[email protected] western union

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id UiAyElHTYFlfbQAAjbubUg
for <>; Sat, 08 Jul 2017 05:42:57 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 08 Jul 2017 05:42:57 -0700
Received: from host199.marriott.com ([162.130.1.199]:16146 helo=hdqncironsmtp2.marriott.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dTp4Y-0007HO-61
for; Sat, 08 Jul 2017 05:42:57 -0700
X-Marr-Info: Remote-IP = 162.130.140.105
X-Marr-Info: HAT Group = RELAY_No_Restrictions
X-Marr-Info: Mailflow Policy = $RELAYED-NoAuth-NoThrottle
X-IronPort-AV: E=Sophos;i="5.40,309,1496116800";
d="jpg'145?scan'145,208,217,145";a="387319179"
X-Marr-Info: Marked Clean
Received: from hdqncexhub01.marriott.com (HELO HDQNCEXHUB01.mihdq.marrcorp.marriott.com) ([162.130.140.105])
by hdqncironsmtp2.marriott.com with ESMTP/TLS/AES128-SHA256; 04 Jul 2017 18:08:57 -0400
Received: from HDQNCEXHYB01.mihdq.marrcorp.marriott.com (162.130.140.109) by
HDQNCEXHUB01.mihdq.marrcorp.marriott.com (162.130.140.105) with Microsoft
SMTP Server (TLS) id 14.3.339.0; Tue, 4 Jul 2017 18:08:56 -0400
Received: from HDQNCEXD2MBX04.mihdq.marrcorp.marriott.com ([169.254.4.14]) by
HDQNCEXHYB01.mihdq.marrcorp.marriott.com ([162.130.140.109]) with mapi id
14.03.0339.000; Tue, 4 Jul 2017 18:08:53 -0400
From: "Law, Betsy" <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Payment Approved: Transaction: WUMT-MY-7910202017
Thread-Topic: Payment Approved: Transaction: WUMT-MY-7910202017
Thread-Index: AdL1F1I8vlvonluSST6r3b4RD4iRKg==
Date: Tue, 4 Jul 2017 22:08:52 +0000
Message-ID: <C8103316B2370E4284122AA6E8C5376E4597A170@HDQNCEXD2MBX04.mihdq.marrcorp.marriott.com>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [162.130.140.226]
x-tm-as-product-ver: SMEX-11.0.0.4179-8.100.1062-23172.005
x-tm-as-result: No--4.694600-8.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
Content-Type: multipart/related;
boundary="_004_C8103316B2370E4284122AA6E8C5376E4597A170HDQNCEXD2MBX04m_";
type="multipart/alternative"
MIME-Version: 1.0

graphic file highlights
From: Western Union
amount 1,500,000.00 US Dollar
Payee UN Humanitarian/Poverty Alleviation program
Phone +601126 433 169
[email protected]