by buried under 419s
X-Apparently-To: ; Mon, 04 Mar 2019 12:08:48 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 40.92.68.83
Received-SPF: pass (domain of outlook.com designates 40.92.68.83 as permitted sender)
X-YMailISG: d0n2XpsWLDtpDREKedWu9fHfhQgtBJoUdIp_9M71oNYS6VOa
Jh14UJkMIzn1B4d.lKHA7zHIJ5VaFtNJIMeCUEIXLatkQq_MLUNpp9t0Yvf7
G83UZYo6irmI5O4o76.GIYziLEiNDyvc1oLFAZB0dCM0wlYU5rOjZY26fGNA
xskPvTgiFPEK2k1_EcgHb7hBJjCquwuomXefinxmNC9pivboLUCusG0bNy3r
ZIheRoX3rkQ0KzUczcT1fFB72UYFDPtNFrM.WjMdc2QOUp9d7JGGCWEmBQ5O
SSVPUjS9snByk5sxFDpy.Uin.EGNZwjyIPXSHf260UAc2GwrNFjD8vXt2KFk
.H8x94UguZQT2qpJ4JUwEGJ3hp7z.23aqcYiysrsaaAgPgCopXH3ph6eYu5w
Hx9A4vQhEe9IcYev8OezRs1_NaUSJr20rmDrPQfbSNl8_KH8W8el0bIBISWb
2Nt90mtag6HuDCENN52sjpBmKN4cDQq1kDty9ty98ZKRi1CqEvkvbZmteato
iH1HghIsbnzqyvM5M7HkBnjfn0Ss0Mj_IKXr1.cP3UWYuYmYy2cl8IYF9NbS
LOgNUZQ.5tkJgep79iKVccccLdOF0HmKFYTdmOtf.8CC4vheZDbRUk7gxWDK
OP3U2VXT8SBl7._.8_g3bYYDGPjQx04lrG01wAv3Gwep7EPzMqbUyvdkGwEz
NeR3MX8mHv71IhTZdVnm2OR_j1HUSJ9jlrcSU2EgQP3s.nJf.gpK.7gSMfes
b8RpxsbFqSvb2KhL71MX1S5SmclURuAantks1xeNOj6.SZRk4hZHZd5TlLNA
w8BLGB80gUquKmj7xXap.XQbxOwRTgsf4zASsGqc4r5xg2TzmbqKa0Af7GIt
IWjLy5HIwMNTNkcntpVl37FtmjEbmNj4UgUti5s5ob6bawVAsVJcETz6Fduo
1LI86V6W_K9GjdYBCFErSrGdJ8c71PSEZzJ0uC02jasjHwb0ugnjfHfiWTRL
VM2iZrkdbjLu6aHPD3nH2EQmTtkodX22i9cVlvNCYyYkrfFrw2VR81TxsUGs
bdl_U.TAJC7P8hmN7WZ29u6eHwU50tBXCGwrxpQsN2x_mCDS3oB0_YYoEbDm
yIMC9oVaY8AzPw--
X-Originating-IP: [40.92.68.83]
Authentication-Results: mta4022.mail.ne1.yahoo.com
[email protected]; header.s=selector1; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO EUR02-HE1-obe.outbound.protection.outlook.com) (40.92.68.83)
by mta4022.mail.ne1.yahoo.com with SMTPS; Mon, 04 Mar 2019 12:08:48 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=fmyXryMkSRI83NAUBHnWDtIS80JDI97s1WKRr08cecQ=;
b=TJXFz1Tc7hwjpMZomN/s0eW8bQqb2HwBpGKys7bFuGuLo6Z1Cdq4Ru4+B4rK1+kEB2JzovsS2F0BPdeq5FtrkY5w12+oxwhfibKxlaJQuonsxIrxGswYqeuC3IOm7YHIWOV10GCzV7Ih6M7lrOMNBnlqCquRnni0PcU2J3eS9c4HKL9MYpyIkKZs5fyTFXF7T+0cAAVPNNVeczyXMJarxtxYb1SSvUrILuYSaQY70DG6xsbqnpcBfVOeXVTsWPLKN/W39zamJDKwC5V15BUAslcw65CaOFKf9qjRZdTuUgFrXPkROwv6S8vBxC+kqLNgioJmsJLSoSKDjI4I+lywuA==
Received: from HE1EUR02FT060.eop-EUR02.prod.protection.outlook.com
(10.152.10.53) by HE1EUR02HT126.eop-EUR02.prod.protection.outlook.com
(10.152.10.187) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1643.21; Mon, 4 Mar
2019 12:08:45 +0000
Received: from CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM (10.152.10.54) by
HE1EUR02FT060.mail.protection.outlook.com (10.152.11.208) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1643.21 via Frontend Transport; Mon, 4 Mar 2019 12:08:45 +0000
Received: from CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM
([fe80:
df19
b6b9]) by CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM
([fe80:
df19
b6b9%6]) with mapi id 15.20.1665.019; Mon, 4 Mar 2019
12:08:45 +0000
From: Leslie Blair <[email protected]>
To: "" <>
Subject: From United Nations
Thread-Topic: From United Nations
Thread-Index: AQHU0oLhajP43gj7D0eBM7ZtaSmfrA==
Date: Mon, 4 Mar 2019 12:08:44 +0000
Message-ID: <CWLP123MB2435FE7C5029115A2B0111B487710@CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:A8C31E91647FB0A159D5E16975812243AE6F3C594A7881CACDC2099F2E68151C;UpperCasedChecksum:3E8081C494C4DC5303EE7805AAAEE01AAA599568E3C82C38BB976C6EFC4837B7;SizeAsReceived:6554;Count:41
x-tmn: [/95uTTT7pbMbZxdVxIWIWQ3ommWHIjUE]
x-ms-publictraffictype: Email
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(9118020)(9117020)(2017031322404)(2017031323274)(2017031324274)(1601125500)(1603101475)(1701031045);SRVR:HE1EUR02HT126;
x-ms-traffictypediagnostic: HE1EUR02HT126:
x-microsoft-antispam-message-info: Jkf/gY6olbcYR4UxA2nFH+RHXteV29fEAq5OgoDw4AfdEsK5i7G+ArIz6/iuHXfA
Content-Type: multipart/mixed;
boundary="_004_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 0b16c679-7128-4e09-a725-08d6a09a2679
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2019 12:08:44.9337
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT126
Content-Length: 170343
--_004_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_
Content-Type: multipart/alternative;
boundary="_000_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_
Dear
Greetings to you. Let me go straight to the point. I am Mr. Leslie Blair from Miami Florida, USA. I work with the United Nations headquarters in New York.
I wish to inform you that we are aware of the failures and claims to receive your outstanding payment funds from the imposters you are been doing with in the past.
On this note, I have been instructed by the UN to fly down to Johannesburg South Africa where your new payment will be transferred from. As we speak right now I am now in Johannesburg South Africa right now regarding this payment of yours. Before we proceed I have attached copy of my Staff ID card as a UN official so you know whom you are doing business with with.
Kindly check your attachment for my ID.
You are advised to stop any further communication you have with any body regarding youy fund. Kindly confirm that this message got to you and then we shall proceed with legal documents which I will provide on your behalf free of charge.
Thank you for your time.
Yours Faithfully,
Mr. Leslie Blair
United Nations Office
Foreign payment Department
Return-Path: <[email protected]>
X-YahooFilteredBulk: 40.92.68.83
Received-SPF: pass (domain of outlook.com designates 40.92.68.83 as permitted sender)
X-YMailISG: d0n2XpsWLDtpDREKedWu9fHfhQgtBJoUdIp_9M71oNYS6VOa
Jh14UJkMIzn1B4d.lKHA7zHIJ5VaFtNJIMeCUEIXLatkQq_MLUNpp9t0Yvf7
G83UZYo6irmI5O4o76.GIYziLEiNDyvc1oLFAZB0dCM0wlYU5rOjZY26fGNA
xskPvTgiFPEK2k1_EcgHb7hBJjCquwuomXefinxmNC9pivboLUCusG0bNy3r
ZIheRoX3rkQ0KzUczcT1fFB72UYFDPtNFrM.WjMdc2QOUp9d7JGGCWEmBQ5O
SSVPUjS9snByk5sxFDpy.Uin.EGNZwjyIPXSHf260UAc2GwrNFjD8vXt2KFk
.H8x94UguZQT2qpJ4JUwEGJ3hp7z.23aqcYiysrsaaAgPgCopXH3ph6eYu5w
Hx9A4vQhEe9IcYev8OezRs1_NaUSJr20rmDrPQfbSNl8_KH8W8el0bIBISWb
2Nt90mtag6HuDCENN52sjpBmKN4cDQq1kDty9ty98ZKRi1CqEvkvbZmteato
iH1HghIsbnzqyvM5M7HkBnjfn0Ss0Mj_IKXr1.cP3UWYuYmYy2cl8IYF9NbS
LOgNUZQ.5tkJgep79iKVccccLdOF0HmKFYTdmOtf.8CC4vheZDbRUk7gxWDK
OP3U2VXT8SBl7._.8_g3bYYDGPjQx04lrG01wAv3Gwep7EPzMqbUyvdkGwEz
NeR3MX8mHv71IhTZdVnm2OR_j1HUSJ9jlrcSU2EgQP3s.nJf.gpK.7gSMfes
b8RpxsbFqSvb2KhL71MX1S5SmclURuAantks1xeNOj6.SZRk4hZHZd5TlLNA
w8BLGB80gUquKmj7xXap.XQbxOwRTgsf4zASsGqc4r5xg2TzmbqKa0Af7GIt
IWjLy5HIwMNTNkcntpVl37FtmjEbmNj4UgUti5s5ob6bawVAsVJcETz6Fduo
1LI86V6W_K9GjdYBCFErSrGdJ8c71PSEZzJ0uC02jasjHwb0ugnjfHfiWTRL
VM2iZrkdbjLu6aHPD3nH2EQmTtkodX22i9cVlvNCYyYkrfFrw2VR81TxsUGs
bdl_U.TAJC7P8hmN7WZ29u6eHwU50tBXCGwrxpQsN2x_mCDS3oB0_YYoEbDm
yIMC9oVaY8AzPw--
X-Originating-IP: [40.92.68.83]
Authentication-Results: mta4022.mail.ne1.yahoo.com
[email protected]; header.s=selector1; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO EUR02-HE1-obe.outbound.protection.outlook.com) (40.92.68.83)
by mta4022.mail.ne1.yahoo.com with SMTPS; Mon, 04 Mar 2019 12:08:48 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=fmyXryMkSRI83NAUBHnWDtIS80JDI97s1WKRr08cecQ=;
b=TJXFz1Tc7hwjpMZomN/s0eW8bQqb2HwBpGKys7bFuGuLo6Z1Cdq4Ru4+B4rK1+kEB2JzovsS2F0BPdeq5FtrkY5w12+oxwhfibKxlaJQuonsxIrxGswYqeuC3IOm7YHIWOV10GCzV7Ih6M7lrOMNBnlqCquRnni0PcU2J3eS9c4HKL9MYpyIkKZs5fyTFXF7T+0cAAVPNNVeczyXMJarxtxYb1SSvUrILuYSaQY70DG6xsbqnpcBfVOeXVTsWPLKN/W39zamJDKwC5V15BUAslcw65CaOFKf9qjRZdTuUgFrXPkROwv6S8vBxC+kqLNgioJmsJLSoSKDjI4I+lywuA==
Received: from HE1EUR02FT060.eop-EUR02.prod.protection.outlook.com
(10.152.10.53) by HE1EUR02HT126.eop-EUR02.prod.protection.outlook.com
(10.152.10.187) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1643.21; Mon, 4 Mar
2019 12:08:45 +0000
Received: from CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM (10.152.10.54) by
HE1EUR02FT060.mail.protection.outlook.com (10.152.11.208) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.1643.21 via Frontend Transport; Mon, 4 Mar 2019 12:08:45 +0000
Received: from CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM
([fe80:
([fe80:
12:08:45 +0000
From: Leslie Blair <[email protected]>
To: "" <>
Subject: From United Nations
Thread-Topic: From United Nations
Thread-Index: AQHU0oLhajP43gj7D0eBM7ZtaSmfrA==
Date: Mon, 4 Mar 2019 12:08:44 +0000
Message-ID: <CWLP123MB2435FE7C5029115A2B0111B487710@CWLP123MB2435.GBRP123.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:A8C31E91647FB0A159D5E16975812243AE6F3C594A7881CACDC2099F2E68151C;UpperCasedChecksum:3E8081C494C4DC5303EE7805AAAEE01AAA599568E3C82C38BB976C6EFC4837B7;SizeAsReceived:6554;Count:41
x-tmn: [/95uTTT7pbMbZxdVxIWIWQ3ommWHIjUE]
x-ms-publictraffictype: Email
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(9118020)(9117020)(2017031322404)(2017031323274)(2017031324274)(1601125500)(1603101475)(1701031045);SRVR:HE1EUR02HT126;
x-ms-traffictypediagnostic: HE1EUR02HT126:
x-microsoft-antispam-message-info: Jkf/gY6olbcYR4UxA2nFH+RHXteV29fEAq5OgoDw4AfdEsK5i7G+ArIz6/iuHXfA
Content-Type: multipart/mixed;
boundary="_004_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 0b16c679-7128-4e09-a725-08d6a09a2679
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2019 12:08:44.9337
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT126
Content-Length: 170343
--_004_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_
Content-Type: multipart/alternative;
boundary="_000_CWLP123MB2435FE7C5029115A2B0111B487710CWLP123MB2435GBRP_
Dear
Greetings to you. Let me go straight to the point. I am Mr. Leslie Blair from Miami Florida, USA. I work with the United Nations headquarters in New York.
I wish to inform you that we are aware of the failures and claims to receive your outstanding payment funds from the imposters you are been doing with in the past.
On this note, I have been instructed by the UN to fly down to Johannesburg South Africa where your new payment will be transferred from. As we speak right now I am now in Johannesburg South Africa right now regarding this payment of yours. Before we proceed I have attached copy of my Staff ID card as a UN official so you know whom you are doing business with with.
Kindly check your attachment for my ID.
You are advised to stop any further communication you have with any body regarding youy fund. Kindly confirm that this message got to you and then we shall proceed with legal documents which I will provide on your behalf free of charge.
Thank you for your time.
Yours Faithfully,
Mr. Leslie Blair
United Nations Office
Foreign payment Department
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

