+ Reply to Thread
Results 1 to 4 of 4

  1. #1
    Join Date
    Feb 2016
    Posts
    970

    Agent Paul Patrick - rdsexpresscourierdelivery@yandex.com

    * NAME OF BANK: Wells Fargo
    * BANK ADDRESS: 2525 Memorial Parkway, Northwest Huntsville, AL 35810, USA
    * NAME OF ACCOUNT: checking
    * ACCOUNT NAME: SELENA N PENNY
    * ACCOUNT HOLDER ADDRESS: 2090 READY SECTION ROAD, TONEY ALABAMA 35773, USA
    * ACCOUNT NUMBER: 1251212641
    * SWIFT CODE: WFBIUS6S
    * ROUTE NUMBERS: 121000248
    * AMOUNT TO TRANSFER: $280 USD



    Date: Tue, 02 Feb 2016 22:38:13 +0100
    Content-Transfer-Encoding: base64
    Content-Type: text/html; charset="utf-8"
    Return-Path: rdsexpresscourierdelivery@yandex.com
    X-OriginalArrivalTime: 02 Feb 2016 21:38:19.0319 (UTC) FILETIME=[08550470:01D15E02]
    X-MS-Exchange-Organization-Network-Message-Id: aea0ef5b-64af-4b96-7d3c-08d32c192d27
    X-EOPAttributedMessage: 0
    X-MS-Exchange-Organization-MessageDirectionality: Incoming
    CMM-sender-ip: 77.88.31.22
    CMM-sending-ip: 77.88.31.22
    CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 77.88.31.22)
    smtp.mailfrom=rdsexpresscourierdelivery@yandex.com ; dkim=pass
    header.d=yandex.com; x-hmca=pass
    header.id=rdsexpresscourierdelivery@yandex.com
    CMM-X-SID-PRA: rdsexpresscourierdelivery@yandex.com
    CMM-X-AUTH-Result: PASS
    CMM-X-SID-Result: PASS
    CMM-X-Message-Status: n:n
    CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
    CMM-X-Message-Info: NhFq/7gR1vTyStDne6aWlPWgc1u2rcw32MWD1RE8GUQfVQMz7i1RYIY SbX3W5/yqhEmkHC4807F6e9/zNqribYZ2m0JnzRwLgaR/NDBF5BAcHUgczR5TEUVsKzKAoAsYoRuZ0UesfGTsi+jwhJlApi m08kQokYBv5+tyMKz69SGt9+6EU/xWalzGJrjqFGF9h95yhktx9ys/MrY8aDXsVex3m1hZ42IuTFZHcswu5Rjd8D7ClcgfvA==
    X-MS-Exchange-Organization-PCL: 2
    X-Forefront-Antispam-Report: CIP:25.152.80.57;CTRY:GB;IPV:NLI;EFV:NLI;SFV:NSPM; SFS:(98900002);DIR:INB;SFP:;SCL:1;SRVR:CY1PR13MB05 19;H:COL004-MC5F4.hotmail.com;FPR:;SPF:None;MLV:spm;LANG:en;
    X-Microsoft-Exchange-Diagnostics:
    1;CY1PR13MB0519;2:GfEGwrpT8ibWy8wHSXNhCcBQFYsjYAkB HzdDEddCBvaJ5mIqtE34twln8d73BEBuRw8RrjiuDAGS6XneQX R7cq4YUNnnuEcIkrNe+UStw3yJk2meTNB46kf0s4VPZma7oLhf xmIM4HyA9Q9C6HfGQo9FoN7Z9BEbcVWU4rIkll1rINefzR35pN uw93r0BUbN;3:nt+wYBG7EAys830MRF+Yyme5QAmQiTku0X7FC 6h4pqsNyUOQKYZhwhkJiJ3tv6zpn2E8UZqMDGLUM76riDlmJEC 1zzyMPQhXgOJqJqMAn0USZHRtGXHnOqD1cUFUsr93Qv2BqW4L9 7N8Snryh/2QWpjYrGhS8yVAHvCYwCiA6Fj8RO6/ZJhuVTNa5KHbEnKDjqKtwHm4AYqsAlWtSzYIjQ==;25:2lcjFH 6nwqVy8QA11o6IiECatJ6ihE7/9BpdLZhihyPzwC/KNsWsy8MrNnyoI/kJBzoqvJTiQ8R8wMvTbfwVstaXtotfqir2wnzz/MQ6PqbphayCBR/xFwSNYxQtMJ1rdFSPHY+P0kVre4RMNkVR5+N27HfTIYdl2oDag y/OYe1o8GnfynCPa9YgtOiJ0MZbT00pSssQe9Uddd80BZO0042QK cvdSzWohxN6cIHnSmpROl2B6H2KJdQc7QNFCoB2;4:1Klldig3 XPjKkP3R1FKt3PdenUOeMN9U8AE8X/G8LaiAZDoV3fPJgwHUXDBNq3B9j2ui0guBfWRD1o63STcW+Saa lGjjR5TXULKKcyGL1ZCS8BkLEMo7nblCzUoJJTVk6S00F8lLXY rvR46LXfej0HD51ar51nhRx74lGzpVVMoHAC1gi0tkN28IdNVW MVjWnRdHrI3vsCsinMSBRsO2wnQWHWnDe9vLCBe5ZYdimvsCTy 104QTmlg3MYRr0bsS6kcNjUej/Zngr+gRXhLbkmg==
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501001);SRVR:CY1PR13MB0519 ;
    X-MS-Office365-Filtering-Correlation-Id: aea0ef5b-64af-4b96-7d3c-08d32c192d27
    X-MS-Exchange-Organization-AVStamp-Service: 1.0
    X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015046);SRVR:CY1PR13MB0519;B CL:0;PCL:0;RULEID:;SRVR:CY1PR13MB0519;
    X-MS-Exchange-Organization-SCL: 1
    X-Microsoft-Exchange-Diagnostics: 1;CY1PR13MB0519;23:t0Xz6sCAlR6qk6xqhp02mcpKQ07Kzb+ qGnm8ghUGaPj9lxTIbiSe4MqAZm4hu5aqsUu/uEUJduND+IgIMOU37h9GCO5LMyb7ppU+MqFBk0GrjJT1BkDidF iKoj/lmY41CnFG5d415dGrnvW+YNI0/j/eRpN+gj6/HWQHpPdIJreUqEODOJCPbOUxKIuKYfPL;5:lUXr5SSiw16x3Xx 9xy941yLoOK9rs5m8+1uzMxYYCTnpP112h5byau7kgblk1RI4j/1fVwTJ1D40rnJL+hM8Zg0abI/8WSVASm/Q2J9WnKmWtbYQDxBxhCIxsXgS/n7M7/XyUwAv8VLLy8u0+/DZ7w==;24:qlqfROADQ8vsoxqM7foYeB7Ne7ldEGtMIn09QxTe NhkMwPP8qLkmKjIEYjW4Riz1ZnGEwPXnsz6z0DFlK+E31l70oo LXEZmg1Dy2qnvgYiM=
    SpamDiagnosticOutput: 1:23
    SpamDiagnosticMetadata: NSPM
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Feb 2016 21:38:22.7426
    (UTC)
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR13MB0519
    X-MS-Exchange-Organization-AuthSource: CO1NAM03FT019.eop-NAM03.prod.protection.outlook.com
    X-MS-Exchange-Organization-AuthAs: Anonymous
    X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7246702
    MIME-Version: 1.0

    Thanks for your email, also we really sorry for the late respond and we have spoken with our representative in the United State and she have promise to receive your payment via Bank to Bank transfer, below is the required banking details please do ensure to send us the transfer scan copy of the transfer receipt for more and proper verification.
    BANKING DETAILS FOR THE TRANSFER OF THE $280 USD
    * NAME OF BANK: Wells Fargo
    * BANK ADDRESS: 2525 Memorial Parkway, Northwest Huntsville, AL 35810, USA
    * NAME OF ACCOUNT: checking
    * ACCOUNT NAME: SELENA N PENNY
    * ACCOUNT HOLDER ADDRESS: 2090 READY SECTION ROAD, TONEY ALABAMA 35773, USA
    * ACCOUNT NUMBER: 1251212641
    * SWIFT CODE: WFBIUS6S
    * ROUTE NUMBERS: 121000248
    * AMOUNT TO TRANSFER: $280 USD

    Please provide us with the transfer payment scan copy immediately payment is done by you and also provide us with a scan copy of your driver's license or passport for proper identification when we are delivering your package to you.

    Courier Delivery Terms & Policy: We do not operate Cash on Delivery, our Service rendered on Payment before Delivery. Your package has insured which makes it difficult to deduct any fees out from your package. Thanks for using RDS Express Courier & Cargo Delivery Service for your package delivery, we are meant to serve you better in future, we await your favorable response soonest.

    Best Regards,
    Agent Paul Patrick

    THIS E-MAIL IS CONFIDENTIAL: If you have received this e-mail in error, please notify us by return e-mail and delete the document. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful.UNESCO is not liable for the proper and complete transmission of the information contained in this communication or for any delay in its receipt.

    Received: from SN1PR13MB0527.namprd13.prod.outlook.com (10.164.27.149) by
    DM3PR13MB0521.namprd13.prod.outlook.com (10.164.8.19) with Microsoft SMTP
    Server (TLS) id 15.1.396.8 via Mailbox Transport; Sun, 31 Jan 2016 04:31:58
    +0000
    Received: from BY1PR13CA0003.namprd13.prod.outlook.com (10.162.107.141) by
    SN1PR13MB0527.namprd13.prod.outlook.com (10.164.27.149) with Microsoft SMTP
    Server (TLS) id 15.1.403.10; Sun, 31 Jan 2016 04:31:58 +0000
    Received: from DM3NAM03FT016.eop-NAM03.prod.protection.outlook.com
    (2a01:111:f400:7e49::202) by BY1PR13CA0003.outlook.office365.com
    (2a01:111:e400:5225::13) with Microsoft SMTP Server (TLS) id 15.1.403.10 via
    Frontend Transport; Sun, 31 Jan 2016 04:31:58 +0000
    Received: from SNT004-MC4F54.hotmail.com (10.152.82.56) by
    DM3NAM03FT016.mail.protection.outlook.com (10.152.82.198) with Microsoft SMTP
    Server (TLS) id 15.1.390.12 via Frontend Transport; Sun, 31 Jan 2016 04:31:57
    +0000
    Received: from forward13p.cmail.yandex.net ([87.250.241.140]) by SNT004-MC4F54.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
    Sat, 30 Jan 2016 20:31:57 -0800
    Received: from web15g.yandex.ru (web15g.yandex.ru [95.108.252.115])
    by forward13p.cmail.yandex.net (Yandex) with ESMTP id A0E18213E7
    for <>; Sun, 31 Jan 2016 07:31:55 +0300 (MSK)
    Received: from 127.0.0.1 (localhost [127.0.0.1])
    by web15g.yandex.ru (Yandex) with ESMTP id 3646F3C41390;
    Sun, 31 Jan 2016 07:31:55 +0300 (MSK)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail;
    t=1454214715; bh=E7CGiGesUvWr4uRM4SU3qU0yW+gg3x+EYstWnQnElDY=;
    h=From:To:Subject:Date;
    b=IqQ1Zp4lLHliSJh6UcqFrS8DJGdSc6XT/avoUvEzunCXcXlzytIiQNzQRe//3OFI6
    gcbZgcC3ty8ds+h4XltSGw9H2Q78WJnga8m2xkuPtNAj5KlbOf QgjzfeuAteZgTuW5
    2ln96GXQX+Nz15Dl6TnxdVKH37jpcENAJdhhzHrM=
    Received: by web15g.yandex.ru with HTTP;
    Sun, 31 Jan 2016 07:31:53 +0300
    From: RDS Express Courier & Cargo Delivery Service
    To:
    Subject: Treat very urgently as we also remind you that your Check is ready.
    Message-ID: <1451041454214713@web15g.yandex.ru>
    X-Mailer: Yamail [ http://yandex.ru ] 5.0



    Date: Sun, 31 Jan 2016 05:31:53 +0100
    Content-Transfer-Encoding: base64
    Content-Type: text/html
    Return-Path: rdsexpresscourierdelivery@yandex.com
    X-OriginalArrivalTime: 31 Jan 2016 04:31:57.0558 (UTC) FILETIME=[51EA8160:01D15BE0]
    X-MS-Exchange-Organization-Network-Message-Id: 1b34ea76-f373-47b5-3406-08d329f774c3
    X-EOPAttributedMessage: 0
    X-MS-Exchange-Organization-MessageDirectionality: Incoming
    CMM-sender-ip: 87.250.241.140
    CMM-sending-ip: 87.250.241.140
    CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
    87.250.241.140) smtp.mailfrom=rdsexpresscourierdelivery@yandex.com ; dkim=pass
    header.d=yandex.com; x-hmca=pass
    header.id=rdsexpresscourierdelivery@yandex.com
    CMM-X-SID-PRA: rdsexpresscourierdelivery@yandex.com
    CMM-X-AUTH-Result: PASS
    CMM-X-SID-Result: PASS
    CMM-X-Message-Status: n:n
    CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
    CMM-X-Message-Info: 11chDOWqoTlbB6FiQx5iH1t/LLfcZPvelUspdsLySQqHHnJQW3ZaBmBO9C/oEjDa/w5Jo6R23vV0OKtUcr1G+trksuzchjWJWVM5yhKJcFnLzduMnaJ fPqyjjagzgQ8F4elMWwa9fcW/8xBXmybWXiXx9Hov0KoFC9ocMXC1B07uaT423/dL1hVLnj8tEQwWvkfvhMrHyplHD9oZGKaiRO3knu5WdQGiD8A4 orsOMWCxX9JMCd5geA==
    X-MS-Exchange-Organization-SCL: 5
    X-MS-Exchange-Organization-PCL: 2
    X-Forefront-Antispam-Report: CIP:25.152.82.56;CTRY:GB;IPV:NLI;EFV:NLI;SFV:SPM;S FS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:SN1PR13MB052 7;H:SNT004-MC4F54.hotmail.com;FPR:;SPF:None;MLV:ovrnspm;LANG: en;
    X-Microsoft-Exchange-Diagnostics:
    1;SN1PR13MB0527;2:P3rY6rw5d8IDjls/g5hFBrlIVBB4E9KYyWJAEAReQqM2gOhKMG5swZg9MTMJE1hBOY AavCyiza2LmHwXH0n8a7NbPxSGk0CwNA9fDYI5XSvPbDkEg+ao 6XMo0DUM/rd5WcWA731jgd+BWYwIArZhb/d2zvubpQ+rq2DVCL1ZzKQBu8tLaM+R1Kj7MwcbjEgN;3:hhzhW IAuU/ihMVA060WAcHtH3V3Q7R7JxhZkAB1uNWFOxlqJdVbSkdDKq4NK lLFHjb/ncLzwCBDk3QQCjw24BPh+24PZxxCyxGD8XNW0hwSoVMseEZmZx YcrCS3LTOndomDqUkZnH9sZFYeYO4aChr+3pB74XqR1+FOz20Q JxRYnz9wHDAG+Bp+agBocAr1E1v9bj0JqfWz5HJYkxbxq3w==; 25:CUoUOWvG1+Xa4FMwCqjwueY4QjZzDSVvMUy8JF2bPlD0ACQ QRIBHaXk86qIYUdUszoWF/9dq1HCudA3DfEF3b9yS+mUSaoqikEOK6gUWmPHAdqpUXJ7545j 8A5QPdfpN3sC6sIMNOwXTyl8llb+W4k0pw06/qz+sTvVp0lplluPaeZjZXmVV9vPhMuuvE4P6M3+rkjjm9a8/Fd0ZB55VwCgLWpPe73ZqOoTv1oytFTrmpzOR/EnBhyzCAenRUc6B;4:tpT/fDu2sPgtK27L4/uZOkFVGL8kDUcQrLtkuT6QHkOm/ViDrbA2hRxmjfrs1ljXn98UPGZ5UN8TJu2Dver4wzbWV2amlw9 N4G2OCaYcTWG5zWgQIYIw5PppN3bhJ3h4iQntrMHxib7Y5S9U3 5xMIPUIcuzIdgmsB2kgwVedCB+wnZ1Nt1dTcjwBenRhgoZxJNa 8i3nabgKyM1GcLMsmqHfNYV+oMjxJmh22Xcm6dkPjpaKY6/pCd2cD6RpwoqckLiLsIU1KKuopdFTTQs2WRw==
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501001);SRVR:SN1PR13MB0527 ;
    X-MS-Office365-Filtering-Correlation-Id: 1b34ea76-f373-47b5-3406-08d329f774c3
    X-MS-Exchange-Organization-AVStamp-Service: 1.0
    X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015046);SRVR:SN1PR13MB0527;B CL:0;PCL:0;RULEID:;SRVR:SN1PR13MB0527;
    X-Microsoft-Exchange-Diagnostics: 1;SN1PR13MB0527;23:B69bxao1MxzZFSQzG++d2baSyuEk4pw o3lXaGyA7hUb6rtGcgScXX8MF2E8iP1DD7pB0ax/qozeel/KZXUJ9k+2liqP4OJ6SrJDSEkHeF3BWqJ7sh4v2EObrCN3M4MNE T+UyNmUijSAw+bb6gWO+bDe4WOPVTplAsihOXKt1CVmTf9nMbG RT1m8VwVReRK7HTwRgRF0eLMyOZI1TCI8sEqKX6/ivNKaiD9paO4Yhy4Y=;5:OVXRekTdZF9KsdTUyukXmAtfFnYEo L8ZaeiwnTKDCLISXJuUKhgwPGUy3UUxlqIodFDZ14dHo5sMm1j lcvy0QNylI/tzdd09x89Exg8N6yEewHi01o+jLqtBjiSUl47urnVW10JngK8k LwD5Fj2CCw==;24:br4QeGr38Q6INaNlIY5Y+5EMre+s31OYOg bi/S0jPugDXQslCyJlMR/igelBJXHXkaOdsI3z35mNbfc6xip1og==
    SpamDiagnosticOutput: 1:22
    SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jan 2016 04:31:57.8076
    (UTC)
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR13MB0527
    X-MS-Exchange-Organization-AuthSource: DM3NAM03FT016.eop-NAM03.prod.protection.outlook.com
    X-MS-Exchange-Organization-AuthAs: Anonymous
    X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.9800693
    MIME-Version: 1.0

    Sir, It has come to our notice here in RDS Express Courier & Cargo Delivery Service Head Department that quit sometime now we have not heard from you and we really worried about your CHECK that is still here in our office for onward delivery to you in your country Please you really have to put yourself together and more effort to let us know the present situation over there and why you have not been able to contact us for some time. You the only thing causing delay now is for the fact that we have not heard any email contact from you.
    It will do us so good if you are able to respond to our mail today so that we can proceed on the delivery of your CHECK with immediate effect.
    Meanwhile we will be sending you the tracking number of your package for you to know where and when to collect your package and also you are to resend the below information for proper verification
    RECEIVERS NAME:
    DELIVERY ADDRESS:
    COUNTRY:
    MOBILE NUMBER:
    Please provide us with a scan copy of your driver's license or passport for proper identification when we are delivering your package to you.
    I will advice you to have this done right away.
    Treat very urgently as we also remind you that your Check is ready.
    Best Regards,
    Agent Paul Patrick
    THIS E-MAIL IS CONFIDENTIAL: If you have received this e-mail in error, please notify us by return e-mail and delete the document. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful.UNESCO is not liable for the proper and complete transmission of the information contained in this communication or for any delay in its receipt.





    Received: from CY1PR13MB0519.namprd13.prod.outlook.com (10.164.70.149) by
    DM3PR13MB0521.namprd13.prod.outlook.com (10.164.8.19) with Microsoft SMTP
    Server (TLS) id 15.1.293.9 via Mailbox Transport; Tue, 6 Oct 2015 12:35:53
    +0000
    Received: from CY1PR13CA0017.namprd13.prod.outlook.com (10.162.30.155) by
    CY1PR13MB0519.namprd13.prod.outlook.com (10.164.70.149) with Microsoft SMTP
    Server (TLS) id 15.1.293.9; Tue, 6 Oct 2015 12:35:53 +0000
    Received: from BN3NAM01FT043.eop-nam01.prod.protection.outlook.com
    (2a01:111:f400:7e41::205) by CY1PR13CA0017.outlook.office365.com
    (2a01:111:e400:4c61::27) with Microsoft SMTP Server (TLS) id 15.1.293.9 via
    Frontend Transport; Tue, 6 Oct 2015 12:35:53 +0000
    Received: from SNT004-MC2F21.hotmail.com (10.152.66.51) by
    BN3NAM01FT043.mail.protection.outlook.com (10.152.66.213) with Microsoft SMTP
    Server (TLS) id 15.1.293.9 via Frontend Transport; Tue, 6 Oct 2015 12:35:52
    +0000
    Received: from smtpbg202.qq.com ([184.105.206.29]) by SNT004-MC2F21.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
    Tue, 6 Oct 2015 05:35:51 -0700
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201307;
    t=1444134948; bh=NL121yGk7FgjFktmDtbmCztr6Yaaxloko+GGjwIua0U=;
    h=In-Reply-To:References:From:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID;
    b=q2qL0llBy1LeovHBgDOHAWcTas1qz6OEi4/0uWEQbMA6Iukhs1jGIFZ/fNugw5ZKf
    RsdreFP53VPTEYEA/JNMnRwjnmElPR/o9vezSnWcPfDtVajwwgBkwb7LrFWfd1UudT
    1UCu+JvQQaj9ovh0Dda9tLX+KiZ4rxlGxSTNmgKg=
    X-QQ-SSF: 00000000000000F0000000000000000
    X-HAS-ATTACH: no
    X-QQ-BUSINESS-ORIGIN: 2
    X-Originating-IP: 41.206.174.115
    In-Reply-To:
    References:
    X-QQ-STYLE:
    X-QQ-mid: webenglish8t1444134947t607313
    From: "=?ISO-8859-1?B?TXJzIE1hcnkgSGFtaWx0b24=?="
    To: "=?ISO-8859-1?B?UGlzIHI=?=" <>
    Subject: Good morning my great friend,
    Content-Type: multipart/alternative;
    boundary="----=_NextPart_5613C023_09B22108_5D82C822"
    Content-Transfer-Encoding: 8Bit
    Date: Tue, 6 Oct 2015 20:35:47 +0800
    Message-ID:
    X-QQ-MIME: TCMime 1.0 by Tencent
    X-Mailer: QQMail 2.x
    X-QQ-Mailer: QQMail 2.x
    X-QQ-ReplyHash: 2888381808
    X-QQ-SENDSIZE: 520
    X-QQ-Bgrelay: 1
    Return-Path: maryhamilton48@qq.com
    X-OriginalArrivalTime: 06 Oct 2015 12:35:51.0605 (UTC) FILETIME=[8939BE50:01D10033]
    X-MS-Exchange-Organization-Network-Message-Id: 3232f538-b00f-4a93-f72f-08d2ce4aac88
    X-EOPAttributedMessage: 0
    X-MS-Exchange-Organization-MessageDirectionality: Incoming
    CMM-sender-ip: 184.105.206.29
    CMM-sending-ip: 184.105.206.29
    CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
    184.105.206.29; identity alignment result is pass and alignment mode is
    relaxed) smtp.mailfrom=maryhamilton48@qq.com; dkim=pass (identity alignment
    result is pass and alignment mode is relaxed) header.d=qq.com; x-hmca=pass
    header.id=maryhamilton48@qq.com
    CMM-X-SID-PRA: maryhamilton48@qq.com
    CMM-X-AUTH-Result: PASS
    CMM-X-SID-Result: PASS
    CMM-X-Message-Status: n:n
    CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
    CMM-X-Message-Info: NhFq/7gR1vTtEn+7659faZsCiZgJWQ6gevkDReTmSFFmVa/nhXj916xoMYKPFdgdFmt3GLVupP2bYOW+SjOHRm6tvZUP5WYQP 1a/q9dRGZD2YKbAmKWy7yO26+MCLCcvHrIUyMrAdgZHhPEy+vNzh6 J/FS2g/CC1AsGMSow0HmBMC4w7fNyPRtBPMARueaaxa2R2c5S8J4UolQF lJYALBbDHzrnEJmCbls8fA1pkIHpqPf2NWti4qg==
    X-MS-Exchange-Organization-PCL: 2
    X-Forefront-Antispam-Report: CIP:25.152.66.51;CTRY:GB;IPV:NLI;EFV:NLI;SFV:NSPM; SFS:(98900002);DIR:INB;SFP:;SCL:1;SRVR:CY1PR13MB05 19;H:SNT004-MC2F21.hotmail.com;FPR:;SPF:None;LANG:en;
    X-Microsoft-Exchange-Diagnostics: 1;CY1PR13MB0519;2:9S95tVeVCKI5PmdC8spaZw7CxX12at46 ERwL6vBK1y9Uwe29nb8rVx04XSzyOTaUL2pq+UuOrM0/0EGXfS/4pbCQVgxrGbo8BjIxtWH9luaSnSl3a3LMT5UT+QidDj5hpZ0Uz xcu0XDqFNjquSD+fpKShRueJBtW4TD3cWxhm8N1ZL97XKEmz4A o/HjhdOuL;3:CfhbgUheBJ9CdbLaEZiVc4E5QWKBY25wxyDiAPAv 7jitB00qilbzV+/F0T5aqcvx6wNKom2Wt14OkSPu3+rrhWEfdgOdltmdBxje7peM1 AQDpxe2wDA1tIL8Vpr0TE7FCZIhxNzCLX2KKIWnKb8Q9tit7fP NlNsD7/jfdf6xL1Jy/NqAPQc8hd4JHLcp4OGb+b9GgLXf8NBIvjgEqTZQKA==;25:bMz 76V5nB+ERK4Gn5mQAR+kBeUAico9QMIxMQOf15sndiHdJTqO3g MSSu7aRpKjRClcEzgT+y5aDe34K+IVAQ1PrnD8rQd1bFBhzdfD 9KfnyLC4L/9Sa2zYGnvkrN3yflseS3YHROm5WT2SGWv/ozWx009ctpluI1YZiecJxeWyX6VrGiqF7/B/bvf5uOGm51xtkYse4m8Zcm67l1+0PwuB8x2xjJFs4ptSMq6XAP Ihtv7nDskXAkMwvT82wXDVZhRA9Z0W24mrrzOm3izR2ueCirxD ySBKyW9bF2p8fKaw=
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501001);SRVR:CY1PR13MB0519 ;
    X-MS-Exchange-Organization-AVStamp-Service: 1.0
    X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(81415001)(82015046);SRVR:CY1PR 13MB0519;BCL:0;PCL:0;RULEID:;SRVR:CY1PR13MB0519;
    X-Microsoft-Exchange-Diagnostics: 1;CY1PR13MB0519;4:dKhiovpImub0IPWQVB0D190W0AcSXka9 Di8rakA9lfikAPIqR4vr2PUD02gprXKBOP5UK+YId1NSrqTkSk nxShRDFTLn1uI2HnqmtRaFh4wnoa9COc8dphGJP4Gr44llkazV 8q25owlw3pcxekPBOy4IhLgNV7B582zWQAoWAsCaCXx4mq/E1nKlTx0yhhZIKQh2wcfdcqTAy2rk/9mTFNq7RcKjxsOdd0uOI51nLmYTGYs/xC+U29V+oHw/2+NRIyLTNdcNE6hNaBL3vbEZcDZln40oE6j65YmEMW/XggA=;23:huWeiXfY0rRaBSnL9xyB9DjF+PfN1sOYV/dXuTwnS222zVZrxBAwB/0/OKy7nGe7jICNv28KVHMMXHperz49AL6zlZqdpOK+QOttNfodct NSvezf4tuZc6E+lw4Rxjqn1ulqomFgJr6Qd2Z+9cDK89ceWf4w VDv/tKmt1lzsluVh8ID0Bix01mdwUmQrRZ5P;5:ojukGzYp2G3BrE1 nizfTaTQ5i/cy5zOD+K8Sf/VTXLdN1nZeuTD2n0Wwut7WKOne3oF48v5aCIw8duYZXzW8OmdZ WR+peRqORaLNVI9aT633RcEUEmPLzSUu60hRcrl1ommqMO/qNh51mx6HAl3XhA==;24:FAeLzRKF/dbMFUSykFMfnlhIw2f12rwtNBtXMKK/dQVTW7qSI0XZi5cM829EAKxQyEDC4+GLUz1Gbp0KGRPL3M/o4hzPvEfetHF2FyLEEsM=;20:PIcU6O5r6RbiqChS69JgqsnN6 0Nl/fEmaSYjRbK7f8+9B3qXOpCqe04B34S0lBjG5bMZ/jPQjjc/qS3DM/YvUA==
    X-MS-Exchange-Organization-SCL: 1
    SpamDiagnosticOutput: 1:23
    SpamDiagnosticMetadata: NSPM
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2015 12:35:52.3813
    (UTC)
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR13MB0519
    X-MS-Exchange-Organization-AuthSource: BN3NAM01FT043.eop-nam01.prod.protection.outlook.com
    X-MS-Exchange-Organization-AuthAs: Anonymous
    X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.4017954
    MIME-Version: 1.0

    Good morning my great friend,


    How are you and your lovely family doing? My wife and i wishes to emails and inform you about your CHECK that is still with the (RDS Express Courier & Cargo Delivery Service) and we receive an email from Mr Paul Patrick that there former email (rdsexpresscourier@yandex.com) was Hack and it was shut down finally and they have already gotten a new one which is (rdsexpresscourierdelivery@yandex.com) and they further inform us to get in contact with you so that you can get intouch with them with the new email so that your CHECK can be delivery to you once and for all in your country. We really sorry for the inconveniences My wife and i always promise to help you get your donation with the last tip of our blood.


    Please you really have to get in contact with the (RDS Express Courier & Cargo Delivery Service) with the new (rdsexpresscourierdelivery@yandex.com) and ask them how much is this going to cost for the last time so that my wife and i can help you with part of the payment so that you can have your donation once and for all to enable things done for yourself and the entire family. Your happiness is all we want that is while we going to make sure you get your donation once and for all.


    Please do get back to us as soon as possible


    We are sorry for the inconveniences,
    Congratulations & Happy Celebration To You And Your Family.
    Kind Regards,
    Mrs Mary Hamilton.





    Received: from BN4PR13MB0515.namprd13.prod.outlook.com (10.164.59.149) by
    DM3PR13MB0521.namprd13.prod.outlook.com (10.164.8.19) with Microsoft SMTP
    Server (TLS) id 15.1.262.13 via Mailbox Transport; Sat, 29 Aug 2015 06:42:18
    +0000
    Received: from BY1PR13CA0026.namprd13.prod.outlook.com (10.162.107.164) by
    BN4PR13MB0515.namprd13.prod.outlook.com (10.164.59.149) with Microsoft SMTP
    Server (TLS) id 15.1.256.11; Sat, 29 Aug 2015 06:42:17 +0000
    Received: from BN3NAM01FT044.eop-nam01.prod.protection.outlook.com
    (2a01:111:f400:7e41::205) by BY1PR13CA0026.outlook.office365.com
    (2a01:111:e400:5225::36) with Microsoft SMTP Server (TLS) id 15.1.262.13 via
    Frontend Transport; Sat, 29 Aug 2015 06:42:17 +0000
    Received: from BAY004-MC1F58.hotmail.com (10.152.66.58) by
    BN3NAM01FT044.mail.protection.outlook.com (10.152.66.243) with Microsoft SMTP
    Server (TLS) id 15.1.256.10 via Frontend Transport; Sat, 29 Aug 2015 06:42:16
    +0000
    Received: from forward19p.cmail.yandex.net ([77.88.31.22]) by BAY004-MC1F58.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
    Fri, 28 Aug 2015 23:42:06 -0700
    Received: from web28g.yandex.ru (web28g.yandex.ru [95.108.253.237])
    by forward19p.cmail.yandex.net (Yandex) with ESMTP id 3044E216E1
    for <>; Sat, 29 Aug 2015 09:42:04 +0300 (MSK)
    Received: from 127.0.0.1 (localhost [127.0.0.1])
    by web28g.yandex.ru (Yandex) with ESMTP id C9BCA7A1116;
    Sat, 29 Aug 2015 09:42:03 +0300 (MSK)
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail;
    t=1440830523; bh=6+5/IKmSOjy3JGvrnbDdk1N4PWSFv0LM3xquVXFa/jU=;
    h=From:To:In-Reply-To:References:Subject:Date;
    b=VQ/dGayPGJDoM4dvOBLzcqWdJRrpHxBdNqBo/yPcaduRbdjaY8NJzLP771xmB110X
    imjZNykmhUGmwS0QeMM25kUB8+AEtS9IhSt+7aCSjesWcMog7/SPnvr1qkY01CXTxF
    Kf2hWeYu9oOGnM2BANAB7ZjxPiIl0Tje1TDpVd7g=
    Received: by web28g.yandex.ru with HTTP;
    Sat, 29 Aug 2015 09:42:03 +0300
    From: RDS Express Courier & Cargo Delivery Service
    To: <>
    In-Reply-To:
    References: ,
    Subject: Welcome to the RDS Express Courier & Cargo Delivery Service
    Message-ID: <1652011440830523@web28g.yandex.ru>
    X-Mailer: Yamail [ http://yandex.ru ] 5.0
    Date: Sat, 29 Aug 2015 07:42:03 +0100
    Content-Transfer-Encoding: base64
    Content-Type: text/html; charset="utf-8"
    Return-Path: rdsexpresscourier@yandex.com
    X-OriginalArrivalTime: 29 Aug 2015 06:42:06.0505 (UTC) FILETIME=[D2620190:01D0E225]
    X-MS-Exchange-Organization-Network-Message-Id: c0761f59-418a-4037-101b-08d2b03cfb45
    X-EOPAttributedMessage: 0
    X-MS-Exchange-Organization-MessageDirectionality: Incoming
    CMM-sender-ip: 77.88.31.22
    CMM-sending-ip: 77.88.31.22
    CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 77.88.31.22)
    smtp.mailfrom=rdsexpresscourier@yandex.com; dkim=pass header.d=yandex.com;
    x-hmca=pass header.id=rdsexpresscourier@yandex.com
    CMM-X-SID-PRA: rdsexpresscourier@yandex.com
    CMM-X-AUTH-Result: PASS
    CMM-X-SID-Result: PASS
    CMM-X-Message-Status: n:n
    CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
    CMM-X-Message-Info: NhFq/7gR1vQsTdMA6vJnofH/mT6HGbzMVA9jBjDJh6i4IcytJwsUrUiye2CLQ2cy1lFRT3yRAF/ClxV42F0TBMnhGjoGSZlPhw2FJwBrlrNfUOHIk2rt6CvTZ1+sw uhKDlShREVL+iWNkAOghznYKSsAL3Jnvx2G/IW9MezPPXdiwLgP9uH7yZyuDVA1GK0huuviuMZxJe64luTImTd +Oi0cDE7SUmA72lEZNw2ngtk=
    X-MS-Exchange-Organization-PCL: 2
    X-Forefront-Antispam-Report: CIP:25.152.66.58;CTRY:GB;IPV:NLI;EFV:NLI;SFV:NSPM; SFS:(98900001);DIR:INB;SFP:;SCL:1;SRVR:BN4PR13MB05 15;H:BAY004-MC1F58.hotmail.com;FPR:;SPF:None;LANG:en;
    X-Microsoft-Exchange-Diagnostics: 1;BN4PR13MB0515;2:yXAzIDQZvf38Wb5p9CgkijxBqNHiQPBR yEs5BAiAItvg9BX+Jsp/i/NwuOHwjjhmI7Adt4tyAkHyc4ODl3e9EGTWeBzhrZBbZ3HVXLY3 nMZRvqTuja6HSDVbnPMOUqnC+8gjUMHlxhlpQYRFR/IEyyQC08M6tyTQ8WIPqqvfNDo790uuuSxKXw9lgjV8SsMM;3:m qPeGX7lHMu44bfwFySKVDyMYh/QzTbnPEb3G+56ZaR6/QPY7ZiVHKzAlkmGrmGkXFLTUfyH65L1vAGZRJ92oFKY0GJ/TZ2ffFv9Jn0DuMJdzdQdHg0sjnCycrmr+wiDfy+CsBl76L7aw+ aXhEX+BMlkfJPDpaedgy+csvCYa88yfW1SkgLUv4plicZ5eGtA jr9VX8tgNCyjN0xiG9aBgA==;25:/VeHIJ6tvOkuaYbnlvdhUm9/ymsEgCyK/mBllY0d9gntci8g5JmGeqYLTUWDnAbyVANF1NaaSTwZ9PQl7TX/BOlZ41hxip5gFZhFJZAN3CipFo2fs9tKnoaq8RHL6uoyh+ehNV vhduaSsqqe//Ldsasboy/sT2hAekYnDqrWqHkVt32X186ZsnB0peLPULmMRFzZGJzabjzAl D4/R9bE2US7s44k1IAFIkyulbdPXRtTQEF2DsT8Ofe8c+4cxYsrNh PEbXuE0RwQiRpZJwY1sQ==
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501001);SRVR:BN4PR13MB0515 ;
    X-MS-Exchange-Organization-AVStamp-Service: 1.0
    X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015039);SRVR:BN4PR13MB0515;B CL:0;PCL:0;RULEID:;SRVR:BN4PR13MB0515;
    X-Microsoft-Exchange-Diagnostics: 1;BN4PR13MB0515;4:zyol6YKFuLvQk9uvfT2+7AhYXUKtbTEb E0Mf3i3bxhMxwqG7nolk1zlE9A4xhNgyTwsW+owF0oMtASAsEA 8hh34RJwzqIBtiBt84dlLMthJa3kxYF7unMU4XT4OS93sZLN8Y RxIRucEphSoMBLKpx7R37LfoNf2l8rR8jCNV4CgXZr3QtJRiEH AxQqZTJehqRN1jrhjApfw2jugLv1nl6ancFFmSYvuPgqwhD/HRhsoXLvst+I3NVwJticD2efC2cCBE9ZnQWXWlu4BBuYK1kw== ;23:Ul/PIAy52eR11XfDJMkhqJpQO8VMA2JNfwOXNLggMC97s8JnUTN4y fg9j/QUi0Iu7jdb9KJJ1OLvGzVBXy7mKMETsCP8zMz9XGvwF7SVk4L1 uWmsroFhARFNjkGuoCyeHDRVCVe3MHHUGapP6hrs7Ed/e+vvfkZ0xJZKvMosILq28VXMbXz46yhg2tqF0V/e;5:mklceyG/nmb8DmrHesBwZ1+Tee0X9nUKuJcQgMGCzitk49/qwNG9L/Jab+YQTauxTtPXUR4djU6VldwoksPuej8045EwENxsLtijFPnP DKScsgQ50duL+fCqKgv7X77wnYnwaO7fN/ZWRiMJOrPd2w==;24:/jiIThDvlwgERZKCQlm3X3kLfbxqlAccVfM8w3aL6uX6MDNsFEa JvuOVs5iVRllS9H/Vi0We4NbrSxzr6hSvUHpMpmOCWLrA8+sodvgm4/c=;20:HaFflBm30Lvf9kB6Vd6QCufwzohlyURwJEE1xmJLfCnd XUvklIOBsg/aLNIj1GlUHHZ9BbR4sWxkU8OySDC4KQ==
    X-MS-Exchange-Organization-SCL: 1
    SpamDiagnosticOutput: 1:23
    SpamDiagnosticMetadata: NSPM
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Aug 2015 06:42:16.2950
    (UTC)
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN4PR13MB0515
    X-MS-Exchange-Organization-AuthSource: BN3NAM01FT044.eop-nam01.prod.protection.outlook.com
    X-MS-Exchange-Organization-AuthAs: Anonymous
    X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.3799761
    MIME-Version: 1.0


    Welcome to the RDS Express Courier & Cargo Delivery Service

    210-215 Borough Road,
    GreaterLondon,
    London SE10AA,
    UnitedKingdom

    ATTN:Parcel Owner: ,


    Welcome to the RDS Express Courier & Cargo Delivery Service ,I am Agent Paul Patrick, the verification officer in-charge of your file, your CHECK containing the sum of 500,000,GBP was approved by the NATIONWIDE BANK.

    From the data provided, your information corresponds with the name on our data base but you will be required to show a copy of your identification which should be a Driver's license, National passport or International passport to the delivery agent on delivery for authentication. We are pleased to inform you that we have concluded the verification of your data and therefore your CHECK is ready for dispatch.

    Hence, we have concluded delivery arrangement with all COURIER SERVICES, Courier Company to be fully insured by National Insurance Corporation.

    As our policy, you have to be soly responsible for the delivery charges as the Committee will not be responsible for the shipment of this CHECK that has been issued to you as the sole beneficiary.

    In view of this development, you are requested to choose from the options listed below your choice and cost of delivery.

    Scheduled to be delivered along with your CHECK are; Payment Approval Letter, Tax Clearance papers. Anti Terrorism Certificate.

    Your Parcel is at our verification Unit In London, United Kingdom they are in-charge of the final verification of payment to ensure we have the funds released to the rightful beneficiary. At this stage, We have concluded delivery arrangements with our affiliate delivery companies, Courier Companies fully insured by National Insurance Corporation.
    You have to remit the necessary shipment/ delivery charges to enable us effect this proceeding on it.

    ______________________________
    NORMAL CLASS DELIVERY: IN 72 HOURS
    ______________________________
    Mailing /freight cost $80 USD
    Insurance: $60USD
    Vat: $20 USD
    Total: $160 USD.
    ______________________________
    PRIMIUM CLASS DELIVERY: IN 63 HOURS
    ______________________________
    Mailing /freight cost $150 .00
    Insurance Fee $100 .0
    Vat $30 .00
    TOTAL $280.00
    ______________________________
    FIRST CLASS DELIVERY: IN 48 HOURS
    ______________________________
    Mailing /freight cost $200 .00
    Insurance Fee $100 .00
    Vat $40 .00
    TOTAL $340.00

    EMAIL FOR CONFIRMATION OF DELIVERY.
    RECEIVERS NAME:
    DELIVERY ADDRESS:
    COUNTRY:
    DELIVERY OPTION:
    Choose from the above delivery option and fill the information on the box. Once you have choose the courier delivery charges please do get back to us so that we can send you the name of the account officer in-charge and how to proceed with the payment of the delivery option you choose.

    NOTE: For purpose of transparency, the Delivery Service had been mandated to make available tracking numbers once they receive and confirm to the payment, this is to ensure you keep track of your parcel before it gets to your designated address.

    I will advice you to have this done right away.
    Treat very urgently as we also remind you that your Check is ready.

    Best Regards,
    Agent Paul Patrick

    THIS E-MAIL IS CONFIDENTIAL: If you have received this e-mail in error, please notify us by return e-mail and delete the document. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful.UNESCO is not liable for the proper and complete transmission of the information contained in this communication or for any delay in its receipt.

    Received: from BN4PR13MB0515.namprd13.prod.outlook.com (10.164.59.149) by
    DM3PR13MB0521.namprd13.prod.outlook.com (10.164.8.19) with Microsoft SMTP
    Server (TLS) id 15.1.262.13 via Mailbox Transport; Fri, 28 Aug 2015 22:43:18
    +0000
    Authentication-Results: outlook.com; dkim=error (no key for signature)
    header.d=none;outlook.com; dmarc=none action=none header.from=qq.com;
    Received: from DM3PR13CA0040.namprd13.prod.outlook.com (10.164.193.50) by
    BN4PR13MB0515.namprd13.prod.outlook.com (10.164.59.149) with Microsoft SMTP
    Server (TLS) id 15.1.256.11; Fri, 28 Aug 2015 22:43:17 +0000
    Received: from BN3NAM01FT006.eop-nam01.prod.protection.outlook.com
    (2a01:111:f400:7e41::205) by DM3PR13CA0040.outlook.office365.com
    (2a01:111:e400:5aa7::50) with Microsoft SMTP Server (TLS) id 15.1.262.13 via
    Frontend Transport; Fri, 28 Aug 2015 22:43:17 +0000
    Received: from BAY004-MC5F31.hotmail.com (10.152.66.55) by
    BN3NAM01FT006.mail.protection.outlook.com (10.152.66.198) with Microsoft SMTP
    Server (TLS) id 15.1.256.10 via Frontend Transport; Fri, 28 Aug 2015 22:43:16
    +0000
    Received: from smtpbg64.qq.com ([103.7.29.139]) by BAY004-MC5F31.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
    Fri, 28 Aug 2015 15:43:14 -0700
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201307;
    t=1440801792; bh=/EC1u08ZSsycES44fPVvWjePCx4/9mLUG6JR/UWdn4c=;
    h=In-Reply-To:References:From:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID;
    b=AE4zhHCaWVO58ybbmxz0D3/0v83YzQYnKKcZAlhHKxyS5KtuYygngsnRQwW1844Zo
    VrVuPjRCopolGhBEmJnQfN4lcenSmNNvqqWjOJ4yPikGpKfqbH DAEB21UFb1LghSMK
    /ey2IB2D8l50BjO/hbbmpbPl+Sx9A1aV/7WAMndM=
    X-QQ-SSF: 00000000000000F0000000000000000
    X-HAS-ATTACH: no
    X-QQ-BUSINESS-ORIGIN: 2
    X-Originating-IP: 197.211.52.197
    In-Reply-To:
    References:
    X-QQ-STYLE:
    X-QQ-mid: webenglish8t1440801791t305822
    From: "=?ISO-8859-1?B?TXJzIE1hcnkgSGFtaWx0b24=?="
    To: "=?ISO-8859-1?B?UGlzIHI=?=" <>
    Subject: YOU ARE REQUESTED TO CHOOSE ONE OF THE OPTIONS LISTED BELOW YOUR CHOICE
    Content-Type: multipart/alternative;
    boundary="----=_NextPart_55E0E3FE_08FBDEA0_7FBC1D3C"
    Content-Transfer-Encoding: 8Bit
    Date: Sat, 29 Aug 2015 06:43:10 +0800
    Message-ID:
    X-QQ-MIME: TCMime 1.0 by Tencent
    X-Mailer: QQMail 2.x
    X-QQ-Mailer: QQMail 2.x
    X-QQ-ReplyHash: 2888381808
    X-QQ-SENDSIZE: 520
    Return-Path: maryhamilton48@qq.com
    X-OriginalArrivalTime: 28 Aug 2015 22:43:15.0494 (UTC) FILETIME=[ED5DA460:01D0E1E2]
    X-MS-Exchange-Organization-Network-Message-Id: 6fecbe62-c6c7-4124-aac4-08d2affa10f7
    X-EOPAttributedMessage: 0
    X-MS-Exchange-Organization-MessageDirectionality: Incoming
    CMM-sender-ip: 103.7.29.139
    CMM-sending-ip: 103.7.29.139
    CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 103.7.29.139;
    identity alignment result is pass and alignment mode is relaxed)
    smtp.mailfrom=maryhamilton48@qq.com; dkim=pass (identity alignment result is
    pass and alignment mode is relaxed) header.d=qq.com; x-hmca=pass
    header.id=maryhamilton48@qq.com
    CMM-X-SID-PRA: maryhamilton48@qq.com
    CMM-X-AUTH-Result: PASS
    CMM-X-SID-Result: PASS
    CMM-X-Message-Status: n:n
    CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
    CMM-X-Message-Info: NhFq/7gR1vQrbz6/qsHAT3QCBBXRd/S4L/PJH9z0/V/ExI3hea46Ve+pk6be/BaJiY+fOAfl3XD8iTeeau8EdtuqzK3PQ9qOCjV1F3gH6Z+aMEE xfPg0JdqMUvzEqrfqm8BVOuHN4g6+8rn+/oXH3kUTahb1y/sb5eb4tfJRmmycXnrcg8Y3jXpzsuLbLbXW/aSwHCFAw27YZ9owsZ7GVaIB+OJjWm4t/aONmS8pTv6TRPE+lvx+MQ==
    X-MS-Exchange-Organization-PCL: 2
    X-Forefront-Antispam-Report: CIP:25.152.66.55;CTRY:GB;IPV:NLI;EFV:NLI;SFV:NSPM; SFS:(98900001);DIR:INB;SFP:;SCL:1;SRVR:BN4PR13MB05 15;H:BAY004-MC5F31.hotmail.com;FPR:;SPF:None;LANG:en;
    X-Microsoft-Exchange-Diagnostics:
    1;BN4PR13MB0515;2:CtCeaKF5ufJ4f5ejyJIcyTd9RIUeWD51 mwl+OuyEHJOOsjXs/FTRr/aSc74HVlF66YLwW9iQHKC3xwyhqS5iD/wrIgH6bV/tRhaRqX3V/tzOMtqQgW6k2CupXIxOJjWhAr18c/Fub9gXX7XU0dub2/iOoSYW+ls3Q9iKN7dZD/U=;3:vvrRzPb9bU/0TNH5ik/9X/hX8eZxMle2rAfOZDfUNK09szGc5qn564gcXKHCRnDfIK90PyRX g9fXmrwrkjOjDiEDnzpBL3xq6XGDxZlsBWhEE1R0pi16z0ZlaO 64LSiYmelz0GaDXUtW+glBEeOt8I4KvZbZ4OB8YWIRz1gWwy4J gqaS1+HDN9pTWo/fT88XmOTmxdAT3HtOAoa77Tq1fQ==;25:BdFx+DPh8LkfwSnBc FQSjIIaEAvYEDP/GwMtMhEpqH0IIoIN1sbjJgrmH0RssGDwoh/3gO37qPsBay6aOpndJ3HQ7brxyiYk9/jkqmjsnxv6VzId82Dvc3B1aoLlKZ5YLNUj2YbLZ1lOdFLstffN S3V2eLZcszg9DdqAt9AFGqRpZNKRB8L40BnkxeVO5oxomeQURM HgrKM/Wa+UC7GrR0VdeGzLOyYu7IiE9g2WkvkDJntYhH2tzCIvJcv0io qDgNgb6YDR5tz0OTu7OdgnsA==;4:X0YPx47ckj9/5CDJpIiO9mn+fDZkq+bfpYW9mNF3BTjHcDPqLp+KwmVic0BqFN nBu/jY4kQg4AB4dBto/0YCG6O4CWytgTVNTxAeKiQB14Y3dtQjIKJomqZ0UzHpIiKji4T tJSrDyK8i3dZFIL+QV8AsgwFmT9rxu22b4uV0ADHCji2RpHdDi wTVFcyV1Jg6zaA/XZGPJbSTo2uzWH79Tel66TTYr1Kp1SiRF3HyPuyH2CNu/Ht3Df+TvIsDUEcHmnwq86d3jBRYD++EdghQFg==
    X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(71701003);SRVR:BN4PR1 3MB0515;
    X-MS-Exchange-Organization-AVStamp-Service: 1.0
    X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015039);SRVR:BN4PR13MB0515;B CL:0;PCL:0;RULEID:;SRVR:BN4PR13MB0515;
    X-MS-Exchange-Organization-SCL: 1
    X-Microsoft-Exchange-Diagnostics: 1;BN4PR13MB0515;23:fGtBCqyi2kPtkvqlpuZwtTWVAjRbrQj zebxxhaiYXqEiZr6OmgFW52Le9iVWYfKFflAFPXk4TLsEnypOA as5FsnP9VlXAM0OT+/c1/HVvAsI3MtfCfF6a3i5lIZjk6VQrPFkqWeSS8buKUOIRgBLJnPt jpuCWdfOFwGCOK1vNTDoHCMMALXkjVpak413DAt1;5:GhQmap1 BtYfZ3o5XLaxd6eQteMR8tszRMGy4NcSinQBg+KH7m2WRoZsCL eSLUx6S9bJjqZBn04xDjJyR8C4+h6EXXuNHENUr1b/aVejJ7HAFaYCL2ayRmtZXmhTYEZF5kd/AC4UJqz2MhNQ6u9mJ7A==;24:ymsIhXhVrNaO4HQ5ZkomG5TQS 23mIx+twxHhs7MDt1uyxoOPGXoyjj+LmkzjxHvt8PzNvxRtuCG d7r/iP5fLHeXgAuihuy3WkzBl9EhL9/8=;20:Y69jBiMKYcvUJAC75Uw9qlDPRzxjTlrbg6wgUhgYWPrn iYPcLzPQhjc3pKQEzaWABH2Ljm/fr8dlWsmIGz+JKg==
    SpamDiagnosticOutput: 1:23
    SpamDiagnosticMetadata: NSPM
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Aug 2015 22:43:16.6668
    (UTC)
    X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN4PR13MB0515
    X-MS-Exchange-Organization-AuthSource: BN3NAM01FT006.eop-nam01.prod.protection.outlook.com
    X-MS-Exchange-Organization-AuthAs: Anonymous
    X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7752231
    MIME-Version: 1.0

    ------=_NextPart_55E0E3FE_08FBDEA0_7FBC1D3C
    Content-Type: text/plain;
    charset="ISO-8859-1"
    Content-Transfer-Encoding: base64

    Congratulations & Happy Celebration John Baiter,

    I am very happy to hear from you because we believe this is a life time opportunity for you and your family. We plan to take care of the needs of our immediate family members and make some of our friends millionaires because we believe in making others comfortable and happy like us. To verify the genuineness of this email and our winnings, please see our interview by visiting the web page below;

    http://www.theguardian.com/uk-news/2...n-euromillions

    Your email address was submitted to us by the Google Management Team, We have assist the local fire department, the Red Cross, Haiti, some hospitals majorly involved in cancer treatment, and some other charity organizations in Africa, Asia and Europe that fight cancer, Alzheimer's and diabetes.However, since we won the Euro Millions Lottery, my wife and I have been investing ahead of the future, as we just bought some houses in London, Portugal and also in Ukraine. We are on vacation in Portugal for a charity organization program and we are going to be here for three months.

    One amazing incident happened this morning because I got an email from one of the beneficiaries who lives in Thailand, Mrs Nhamtoey, thanking my wife and I for the cash donation to she and her family.

    This kind of emails we receive from our beneficiaries gives my wife and I much joy and we are really happy for you, being one of our beneficiaries. Mrs Nhamtoey, told us that she received her own funds successful, though she was a little scared and afraid as a result of different scams going on in the internet today, but she made up her mind, she trusted us and believe in almighty God, she followed the instructions given, which facilitated to the safe transfer of thefunds which we donated to she and her family.

    My wife and I humbly urge you to CHOOSE from the option listed, NATIONWIDE ONLINEBANK in other to enhance a smooth and successful transfer of the funds or the (RDS COURIER COMPANY) for the delivery of your validity check which we donated to you because you are our only beneficiary who has not yet received his donation money.

    We are very happy and proud to help you and your family in celebrating this very New year and the future. We suggest that you contact the Bank OR Rds courier company immediately on (nationwidebnk01@3mail.ie) and (rdsexpresscourier@yandex.com) as they await a confirmation
    email from you, for the disbursement of your funds. So contact immediately.

    YOU ARE REQUESTED TO CHOOSE ONE OF THE OPTIONS LISTED BELOW YOUR CHOICE

    CONTACT DETAILS FOR THE BANK;
    BANK NAME: NATIONWIDE ONLINEBANK
    CHIEF FINANCIAL OFFICER: MR MARK THRESHER
    EMAIL: nationwidebnk01@3mail.ie

    CONTACT DETAILS FOR COURIER COMPANY;
    COURIER NAME: RDS EXPRESS COURIER AND CARGO DELIVERY SERVICE
    CONTACT PERSON: MR BOLTON HARRISON (DELIVERY TEAM MANAGER)
    EMAIL: rdsexpresscourier@yandex.com

    Congratulations & Happy Celebration To You And Your Family.
    Kind Regards,
    Mrs Mary Hamilton.


    ------------------ Original ------------------
    From: "";<>;
    Date: Aug 28, 2015
    To: "Mrs Mary Hamilton";

    Subject: Re:You've won 500,000.00 pounds from Mrs. Mary Hamilton donation


    From: beachy.32@osu.edu
    Subject: You've won 500,000.00 pounds from Mrs. Mary Hamilton donation
    Date: Thu, 27 Aug 2015 22:59:50 +0000
    To:

    Send your Name, Phone number, Contact address and Country

  2. #2
    Join Date
    Jul 2009
    Posts
    2,626

    Re: Agent Paul Patrick - rdsexpresscourierdelivery@yandex.com

    Thanks for posting up that information on a scam.

    Making a scammer's scam googlable on every scam-warner-anti-fraud-busting site you can find is a great way to slow that scammer down when a suspicious potential victim goes looking for information, finds your post containing the name the scammer is using, his email address, phone number and the emails themselves and then that potential victim does not become a scam victim because you took the time "get the word out".

    Wasting a scammer's time legally and safely is called "scambaiting". If you google that word, you will find sites where you can read scambaits, post up the emails and email addresses of scammers, post up a fake website, read up on how to alert a hosting company that they are hosting a fake website, ask questions and learn all about the hobby of scambaiting.

    Since that scammer intended to steal your money, he did not give you his real life information. All you have is one of his fake names, one of his free email addresses, one of his fake stories and one of his paid-for-in-cash cell phone numbers. None of that information is going to help your local law enforcement agency track down that anonymous scammer sitting in a cyber cafe half way around the world from you.
    Found a scam or scammer's email address? Post it at scamwarners.com
    Found a romance scam? Post it at romancescam.com

  3. #3
    Join Date
    Feb 2016
    Posts
    970

    Re: Agent Paul Patrick - rdsexpresscourierdelivery@yandex.com

    What do you mean by "paid for in cash cell phones"? Scammers use text apps like TextMe, TextNow and others which they can use in Nigeria. I bait scammers and I tricked a lot of them into emailing me bank accounts which I send to Alan and sometimes I send to the banks as well. I had a lot of the bank accounts killed. If there a better way to get bank accounts killed? Getting bank account details from the scammer help slow him down and can cause the scammer to loose income as his victims may get some of the money they lost back.

  4. #4
    Join Date
    Jul 2009
    Posts
    2,626

    Re: Agent Paul Patrick - rdsexpresscourierdelivery@yandex.com

    There are scam busting sites with online lists of the names scammers use, their fake job offers, their email addresses, stock copy/paste emails, paid-for-in-cash cell phone numbers, stolen pictures and fake websites they use. You could start your search and post/ask at such sites.
    Found a scam or scammer's email address? Post it at scamwarners.com
    Found a romance scam? Post it at romancescam.com

Similar Threads

  1. Patrick Coaty
    By feedflaremediascam in forum Internet Scams
    Replies: 1
    Last Post: 12-15-2011, 10:01 AM
  2. Patrick Scales
    By Pauly4142 in forum Mail Order Scams
    Replies: 10
    Last Post: 03-06-2011, 03:39 AM
  3. kate-gg@yandex.ru - Nadezhda
    By hannibal in forum Internet Scams
    Replies: 1
    Last Post: 03-16-2010, 09:53 AM
  4. Patrick Berryhill
    By ProfHenryHiggins in forum Mail Order Scams
    Replies: 0
    Last Post: 02-02-2010, 11:23 AM
  5. Patrick Scales
    By Pauly4142 in forum Mail Order Scams
    Replies: 8
    Last Post: 04-10-2007, 06:37 AM

Tags for this Thread

Bookmarks

Bookmarks

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may edit your posts
  •