CONFIRM THIS PLEASE

NOTE: Because being demanding and pushy in the subject line must be yielding positive results? Or is this criminal just as desperate as he/she/it sounds? Most likely desperate to gain maximum return for minimal work: stealing from others. This is a phishing email sent by a criminal. Don't fall for it, rather delete and ban these thieves and cowards.

---

From: Mark Williams <rita.okoro@yahoo.fr> To:08:45:56 CST, Friday 15 November 2019
Attachments: None
Message ID: <423782302.1366664.1573829145723@mail.yahoo.com>
Return Path: <rita.okoro@yahoo.fr>
Reply To: mark679williams@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.12]) by pure.maildistiller.com with ESMTPS id 2EE684006B for <>; Fri, 15 Nov 2019 14:45:56 +0000 (UTC)

from sonic304-22.consmr.mail.ir2.yahoo.com (sonic304-22.consmr.mail.ir2.yahoo.com [77.238.179.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id DFBAB4005C for <>; Fri, 15 Nov 2019 14:45:55 +0000 (UTC)

from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ir2.yahoo.com with HTTP; Fri, 15 Nov 2019 14:45:49 +0000

---

Attention Beneficiary, Did you authorize Maria Davis to claim your $10.5m? Yours faithfully, Mr. Mark Williams

---

Envelope Sender: <rita.okoro@yahoo.fr>
'From' Header: Mark Williams <rita.okoro@yahoo.fr>
Subject: CONFIRM THIS PLEASE
Timestamp: 08:45:56 CST, Friday 15 November 2019
Message-ID: <423782302.1366664.1573829145723@mail.yahoo.com>
Attachments: None

Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High

Client IP Address: 77.238.179.147
Client GeoIP Lookup: United Kingdom
Email Size: 3.1 kB
Encrypted? No