Mrs Rossy Will <[email protected]>

Header Analysis Quick Report
Originating IP: 212.82.98.109
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline

From Rosina Wills Fri Oct 3 00:54:14 2014
X-Apparently-To: <snipped>; Fri, 03 Oct 2014 00:54:20 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 212.82.96.95
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [212.82.96.95]
Authentication-Results: mta1577.mail.bf1.yahoo.com from=yahoo.co.jp; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm3-vm6.bullet.mail.ir2.yahoo.com) (212.82.96.95)
by mta1577.mail.bf1.yahoo.com with SMTPS; Fri, 03 Oct 2014 00:54:20 +0000
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [212.82.98.55] by nm3.bullet.mail.ir2.yahoo.com with NNFMP; 03 Oct 2014 00:54:15 -0000
Received: from [212.82.98.109] by tm8.bullet.mail.ir2.yahoo.com with NNFMP; 03 Oct 2014 00:54:15 -0000
Received: from [127.0.0.1] by omp1046.mail.ir2.yahoo.com with NNFMP; 03 Oct 2014 00:54:15 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Date: Fri, 3 Oct 2014 00:54:14 +0000 (UTC)
From: Rosina Wills <[email protected]>
Reply-To: Rosina Wills <[email protected]>
Message-ID: <21174522.65154.1412297654422.JavaMail.yahoo@jws11123.mail.ir2.yahoo.com>
Subject: Re / Greetings
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_65153_913382805.1412297654419"
Content-Length: 5772

Dear Friend,

Please read this slowly and carefully as it maybe one of the most important mails you'll ever get. My name is Mrs Rossy Will from United Kingdom, I am a 59 years old woman. I was married to late Mr. John Will who is my husband, and also the CEO Kreshcon Oil Ltd, and a seasoned contractor in Qatar. He died on,7th July 2013 in Qatar.

My late husband and I were married for years without a child of our own and after his death I decided not to re-marry or get a child outside my matrimonial home. As I speak to you, I have been diagnose with congested heart failure, of which the doctors have confirmed and told me that I would not live long. After my husband passed away last year, I realized he deposited a huge sum of money with a private Security company.

The money that was deposited in the Security company was a total of US$ 10.5 million .As I write to you, I feel that the money in the Security company would be a waste if I die and that is why I have come to a conclusion of donating the money out to the less privilege and also the motherless babies home. My husband's brother is an addicted smoker and drinker who spends his money on expensive drinks and unnecessary things and so I do not wish for him to have any of the money which my husband worked so hard for all his life. After going through your profile over the internet I decided to contact you for friendship and assistance for distribution of my inheritance. Please, my dear friend I have come to you to help me carry out this last wish of mine because i am too weak to move about and also have been confined to a wheel chair in my home in United Kingdom due to the state of my health and so I can't travel all the way from here.

It is true that I don't know you, but I have been directed by God to do this. If you wish to help me, write back to me at your earliest convenience so that I would direct you on how to contact the Security company for the transfer of the funds to you whichever way you may wish to nominate for this purpose. Please send me your name, address,occupation,age,sex,marital status and contact telephone numbers to enable me forward it to the security company for the claim. I will give you my lawyer contact information for I may not be able to carry out ,i am weak less privilege to write or talk. I await your urgent reply.

Thanks for your kindness

God Bless,

Yours Sincerely,

Mrs.Rossy Will

Using the same email address [email protected] but with a new name: Captain Panel from Kyrgyzstan

Header Analysis Quick Report
Originating IP: 41.189.42.135
Originating ISP: Cote D'ivoire Telecom
City: Abidjan
Country of Origin: Cote D'Ivoire
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp1823014iod;
Mon, 3 Aug 2015 00:22:54 -0700 (PDT)
X-Received: by 10.70.100.103 with SMTP id ex7mr32238245pdb.91.1438586573778;
Mon, 03 Aug 2015 00:22:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-smail-vm7.hanmail.net (mail-smail-vm7.daum.net. [175.126.189.227])
by mx.google.com with ESMTP id qv6si24933232pab.96.2015.08.03.00.22.52
for <<snipped>>;
Mon, 03 Aug 2015 00:22:53 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 175.126.189.227 as permitted sender) client-ip=175.126.189.227;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 175.126.189.227 as permitted sender) [email protected]
Received: from wwl1734.hanmail.net ([117.52.3.174])
by mail-smail-vm7.hanmail.net (8.12.1/8.9.1) with ESMTP id t737M5Mf009039;
Mon, 3 Aug 2015 16:22:07 +0900
Received: (from hanadmin@localhost)
by wwl1734.hanmail.net (8.12.9/8.9.1) id t737M4DS031705
for <<snipped>>; Mon, 3 Aug 2015 16:22:04 +0900
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
X-Originating-IP: [41.189.42.135]
From: "Pamela Klaas" <[email protected]>
Sender: [email protected]
Organization:
To: <[email protected]>
Subject: Reply Back
X-Mailer: Daum Web Mailer 1.2
Date: Mon, 03 Aug 2015 16:22:04 +0900 (KST)
Message-Id: <20150803162204.HM.0000000000009Gr@paul_mbadiwe.wwl1734.hanmail.net>
Errors-To: <[email protected]>
X-HM-UT: eHH08YNJSzjwp87NXbhI2xPtQrzs1z54tCSIQEgfwFU=
X-HM-FIGURE: eHH08YNJSziEHQ+4fl7itjKAll20uTV79lOto0vsCr4=
MIME-Version: 1.0
X-Hanmail-Attr: fc=1

My Dear,

I am Capt Panel working as an accountant in defense Ministry Kyrgyzstan, I decided to contact you directly for your guidelines and assistance in making an investment partnership with you on establishing real estate or other profitable investment in your Country. There is these huge amount of money Eleven Million Six Hundred thousand Euros generated from an over invoiced in the purchased of Military weapons I deposit in a storage firm I want to invest in your country or anywhere safe enough. I await your soonest response

Capt Panel

Now they've changed email addresses from [email protected] to [email protected]

Delivered-To: <snipped>
Received: by 10.202.199.78 with SMTP id x75csp2209134oif;
Mon, 3 Aug 2015 10:03:57 -0700 (PDT)
X-Received: by 10.107.150.141 with SMTP id y135mr19883309iod.38.1438621437706;
Mon, 03 Aug 2015 10:03:57 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm13-vm5.bullet.mail.ne1.yahoo.com (nm13-vm5.bullet.mail.ne1.yahoo.com. [98.138.91.235])
by mx.google.com with ESMTPS id j195si14478120ioj.150.2015.08.03.10.03.57
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 03 Aug 2015 10:03:57 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.91.235 as permitted sender) client-ip=98.138.91.235;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.91.235 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [98.138.100.115] by nm13.bullet.mail.ne1.yahoo.com with NNFMP; 03 Aug 2015 17:03:56 -0000
Received: from [98.138.87.8] by tm106.bullet.mail.ne1.yahoo.com with NNFMP; 03 Aug 2015 17:03:56 -0000
Received: from [127.0.0.1] by omp1008.mail.ne1.yahoo.com with NNFMP; 03 Aug 2015 17:03:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.101.177; Mon, 03 Aug 2015 17:03:56 +0000
Date: Mon, 3 Aug 2015 17:03:51 +0000 (UTC)
From: Pamela Klass <[email protected]>
Reply-To: Pamela Klass <[email protected]>
To: "<snipped>" <<snipped>>
Message-ID: <[email protected]>
Subject: Get Back To Me
MIME-Version: 1.0

Thanks for your response to my proposal.I know you will surprise to receive my proposal since we did not know each other before.Believe me the business proposal I brought to you is 100% genuine and free from all problem. I have carefully packaged the money in a box, I have made contact with a friend who is working with the UNITED NATIONS RED CROSS here in Kyrgyzstan. He will assist me move the consignment out to your country, which is the only safer means of moving it out of this hell hole, he will deposit it with the United Nations Red Cross as a diplomatic luggage as I have told him that the luggage belongs to one of our soldier that died during the attack but before giving up he told me to make sure the luggage get to his family. He will deposit the consignment for safe keep and to make contacts for its proper use.

So I need someone I can work with on trust and that is why I contacted you. So if you accept, I will put you forward as the beneficiary/owner of the funds and then the box shall be deposited on your name as the beneficiary and the Red Cross Agent will transfer the box to you anywhere in your city. I just need your acceptance and all is done. I have 100% assurance that you will surely receive the box without any hitch through United Nations, every arrangement will be made to proceed to your country.

Once I confirm your interest to my proposal, and your positive reply I will proceed with the arrangement to move the consignment out of the storage firm area and register your name as the beneficiary then move the consignment to your country. I am willing to give you 20% of the total sum when the money is delivered to you. I wait for your response so we can proceed immediately. In less than 7days the money should be in your safe custody.

The only telephone access we have here is radio message which is for our general use and is being monitored, therefore all communication will be via email till we finish our assignment. Please keep it to your self even if you are not interested,

Regards,

Capt Panel