20220830_PHISHING_SCAM_1

We have concluded to Send your payment through Western Union money
transfer $5000.00 daily until the total fund of ($3.7MILLION ) is
completely transferred. Meanwhile, MR. HENRY OSO has Send you
$5000.00 in your name today. So contact MR. HENRY OSO, through
Western Union money transfer payment Agent to SEND you the Reference
Number to pick up this $5000 now:

CONTACT PERSON: MR. HENRY OSO
Cell him
Whats-App Or call (+229) 64101280
Email Address:([email protected])

Please remember to Call and ask him to give you the Reference Number,
sender name, question and answer to pick up the $5000.00. Also you
should send to him your information to cross check it to avoid
mistake.

Receiver's Name________________
Address: ______________________
Country: ______________________
Phone Number: _________________
Your Occupation _______________
I.D Card:______________________

Though, Mr. Henry Oso has sent $5000 in your name today so contact
MR. HENRY OSO Cell him Whats-App Or call (+229) 64101280 as soon as you
receive this email and tell him to give you the Reference Number,
sender name and question/answer to pick the $5000 Please let us know
as soon as you received all your fund,

Best Regards.
Kevin Osah



Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.36 via Mailbox Transport; Tue, 30 Aug 2022 03:38:03 -0500
Received: from MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1497.36; Tue, 30 Aug 2022 03:38:03 -0500
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) with Microsoft SMTP Server (TLS)
 id 15.0.1497.36 via Frontend Transport; Tue, 30 Aug 2022 03:38:03 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp35.gate.iad3a.rsapps.net x-tls.subject="/CN=smtp.gmail.com"; auth=pass (cipher=AES128-GCM-SHA256)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [209.85.160.48]
Authentication-Results: smtp35.gate.iad3a.rsapps.net; iprev=pass policy.iprev="209.85.160.48"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="mail-oa1-f48.google.com"; dkim=pass header.d=gmail.com; dmarc=pass (p=none; dis=none) header.from=gmail.com
X-Suspicious-Flag: NO
X-Classification-ID: 0f8d2754-283f-11ed-85cb-52540083445f-1-1
Received: from [209.85.160.48] ([209.85.160.48:40867] helo=mail-oa1-f48.google.com)
	by smtp35.gate.iad3a.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES128-GCM-SHA256
	subject="/CN=smtp.gmail.com")
	id FB/02-27731-A6CCD036; Tue, 30 Aug 2022 04:38:03 -0400
Received: by mail-oa1-f48.google.com with SMTP id 586e51a60fabf-11f0fa892aeso6844202fac.7
        for <>; Tue, 30 Aug 2022 01:38:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
        bh=E30zsULYeMXKH/H1xpZu2GuAtqvy6I2IkYryAdekaC4=;
        b=ccYVcYx3igUTXiO+WI7B9ZadhULlvkZTNyrE8lE52C7Spk2QcVEt16nBp36yKyy/Jv
         3ccJZK+cgFEyeOw8Ui6WwYeoab0+XskmjexgM72jEAWhu2SVOSe8VaU0LNHIHJfh5mic
         eH6uGgcBPUdn5/Kj7BXKF8OHPhwKiW8bfpzHo9HodlJ5OzxqhmK5gpCrAHyCLK3AxsmG
         D7XAUuwWUYDKvEP15FMfX6lqBciTobRXBnQ9IZSoE4vL8VTh5lIV4tzuzcDsjR2grhrm
         gqRTI+6+0riWeMhR8ktPK7ZivVm3FylO540ks78PzVVIsCT/HIOHCaxN22I0t+vzPkiw
         pTGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:reply-to:mime-version
         :x-gm-message-state:from:to:cc;
        bh=E30zsULYeMXKH/H1xpZu2GuAtqvy6I2IkYryAdekaC4=;
        b=nTqkPd6qHpEdNRWPlpuFTIu9xn7+10PqkhrRXJT++/2dIzw1GDq47ePVAZrtMX9QG6
         cRn6dxoHsvperk7i6cKxB8QqxhUs6gIPvOY/b1apMBWspb3R/fXxFlsdawAXRA0DaUUP
         TsFO+TEoUv6MJfk+z6Dd6Y97JbUoDlFSdFGSDDfuHokB1i0Mb5VZFMNktgzt8wAb5YxB
         rU7meocxLwLwX4IUgaIGfI8nkxscPWgdkb5GusZ0B3o9BZZ1uC9KgwLJQPGdqHfNSyeM
         erxhalCcGVHHvQr5n/s+OHmGvK7fhZeR8uvGicXqZwDc6sE6kl/LxtB5hhzPLBRmGFD8
         p+vw==
X-Gm-Message-State: ACgBeo3xzoR8Le1fAeGqGM4HESmwYTEglwlS5IYc1Eaq3r4cTvGDzzXW
	K0DCiMK1WNPwP/Q9z1R7XteTdbRhphQW6hPYiNs=
X-Google-Smtp-Source: AA6agR6x2fqgXpqZRhxLnG7qglNHR/FzjEEt8+kt6c94ASGzfmPoVmJcWs0XhydWqIaE+aHoVPG3foRLZoDc1bcZbmE=
X-Received: by 2002:a05:6808:f8f:b0:344:c3d4:775e with SMTP id
 o15-20020a0568080f8f00b00344c3d4775emr8850041oiw.266.1661848681951; Tue, 30
 Aug 2022 01:38:01 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6838:36c7:0:0:0:0 with HTTP; Tue, 30 Aug 2022 01:38:01
 -0700 (PDT)
Reply-To: [email protected]
From: Kevin Osah <[email protected]>
Date: Tue, 30 Aug 2022 01:38:01 -0700
Message-ID: <CAPkq4YgumEQcC84C0tkL4VNNW4gHV2fMoCLWvr7OF-BtOBrEnw@mail.gmail.com>
Subject: GREETINGS FROM WESTERN UNION BOARD HEAD OFFICE
To: [email protected]
BCC: <>
X-MS-Exchange-Organization-Network-Message-Id: a048ca0d-2704-4552-d5b6-08da8a62f42f
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX12D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit