n0UIilimk+633nerBb/iSY5LOor2d9T0Q=;
b=u4cObdWkNZo5P/0aBAz5iYAZ+ullsRP4puchYhY9igsEOU1ATIkELtz+E8JiZZNPR1cKHEdcAYSq4bfAEqRS8URUfzpx5qlCdq3usnER+w/2y0/k+r3e8J/HR/0P6gzw+T66Osv+74ID7a1dGRQrTTMTPk8gmqQtn1fLlDSud6iA/V5gm0BPF14toN/m1RbNU60JSXA7VtOxIGe4Dw3FkS/65SJ4PTFrAyvN7Br/Cy/uVXjNUhFFTRd586r+/MgnTYlca00gpEhP50C/guHQ7OO4b1ASFAvww6wNAe+akGkyUVpy4pGL3bTUbtfT5JAEmzAI7+8cPqGSU2CuJDXS/g==
Received: from HK2APC01FT039.eop-APC01.prod.protection.outlook.com
(10.152.248.57) by HK2APC01HT237.eop-APC01.prod.protection.outlook.com
(10.152.249.173) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1304.16; Wed, 9
Aug 2017 21:31:24 +0000
Received: from MAXPR01MB0218.INDPRD01.PROD.OUTLOOK.COM (10.152.248.59) by
HK2APC01FT039.mail.protection.outlook.com (10.152.249.7) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1304.16 via Frontend Transport; Wed, 9 Aug 2017 21:31:25 +0000
Received: from MAXPR01MB0218.INDPRD01.PROD.OUTLOOK.COM ([10.164.149.148]) by
MAXPR01MB0218.INDPRD01.PROD.OUTLOOK.COM ([10.164.149.148]) with mapi id
15.01.1320.018; Wed, 9 Aug 2017 21:31:24 +0000
From: M Brown <[email protected]>
To:
Subject: Re: ***SPAM*** FW:
Thread-Topic: ***SPAM*** FW:
Thread-Index: AQHTDYKEZ//2vPJnvkWM2E4QjQ3Sk6J8kqy7
Date: Wed, 9 Aug 2017 21:31:24 +0000
Message-ID: <MAXPR01MB0218B5B0E5EB49B686C2CFC29D8B0@MAXPR01MB0218.INDPRD01.PROD.OUTLOOK.COM>
References: <[email protected]>,<[email protected]>
In-Reply-To: <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:AA1C483C9AF0C4B937DAC678BCEEC506ACC357421A5E349BAC17F64C0B49E0E1;UpperCasedChecksum:3BE4D1217A5655BEC1FDE2E024D0A79A41943E3B7121046103EB5BADFB44D10F;SizeAsReceived:7285;Count:47
x-tmn: [mCtpRdvHkPwK5SPlHpJSkxNlDRumyPi5]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;HK2APC01HT237;7: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
x-incomingheadercount: 47
x-eopattributedmessage: 0
x-forefront-antispam-report: EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:HK2APC01HT237;H:MAXPR01MB0218.INDPRD01.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: e6d3db05-8df0-4b66-171c-08d4df6dfc61
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322377)(1603101448)(1601125374)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:HK2APC01HT237;
x-ms-traffictypediagnostic: HK2APC01HT237:
authentication-results: outbound.protection.outlook.com; spf=skipped
(originating message); dkim=none (message not signed) header.d=none;
dmarc=none action=none header.from=outlook.com;
x-exchange-antispam-report-test: UriScan:(189930954265078)(12901024606220)(201166117486090);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:HK2APC01HT237;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:HK2APC01HT237;
x-forefront-prvs: 0394259C80
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_MAXPR01MB0218B5B0E5EB49B686C2CFC29D8B0MAXPR01MB0218INDP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Aug 2017 21:31:24.4108
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK2APC01HT237
Content-Length: 15837

--_000_MAXPR01MB0218B5B0E5EB49B686C2CFC29D8B0MAXPR01MB0218INDP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello,



Thank you for responding to my email. I apologize to encroach into your privacy in this manner, I got your contact from a directory on the Internet here in Afghanistan. I find it pleasurable to offer you my partnership in business and I pray at this time that, your e-mail contact address is still valid. I know you don't know me but I meant no harm sending you this note, just that I don't have anyone out there to talk to, as I lost my parents in a car Accident, when I was 11 year old, I was raised up by my adopted parents, but they died years ago, the relatives of my adopted Parents throw me out of the house saying that I was not their real daughter. I know you can handle this money for me on till I come over to meet with you, we can also build friendship with this transaction. I lived in Lake Jackson, Texas before joining the Force.



You may be wondering why I choose to trust a delicate matter like this in the care of a stranger, but this is the best I can do in my present situation and I would have trusted this kind of project in the hands of my Husband who was my closest confidant, but I lost him to cancer on 22nd April, 2006 5 months after we got married, and my only brother has ruined his life with hard drugs, hence my decision to work with a neutral person if we can establish some trust between ourselves instead of confiding in my buddies back home so that this little secret can be preserved.



Let me start by introducing myself. My names are Sgt. Monica L. Brown, I am assigned to 782nd Brigade Support Battalion, 4th Brigade Combat Team, and 82nd Airborne Division [3]. I am seeking your assistance to evacuate the sum of $10,500,000.00 (Ten Million, Five Hundred Thousand United States Dollars) as far as I can be assured that it will be safe in your care until I complete my service here.



SOURCE OF MONEY:



I and some other high ranking Officers made some deal on oil business over there in Afghanistan before my exit to Iraq. The deal worth $132 Million United States Dollars and after we have all share the money I later realize $10.5 Million US DOLLARS which is my personal share of the deal, due to my status as a US Sergeant, I cannot be able to move this huge funds to my account in United States to avoid further interrogation or face any kind of probation by the U.S government and I packaged my own share in a briefcase and have sent it to the Red-Cross society, because there is no other way out to keep it with me here, so with the help of a German contact working with the UN here (his office enjoys some immunity) I was able to get the package out to a safe location entirely out of trouble spot. He does not know the real contents of the package, as I have deposited the consignment as a family treasure. Your acceptance to this would encourage me to send further information for us to proceed.



Furthermore, If my offer is of no appeal to you, delete this message and forget I ever contacted you. Do not destroy my career because you do not approve of my proposal. I believe that such opportunities only come ones way once in a lifetime. I cannot let this chance pass me by. For once I find myself in total control of my destiny. This chance won't pass me by. I ask that you do not destroy my chance, if you will not work with me let me know and let me move on with my life but do not destroy me. If you give me positive signals, I will give you the relevant details and initiate this process towards a conclusion. I send you this mail not without a measure of fear as to what the consequences, but I know within me that nothing ventured is nothing gained and that success and riches never come easy or on a platter of gold. Do not betray my confidence.



If you wish to proceed with this, please get back to me.



Regards,

Sgt. Monica L. Brown