Customs Station Europe [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.216.41.18
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.130.220 with SMTP id m89csp209547ioi;
Fri, 9 Oct 2015 13:16:04 -0700 (PDT)
X-Received: by 10.140.148.203 with SMTP id 194mr18426883qhu.102.1444421764528;
Fri, 09 Oct 2015 13:16:04 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
by mx.google.com with ESMTPS id f73si3213170qkh.96.2015.10.09.13.16.04
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 09 Oct 2015 13:16:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) smtp.mailfrom=[email protected]
Received: from [41.216.41.18] by 3capp-mailcom-lxa02.server.lan (via HTTP);
Fri, 9 Oct 2015 22:16:04 +0200
MIME-Version: 1.0
Message-ID: <trinity-70b7c4fc-6c22-41bc-ae9c-d0e964fab789-1444421763546@3capp-mailcom-lxa02>
From: "Custom europe" <[email protected]>
To: <snipped>
Subject: Customs Station. For registration
Content-Type: text/html; charset=UTF-8
Date: Fri, 9 Oct 2015 22:16:04 +0200
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: <snipped>
X-UI-Out-Filterresults: <snipped>

Goods exported in a vessel/aircraft attract customs clearance at the port/airport of departure by particular vessel/aircraft and the owner of the goods are intended to present the following documents as generally required to be registered in our Customs Station before the goods can leave to any place.

Insurance document:$112
Import license:$97
Packed Delivery Order:$265
Total=$474

The mode of payment for the document is at the Western Union or Money Gram with the following reciever information_

Reciever First Name:CHIGBO
Reciever Middle Name: SOLOMON
Reciever Last Name: ANIEROBI
Test Question:GOOD
Answer:YES
Reciever Country/Address:26 Rue 1 Airport,Cotonou Benin.
Total Amount:$474

Sincerely,
Customs Station.
For registration


On Fri, Oct 9, 2015 at 8:49 AM, confirmation <[email protected]> wrote:
Some funds that was supposed to be delivered to your address were stopped by our office,contact us immediately Custom europe ([email protected])

[Tim Atem]

They're also using the email address [email protected]

Delivered-To: <snipped>
Received: by 10.107.130.195 with SMTP id m64csp245743ioi;
Tue, 13 Oct 2015 09:29:17 -0700 (PDT)
X-Received: by 10.67.23.165 with SMTP id ib5mr40766036pad.26.1444753757519;
Tue, 13 Oct 2015 09:29:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm37-vm7.bullet.mail.gq1.yahoo.com (nm37-vm7.bullet.mail.gq1.yahoo.com. [98.136.216.254])
by mx.google.com with ESMTPS id ir5si6132650pbb.212.2015.10.13.09.29.17
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 13 Oct 2015 09:29:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.136.216.254 as permitted sender) client-ip=98.136.216.254;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.136.216.254 as permitted sender) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 13 Oct 2015 16:29:16 -0000
Received: from [98.137.12.60] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 13 Oct 2015 16:26:27 -0000
Received: from [98.137.12.237] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 13 Oct 2015 16:26:27 -0000
Received: from [127.0.0.1] by omp1045.mail.gq1.yahoo.com with NNFMP; 13 Oct 2015 16:26:27 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 23648 invoked by uid 60001); 13 Oct 2015 16:26:27 -0000
X-YMail-OSG: <snipped>
Received: from [41.216.41.18] by web165505.mail.gq1.yahoo.com via HTTP; Tue, 13 Oct 2015 09:26:27 PDT
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/793 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Tue, 13 Oct 2015 09:26:27 -0700
From: europe customs <[email protected]>
Reply-To: [email protected]
Subject: Dear
To: <snipped>
MIME-Version: 1.0

Please be advised that your package needs to be delivered to your address, so do your best to recieve what belongs to you, i know you are not aware of it , but truly our records shows that you are the right owner of the package.

The mode of payment for the document is at the Western Union or Money Gram with the following reciever information_

Reciever First Name:CHIGBO
Reciever Middle Name: SOLOMON
Reciever Last Name: ANIEROBI
Test Question:GOOD
Answer:YES
Reciever Country/Address:26 Rue 1 Airport,Cotonou Benin.
Total Amount:$474

Sincerely,

Customs Station.
For registration

[Tim Atem]

More contact information:

TELEPHONE +229-61203977
FAX +229-61203971

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp1834419ion;
Tue, 20 Oct 2015 02:51:54 -0700 (PDT)
X-Received: by 10.140.18.240 with SMTP id 103mr2600868qgf.31.1445334714169;
Tue, 20 Oct 2015 02:51:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
by mx.google.com with ESMTPS id c8si1893603qkj.128.2015.10.20.02.51.53
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 20 Oct 2015 02:51:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) smtp.mailfrom=[email protected]
Received: from [23.235.227.109] by 3capp-mailcom-lxa10.server.lan (via
HTTP); Tue, 20 Oct 2015 11:51:53 +0200
MIME-Version: 1.0
Message-ID: <trinity-69ccce56-bf44-4da7-83e0-63f90b833afa-1445334713154@3capp-mailcom-lxa10>
From: "Custom europe" <[email protected]>
To: <<snipped>>
Subject: Re: your package under our control
Content-Type: text/html; charset=UTF-8
Date: Tue, 20 Oct 2015 11:51:53 +0200
Importance: normal
Sensitivity: Normal
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: <snipped>
X-UI-Out-Filterresults: <snipped>

Customs Stations in Cotonou, Benin
Carré 125, Rue Caporal Bernard Anani
01 B.P. 2012
Cotonou
Benin
TELEPHONE(+229) 61 20 39 77
FAX(+229) 61 20 39 71
EMAIL [email protected]

You are required to submit directly to us the proof of your payment regarding the clearance and isnurance of your package to enable the Expressman deliver your package this week,october by 5:00pm on Friday. If you run into any problems that will cause you delay, you need to speak to me this morning at the latest. I appreciate your cooperation with this.

Sincerely,
Mr James Knight
Head of Customs Station.
For registration