2019104_PHISHING_SCAM_1

Attention:

This is to inform you that the America Embassy office was instructed
to transfer your fund $985,000.00 U.S Dollars compensating all the
SCAM VICTIMS and your email was found as one of the VICTIMS. by
America security leading team and America representative officers so
between today till 1st Of December 2019 you will be receiving the sum
of $5000dollars per day. However be informed that we have already
sent the $5,000 dollars this morning to avoid cancellation of your
payment, remain the total sum of $985,000.00.

You have only six hours to call this office upon the receipt of this
email the maximum amount you will be receiving per a day starting from
today's $5,000 and the Money Transfer Control Number of today is
below.

NOTE; The sent $5,000 is on hold because of the instruction from IMF
office, they asked us to place it on hold by requesting the (Clean
Bill Record Certificate) in order to fulfill all the necessary
obligation to avoid any hitches while sending you the payment through
Western Union money transfer, the necessary obligation i mean here is
to obtain the (Clean Bill Record Certificate)

Below is the information of today payment and you can track it to see
is available to pick up by the receiver, you can track it with our
wedsite ( https://www.westernunion.com/global-service/track-transfer )

1)Senders Name:: Holly Waldon
2)MTCN Number::: 524-397-9773
3)Amount::: $5000.00 USD.
4)Test Question: Color
5)Answer: Blue

We need the below details from you, to enable us place the payment to
your name and transfer the fund to you.

(Full Receivers name).................
( Address)....................
(Phone Number)..........
(Your Age).............
(OCCUPATION ).........

( [email protected] )
Thanks Rev. Dr. John Wool



Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Tue, 3 Dec 2019 17:37:38 -0600
Received: from MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Tue, 3 Dec 2019 17:37:37 -0600
Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
 MBX09C-ORD1.mex08.mlsrvr.com (172.29.9.34) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Tue, 3 Dec 2019 17:37:37 -0600
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [183.93.159.29]
Authentication-Results: smtp37.gate.ord1c.rsapps.net; iprev=pass policy.iprev="183.93.159.29"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="mail.xyrtv.com"; dkim=none (message not signed) header.d=none; dmarc=fail (p=quarantine; dis=quarantine) header.from=mail.new.thebub.net
X-Suspicious-Flag: YES
X-Classification-ID: e2df67b8-1625-11ea-8f11-525400e8d833-1-1
Received: from [183.93.159.29] ([183.93.159.29:51657] helo=mail.xyrtv.com)
	by smtp37.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTP
	id 99/3A-05228-1C1F6ED5; Tue, 03 Dec 2019 18:37:37 -0500
Received: from User (unknown [172.31.0.1])
	by mail.xyrtv.com (Postfix) with SMTP id 90D13411EB25;
	Tue,  3 Dec 2019 13:12:02 +0800 (CST)
Message-ID: <[email protected]>
Reply-To: <[email protected]>
From: "Rev. Dr. John Wool" <[email protected]>
Subject: Attention: 29
Date: Tue, 3 Dec 2019 05:30:07 -0800
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: Undisclosed recipients:;
X-MS-Exchange-Organization-Network-Message-Id: 7080bc26-3852-486d-26da-08d77849c7e0
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1553500;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX09C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit