by buried under 419s
X-Spam-Flag: YES
Return-Path: <MAILER-DAEMON>
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1hn0250.outbound.protection.outlook.com [157.56.110.250])
by mail52c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id tBDDfAjS029708
for <>; Sun, 13 Dec 2015 08:41:13 -0500
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from Energy-ts.em.local (50.245.31.33) by
SN1PR14MB0639.namprd14.prod.outlook.com (10.164.45.29) with Microsoft SMTP
Server (TLS) id 15.1.355.16; Sun, 13 Dec 2015 13:40:58 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** RE:WESTERN UNION/ MONEY GRAM HURRY!!! 14/12/2015,
To: wiiner
From: Western.Union.Post.Office
Date: Sun, 13 Dec 2015 08:40:23 -0500
Reply-To: <[email protected]>
X-Originating-IP: [50.245.31.33]
X-ClientProxiedBy: DM2PR0801CA0012.namprd08.prod.outlook.com (25.162.18.22) To
SN1PR14MB0639.namprd14.prod.outlook.com (25.164.45.29)
Message-ID: <SN1PR14MB06395B702DEC49EF89F18A27B8EC0@SN1PR14MB0639.namprd14.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:
1;SN1PR14MB0639;2:DZ45Ozo4ym6ZmSiHXOMY3wzA+t/3LHjkxr7jXJ46+Mv+HYn4mCRnCgYf7vOxqQl10nsfkTBjB4z8IGZVxuKyluwvvbyu2Bab9xNuKTXjeWgpiDhtvsuiNO0QZnwpf0STCGyOCi/WtlADYm6uFLYZAQ==;3:Sz4vFVKftpK0OqeVUOU/x/FWXOmOUjs07p857SJggF9y+1h1GOOZoL1+5Qdw/idS48DCBtGjmmAMjV8yV9AA5QZqTgWL+cy45dMz+f/P/IkOfzG6Z3ANT0zhuI7k8GJo;25:LW/uhSdRA+9RDW3E8qFdpFD0qNPWAgppTgoDJwvSvU6w3toF872UDqMWz/hnI5XFGsw0EHw857CI1bRrskIetLQR7FEYTIKi6VE0mbH7Napd/yZfdZwdKWXd7u6KMVpFhMtCvrYC5KAUkEN473VuuEHmC44taDrPvrEOtkBm9ueMl8bpIdQEr75VUbuCt2etr8Nn6r/C+LYG1zAXwOrhJbWgr/LP/GMNCzDmhksNHS3TF7ePg9UG95v4jtv2h4JXxsyj4CmZeeEFpYZYWhO4uw==;4:aVQRUToC11zYs+JMdSHV17U/Uwvc94baX8qsbFlj45gDyPjkeV75Xy9n0IVhVG7i5R/afLZneuRBZ8TXSSzXH/lthZCVW69V6b8x097CkZ7da5CYJHn+bBq/yewQLfX/eFMt9P6Yor+J3DfYEkIRSyt1u6VNtFpJRfHylVA3qyCA2gIZzwCVvhKLotsireP5Pzo+a+REcGpfMfPUSoMRKA0ZJV3HSaJofwlpibCnUqU8/2uNdxUEA6jDKe99eYgr7jEIgxkfALw8dovEdvbO5E7x1t+yRnlUM6x3O6gJ3+ziHEWfllHuDykvYWSHr/jFI4ZZ9CqlLkDOvZkDkBg0nnJEE5mrsswPG7rAPUQ0XcT/TAT3XqlNJOQVGJk4z0uo
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR14MB0639;
X-Microsoft-Antispam-PRVS: <SN1PR14MB0639EF47DDE8F10A5431406DB8EC0@SN1PR14MB0639.namprd14.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:SN1PR14MB0639;BCL:0;PCL:0;RULEID:;SRVR:SN1PR14MB0639;
X-Forefront-PRVS: 07891BF289
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:SN1PR14MB0639;H:Energy-ts.em.local;FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: none (mail52c28: domain of does not provide an SPF record) client-ip=157.56.110.250; envelope-from=postmaster@;
Received-SPF: None (protection.outlook.com: Energy-ts.em.local does not
designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;SN1PR14MB0639;23:b6/P9xGAHafS1uY1ff7oCoNeorUJbfJMmV4j1KIORoqKN+HPKoSWoTJ6/UVTFdny4dtIQL5/6HaA0/WlsX0W/eh9GTIBmxZqIow+he2MUglSB2fVrSgI4P43SwD7v/h898vVFdpd7v5vTnFeM1fxsXvZZOv7e/YdacoZXA1jIgzxFgdxShhTvmfvRn21ul81j5rzv19R9YjT4qVwaq1bNEwI5pmsvORqbJoFY5TKut2wtlD/cp4ASfpn9tSvNUcDWHLrvxA5GEEUOTngpHiwHw==;5:rXjWaCIagNgBNoRyYt/BSeirwFkmIWUGiMVx/qtngbF0CWrfSUjsQ5uzkumggNZt5TB6KOH5db1pU6X64oG9Ihax7UzLvWtyw18ZIk3gWyJwtd6Y6HZpfKs1V8Z5bDfD1TewKRM1w4Lbx9BcnrSpNg==;24:6vrN9gpBnHwuytdArw4AkSqUxjfDIq21h1w3+IAXHP9E2s60bv/oqBJXwAB8KaOgT4BhSGea9hBPOW6hSPXGRQ==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: sondick.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Dec 2015 13:40:58.6624
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR14MB0639
X-CTCH-RefID: str=0001.0A020202.566D7579.012D,ss=3,re=2.101,recu=0.000,reip=0.000,pt=F_35437826,cl=4,cld=1,fgs=512
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 2.101
X-CTCH-Rules: ADVANCE_FEE_3_NEW,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 512
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=MfhV5fPf c=1 sm=1 tr=0 p=vP-FX_Lu_xYA:10 p=rrGDxr2zr-sA:10
p=5u01X-8SyLaLAz8WnDoA:9 p=sdYdl-ZDpgDj8Mlb:21 p=kD3EDzDEpxIWO5Z4:21
a=AGnDArU8SCLD9QRY91qORA==:117 a=fI+3JzyEfaCmLJFKQlUs2w==:17
a=UqCG9HQmAAAA:8 a=g0qM3YM6AAAA:8 a=pGLkceISAAAA:8
a=5ymUohdta1pW31WVSzKtNN4aY2Y=:19 a=BL6m1aL7Tn0A:10 a=0zpF0FfzTHcA:10
a=8nJEP1OIZ-IA:10 a=wUQvQvOEmiQA:10 a=wPNLvfGTeEIA:10 a=l24TSl8M5IEA:10
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail52c28.carrierzone.com id tBDDfAjS029708
Dear Beneficiary,
After proper and several investigations and research at Western Union and Money Gram Office, we found your name in Western Union database among those that have sent money through Western Union and this proves that you have truly been swindled by those unscrupulous persons by sending money to them through Western Union/Money Gram in the course of getting one fund or the other that is not real.
In this regard a meeting was held between the Board of Directors of WESTERN UNION, MONEYGRAM, the FBI alongside with the Ministry of Finance, As a consequence of our investigations it was agreed that the sum of Two Hundred and Fifty Thousand United States Dollars (U.S.250,000.00) should be transferred to you out from the funds that The United States Department of the Treasury has set aside as compensation payment for scam victims.
This case would be handled and supervised by the FBI. We have submitted your details to them so that your funds can be transferred to you. Contact the Western Union agent office through the information below:
Contact Person: Vickie Kreis
Address:Western Union Post Office, California
Email: [email protected]
Yours sincerely,
James Comey
Return-Path: <MAILER-DAEMON>
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1hn0250.outbound.protection.outlook.com [157.56.110.250])
by mail52c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id tBDDfAjS029708
for <>; Sun, 13 Dec 2015 08:41:13 -0500
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from Energy-ts.em.local (50.245.31.33) by
SN1PR14MB0639.namprd14.prod.outlook.com (10.164.45.29) with Microsoft SMTP
Server (TLS) id 15.1.355.16; Sun, 13 Dec 2015 13:40:58 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** RE:WESTERN UNION/ MONEY GRAM HURRY!!! 14/12/2015,
To: wiiner
From: Western.Union.Post.Office
Date: Sun, 13 Dec 2015 08:40:23 -0500
Reply-To: <[email protected]>
X-Originating-IP: [50.245.31.33]
X-ClientProxiedBy: DM2PR0801CA0012.namprd08.prod.outlook.com (25.162.18.22) To
SN1PR14MB0639.namprd14.prod.outlook.com (25.164.45.29)
Message-ID: <SN1PR14MB06395B702DEC49EF89F18A27B8EC0@SN1PR14MB0639.namprd14.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:
1;SN1PR14MB0639;2:DZ45Ozo4ym6ZmSiHXOMY3wzA+t/3LHjkxr7jXJ46+Mv+HYn4mCRnCgYf7vOxqQl10nsfkTBjB4z8IGZVxuKyluwvvbyu2Bab9xNuKTXjeWgpiDhtvsuiNO0QZnwpf0STCGyOCi/WtlADYm6uFLYZAQ==;3:Sz4vFVKftpK0OqeVUOU/x/FWXOmOUjs07p857SJggF9y+1h1GOOZoL1+5Qdw/idS48DCBtGjmmAMjV8yV9AA5QZqTgWL+cy45dMz+f/P/IkOfzG6Z3ANT0zhuI7k8GJo;25:LW/uhSdRA+9RDW3E8qFdpFD0qNPWAgppTgoDJwvSvU6w3toF872UDqMWz/hnI5XFGsw0EHw857CI1bRrskIetLQR7FEYTIKi6VE0mbH7Napd/yZfdZwdKWXd7u6KMVpFhMtCvrYC5KAUkEN473VuuEHmC44taDrPvrEOtkBm9ueMl8bpIdQEr75VUbuCt2etr8Nn6r/C+LYG1zAXwOrhJbWgr/LP/GMNCzDmhksNHS3TF7ePg9UG95v4jtv2h4JXxsyj4CmZeeEFpYZYWhO4uw==;4:aVQRUToC11zYs+JMdSHV17U/Uwvc94baX8qsbFlj45gDyPjkeV75Xy9n0IVhVG7i5R/afLZneuRBZ8TXSSzXH/lthZCVW69V6b8x097CkZ7da5CYJHn+bBq/yewQLfX/eFMt9P6Yor+J3DfYEkIRSyt1u6VNtFpJRfHylVA3qyCA2gIZzwCVvhKLotsireP5Pzo+a+REcGpfMfPUSoMRKA0ZJV3HSaJofwlpibCnUqU8/2uNdxUEA6jDKe99eYgr7jEIgxkfALw8dovEdvbO5E7x1t+yRnlUM6x3O6gJ3+ziHEWfllHuDykvYWSHr/jFI4ZZ9CqlLkDOvZkDkBg0nnJEE5mrsswPG7rAPUQ0XcT/TAT3XqlNJOQVGJk4z0uo
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR14MB0639;
X-Microsoft-Antispam-PRVS: <SN1PR14MB0639EF47DDE8F10A5431406DB8EC0@SN1PR14MB0639.namprd14.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:SN1PR14MB0639;BCL:0;PCL:0;RULEID:;SRVR:SN1PR14MB0639;
X-Forefront-PRVS: 07891BF289
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:SN1PR14MB0639;H:Energy-ts.em.local;FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: none (mail52c28: domain of does not provide an SPF record) client-ip=157.56.110.250; envelope-from=postmaster@;
Received-SPF: None (protection.outlook.com: Energy-ts.em.local does not
designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;SN1PR14MB0639;23:b6/P9xGAHafS1uY1ff7oCoNeorUJbfJMmV4j1KIORoqKN+HPKoSWoTJ6/UVTFdny4dtIQL5/6HaA0/WlsX0W/eh9GTIBmxZqIow+he2MUglSB2fVrSgI4P43SwD7v/h898vVFdpd7v5vTnFeM1fxsXvZZOv7e/YdacoZXA1jIgzxFgdxShhTvmfvRn21ul81j5rzv19R9YjT4qVwaq1bNEwI5pmsvORqbJoFY5TKut2wtlD/cp4ASfpn9tSvNUcDWHLrvxA5GEEUOTngpHiwHw==;5:rXjWaCIagNgBNoRyYt/BSeirwFkmIWUGiMVx/qtngbF0CWrfSUjsQ5uzkumggNZt5TB6KOH5db1pU6X64oG9Ihax7UzLvWtyw18ZIk3gWyJwtd6Y6HZpfKs1V8Z5bDfD1TewKRM1w4Lbx9BcnrSpNg==;24:6vrN9gpBnHwuytdArw4AkSqUxjfDIq21h1w3+IAXHP9E2s60bv/oqBJXwAB8KaOgT4BhSGea9hBPOW6hSPXGRQ==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: sondick.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Dec 2015 13:40:58.6624
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR14MB0639
X-CTCH-RefID: str=0001.0A020202.566D7579.012D,ss=3,re=2.101,recu=0.000,reip=0.000,pt=F_35437826,cl=4,cld=1,fgs=512
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 2.101
X-CTCH-Rules: ADVANCE_FEE_3_NEW,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 512
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=MfhV5fPf c=1 sm=1 tr=0 p=vP-FX_Lu_xYA:10 p=rrGDxr2zr-sA:10
p=5u01X-8SyLaLAz8WnDoA:9 p=sdYdl-ZDpgDj8Mlb:21 p=kD3EDzDEpxIWO5Z4:21
a=AGnDArU8SCLD9QRY91qORA==:117 a=fI+3JzyEfaCmLJFKQlUs2w==:17
a=UqCG9HQmAAAA:8 a=g0qM3YM6AAAA:8 a=pGLkceISAAAA:8
a=5ymUohdta1pW31WVSzKtNN4aY2Y=:19 a=BL6m1aL7Tn0A:10 a=0zpF0FfzTHcA:10
a=8nJEP1OIZ-IA:10 a=wUQvQvOEmiQA:10 a=wPNLvfGTeEIA:10 a=l24TSl8M5IEA:10
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail52c28.carrierzone.com id tBDDfAjS029708
Dear Beneficiary,
After proper and several investigations and research at Western Union and Money Gram Office, we found your name in Western Union database among those that have sent money through Western Union and this proves that you have truly been swindled by those unscrupulous persons by sending money to them through Western Union/Money Gram in the course of getting one fund or the other that is not real.
In this regard a meeting was held between the Board of Directors of WESTERN UNION, MONEYGRAM, the FBI alongside with the Ministry of Finance, As a consequence of our investigations it was agreed that the sum of Two Hundred and Fifty Thousand United States Dollars (U.S.250,000.00) should be transferred to you out from the funds that The United States Department of the Treasury has set aside as compensation payment for scam victims.
This case would be handled and supervised by the FBI. We have submitted your details to them so that your funds can be transferred to you. Contact the Western Union agent office through the information below:
Contact Person: Vickie Kreis
Address:Western Union Post Office, California
Email: [email protected]
Yours sincerely,
James Comey
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
