Mr. Jerry New [email protected] +229 99314098

Header Analysis Quick Report
Originating IP: 41.86.238.30
Originating ISP: Isocel Telecom
City: Porto-novo
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.6 with SMTP id t6csp1684371ioe;
Thu, 2 Apr 2015 19:17:57 -0700 (PDT)
X-Received: by 10.170.61.65 with SMTP id d62mr279082ykd.47.1428027476012;
Thu, 02 Apr 2015 19:17:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id n138si1554042ykb.157.2015.04.02.19.17.21
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 02 Apr 2015 19:17:56 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t332HF1H021886;
Thu, 2 Apr 2015 21:47:15 -0430
X-Matched-Lists: []
Received: from 41.86.238.30 ([41.86.238.30]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Thu, 2 Apr 2015 21:47:14 -0430 (VET)
Date: Thu, 2 Apr 2015 21:47:14 -0430 (VET)
From: jerry new <[email protected]>
Reply-To: [email protected]
To: <snipped>
Message-ID: <527970484.2078078.1428027435880.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: GOOD NEWS
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.238.30]

Attention,

We have deposited the check of your fund ($2.500`000`00USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Mr jerry new
via E-mail:([email protected] ) He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________

Though,Mr jerry new has sent $5000 in your name today so contact Mr jerry new or you call him +229 99314098 as soon as you receive this email and tell him to give you the Mtcn, sender name and
question/answer to pick the $5000 Please let us know as soon as you received all your fund,you will pay only $185 for transfer charge

Header Analysis Quick Report
Originating IP: 41.86.238.30
Originating ISP: Isocel Telecom
City: Porto-novo
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.194.89.193 with SMTP id bq1csp3908561wjb;
Tue, 7 Apr 2015 02:52:10 -0700 (PDT)
X-Received: by 10.66.66.196 with SMTP id h4mr34434737pat.127.1428400329585;
Tue, 07 Apr 2015 02:52:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omr-m04.mx.aol.com (omr-m04.mx.aol.com. [64.12.143.78])
by mx.google.com with ESMTPS id ye10si10545058pbc.165.2015.04.07.02.52.08
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 07 Apr 2015 02:52:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.143.78 as permitted sender) client-ip=64.12.143.78;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.143.78 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-mbd02.mx.aol.com (mtaomg-mbd02.mx.aol.com [172.26.252.16])
by omr-m04.mx.aol.com (Outbound Mail Relay) with ESMTP id 0FA91700000AA
for <<snipped>>; Tue, 7 Apr 2015 05:52:08 -0400 (EDT)
Received: from core-mha07d.mail.aol.com (core-mha07.mail.aol.com [172.27.110.7])
by mtaomg-mbd02.mx.aol.com (OMAG/Core Interface) with ESMTP id C8E9D38000081
for <<snipped>>; Tue, 7 Apr 2015 05:52:07 -0400 (EDT)
Received: from 41.86.238.30 by webprd-a94.mail.aol.com (10.72.96.227) with HTTP (WebMailUI); Tue, 07 Apr 2015 05:52:07 -0400
Date: Tue, 7 Apr 2015 05:52:07 -0400
From: Jerry New <[email protected]>
To: <snipped>
Message-Id: <[email protected]>
In-Reply-To: <CA+67fMh4Grg=_Zw_SHdqAJmPsZ_O3Q+KZ-E6R27+zROMF23uAQ@mail.gmail.com>
References: <CA+67fMh4Grg=_Zw_SHdqAJmPsZ_O3Q+KZ-E6R27+zROMF23uAQ@mail.gmail.com>
Subject: Re: GOOD NEWS
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
X-Mailer: JAS STD
X-Originating-IP: [41.86.238.30]
x-aol-global-disposition: G
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1afc105523a8c74903

It has been mandated by the ministry that due to some odd activities
going on around the country which has actually tarnished the image of
this great nation it is now a must that the beneficiary should endorse
the official Fund Release Order document through an accredited
attorney on your behalf though if you can report in person that will
be perfect and acceptable to the management. Take note that you are
expected to offset the cost of the process on the amount of $ 185 ..00USD
only to enable the attorney work as the authority demands. We have
also sent a report to the board of directors of (IMF) who is in charge
of this payment exercise I believe they will confirm that to you
shortly as we move to the next level.

It has been scheduled that as soon as the process is completed on your
behalf the first payment will be completed and transferred in your
favor within 5hours of confirming your payment. Before making the
payment you are required to reconfirm your details as stated below to
enable us serve you better on this programmer:

FULL NAME………………………………

ADDRESS…………………………………..

PHONE NUMBER…………………………..

TEXT QESTION ……………………………?

ANWSER……………………………………?


NOTE :The IMF commission who set up this payment programmer is now
waiting for confirmation so hasten up and give the agent a call to
proceed on your funds once you make the payment so he will process
your funds at once.

Please for us to facilitate your first payment asap you are to hasten
up with the required $ 185 ..00USD
through the service of our great firm Western Union Transfer nearest
to you and furnish us with the MTCN.Use the information below to make
the payment:

Receivers name: JAMES UZO .
Country: Republic OF Benin.
City: Cotonou.
Text question: Year?
Text answer: 2015.
MTCN: .............................. ..........
SENDERS NAME: ......................
Amount:$185.00USD

Jerry New
[email protected]

Header Analysis Quick Report
Originating IP: 41.79.217.155
Originating ISP: Spacetel
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.194.89.193 with SMTP id bq1csp3802389wjb;
Fri, 17 Apr 2015 03:13:31 -0700 (PDT)
X-Received: by 10.229.28.9 with SMTP id k9mr2532454qcc.9.1429265610784;
Fri, 17 Apr 2015 03:13:30 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omr-m02.mx.aol.com (omr-m02.mx.aol.com. [64.12.143.76])
by mx.google.com with ESMTPS id r96si11168154qkr.92.2015.04.17.03.13.30
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 17 Apr 2015 03:13:30 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.143.76 as permitted sender) client-ip=64.12.143.76;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.143.76 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-mab02.mx.aol.com (mtaomg-mab02.mx.aol.com [172.26.249.84])
by omr-m02.mx.aol.com (Outbound Mail Relay) with ESMTP id ED3F6700000B8
for <<snipped>>; Fri, 17 Apr 2015 06:13:29 -0400 (EDT)
Received: from core-mha05g.mail.aol.com (core-mha05.mail.aol.com [172.27.110.5])
by mtaomg-mab02.mx.aol.com (OMAG/Core Interface) with ESMTP id B3F6438000081
for <<snipped>>; Fri, 17 Apr 2015 06:13:29 -0400 (EDT)
References: <CA+67fMgDWv_aPW-gxyO10bgEgQboJ1+6Gg2Nfr9a70EgOCFJqA@mail.gmail.com>
To: <snipped>
Subject: hello how are you doing
In-Reply-To: <CA+67fMgDWv_aPW-gxyO10bgEgQboJ1+6Gg2Nfr9a70EgOCFJqA@mail.gmail.com>
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Jerry New <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8D2470E493FB514_1C10_882C8_webmail-va115.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 41.79.217.155 by webmail-va115.sysops.aol.com (205.188.107.110) with HTTP (WebMailUI); Fri, 17 Apr 2015 06:13:29 -0400
Message-Id: <[email protected]>
X-Originating-IP: [41.79.217.155]
Date: Fri, 17 Apr 2015 06:13:29 -0400
x-aol-global-disposition: G
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1af9545530dcc96781

hello how are you doing regarding to the last email i received from you i want you to understand that once you send this 185 usd today that you will not pay any dime again and you will be happy with me so try do not go to western union again use Money gram or Ria transfer to make the payment ok.also my promise to you is that you will not lose or regret anything and if you make this payment today and you did not receive your payment of 5000 dollars let my first son die .this is to tell you that you will not lose anything on this deal ok.try and send the 185 usd and get back to me with the payment information.

PAYMENT INSTRUCTION (WESTERN UNION MONEY TRANSFER).

Receivers name...............CYRILLE MONTCHO
Country....................... ..Benin Republic
Question...................... .. In God
Answer........................ ...We trust
Amount........................ ...185 usd

Money transfer control number (MTCN)
Senders Name
Senders address.

best regards
Jerry new
+229 99732892

=================================================================================
==========================================================================

The phone number he is using, +229 99732892 is also being used in a phishing email sent to the same email address that Jerry New is emailing:

Mrs Susan Kelly [email protected] +229 73 28 92 (phone number is at the bottom of the email) so I'm sure these two are coming from the same person.

(sorry, I don't have the headers anymore)

Originating IP: 41.79.217.121
Originating ISP: Spacetel
City: n/a
Country of Origin: Benin

from: Email service provider <[email protected]>
to:
cc:
date: Fri, Apr 17, 2015 at 3:47 AM
subject: Attention ,
mailed-by: inbox.lv
signed-by: inbox.lv

FEDERAL MINISTRY OF
FINANCE
NATIONAL HOUSE OF ASSEMBLY COMPLEX
SENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENIN
Our Ref: FGN /SNT/STB
Email us at:[email protected]

Attention,

Got your mail details and the payment details is well noted
but I wish to inform you that your fund is on transit into
your bank account and your transfer slip is attached, But an
alert was receive from the United State Monitoring Fund
Agency this Morning that you have been involve with scammers
and hacker activities for the past years and they have
access to all your details that is why the United state
Monitoring Fund Agency will not allow your fund to clear
into your bank account.

Note that your bank account details has been verified and
confirmed free from hackers but your fund cant clear into
your account until we verify all your e-mail id account free
from scammers and hackers because your fund access alert
CODE will be sent to all your email through your fund
account and if your access CODE is hackered by scammers that
means they will have access to your fund and also to our
payment account.

So you are warned to get back to us urgently with all your
access E-Mail password and User Name for scam and hacker
free verification.

Your E-Mails box and Password:
Password:
Secret question:
Secret Answer:

Alternative Email:
Alternative Email password:

Also get back to us with your direct tel phone or cell phone
number to enable call you to go and check your bank account
for clarification once your fund is cleared in.


Note: we have nothing to do with your E-Mail and Password we
just want to make sure your fund get to you now without any
problem OK You can change your password after you
immediately you get your fund into your account if you like.
But for now we cant proceed with your fund release in your
account until all your email box and password is confirm
from you.

Thanks for your understanding please comply and we wish to
saver you for a better future.


Send your reply only at:[email protected]

Best Regards.

Mrs susan Kelly

Tel/ +229 73 28 92.
My email id:[email protected]

New script from the same email address: [email protected]

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.175.80 with SMTP id y77csp1278377wle;
Sat, 20 Jun 2015 17:53:42 -0700 (PDT)
X-Received: by 10.68.69.110 with SMTP id d14mr45283116pbu.96.1434848021301;
Sat, 20 Jun 2015 17:53:41 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omr-m07.mx.aol.com (omr-m07.mx.aol.com. [64.12.143.81])
by mx.google.com with ESMTPS id tb2si23131540pab.75.2015.06.20.17.53.40
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 20 Jun 2015 17:53:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.143.81 as permitted sender) client-ip=64.12.143.81;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.143.81 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-mab02.mx.aol.com (mtaomg-mab02.mx.aol.com [172.26.249.84])
by omr-m07.mx.aol.com (Outbound Mail Relay) with ESMTP id CE5A870035449;
Sat, 20 Jun 2015 20:53:39 -0400 (EDT)
Received: from core-mha07b.mail.aol.com (core-mha07.mail.aol.com [172.27.110.7])
by mtaomg-mab02.mx.aol.com (OMAG/Core Interface) with ESMTP id A3DCC38000081;
Sat, 20 Jun 2015 20:53:39 -0400 (EDT)
Received: from 41.86.234.165 by webprd-m43.mail.aol.com (10.74.56.227) with HTTP (WebMailUI); Sat, 20 Jun 2015 20:53:39 -0400
Date: Sat, 20 Jun 2015 20:53:39 -0400
From: Jerry New <[email protected]>
Message-Id: <[email protected]>
Subject: money transfer
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_60900_1072147566.1434848019580"
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
X-Mailer: JAS STD
X-Originating-IP: [41.86.234.165]
x-aol-global-disposition: G
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1af95455860b1364bf

Send Money World Wide
From The Western Union Cash Transfer
Office address:No 455 paperbark,carer,rani
carefree,turbocharger,road Cotonou Benin)

Congratulation To You Beneficiary,

OFFICIAL NOTICE FROM THE (FMF) FEDERAL MINISTRY OF FINANCE BENIN,

This is to let you know that we finally concluded to effect your compensation winning prize payment of $2.5Million US Dollars via western union transfer as the best and easy way to transfer your fund at any nearest western union office in your country is the best and easy way to transfer your fund, well based on my agreement with the western union management,

The amount will receiving every day is $5,000 dollars until the total amount of your fund is completely transferring to you, I want you to contact western union director for your transfer his name is Mr Christian Kelly

Contact Personal director Mr Christian Kelly

Your first Payment has been sent MTCN:#325-148-9783 Note: this payment was directed to be made available in your full information immediately you reconfirmed your full information as the following below

Your Full Name:............................
Your Home Address:.........................
Your Country/ City:.............................
Your Age:....................................
Your Sex:........................................
Your Direct Phone Number:..........................
Your ID copy:............................

Your fund amount deposited in western union office is Two Million Five Hundred Thousand United State Dollars,Remember to indicate the registration code of EB8053 to him when emailing him also he will sending your money,

Remain Bless
Yours Sincerely
Mrs Cindy Raphael


Sebelumnya Berikutnya

New script from the same email address: [email protected]

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.175.80 with SMTP id y77csp1278010wle;
Sat, 20 Jun 2015 17:52:10 -0700 (PDT)
X-Received: by 10.68.142.232 with SMTP id rz8mr44939816pbb.117.1434847929727;
Sat, 20 Jun 2015 17:52:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from omr-m01.mx.aol.com (omr-m01.mx.aol.com. [64.12.143.75])
by mx.google.com with ESMTPS id b5si23145047pdn.44.2015.06.20.17.52.08
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 20 Jun 2015 17:52:09 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.143.75 as permitted sender) client-ip=64.12.143.75;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.143.75 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-mcb01.mx.aol.com (mtaomg-mcb01.mx.aol.com [172.26.50.175])
by omr-m01.mx.aol.com (Outbound Mail Relay) with ESMTP id BF97C7000008B;
Sat, 20 Jun 2015 20:52:07 -0400 (EDT)
Received: from core-mha07b.mail.aol.com (core-mha07.mail.aol.com [172.27.110.7])
by mtaomg-mcb01.mx.aol.com (OMAG/Core Interface) with ESMTP id 8ED7938000083;
Sat, 20 Jun 2015 20:52:07 -0400 (EDT)
Received: from 41.86.234.165 by webprd-m43.mail.aol.com (10.74.56.227) with HTTP (WebMailUI); Sat, 20 Jun 2015 20:52:07 -0400
Date: Sat, 20 Jun 2015 20:52:07 -0400
From: Jerry New <[email protected]>
Message-Id: <[email protected]>
Subject: ATTENTION: MY DEAR FRIEND
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_60889_854784024.1434847927409"
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
X-Mailer: JAS STD
X-Originating-IP: [41.86.234.165]
x-aol-global-disposition: G
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1a32af55860ab72ea0

Mueller, Comey, Obama at White House
James Comey, Senior Office Department
Federal Bureau Of Investigation FBI.WASHINGTON DC
Know More About Me:
http://www.fbi.gov/about-us/executives/director
I just received an update from Mr Monday Imoh this morning regarding the shipping update of your package and he also told me he will assist you with some part of the charge fee and this is the best he can do for now. I know you have spent a lot recently but you need to know this is the last fee required and once the fee is paid Mr. Dennis Next flight will be this evening and i want him to act as your diplomat and deliver the package to you.

TRY YOUR BEST AND GET A LOAN OF $100 FROM A FRIEND OR RELATION AND PROMISE TO PAY THEM BACK WITHIN 48 HOURS SO THIS TRANSACTION CAN COME TO AN END TODAY AND ONCE THE CHARGE FEE IS PAID YOUR PACKAGE WILL BE DELIVERED TO YOU WITHIN THE NEXT 48 HOURS. YOUR PACKAGE DETAILS A VISA CREDIT CARD WHICH CONTAIN $22 MILLION USD AND THE 2ND CONTAIN A VERIFIED BANK OF AMERICA CASHIER CHECK WHICH CONTAIN $5 MILLION USD WITH ALL BACK UP DOCUMENT EVERYTHING WAS MADE IN YOUR NAME AND ADDRESS AND THE PACKAGE INCLUDE AN INSTRUCTION ON HOW TO MAKE WITHDRAW WORLD WIDE AND ALSO CASH-OUT THE CHECK WITHIN 18 HOURS BECAUSE IT IS VERIFIED CASHIER CHECK.

Use the details below to send the fee $100 USD via western union to the U.S embassy official agent Mr Monday Imoh
once you receive this email so everything can come to an end.

Receivers name: CYRILLE MONTCHO .
Country: Republic OF Benin.
City: Cotonou.
Text question: Year?
Text answer: 2015.
MTCN: .............................. ..........
SENDERS NAME: ......................
Amount:$105.00USD

Once payment is made get back to me with the required payment confirmation details so i can forward it to him and i will instruct him to board the next available flight once the required fee is paid. Await your reply and the required payment confirmation details.

James Comey, Senior Office
Department Federal Bureau Of Investigation
FBI.WASHINGTON DC
Know More About Me: http://www.fbi.gov/about-us/executives/director