Rev. Daniel AFrad [email protected]

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.176.218 with SMTP id g87csp1616563wli;
Mon, 15 Jun 2015 16:07:45 -0700 (PDT)
X-Received: by 10.70.49.73 with SMTP id s9mr51672412pdn.149.1434409664317;
Mon, 15 Jun 2015 16:07:44 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.jogjakota.go.id (mail.jogjakota.go.id. [203.30.237.98])
by mx.google.com with ESMTPS id ox1si19824271pdb.28.2015.06.15.16.07.42
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 15 Jun 2015 16:07:44 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 203.30.237.98 as permitted sender) client-ip=203.30.237.98;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 203.30.237.98 as permitted sender) [email protected];
dkim=temperror (no key for signature) [email protected]
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: <snipped>
DKIM-Signature: <snipped>
Received: (qmail 10919 invoked by uid 710); 16 Jun 2015 02:45:37 +0700
X-Qmail-Scanner-Diagnostics: from localhost by xenmail (envelope-from <[email protected]>, uid 702) with qmail-scanner-2.11
(mhr: 1.0. clamdscan: 0.98.4/20247. spamassassin: 3.2.5.
Clear:RC:1(127.0.0.1):.
Processed in 0.027143 secs); 15 Jun 2015 19:45:37 -0000
Received: from localhost (HELO mail.jogjakota.go.id) (127.0.0.1)
by mail.jogjakota.go.id with SMTP; 16 Jun 2015 02:45:37 +0700
Received: from 41.86.234.165
(SquirrelMail authenticated user [email protected])
by mail.jogjakota.go.id with HTTP;
Tue, 16 Jun 2015 02:45:37 +0700
Message-ID: <[email protected]>
Date: Tue, 16 Jun 2015 02:45:37 +0700
Subject: Attention for your immense benefits!!!
From: "Western union head office departmentRepublic of Benin." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

Western union money transfer agent locationPO
Box 6992 greenwood village, co 80155-6992cotonou,
Benin repdate:...03/06/2016

Attention for your immense benefits!!!

Information reaching us from our corporate headquarters through our
President now states that you have 72hours to effect payment of your
Compensation for the activation of your mtcn to enable you cash up your
first $5000.00 from your total (fund of $950.000.00 ) since you are
finding it difficult to make this payment, we have decided that you are to
go ahead and pay whatever you have for the activation fee Since you are
not able to come up with the required sum, timeis of the essence here.You
are to pay whatever you have for the activation fee,we will Activate your
mtcn upon receipt of this payment.

Be informed that you will have to pay the balance sum of your release
Order fee upon cashing up your first $5000.00 usd, also I am using This
medium to inform you that failure to pay the balance sum will leave us
with no option but to deactivate your mtcn of which you will receive and
can never cash up the balance sum i want you to send the activation fee
with the information bellow.

Send us the mtcn number immediately you send the money and immediately we
confirm the activation fee we will send you the first receipt of your
$5000.00 today Here are the information's where you can send any amount
you have at hand

Receiver::::::::::::Evans Oteh
country:::::::::Benin Republic.
city::::::::::::Cotonou.
question::::::::::::::as soon as?
answer::::::::::::possible.
amount::::::::::::::::any amount you have sent
mtcn:::::::::::::::::::::
sender name::::::::::::::::::::::::::
sender address:::::::::::::::::::
tel:::::::::::::::::::::::::::::::::::::::::::

Awaiting for your urgent email today. remember this code number which is
Meant for your security{w.p.trust god). I wish you good luck and happy new
MOUTH.

Yours in service
Director rev. fr. Daniel AFrad
Western union head office department Republic of Benin.
Foreign contractor payment office

[AlanJones]

From: Mr.Brian Moynihan - [email protected]
Reply-to: [email protected]
Tel. No.: +22998894255

Dear Beneficiary:

YOUR REF:CLAIMS/ATM/201

This is to bring to your notice that because of the impossibility of your fund transfer through the Western Union network, we have credited your total of $ 3.6millon Usd valid fund into an (ATM Card Number 506119102227445160) and I have paid the re-activation fee and the delivery of the ATM Card To you,I paid it because the ATM Card worth of $3,600,000.00 which I have registered it with delivery yesterday has less than Seven days to expire in the custody of the DHL Company and when it expires, the money will go into Federal Government treasury account.

With that we decided to help you pay off the money so that the ATM Card will not expire, because I trust that when you receive your ATM Card definitely you must pay me back my money and even compensate me for helping you.

Now I want you to contact DHL Express at:([email protected]) With your physical address you desire the delivery to be made so that they can deliver your ATM Card to your designated address without any delay.

Like I stated earlier, the crediting re-activation,delivery and the company registration charges has been paid by me, but we did not pay their official keeping fees since they refused,they refused and the reason is that they do not know when you are going to contact them and the demur- rage might have increased by then, They told me that their keeping fees $35 per day only,and I deposited it yesterday 3th november 2015.

Below is the Contact Information of the DHL, Express Customer Service Director Rev Daniela Frad, Email Address online: ([email protected]) Tel: +229- 9889 4255 Contact them today and also send them the security official keeping charge to avoid increase of their fees and let me know once you receive your ATM card, Important Notice, your ATM CARD package was registered as a gift so that the delivery agent will not know the content of your package okay.

Below is the Registration Information&#39;s of your ATM CARD SHIPMENT,
SHIPMENT CODE AWB 37XcS
REGISTERED TAG FCSCB77018.
SECURITY CODE SCAT/2012fedex/396/
TRANSACTION CODE 233/CYST/101/86048/
CERTIFICATE DEPOSIT CODE SCAT/BUN/lxiv/-08/02

Your faithfully
Mr David Alvarez
Acting Manager of Intercontinental Bank Plc

Same mail address, different script:

x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=none (sender IP is 123.30.210.120) [email protected]; dkim=permerror header.d=shop3t.com; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: zAH6qudPj1B0qFENDphWx/LpYOFaBPKMMdTYaiepM5qxa2oozMKcrL+KFRnjvnPwsbvE1c5rqBX427j+ehf995P/oefOozla2e4gOobGFwnm0dCAMJMP3/JzNVCSJMZQHLAjLxTqZtYa+50mdkw6eJEHbCY0BH3OTLHjduo3I7M0OSR40IJjjQ5SohxP5heIbFZK86rvcLO1Jd8PtnPNKNc4ug5i309/vS5xciGoUORsvdMjM5fPEA==
Received: from mail.webmail120.vmms.vn ([123.30.210.120]) by SNT004-MC1F24.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Fri, 30 Oct 2015 19:01:34 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=shop3t.com;
s=MDaemon; t=1446256868; x=1446861668; q=dns/txt; h=DomainKey-Signature:
Received:Received:Date:From:To:Subject:MIME-Version:Content-Type:
Message-ID; bh=Vi7xs1kYli+FCpKWCnxX6UF+K6iJIu/k5sKpHpT7uM8=; b=V
q0Cj+5ych6e5+Ffi7alu0/s9RX+uVRs2v9zeQN78aSYeHPB7KCXIUlKzWyNcBECO
+Mvz/O1vKcj4253ad58qKYwFQyEdtd9K7Fv2oAYoRo19tg7oPHktsr5iA9TCCZwX
GI7V2B9jG5EFjDrzDoHR82LlYqIci2Ng1IklU5B6lY=
DomainKey-Signature: a=rsa-sha1; s=MDaemon; d=shop3t.com;
c=simple; q=dns; h=from:message-id;
b=QSHZv8cQMqCVSfgOFM7omUizLggFLvw6pygpQvpfv84wcq8Op49w+ocwHm/Q
5QihW8nIWees3Cmnp0H6u97uHmO3qoDfTYkd9D0fzcfx4N45WbRORlfd1
PzSw49GKwlfZi8RHXgpqgDw6BCWdfw2fK9Tmim35+EJCH/p1nBC96E=;
Received: from WorldClient by mail.webmail120.vmms.vn (MDaemon PRO v12.5.4)
with ESMTP id md50000699885.msg;
Sat, 31 Oct 2015 09:01:06 +0700
X-Spam-Processed: mail.webmail120.vmms.vn, Sat, 31 Oct 2015 09:01:06 +0700
(not processed: message from trusted or authenticated source)
X-Authenticated-Sender: [email protected]
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
Received: from [41.86.234.165] by shop3t.com via WorldClient with HTTP;
Sat, 31 Oct 2015 09:00:53 +0700
Date: Sat, 31 Oct 2015 09:00:53 +0700
From: "Mr.Brian Moynihan" <[email protected]>
To:
Subject: BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1031-0200-53-03-PART_BREAK"
Message-ID: <[email protected]>
X-Mailer: WorldClient 12.5.6
Return-Path: [email protected]
X-OriginalArrivalTime: 31 Oct 2015 02:01:36.0321 (UTC) FILETIME=[12D5FB10:01D11380]

DEAR ESTEEMED CUSTOMER,

THE MANAGEMENT OF THE BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS HERE IN 100 N.TRYON ST CHARLOTTE,NC 28255 WISHES TO INFORM YOU THAT AFTER A BRIEF MEETING HELD BY THE BANK EXECUTIVES YESTERDAY,THE 29TH DAY OF OCT,2015 AT PRECISELY 8 A.M. EASTERN DAYLIGHT TIME(EDT), WE DEEM IT APPROPRIATE TO INTIMATE YOU THAT YOUR FUNDS WILL BE TRANSFERRED INTO THE UNITED STATES TREASURY ACCOUNT WITH THE JP MORGAN CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK DUE TO YOUR INABILITY TO COMPLETE THE TRANSACTION AND YOUR FAILURE TO MEET UP WITH A MINOR PAYMENT OBLIGATION.THE ACTUAL TRANSFER OF YOUR FUNDS($19,500,000.00) INTO THE GOVERNMENT ACCOUNT COMES UP NEXT WEEK.

THIS IS IN LINE WITH THE INSTRUCTIONS OF THE USA TREASURER,MRS.ROSA GUMATAOTAO RIOS THAT ALL UNCLAIMED FUNDS BE PAID INTO THE UNITED STATES GOVERNMENT TREASURY ACCOUNT AS UNSERVICEABLE FUNDS In COMPLIANCE TO SECTION 3 SUBSECTION 1(A) OF THE UNITED STATES FINANCIAL LAW ENACTED IN 2001 AFTER AN ATTACK ON OUR DEAR COUNTRY ON SEPTEMBER 11,2001.

FIND BELOW THE PROFILE OF THE BANKING INSTITUTION WHERE YOUR FUNDS WILL BE TRANSFERRED INTO FOLLOWING THE GOVERNMENT DIRECTIVE: NAME OF BANK: JP MORGAN CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK.JP MORGAN CHASE OFFICIAL BANKERS FOR THE UNITED STATES TREASURY.

DEPARTMENT
AC NO: 68302345093
ROUTING NO:021109593

ACCOUNT NAME:UNITED STATES TREASURY DEPARTMENT,USA NOTE THAT IF YOU STILL WISH TO RECEIVE YOUR FUNDS DO GET BACK TO US IMMEDIATELY SO THAT WE WILL REMOVE YOUR FUNDS TRANSFER FROM THE LIST OF THOSE TRANSACTIONS TO BE SEIZED BY THE UNITED STATES GOVERNMENT.ALSO BE INFORMED THAT WE NEED ONLY A DIPLOMATIC IMMUNITY SEAL OF TRANSFER(DIST) TO COMPLETE THE WIRE TRANSFER.THE FEE TO OBTAIN THE SEAL WAS REDUCED FROM $400 TO $75 AND NO OTHER FEE IS INVOLVED.YOU ARE REQUIRED TO SEND THE FEE OF $75 BY WESTERN UNION OR MONEY GRAM TO THE ISSUING OFFICER AT THE BANK WHERE YOUR TRANSACTION ORIGINATED AS STATED BELOW:

INFORMATION WHERE YOU ARE TO SEND THE MONEY.

RECEIVER'S NAME .......NWA DIKE
COUNTRY:.......... BENIN REPUBLIC
CITY.............COTONOU
QUESTION:..........COLOR
ANSWER:............BLUE
AMOUNT:.............$75 USD.ONLY
MTCN:................
SENDER NAME ..........
EMAIL THE FOLLOWING:
SENDER'S NAME:
MTCN OR REFERENCE NUMBER

THE NAME OF THE CITY FROM WHERE THE MONEY WAS SENT IF WE RECEIVE THE MTCN TODAY,WE WILL TRANSFER YOUR FUNDS ($19,500,000.00) BEFORE WE CLOSE OFFICE AND THE FUNDS WILL REFLECT 3HOURS AFTER THE TRANSFER.WE WILL SEND YOU ALL THE TRANSFER DOCUMENTS TO ENABLE YOU START MAKING CASH WITHDRAWALS FROM YOUR ACCOUNT SAME DAY THE FUNDS ARE TRANSFERRED.WE HAVE WAITED FOR SO LONG AND WE CANNOT CONTINUE TO WAIT.THANK YOU FOR GIVING US THE OPPORTUNITY TO SERVE YOUR BANKING NEEDS.

YOURS FAITHFULLY,
Mr.Brian Moynihan(CEO)
BANK OF AMERICA(R)

CORPORATE OFFICE HEADQUARTERS,CHARLOTTE,N.C.BANK OF AMERICA,
N.A.MEMBER FDIC.(C) 2012 BANK OF AMERICA CORPORATION. ALL RIGHTS RESERVED.
BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS