by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id iPYAErHrelojXQAAjbubUg
for <>; Wed, 07 Feb 2018 04:06:09 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 07 Feb 2018 04:06:09 -0800
Received: from mail-oln040092067099.outbound.protection.outlook.com ([40.92.67.99]:45473 helo=EUR02-AM5-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ejOUE-0006C5-AE
for ; Wed, 07 Feb 2018 04:06:09 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=q5I/lAW03ShWd1PPnXAD8zoXYUPKqx4GHIQm9F7boBc=;
b=qCtp+c+WbkkmcqQe/lIsDsLBxZ4T6R1pLx+halAG4kbF4OMxrgprxD9slZ45eCAgF+swnJHLAOiDsXqdCqkku/i7olBwc2KgPHdmCEUrDDj3VNdz28R5z6HdFJxTBWRBTpezRIP+65U+jJkOlVeB4KaRNGnyQHJ2cUaDUzROK19lWkNOMu6+cyuaXqikhnvtJQEkSqoBBEavihFkLTh0g0Iu3OsV2xSpAmKm3ABUXz5quy73TsT8UhoKjolT7K/JxVYeaJFJbk4Dv+VLf7jPwI7Cu0iFxpLwFAK0JkP48dCpreMIM1XdnTKpjAFRFxwN+B4dA3Y20lUNjWfKXc8M+A==
Received: from AM5EUR02FT048.eop-EUR02.prod.protection.outlook.com
(10.152.8.53) by AM5EUR02HT176.eop-EUR02.prod.protection.outlook.com
(10.152.9.153) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.464.8; Wed, 7 Feb
2018 12:05:20 +0000
Received: from DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM (10.152.8.53) by
AM5EUR02FT048.mail.protection.outlook.com (10.152.9.215) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.464.8 via Frontend Transport; Wed, 7 Feb 2018 12:05:19 +0000
Received: from DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM ([10.166.15.16]) by
DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM ([10.166.15.16]) with mapi id
15.20.0464.016; Wed, 7 Feb 2018 12:05:19 +0000
From: Brenda Yvonne Burns <[email protected]>
Thread-Topic: Good Day,
Thread-Index: AQHToAvsbDu0xJiBAkef3adz/Mj7GA==
Date: Wed, 7 Feb 2018 12:05:19 +0000
Message-ID: <DB5PR10MB147951876FF938FD9A05B421C4FC0@DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:DDC88B79C1D799478490CA8DF7AF4F37F94C666F9689C9EED4EE700DE1E6164C;UpperCasedChecksum:6BC224B25C559E74AEA893DDE171DBFA06C539E3E294B30BD5FD773901793079;SizeAsReceived:9112;Count:42
x-tmn: [vRSagGjRSnP3H5H1KpSqZjo3xddV57XX]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;AM5EUR02HT176;6:fjCPb7keWMzuSoaIm8UTQek20Q2pXfdBg393kaqabPrQj30QW+2MelxzUVDZUucJ6NsIAXpSWiRZHN8CZ+cLPPa2ICYBJhhFOhVLGMNmRjVAR44wMIbqCN9OxN5PUnTkljGsTzutYAES4V1oOsPfWPhvEwKBvZfM78HlwatgGa9K/DHqp0sF2yts8w8X9kYOSDuh4iVgt+m9ot4fA9HmQJKI0B4kQGldsKqSgw221DFq0Lp8GV1DKjH1ecrCgrIla2fgsKd0s8iEv6a6zy/ZA9XmBgYxSVZsLrW3elWYM5DEy6+LEw9X0JMuCFhNmlFP8XE6j0+plhXo7BL0iOnn791OO2fV0YnobhLtYMf0JX0=;5:zguul2bes/7Ynr3lYZpOwGW3Scz7VIWrMn76XyCNboEZMIzExCwZcF0nFxFmwrksNcgZNwDBHNDySDVg86y7qE62QQV3fMXKFalNMw4T5GZPPFZhlrydbE19l6LmjVVEdqH+HVH2lrd2oyS09OitPPqdNk6srOqf+vc7CG5ksCo=;24:JCTSoQTGY1Q3gmk/SU4AekCyn0iGNTz7515b34Ocj2kk2JjGbRtyqk6UXxeSaCthRBNli+1ZAJQJ7X/sFzPZRcgbC51xs8zx5nbX54EHO/I=;7:kMkMRxoTnqRoU/L4ww4NjHKZ9g+HbVqdQQ2v9RbPkxJQS34Um9M5CkCsO2pDNBOyPot5RvpyyN0lhZ16nLitZxEY7laBVfAI9fg7YaJ3bXFOqrWq/XDR8LLEmzIV5y4P8KA6c0ORIr+JUjkqZBHiFv3zgqqIqE9SEGe9DGxQ+/RgFI5E2M1px63L2ggNl4yUGuYwW8EbB4XhqcKNNQhwENW0+Whsw5yQCK5CpaeKaSd9tC3Xt0M5eo6CkhU9YT3q
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125374)(1701031045);SRVR:AM5EUR02HT176;
x-ms-exchange-slblob-mailprops: 79Jo46q8hhDSnt3MAazbfe7PqxqE8a0grXcy6fCaC6QpduixUCMzz1OueG09yJ7xaU6jHcVrCctS0ByfeKe36z7G5aEGx+7/+xZR5x6KfN8+j/vL3fC/X8v9NMKcXf846JZysme3K4eserxH/uFmQMk2h5IxqfpD/NQhpVcmZai2rjsNQZO3rNt6YT+AbLsvlbHc1VVfc1mosN7l9qkEH2waaWN6LO1ALo3MXM55IwVqHJP8Swr+rp0ZK0C5fmPBx3oOqaRj1QeEYmTPgOzDJd7/7awpyEEyb8EksnVwxhHV5wJLvPP5uySHNtXiaIRzp80rB5cT5oDEJUF5OAGyjMwnS7mjZebUitY3a/esf0UyYSsmyiNKslRGF/yigM3oUWNU03mPrwxxrHCa0NsM/EDjdOZBZxifk1VwSc1U3StKmh9gCOxdMQTiaH4SdLj7QNfegEf8L+uADkNFDg6Ab6XWL/KdyndG5BjwybgKIBIafb5NDOiU3092CfsfawPqXHCA01dKPMQkH8Bzct4lTQdRnQuixBAItu0mMsbnCckRAwpUxgWyNd+iT9gt31bWWFM2B+eQjyjYP73osLC6fX/CU2eN1yuf7f3LMD7srfVt94t9pv9K3bv2oPIojmbsZceNBI9gEUGflbhFzwUUQVvOpK/SXw3j3TqS3yBMGWdQaMMb3voe0rtQkXcT2Exp
x-ms-traffictypediagnostic: AM5EUR02HT176:
x-ms-office365-filtering-correlation-id: f5ece7bf-13be-46d0-f68c-08d56e230f0f
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:AM5EUR02HT176;BCL:0;PCL:0;RULEID:;SRVR:AM5EUR02HT176;
x-forefront-prvs: 0576145E86
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:AM5EUR02HT176;H:DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/related;
boundary="_004_DB5PR10MB147951876FF938FD9A05B421C4FC0DB5PR10MB1479EURP_";
type="multipart/alternative"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f5ece7bf-13be-46d0-f68c-08d56e230f0f
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2018 12:05:19.7627
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT176
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: [Inline image OWAPstImg807084] [https://ssl.gstatic.com/ui/v1/icons/mai ... eardot.gif]
CONTACT NAME: Brenda Yvonne Burns SWITCH HEAD CHIEF:- Brenda Attention: Beneficiary
, Good Day, [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.67.99 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.67.99 listed in wl.mailspike.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(unarnoldrobertdept[at]outlook.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
X-Spam-Flag: YES
Subject: ***SPAM*** Good Day,
CONTACT NAME: Brenda Yvonne Burns
SWITCH HEAD CHIEF:- Brenda
Attention: Beneficiary ,
Good Day,
I wish to let you know that your fund is ready
to be released to you and it was sent from
Nigeria because we instructed them to release
it to us here in the ACH New York USA or face
serious sanction and they released only 750,000
British Pounds Sterling.
We are contacting you to clear your fund for the last time or
lose it forever. This is the last warning.
NOTE: For you to clear your fund from us you MUST
obtain GTRN, (WHICH IS $68 ONLY) without it there is
no way you will receive your fund and that is why you
have never received it because no one told you about
the importance of GTRN.
ALSO NOTE: Please, do not respond to this message if you
are not ready to Obtain the GTRN to clear your fund
without delay.
2. Do not ask for deduction because we are not here for jokes.
We will only welcome your response if you are ready to clear your fund and have in
mind that we are about to place EMBARGO on all unclaimed funds and revert it to the
country's treasury. We will only remit your fund into your bank account same day you
obtain the GTRN . That is a guarantee.
Always,
Brenda.
Delivered-To:
Received: from
by with LMTP id iPYAErHrelojXQAAjbubUg
for <>; Wed, 07 Feb 2018 04:06:09 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 07 Feb 2018 04:06:09 -0800
Received: from mail-oln040092067099.outbound.protection.outlook.com ([40.92.67.99]:45473 helo=EUR02-AM5-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ejOUE-0006C5-AE
for ; Wed, 07 Feb 2018 04:06:09 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=q5I/lAW03ShWd1PPnXAD8zoXYUPKqx4GHIQm9F7boBc=;
b=qCtp+c+WbkkmcqQe/lIsDsLBxZ4T6R1pLx+halAG4kbF4OMxrgprxD9slZ45eCAgF+swnJHLAOiDsXqdCqkku/i7olBwc2KgPHdmCEUrDDj3VNdz28R5z6HdFJxTBWRBTpezRIP+65U+jJkOlVeB4KaRNGnyQHJ2cUaDUzROK19lWkNOMu6+cyuaXqikhnvtJQEkSqoBBEavihFkLTh0g0Iu3OsV2xSpAmKm3ABUXz5quy73TsT8UhoKjolT7K/JxVYeaJFJbk4Dv+VLf7jPwI7Cu0iFxpLwFAK0JkP48dCpreMIM1XdnTKpjAFRFxwN+B4dA3Y20lUNjWfKXc8M+A==
Received: from AM5EUR02FT048.eop-EUR02.prod.protection.outlook.com
(10.152.8.53) by AM5EUR02HT176.eop-EUR02.prod.protection.outlook.com
(10.152.9.153) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.464.8; Wed, 7 Feb
2018 12:05:20 +0000
Received: from DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM (10.152.8.53) by
AM5EUR02FT048.mail.protection.outlook.com (10.152.9.215) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.464.8 via Frontend Transport; Wed, 7 Feb 2018 12:05:19 +0000
Received: from DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM ([10.166.15.16]) by
DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM ([10.166.15.16]) with mapi id
15.20.0464.016; Wed, 7 Feb 2018 12:05:19 +0000
From: Brenda Yvonne Burns <[email protected]>
Thread-Topic: Good Day,
Thread-Index: AQHToAvsbDu0xJiBAkef3adz/Mj7GA==
Date: Wed, 7 Feb 2018 12:05:19 +0000
Message-ID: <DB5PR10MB147951876FF938FD9A05B421C4FC0@DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:DDC88B79C1D799478490CA8DF7AF4F37F94C666F9689C9EED4EE700DE1E6164C;UpperCasedChecksum:6BC224B25C559E74AEA893DDE171DBFA06C539E3E294B30BD5FD773901793079;SizeAsReceived:9112;Count:42
x-tmn: [vRSagGjRSnP3H5H1KpSqZjo3xddV57XX]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;AM5EUR02HT176;6:fjCPb7keWMzuSoaIm8UTQek20Q2pXfdBg393kaqabPrQj30QW+2MelxzUVDZUucJ6NsIAXpSWiRZHN8CZ+cLPPa2ICYBJhhFOhVLGMNmRjVAR44wMIbqCN9OxN5PUnTkljGsTzutYAES4V1oOsPfWPhvEwKBvZfM78HlwatgGa9K/DHqp0sF2yts8w8X9kYOSDuh4iVgt+m9ot4fA9HmQJKI0B4kQGldsKqSgw221DFq0Lp8GV1DKjH1ecrCgrIla2fgsKd0s8iEv6a6zy/ZA9XmBgYxSVZsLrW3elWYM5DEy6+LEw9X0JMuCFhNmlFP8XE6j0+plhXo7BL0iOnn791OO2fV0YnobhLtYMf0JX0=;5:zguul2bes/7Ynr3lYZpOwGW3Scz7VIWrMn76XyCNboEZMIzExCwZcF0nFxFmwrksNcgZNwDBHNDySDVg86y7qE62QQV3fMXKFalNMw4T5GZPPFZhlrydbE19l6LmjVVEdqH+HVH2lrd2oyS09OitPPqdNk6srOqf+vc7CG5ksCo=;24:JCTSoQTGY1Q3gmk/SU4AekCyn0iGNTz7515b34Ocj2kk2JjGbRtyqk6UXxeSaCthRBNli+1ZAJQJ7X/sFzPZRcgbC51xs8zx5nbX54EHO/I=;7:kMkMRxoTnqRoU/L4ww4NjHKZ9g+HbVqdQQ2v9RbPkxJQS34Um9M5CkCsO2pDNBOyPot5RvpyyN0lhZ16nLitZxEY7laBVfAI9fg7YaJ3bXFOqrWq/XDR8LLEmzIV5y4P8KA6c0ORIr+JUjkqZBHiFv3zgqqIqE9SEGe9DGxQ+/RgFI5E2M1px63L2ggNl4yUGuYwW8EbB4XhqcKNNQhwENW0+Whsw5yQCK5CpaeKaSd9tC3Xt0M5eo6CkhU9YT3q
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125374)(1701031045);SRVR:AM5EUR02HT176;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: AM5EUR02HT176:
x-ms-office365-filtering-correlation-id: f5ece7bf-13be-46d0-f68c-08d56e230f0f
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:AM5EUR02HT176;BCL:0;PCL:0;RULEID:;SRVR:AM5EUR02HT176;
x-forefront-prvs: 0576145E86
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:AM5EUR02HT176;H:DB5PR10MB1479.EURPRD10.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/related;
boundary="_004_DB5PR10MB147951876FF938FD9A05B421C4FC0DB5PR10MB1479EURP_";
type="multipart/alternative"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f5ece7bf-13be-46d0-f68c-08d56e230f0f
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2018 12:05:19.7627
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT176
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: [Inline image OWAPstImg807084] [https://ssl.gstatic.com/ui/v1/icons/mai ... eardot.gif]
CONTACT NAME: Brenda Yvonne Burns SWITCH HEAD CHIEF:- Brenda Attention: Beneficiary
, Good Day, [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.67.99 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.67.99 listed in wl.mailspike.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(unarnoldrobertdept[at]outlook.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
X-Spam-Flag: YES
Subject: ***SPAM*** Good Day,
CONTACT NAME: Brenda Yvonne Burns
SWITCH HEAD CHIEF:- Brenda
Attention: Beneficiary ,
Good Day,
I wish to let you know that your fund is ready
to be released to you and it was sent from
Nigeria because we instructed them to release
it to us here in the ACH New York USA or face
serious sanction and they released only 750,000
British Pounds Sterling.
We are contacting you to clear your fund for the last time or
lose it forever. This is the last warning.
NOTE: For you to clear your fund from us you MUST
obtain GTRN, (WHICH IS $68 ONLY) without it there is
no way you will receive your fund and that is why you
have never received it because no one told you about
the importance of GTRN.
ALSO NOTE: Please, do not respond to this message if you
are not ready to Obtain the GTRN to clear your fund
without delay.
2. Do not ask for deduction because we are not here for jokes.
We will only welcome your response if you are ready to clear your fund and have in
mind that we are about to place EMBARGO on all unclaimed funds and revert it to the
country's treasury. We will only remit your fund into your bank account same day you
obtain the GTRN . That is a guarantee.
Always,
Brenda.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
