#277200 by buried under 419s
Thu Dec 03, 2015 2:06 pm
X-Spam-Flag: YES
Return-Path: <MAILER-DAEMON>
Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3hn0254.outbound.protection.outlook.com [157.55.234.254])
by mail240c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id tB39X2si010303
for <>; Thu, 3 Dec 2015 04:33:04 -0500
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [192.168.2.20] (191.5.0.50) by
AMSPR07MB294.eurprd07.prod.outlook.com (10.242.20.14) with Microsoft SMTP
Server (TLS) id 15.1.331.20; Thu, 3 Dec 2015 09:32:56 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** Dear beneficiary,
To: Recipients
From: "Mrs. Linda Walker"
Date: Thu, 3 Dec 2015 07:32:52 -0200
Reply-To: <[email protected]>
X-Originating-IP: [191.5.0.50]
X-ClientProxiedBy: CP1PR80CA0089.lamprd80.prod.outlook.com (25.164.113.15) To
AMSPR07MB294.eurprd07.prod.outlook.com (10.242.20.14)
Message-ID: <AMSPR07MB294995973C69FFEF60A9DFDB80D0@AMSPR07MB294.eurprd07.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics: 1;AMSPR07MB294;2:GhmKdc/X8Ksb+vq1RKKaZGWejQJC+wgWZhyDiBZof2Xl2JdljaZ+Ucme5iE9ftzycw1leNuptHWAAVo2An7UmVBqpA81Y428iW68U33veamLP5oE32qQMKGhwj7sp0NUGRFFsAvlI2u4qbgVBnF9+w==;3:ooa66JJf2Ivhd+v9+BYMTpeFsqxwY3s5cbkp1gytZjn/mmPAcT5+7HYBST0SLtN9K8IF/l6gv8fKTagqX8hgvJaWGaJyMzcSIR1UFbgEUopHnPJLre44Eh3eLmS/d0IC;25:2lsKVZ3HRHDbKfz4ydpz8SkL1c8hZB/Qqa3uDwexeA5XJ8iFpefOcCneM6xdBJsxiyP6f7p8QoHBkIEmgiuJhmYpzDWE4OMvdipY/apPW+VD3qP+Ab3u1tvo6NKC7mu8BSZ4L4YcbqAfjrqCsGtPZxE9/uj4TQ2+8AtLKzcScB664aP51ZCOebdbOhdppSGAyW8IQRF7M7df7AODI3pbvxeRESee8EkkdYv9Ul61m/TU4pfYkhQPMD/rlmprkmSH;4:zm/TzeO2AH3RzzLBY0eAFQeEUzFvoT7gBwRoxFClc3i9nlyKqYERCJ3FR5A96b0qXWRQhhxbIcw8afcYy5Xx+lz6ZadIofMpZL+ijmWTgPMOmcBsWYdfM8fQ9GHZKF4wyIJTrQBruq4lsu3589dgzSrFE7Jk7lJMdiOtwf4HHfj8MAJ/4fD2dWrk4V4WrisuZ8DDn1GBOVJ2eq385laPf3BzOjJ5Q7RiwDcMhW789ToyADHFxM94jBO/PWxRjyNnadfr0/nX+qQ3cscfqHmwY/9y2suVtVfydxvx8CorgjTUKHbQ1cIunlS5jI+GpsPbshQqgOHCPVm62G6zVPtTFxBEXW9lSmHngRwRI4ZxFnIIq7amRlvL9KpkmFVxLAaS
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB294;
X-Microsoft-Antispam-PRVS: <AMSPR07MB2944DAF603690E5A9247E9DB80D0@AMSPR07MB294.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(10201501046);SRVR:AMSPR07MB294;BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB294;
X-Forefront-PRVS: 077929D941
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6049001)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:AMSPR07MB294;H:[192.168.2.20];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: none (mail240c28: domain of does not provide an SPF record) client-ip=157.55.234.254; envelope-from=postmaster@;
Received-SPF: None (protection.outlook.com: [192.168.2.20] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;AMSPR07MB294;23:CYmZuLLOdPWowUkiUXD4jurza2CSo3GvKuFWeAIT6DWs7hLW3mrTxM95z9fpF8a2dhUwUuyWeDc/jKhkSVApOdOKUMnTnPvRFHke1tLyoLZu/N6V3rOVLYNxQeiy9XwpzVaamkPeCjxfdFQ65aYZVAKzCT3NRT0eSlO4K969VG229iYfpk4QReFgMWGX/CwvgGlDKUgSsCXTsZjGzPcDH3nkcMT8ZhhDqHdPb4mjHqapY+tfY/7ZDWTzL4rSHAI9OQVK5xGGkBTiLB6CdTY+l5VfKS9LOsan76PEirNZXNo=;5:YJ8Eosr4KFKuofXI77LSCvYR9c+/2RQq4XO8VKGW2Cp4Z4eYOt2LgListlLVC4AD9Exdx2+XAfWVDgvjGK+TUh2PRoWQItsSyLPaUafkAGBQrJA6SrhHozy9zHmpYPiRihjD69LT0Z5EslwtFjWiPQ==;24:Smrdf3Up73GXLcNTsJTX699YXL+l+6ttWhA6ghbwz30v1PUHfj5YkvvZEGUdHCJVis9/9fT/MkZGup7nRRQUPA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: oilman123.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Dec 2015 09:32:56.0152
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMSPR07MB294
X-CTCH-RefID: str=0001.0A020203.56600C51.0095,ss=3,re=2.100,recu=0.000,reip=0.000,pt=F_35437826,cl=4,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 2.100
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 0
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=aqiLV0pV c=1 sm=1 tr=0 p=sssea4LLmp0A:10 p=PM2mZ0GbMwUA:10
p=eUQCRg9WitBDA-NZj6cA:9 p=2pPt3_p2BmiC3FPD:21 p=TZWv1kDtNA8aDfDj:21
p=AeNdjZ_86FYA:10 p=RyeLIMCb0fUA:10 p=WyE6bkgo7xYA:10
a=XDM9gT2znexd0lu1ygTp2Q==:117 a=JGMtJsLcF8aecICqIfdt1g==:17
a=UqCG9HQmAAAA:8 a=g0qM3YM6AAAA:8 a=pGLkceISAAAA:8
a=5ymUohdta1pW31WVSzKtNN4aY2Y=:19 a=iWvgVHEi5IsA:10 a=6IZdqhH_mx4A:10
a=IkcTkHD0fZMA:10 a=wUQvQvOEmiQA:10 a=1x6M4AJSAAAA:8 a=QEXdDO2ut3YA:10
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail240c28.carrierzone.com id tB39X2si010303
Dear beneficiary,
My name is Mrs. Linda Walker and I work with the International Monetary Fund (IMF), I am writing you to let you know that finally your ATM Card worth $650,000.00 USD has been delivered through UPS to Mr. Hart Leroy, who works with the IMF where it is going to be activated before final delivery to your home address. You can use the tracking number with the tracking site below to track the ATM Card to be sure it has been delivered to Mr. Hart, for activation.
UPS Tracking number: 1z2876490390947593
UPS tracking site: http://wwwapps.ups.com/WebTracking/track
Below is the contact information to Mr. Hart Leroy
Contact Name: Mr. Hart Leroy
Contact E-mail: [email protected] Contact Number: +1 (360) 205-2254
You are to contact Mr. Hart with his email address above then he will guild you on how your Card will be activation and delivered to your home address.
Note: The only fee you are to send for the activation fee is just $150 USD so make sure you don’t send him more than $150 USD. Your card is already with him and you can track it with the tracking details given to you above for confirmation.
Congratulations once more.
Best Regards,
Mrs. Linda Walker
International Monetary Fund (IMF)
Return-Path: <MAILER-DAEMON>
Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3hn0254.outbound.protection.outlook.com [157.55.234.254])
by mail240c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id tB39X2si010303
for <>; Thu, 3 Dec 2015 04:33:04 -0500
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [192.168.2.20] (191.5.0.50) by
AMSPR07MB294.eurprd07.prod.outlook.com (10.242.20.14) with Microsoft SMTP
Server (TLS) id 15.1.331.20; Thu, 3 Dec 2015 09:32:56 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** Dear beneficiary,
To: Recipients
From: "Mrs. Linda Walker"
Date: Thu, 3 Dec 2015 07:32:52 -0200
Reply-To: <[email protected]>
X-Originating-IP: [191.5.0.50]
X-ClientProxiedBy: CP1PR80CA0089.lamprd80.prod.outlook.com (25.164.113.15) To
AMSPR07MB294.eurprd07.prod.outlook.com (10.242.20.14)
Message-ID: <AMSPR07MB294995973C69FFEF60A9DFDB80D0@AMSPR07MB294.eurprd07.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics: 1;AMSPR07MB294;2:GhmKdc/X8Ksb+vq1RKKaZGWejQJC+wgWZhyDiBZof2Xl2JdljaZ+Ucme5iE9ftzycw1leNuptHWAAVo2An7UmVBqpA81Y428iW68U33veamLP5oE32qQMKGhwj7sp0NUGRFFsAvlI2u4qbgVBnF9+w==;3:ooa66JJf2Ivhd+v9+BYMTpeFsqxwY3s5cbkp1gytZjn/mmPAcT5+7HYBST0SLtN9K8IF/l6gv8fKTagqX8hgvJaWGaJyMzcSIR1UFbgEUopHnPJLre44Eh3eLmS/d0IC;25:2lsKVZ3HRHDbKfz4ydpz8SkL1c8hZB/Qqa3uDwexeA5XJ8iFpefOcCneM6xdBJsxiyP6f7p8QoHBkIEmgiuJhmYpzDWE4OMvdipY/apPW+VD3qP+Ab3u1tvo6NKC7mu8BSZ4L4YcbqAfjrqCsGtPZxE9/uj4TQ2+8AtLKzcScB664aP51ZCOebdbOhdppSGAyW8IQRF7M7df7AODI3pbvxeRESee8EkkdYv9Ul61m/TU4pfYkhQPMD/rlmprkmSH;4:zm/TzeO2AH3RzzLBY0eAFQeEUzFvoT7gBwRoxFClc3i9nlyKqYERCJ3FR5A96b0qXWRQhhxbIcw8afcYy5Xx+lz6ZadIofMpZL+ijmWTgPMOmcBsWYdfM8fQ9GHZKF4wyIJTrQBruq4lsu3589dgzSrFE7Jk7lJMdiOtwf4HHfj8MAJ/4fD2dWrk4V4WrisuZ8DDn1GBOVJ2eq385laPf3BzOjJ5Q7RiwDcMhW789ToyADHFxM94jBO/PWxRjyNnadfr0/nX+qQ3cscfqHmwY/9y2suVtVfydxvx8CorgjTUKHbQ1cIunlS5jI+GpsPbshQqgOHCPVm62G6zVPtTFxBEXW9lSmHngRwRI4ZxFnIIq7amRlvL9KpkmFVxLAaS
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB294;
X-Microsoft-Antispam-PRVS: <AMSPR07MB2944DAF603690E5A9247E9DB80D0@AMSPR07MB294.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(10201501046);SRVR:AMSPR07MB294;BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB294;
X-Forefront-PRVS: 077929D941
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6049001)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:AMSPR07MB294;H:[192.168.2.20];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: none (mail240c28: domain of does not provide an SPF record) client-ip=157.55.234.254; envelope-from=postmaster@;
Received-SPF: None (protection.outlook.com: [192.168.2.20] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;AMSPR07MB294;23:CYmZuLLOdPWowUkiUXD4jurza2CSo3GvKuFWeAIT6DWs7hLW3mrTxM95z9fpF8a2dhUwUuyWeDc/jKhkSVApOdOKUMnTnPvRFHke1tLyoLZu/N6V3rOVLYNxQeiy9XwpzVaamkPeCjxfdFQ65aYZVAKzCT3NRT0eSlO4K969VG229iYfpk4QReFgMWGX/CwvgGlDKUgSsCXTsZjGzPcDH3nkcMT8ZhhDqHdPb4mjHqapY+tfY/7ZDWTzL4rSHAI9OQVK5xGGkBTiLB6CdTY+l5VfKS9LOsan76PEirNZXNo=;5:YJ8Eosr4KFKuofXI77LSCvYR9c+/2RQq4XO8VKGW2Cp4Z4eYOt2LgListlLVC4AD9Exdx2+XAfWVDgvjGK+TUh2PRoWQItsSyLPaUafkAGBQrJA6SrhHozy9zHmpYPiRihjD69LT0Z5EslwtFjWiPQ==;24:Smrdf3Up73GXLcNTsJTX699YXL+l+6ttWhA6ghbwz30v1PUHfj5YkvvZEGUdHCJVis9/9fT/MkZGup7nRRQUPA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: oilman123.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Dec 2015 09:32:56.0152
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMSPR07MB294
X-CTCH-RefID: str=0001.0A020203.56600C51.0095,ss=3,re=2.100,recu=0.000,reip=0.000,pt=F_35437826,cl=4,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 2.100
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 0
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=aqiLV0pV c=1 sm=1 tr=0 p=sssea4LLmp0A:10 p=PM2mZ0GbMwUA:10
p=eUQCRg9WitBDA-NZj6cA:9 p=2pPt3_p2BmiC3FPD:21 p=TZWv1kDtNA8aDfDj:21
p=AeNdjZ_86FYA:10 p=RyeLIMCb0fUA:10 p=WyE6bkgo7xYA:10
a=XDM9gT2znexd0lu1ygTp2Q==:117 a=JGMtJsLcF8aecICqIfdt1g==:17
a=UqCG9HQmAAAA:8 a=g0qM3YM6AAAA:8 a=pGLkceISAAAA:8
a=5ymUohdta1pW31WVSzKtNN4aY2Y=:19 a=iWvgVHEi5IsA:10 a=6IZdqhH_mx4A:10
a=IkcTkHD0fZMA:10 a=wUQvQvOEmiQA:10 a=1x6M4AJSAAAA:8 a=QEXdDO2ut3YA:10
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail240c28.carrierzone.com id tB39X2si010303
Dear beneficiary,
My name is Mrs. Linda Walker and I work with the International Monetary Fund (IMF), I am writing you to let you know that finally your ATM Card worth $650,000.00 USD has been delivered through UPS to Mr. Hart Leroy, who works with the IMF where it is going to be activated before final delivery to your home address. You can use the tracking number with the tracking site below to track the ATM Card to be sure it has been delivered to Mr. Hart, for activation.
UPS Tracking number: 1z2876490390947593
UPS tracking site: http://wwwapps.ups.com/WebTracking/track
Below is the contact information to Mr. Hart Leroy
Contact Name: Mr. Hart Leroy
Contact E-mail: [email protected] Contact Number: +1 (360) 205-2254
You are to contact Mr. Hart with his email address above then he will guild you on how your Card will be activation and delivered to your home address.
Note: The only fee you are to send for the activation fee is just $150 USD so make sure you don’t send him more than $150 USD. Your card is already with him and you can track it with the tracking details given to you above for confirmation.
Congratulations once more.
Best Regards,
Mrs. Linda Walker
International Monetary Fund (IMF)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces