by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GK/qFrVxklr0RwAAjbubUg
for <>; Sun, 25 Feb 2018 00:20:05 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 25 Feb 2018 00:20:05 -0800
Received: from mail-oln040092068053.outbound.protection.outlook.com ([40.92.68.53]:28041 helo=EUR02-HE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eprXP-0004mk-Hg
for ; Sun, 25 Feb 2018 00:20:05 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=mQijJX7qs71L5ooJ4cR1kM5fVyNhyK5npjF/z6eWHoQ=;
b=Oqj2A18g5DZFhhLHB75J1cBYIQnUXaDmojy9AxZ4gy0GPEl6DZL6BhKTttz4fq13SNGMzyas/9VZjzj7/5nh4l9STEsnRMgWnrz27UdXHw6GN5c6bbgseI/Xww0bRoAyFd9YgEEY2SoeACXyPn0e17ex3QZQWDiRzrwWjx1XyxcLKpqR8fIN60xydH3Oh+ZemBB3und6IHdVUcvGyWV5NpzzrFtazIkR4lhN3hzVLevz1mwbSQipdi4F22HHQcnaAUEJkqKRvbVYuGXNHXQ+FrqmTDL6YjVz8ci0IvxkIgAuB7T5CSi83OdmQVMn8luCle/HFGQ/imihIVzgkA7sZA==
Received: from VE1EUR02FT054.eop-EUR02.prod.protection.outlook.com
(10.152.12.55) by VE1EUR02HT158.eop-EUR02.prod.protection.outlook.com
(10.152.13.229) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.485.12; Sun, 25
Feb 2018 08:19:16 +0000
Received: from DB6PR0301MB2166.eurprd03.prod.outlook.com (10.152.12.54) by
VE1EUR02FT054.mail.protection.outlook.com (10.152.13.218) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.485.12 via Frontend Transport; Sun, 25 Feb 2018 08:19:16 +0000
Received: from DB6PR0301MB2166.eurprd03.prod.outlook.com
([fe80::91d0:f9f5
9ce0]) by DB6PR0301MB2166.eurprd03.prod.outlook.com
([fe80::91d0:f9f59ce0%17]) with mapi id 15.20.0527.021; Sun, 25 Feb
2018 08:19:16 +0000
From: Rev Ben Richards <[email protected]>
Thread-Topic: CONGRATULATION"""
Thread-Index: AQHTrhEyLqKZU1xrwkKP0Hln/dh2Og==
Date: Sun, 25 Feb 2018 08:19:15 +0000
Message-ID: <DB6PR0301MB21666764FF873CCFBEE2F5D193C20@DB6PR0301MB2166.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:0A35B5B406C5A754CD125EE62028187DB4276CFE6B288D1D47B4CE2C7FB754DE;UpperCasedChecksum:C65379ADD18D3CB8415589C5D5260EF045E9C1690CF0B43D46B3E4504DB4036B;SizeAsReceived:14121;Count:42
x-tmn: [l8w01568SF21R/bXafdiVZRL25TABzpExOpbboCqVrk=]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;VE1EUR02HT158;6:7W43tSTY11cfQG77F4Ef2SEHcinAHqnZLULPS+oiD5jUTDYPmBQJEN01tYSSDBip/FwcVgiscrAocLRcp7yS90AzpdtF5SiQl/uBOryqpukEyByZo7WORljWOAjlPpLpbr4qCpke1WZZ32u/YrN/MNZHCE2vYCZpmm6hxYBKtvcBax+Fv9BKOdtvE8fewPyq6VKBfUitV++7ghwe/LJKagLTHbdVyn7K1UbecWsWnSVrRx78VSYv8jMPEe4vtVtHHQ15jBhv+6VFh9vN98YRsuMdTp+69E0/gc50YVWQp/oAj0hQKfkTw5n7YF7DAO4/+lsdW4VSKpqy3+U9+uHtQo3ajEdlo1ImOFXv4X166vM=;5:aEGwh07mp2fJq1oYm0lUrzCv4o1j9eWD+iJWQiolNiDEOFji8q+b1JJThjXb3R4dgjzay8lop6ER4qBU9MgKLRXvPd8Arw83ZqfyeM+2ym8cO1VXYcKixWlnDGQdWYR8M4y36pdVxqDEgNR838rKfjBmiLnRC5whMd3JkznAp7E=;24:FinagZxVGn3nyZoCV1zQccFr8vddMBUv0PfBYrunuv/arDcgL6IgptRa7fZi1dSU7gtQGr2LyNOzGk11CCWNa9QKnD3v/HSxcktZt8IrROY=;7:/ulgYT06t4LpMOgy+buNKf1DpYdrj7F4qqmgRP++MXpG9rvRRQ0t494VFmj5MO7fZGBHlRfG/3YHh5OL3itKOjuQOjNWrcboA2ksk2YydI1U8BVtIo18tckXIRXSrwcAa+Np19B+oK4meDJxLEx9GZnWlcDEHKZfzIXhnQ5zQnQoN2VCMF78g8kpuazzN1D5d3CLE7upK/G65s8j6Mx6wa10rg0jdZRhBivdGD0+c7RBM7Yhm+mISaWIau+KQVs8
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1601125374)(1603101448)(1701031045);SRVR:VE1EUR02HT158;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: VE1EUR02HT158:
x-ms-office365-filtering-correlation-id: beef5b63-1e1b-4172-41a0-08d57c2875f3
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:VE1EUR02HT158;BCL:0;PCL:0;RULEID:;SRVR:VE1EUR02HT158;
x-forefront-prvs: 05947791E4
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:VE1EUR02HT158;H:DB6PR0301MB2166.eurprd03.prod.outlook.com;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_DB6PR0301MB21666764FF873CCFBEE2F5D193C20DB6PR0301MB2166_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: beef5b63-1e1b-4172-41a0-08d57c2875f3
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2018 08:19:15.9549
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT158
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Information Technology Partners In conjunction with; United
Nations Global Poverty Eradication Program / Coca-Cola Attn: Winner, We are
pleased to announce to you that your email address were among those selected
for the month of January, 2018 IT PARTNERS LOTTO Promo.Be informed that selections
were made through electronic balloting System without the winner applying
since your email address already exists in the data base of the information
technology network which you belong. This lotto promo is sponsored by conglomerate
of information technology network partners, Coca-Cola and United Nations
Global Poverty Eradication Program as part of their social responsibility
aimed at encouraging internet users. The following particulars are attached
to your prize winning:- [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MARKETING_PARTNERS BODY: Claims you registered with a partner
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.68.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.68.53 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(benrichards200[at]outlook.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (benrichards200[at]outlook.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.1 MONEY_FORM Lots of money if you fill out a form
2.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CONGRATULATION"""
Information Technology Partners
In conjunction with;
United Nations Global Poverty Eradication Program / Coca-Cola
Attn: Winner,
We are pleased to announce to you that your email address were among those selected
for the month of January, 2018 IT PARTNERS LOTTO Promo.Be informed that selections
were made through electronic balloting System without the winner applying since your
email address already exists in the data base of the information technology network
which you belong. This lotto promo is sponsored by conglomerate of information
technology network partners, Coca-Cola and United Nations Global Poverty
Eradication Program as part of their social responsibility aimed at encouraging
internet users. The following particulars are attached to your prize winning:-
Winning numbers: 23-32-87-99-26-10
E-mail ticket number: ITNP754/20/33
Lotto code number: ITNPI09622SP
File Ref number: ITNP/941JUD/016
Note that it is important you quote the winning particulars to your prize winning
while contacting our claims department in the person of
Contact Person: Mr. William George
Email address ;( [email protected] ).
Your Full Name;
Country of Origin;
Contact Address;
Telephone Number;
Congratulation once more!
Mr. Benson Richardson
Event Manager
IT Partners
Delivered-To:
Received: from
by with LMTP id GK/qFrVxklr0RwAAjbubUg
for <>; Sun, 25 Feb 2018 00:20:05 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 25 Feb 2018 00:20:05 -0800
Received: from mail-oln040092068053.outbound.protection.outlook.com ([40.92.68.53]:28041 helo=EUR02-HE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eprXP-0004mk-Hg
for ; Sun, 25 Feb 2018 00:20:05 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=mQijJX7qs71L5ooJ4cR1kM5fVyNhyK5npjF/z6eWHoQ=;
b=Oqj2A18g5DZFhhLHB75J1cBYIQnUXaDmojy9AxZ4gy0GPEl6DZL6BhKTttz4fq13SNGMzyas/9VZjzj7/5nh4l9STEsnRMgWnrz27UdXHw6GN5c6bbgseI/Xww0bRoAyFd9YgEEY2SoeACXyPn0e17ex3QZQWDiRzrwWjx1XyxcLKpqR8fIN60xydH3Oh+ZemBB3und6IHdVUcvGyWV5NpzzrFtazIkR4lhN3hzVLevz1mwbSQipdi4F22HHQcnaAUEJkqKRvbVYuGXNHXQ+FrqmTDL6YjVz8ci0IvxkIgAuB7T5CSi83OdmQVMn8luCle/HFGQ/imihIVzgkA7sZA==
Received: from VE1EUR02FT054.eop-EUR02.prod.protection.outlook.com
(10.152.12.55) by VE1EUR02HT158.eop-EUR02.prod.protection.outlook.com
(10.152.13.229) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.485.12; Sun, 25
Feb 2018 08:19:16 +0000
Received: from DB6PR0301MB2166.eurprd03.prod.outlook.com (10.152.12.54) by
VE1EUR02FT054.mail.protection.outlook.com (10.152.13.218) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.485.12 via Frontend Transport; Sun, 25 Feb 2018 08:19:16 +0000
Received: from DB6PR0301MB2166.eurprd03.prod.outlook.com
([fe80::91d0:f9f5
9ce0]) by DB6PR0301MB2166.eurprd03.prod.outlook.com([fe80::91d0:f9f5
9ce0%17]) with mapi id 15.20.0527.021; Sun, 25 Feb2018 08:19:16 +0000
From: Rev Ben Richards <[email protected]>
Thread-Topic: CONGRATULATION"""
Thread-Index: AQHTrhEyLqKZU1xrwkKP0Hln/dh2Og==
Date: Sun, 25 Feb 2018 08:19:15 +0000
Message-ID: <DB6PR0301MB21666764FF873CCFBEE2F5D193C20@DB6PR0301MB2166.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:0A35B5B406C5A754CD125EE62028187DB4276CFE6B288D1D47B4CE2C7FB754DE;UpperCasedChecksum:C65379ADD18D3CB8415589C5D5260EF045E9C1690CF0B43D46B3E4504DB4036B;SizeAsReceived:14121;Count:42
x-tmn: [l8w01568SF21R/bXafdiVZRL25TABzpExOpbboCqVrk=]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;VE1EUR02HT158;6:7W43tSTY11cfQG77F4Ef2SEHcinAHqnZLULPS+oiD5jUTDYPmBQJEN01tYSSDBip/FwcVgiscrAocLRcp7yS90AzpdtF5SiQl/uBOryqpukEyByZo7WORljWOAjlPpLpbr4qCpke1WZZ32u/YrN/MNZHCE2vYCZpmm6hxYBKtvcBax+Fv9BKOdtvE8fewPyq6VKBfUitV++7ghwe/LJKagLTHbdVyn7K1UbecWsWnSVrRx78VSYv8jMPEe4vtVtHHQ15jBhv+6VFh9vN98YRsuMdTp+69E0/gc50YVWQp/oAj0hQKfkTw5n7YF7DAO4/+lsdW4VSKpqy3+U9+uHtQo3ajEdlo1ImOFXv4X166vM=;5:aEGwh07mp2fJq1oYm0lUrzCv4o1j9eWD+iJWQiolNiDEOFji8q+b1JJThjXb3R4dgjzay8lop6ER4qBU9MgKLRXvPd8Arw83ZqfyeM+2ym8cO1VXYcKixWlnDGQdWYR8M4y36pdVxqDEgNR838rKfjBmiLnRC5whMd3JkznAp7E=;24:FinagZxVGn3nyZoCV1zQccFr8vddMBUv0PfBYrunuv/arDcgL6IgptRa7fZi1dSU7gtQGr2LyNOzGk11CCWNa9QKnD3v/HSxcktZt8IrROY=;7:/ulgYT06t4LpMOgy+buNKf1DpYdrj7F4qqmgRP++MXpG9rvRRQ0t494VFmj5MO7fZGBHlRfG/3YHh5OL3itKOjuQOjNWrcboA2ksk2YydI1U8BVtIo18tckXIRXSrwcAa+Np19B+oK4meDJxLEx9GZnWlcDEHKZfzIXhnQ5zQnQoN2VCMF78g8kpuazzN1D5d3CLE7upK/G65s8j6Mx6wa10rg0jdZRhBivdGD0+c7RBM7Yhm+mISaWIau+KQVs8
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1601125374)(1603101448)(1701031045);SRVR:VE1EUR02HT158;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: VE1EUR02HT158:
x-ms-office365-filtering-correlation-id: beef5b63-1e1b-4172-41a0-08d57c2875f3
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:VE1EUR02HT158;BCL:0;PCL:0;RULEID:;SRVR:VE1EUR02HT158;
x-forefront-prvs: 05947791E4
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:VE1EUR02HT158;H:DB6PR0301MB2166.eurprd03.prod.outlook.com;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_DB6PR0301MB21666764FF873CCFBEE2F5D193C20DB6PR0301MB2166_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: beef5b63-1e1b-4172-41a0-08d57c2875f3
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2018 08:19:15.9549
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT158
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Information Technology Partners In conjunction with; United
Nations Global Poverty Eradication Program / Coca-Cola Attn: Winner, We are
pleased to announce to you that your email address were among those selected
for the month of January, 2018 IT PARTNERS LOTTO Promo.Be informed that selections
were made through electronic balloting System without the winner applying
since your email address already exists in the data base of the information
technology network which you belong. This lotto promo is sponsored by conglomerate
of information technology network partners, Coca-Cola and United Nations
Global Poverty Eradication Program as part of their social responsibility
aimed at encouraging internet users. The following particulars are attached
to your prize winning:- [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MARKETING_PARTNERS BODY: Claims you registered with a partner
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.68.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.68.53 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(benrichards200[at]outlook.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (benrichards200[at]outlook.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.1 MONEY_FORM Lots of money if you fill out a form
2.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CONGRATULATION"""
Information Technology Partners
In conjunction with;
United Nations Global Poverty Eradication Program / Coca-Cola
Attn: Winner,
We are pleased to announce to you that your email address were among those selected
for the month of January, 2018 IT PARTNERS LOTTO Promo.Be informed that selections
were made through electronic balloting System without the winner applying since your
email address already exists in the data base of the information technology network
which you belong. This lotto promo is sponsored by conglomerate of information
technology network partners, Coca-Cola and United Nations Global Poverty
Eradication Program as part of their social responsibility aimed at encouraging
internet users. The following particulars are attached to your prize winning:-
Winning numbers: 23-32-87-99-26-10
E-mail ticket number: ITNP754/20/33
Lotto code number: ITNPI09622SP
File Ref number: ITNP/941JUD/016
Note that it is important you quote the winning particulars to your prize winning
while contacting our claims department in the person of
Contact Person: Mr. William George
Email address ;( [email protected] ).
Your Full Name;
Country of Origin;
Contact Address;
Telephone Number;
Congratulation once more!
Mr. Benson Richardson
Event Manager
IT Partners
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
